Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/EA8AA0F236E111EC92E0A26FD8A014CE.roa
File:                     EA8AA0F236E111EC92E0A26FD8A014CE.roa (raw, json)
Hash identifier:          lukhJSs0Yj6R/nOSeplwXWa/YNZFtojYl4g6rS8kuQw=
Subject key identifier:   18:CF:1C:11:BD:62:00:98:F7:06:A0:29:99:62:7D:1C:C9:D1:05:05
Certificate issuer:       /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial:       0BB7
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access:    rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/EA8AA0F236E111EC92E0A26FD8A014CE.roa
Signing time:             Wed 27 Oct 2021 04:54:07 +0000
ROA not before:           Wed 27 Oct 2021 04:54:03 +0000
ROA not after:            Thu 27 Oct 2022 04:54:03 +0000
asID:                     58895
IP address blocks:        45.206.136.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2999 (0xbb7)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
        Validity
            Not Before: Oct 27 04:54:03 2021 GMT
            Not After : Oct 27 04:54:03 2022 GMT
        Subject: CN=6178db6f-ffac
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:ca:30:73:9e:6a:22:ab:50:6c:13:48:3a:ce:
                    c5:04:58:29:02:39:a7:3d:52:08:d8:cd:64:98:08:
                    2c:2f:ac:75:8d:7d:78:ae:d0:91:af:84:17:0b:4c:
                    a6:7b:58:6c:56:47:60:d5:fb:b0:94:b7:21:88:58:
                    c6:51:8b:eb:71:36:76:3b:dc:0e:db:73:7e:98:24:
                    2a:dd:b5:1b:bc:9f:45:83:06:ea:b5:0f:54:b3:1d:
                    e9:24:fa:59:6c:e9:de:cc:fe:c5:40:80:b8:72:53:
                    4b:a4:43:b5:77:3f:fb:9c:cc:97:e6:7b:44:c9:58:
                    67:47:b0:cd:f2:ce:a7:99:32:3c:25:1b:f1:99:e7:
                    cc:2a:e8:d2:9b:33:28:96:06:bb:a3:1b:59:d8:dc:
                    46:84:63:16:62:c5:a1:bb:3f:fe:4a:8a:3b:57:46:
                    6d:80:97:76:20:5e:78:f8:33:de:c7:0d:bf:01:7f:
                    88:81:2f:82:1f:14:b5:86:3f:45:8b:59:c9:dd:97:
                    12:42:24:e0:e3:8a:08:8b:b0:02:4d:c6:0c:c0:a6:
                    49:15:43:b3:17:b4:71:53:66:21:e8:6f:9b:17:da:
                    bc:61:84:31:cc:b9:5f:82:dc:ce:ef:c8:f6:c9:a1:
                    29:01:b6:8d:91:6c:5b:35:cc:c2:af:bf:c4:7b:21:
                    fe:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                18:CF:1C:11:BD:62:00:98:F7:06:A0:29:99:62:7D:1C:C9:D1:05:05
            X509v3 Authority Key Identifier:
                keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/EA8AA0F236E111EC92E0A26FD8A014CE.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.206.136.0/24

    Signature Algorithm: sha256WithRSAEncryption
         0c:64:8d:cb:04:49:77:06:38:d1:d0:76:a8:12:aa:c2:04:ae:
         dd:6e:07:01:f4:7f:e5:a2:cf:3e:ef:47:9d:12:52:0d:7d:c0:
         e6:d9:e5:5c:fa:55:58:b9:33:ab:e5:e7:78:57:17:45:d8:05:
         38:f5:9c:ac:e5:bb:c5:1e:a4:b0:ef:34:79:c1:54:28:5e:d4:
         f5:a1:09:89:f0:e3:e4:c3:53:02:30:8c:6c:c7:08:b8:96:ef:
         3f:1b:74:c7:8c:3c:d6:37:40:6e:00:34:bf:1a:8a:3e:4c:f1:
         f0:8a:82:d9:00:1a:51:95:f6:f6:f3:b7:33:70:49:e3:d4:d2:
         43:5e:fa:a1:a4:a0:7a:fc:86:8d:1f:4d:50:a0:97:18:64:8a:
         15:3e:5d:25:26:96:6f:e7:cd:b7:a7:36:ff:b2:60:23:49:d8:
         5b:92:f9:bd:71:b6:f3:40:3d:0d:30:46:a6:06:ab:84:02:7a:
         3a:ff:50:fe:8f:fd:0f:a4:ce:f7:d4:26:13:ca:9f:29:12:9f:
         e6:80:50:6b:75:71:47:02:21:af:51:c8:61:f4:b2:58:ca:e4:
         99:df:79:cf:b3:e5:ed:26:ac:98:a2:94:17:6b:23:f2:c4:bc:
         e2:0d:ee:46:10:4f:4b:db:db:74:e5:b6:d5:93:df:f8:4f:d5:
         3e:a8:82:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----