Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/EDBB7340DBD811EC8D163E85F1222468.roa
File:                     EDBB7340DBD811EC8D163E85F1222468.roa (raw, json)
Hash identifier:          trFIIT5Wo9Ch8ln98Dyj098+/delpf2qBIJWVVdIn2E=
Subject key identifier:   C0:63:76:AB:B7:31:57:25:54:03:4B:F8:D3:44:AD:33:CF:BB:B0:1F
Certificate issuer:       /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial:       13FD
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access:    rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/EDBB7340DBD811EC8D163E85F1222468.roa
Signing time:             Wed 25 May 2022 03:15:29 +0000
ROA not before:           Wed 25 May 2022 03:15:24 +0000
ROA not after:            Fri 30 Dec 2022 03:15:24 +0000
asID:                     35916
IP address blocks:        156.238.208.0/20 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 5117 (0x13fd)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
        Validity
            Not Before: May 25 03:15:24 2022 GMT
            Not After : Dec 30 03:15:24 2022 GMT
        Subject: CN=628d9f51-8162
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:d5:51:1d:0c:a9:f8:f8:d1:c2:f3:8e:c7:c7:
                    c7:2d:c0:cc:f3:69:3e:80:f7:68:32:4d:fe:b9:8a:
                    2c:c2:bf:41:40:66:2c:11:e5:ba:12:bb:9d:3f:11:
                    14:b4:a8:e4:e4:e3:80:21:d4:2d:c3:c2:83:89:07:
                    d8:89:eb:62:d8:bb:86:f0:cb:9a:23:81:d8:35:da:
                    db:25:52:07:08:d6:34:3d:4e:3f:7e:a0:43:72:1a:
                    5f:c4:3a:43:b8:b5:c3:67:72:36:b2:97:83:57:93:
                    e0:06:d2:62:db:68:20:bc:ea:b1:98:a7:d6:f5:c7:
                    b3:4e:d7:1e:77:e0:8f:a5:b5:e1:47:ba:d0:dd:e6:
                    4b:be:86:7f:ba:eb:62:78:71:d2:b1:f2:5c:36:93:
                    77:7d:40:ee:aa:6d:63:d1:b3:44:83:ed:4c:4a:e4:
                    e0:5a:13:64:88:4d:5e:c5:e5:36:f0:80:84:a9:4a:
                    7c:ec:e9:c2:0d:bb:ba:4e:07:c2:2a:a2:20:d8:a8:
                    45:74:aa:4b:97:7f:cd:98:fe:e2:1c:de:aa:d3:ca:
                    bb:05:b4:d9:ea:cb:b8:c5:5e:e7:f2:9e:fe:be:70:
                    ca:5b:a4:73:f3:dd:53:bb:09:81:48:66:73:1a:f0:
                    a3:dd:03:a8:72:77:cc:15:ee:fa:68:73:38:e4:a9:
                    6b:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C0:63:76:AB:B7:31:57:25:54:03:4B:F8:D3:44:AD:33:CF:BB:B0:1F
            X509v3 Authority Key Identifier:
                keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/EDBB7340DBD811EC8D163E85F1222468.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  156.238.208.0/20

    Signature Algorithm: sha256WithRSAEncryption
         51:6f:b6:be:e6:1a:0a:cf:d8:79:18:6b:91:f4:af:f9:81:fc:
         f1:65:b0:9c:aa:f6:68:25:32:9c:ff:a0:ae:36:cd:69:8d:db:
         c8:07:b8:e0:b5:41:93:89:78:3b:46:90:38:7b:fc:24:6b:ca:
         7c:1d:52:81:d5:77:80:7d:03:3f:4d:d0:9a:c0:a6:c5:1d:97:
         1d:23:50:24:a2:49:05:ca:41:be:de:8e:d0:86:09:53:a0:90:
         17:f3:82:9e:9e:cf:30:9d:65:12:e3:98:87:f6:be:e0:2f:c6:
         79:ce:ce:ea:38:b6:36:1a:e9:8f:8a:e7:0d:a2:76:82:a9:a4:
         4e:9a:29:99:18:e1:f8:99:01:77:09:83:97:e2:4c:70:39:88:
         ab:2e:57:07:13:0c:d2:08:97:76:25:7d:c4:b3:a3:73:a2:f1:
         06:f9:37:8b:91:82:93:01:b7:9b:bc:a7:2b:1a:94:98:9c:45:
         1c:df:36:c1:48:68:da:e4:a7:e9:cd:d2:67:ef:70:32:49:f8:
         3a:7b:85:43:69:59:96:24:bc:cf:b5:3b:df:65:be:11:b7:85:
         23:1c:85:0b:16:6c:14:1c:8d:6a:0e:ee:aa:d4:ef:8b:f2:89:
         25:ee:6c:cf:7c:81:ae:d5:e2:a9:4e:c4:10:51:84:da:db:b9:
         01:53:13:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----