Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/ECFBE00A435711EF80ADDABA762E951A.roa
File:                     ECFBE00A435711EF80ADDABA762E951A.roa (raw, json)
Hash identifier:          gskpauZL4Du19X+E4JPLQR7fjky6FHI6osOq2oohVjo=
Subject key identifier:   E0:67:F8:E0:DB:48:9F:98:79:22:5A:E8:AF:86:B7:E6:E4:6D:BD:E2
Certificate issuer:       /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial:       9CAD
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access:    rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/ECFBE00A435711EF80ADDABA762E951A.roa
Signing time:             Tue 16 Jul 2024 09:43:59 +0000
ROA not before:           Tue 16 Jul 2024 09:43:56 +0000
ROA not after:            Tue 13 Aug 2024 09:43:56 +0000
asID:                     138915
IP address blocks:        156.244.40.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 40109 (0x9cad)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
        Validity
            Not Before: Jul 16 09:43:56 2024 GMT
            Not After : Aug 13 09:43:56 2024 GMT
        Subject: CN=669640df-89f9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:07:39:d9:0a:49:f5:fa:fb:68:e9:46:3c:05:
                    c6:f1:c9:d3:f4:8d:77:a5:ce:7b:94:79:fc:ef:9c:
                    c1:07:bd:74:e7:c2:cd:2c:1d:4e:67:fc:ba:1d:dc:
                    8a:88:13:07:93:8a:18:a4:ce:3a:44:07:ba:80:d0:
                    5b:fa:24:ae:c6:c0:bb:2f:46:a8:0c:cc:09:ca:21:
                    a7:26:da:44:b1:40:df:b9:87:82:c9:9d:18:ec:cb:
                    6f:b8:05:e8:bb:7a:4f:96:b2:d8:89:6d:2a:e6:f4:
                    bb:5e:c9:fe:b6:70:27:6e:df:75:86:1a:62:ec:42:
                    ed:5f:bf:22:63:a3:f2:84:b2:66:f2:70:82:d0:3e:
                    e8:aa:8f:8a:44:23:3b:1e:02:30:64:fb:88:08:42:
                    95:9e:9d:2f:27:83:12:b0:79:6d:02:3d:9b:96:30:
                    08:f4:45:fb:7a:76:a1:3f:2c:25:9f:89:5f:46:12:
                    a6:ec:61:bf:f6:50:bb:b4:49:4a:0f:8d:c8:f7:bb:
                    59:5c:c9:ba:a5:1e:af:ca:da:47:bf:9b:34:f4:27:
                    12:36:85:f1:b5:09:1b:42:68:66:ba:fd:4d:6e:4e:
                    ef:53:12:73:a3:69:de:5e:2b:8f:90:25:ca:ea:73:
                    9e:63:f4:23:28:2c:59:17:cf:24:c0:fe:2d:2f:17:
                    12:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E0:67:F8:E0:DB:48:9F:98:79:22:5A:E8:AF:86:B7:E6:E4:6D:BD:E2
            X509v3 Authority Key Identifier:
                keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/ECFBE00A435711EF80ADDABA762E951A.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  156.244.40.0/24

    Signature Algorithm: sha256WithRSAEncryption
         2b:6d:dc:6d:4c:23:b4:70:9b:09:7d:fb:59:ca:11:0a:4a:cf:
         55:7e:6b:82:33:82:fe:e3:6c:49:ed:fa:4d:aa:9c:5d:f8:16:
         aa:8d:20:a3:47:dd:b5:e1:36:2c:c4:4a:42:c0:01:5f:07:f3:
         84:9d:b0:dd:56:47:98:3b:df:08:e6:37:73:84:fc:0d:7a:f0:
         7a:ec:3a:d5:81:e2:76:00:0b:e3:26:ad:95:41:40:a1:de:2c:
         d1:24:55:9f:bc:59:00:5a:dc:2e:7d:46:ab:9c:ad:dc:7d:76:
         31:04:9a:a9:ef:cb:6d:59:9c:7c:93:86:59:6d:9b:b0:07:01:
         4b:1c:25:52:07:ab:0f:ca:d7:c0:63:13:cf:02:e8:a0:95:47:
         c2:ae:58:07:c3:b5:1d:a2:12:a3:07:e0:08:03:03:34:50:ab:
         52:d7:f1:8e:aa:04:64:96:3f:63:c6:bd:9c:f3:1f:dc:29:14:
         75:7a:38:6b:7d:17:24:6b:a2:59:27:e7:f1:3b:04:ae:14:70:
         28:f4:81:f3:7a:cd:d5:0a:80:d0:e9:8b:fa:5c:9e:b3:e1:b3:
         b1:a5:74:50:3e:a1:54:d2:3b:b3:dc:79:eb:b8:4a:56:c5:0f:
         95:bf:aa:dc:95:9a:16:1d:af:2e:fd:56:c9:ed:7d:8a:06:2c:
         c7:70:b2:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----