Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/FC3FB738017B11ECBAA39F03D8A014CE.roa
File:                     FC3FB738017B11ECBAA39F03D8A014CE.roa (raw, json)
Hash identifier:          O3jcULG+7z+urhnEdLAYq3LnE0X76I2pDkkz6l48z50=
Subject key identifier:   3D:48:E5:9E:D0:20:25:70:A1:76:6A:04:83:3E:F4:5F:E7:8D:EC:E0
Certificate issuer:       /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial:       08AC
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access:    rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/FC3FB738017B11ECBAA39F03D8A014CE.roa
Signing time:             Fri 20 Aug 2021 06:01:50 +0000
ROA not before:           Fri 20 Aug 2021 06:01:46 +0000
ROA not after:            Sun 20 Nov 2022 06:01:46 +0000
asID:                     135026
IP address blocks:        156.225.4.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2220 (0x8ac)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
        Validity
            Not Before: Aug 20 06:01:46 2021 GMT
            Not After : Nov 20 06:01:46 2022 GMT
        Subject: CN=611f454e-d6c5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:50:72:81:f1:53:c0:0c:7f:45:10:db:34:4f:
                    d8:c9:ea:69:48:72:3c:d9:1e:31:7b:07:68:b5:cb:
                    3e:3b:8a:44:73:94:7a:d5:30:76:52:6a:85:3c:9e:
                    6a:62:9e:22:56:ef:c3:72:5f:c0:61:41:a4:f1:60:
                    98:8f:ab:b2:dc:a6:60:a2:6d:03:c9:18:98:33:c6:
                    87:24:13:4a:18:21:fb:e3:61:a0:13:fd:f0:c8:17:
                    34:ca:7f:51:d7:00:ee:7a:65:03:5a:fc:e9:36:99:
                    ae:c1:8d:34:cf:2f:39:64:c6:a7:ba:66:5b:62:8e:
                    22:03:71:dd:84:9b:cb:3f:53:25:fd:db:ca:a7:90:
                    55:6c:36:c9:c5:8d:b1:b6:fc:9c:56:52:d6:14:2e:
                    09:94:8e:32:21:92:97:e1:97:6d:9d:d2:90:3b:fd:
                    19:d5:f8:89:05:d0:7e:6b:6c:ef:7c:1f:01:13:f9:
                    5d:35:a7:85:34:3e:c6:77:50:68:67:8d:5b:0b:23:
                    f2:10:79:bf:58:2a:2a:8e:6e:05:aa:3b:36:1d:b0:
                    44:63:13:9c:f0:d3:46:cf:b6:f0:45:0e:fe:71:d1:
                    43:31:90:80:bd:23:bd:f6:b8:4b:d8:ef:cf:fc:ee:
                    5e:0d:53:f1:80:9c:7b:ef:9a:d4:d9:c4:0f:63:74:
                    dc:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3D:48:E5:9E:D0:20:25:70:A1:76:6A:04:83:3E:F4:5F:E7:8D:EC:E0
            X509v3 Authority Key Identifier:
                keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/FC3FB738017B11ECBAA39F03D8A014CE.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  156.225.4.0/24

    Signature Algorithm: sha256WithRSAEncryption
         40:79:b1:a1:2c:c6:44:87:b8:13:0e:1a:c8:47:c2:9f:df:a0:
         fc:71:64:a6:0c:f8:d8:1f:3a:b2:56:de:b0:71:65:66:f4:be:
         80:ba:36:0e:08:d6:e2:df:fa:77:36:0e:4d:8d:cd:90:67:9d:
         7c:be:01:c5:1a:be:c3:51:dd:fa:de:56:f6:29:02:c8:16:be:
         72:71:82:25:57:a9:f8:66:f9:20:e8:d2:c9:ce:53:26:e9:dc:
         2a:22:f9:48:ff:22:96:14:b8:58:07:63:cf:93:b7:54:8c:0b:
         ff:27:f9:df:c9:24:2a:33:88:d9:39:66:de:cc:69:05:c6:42:
         15:22:f4:62:52:1d:4a:fd:15:6c:70:d1:b8:52:d2:c4:d6:3a:
         18:ea:58:e9:90:dc:38:0c:fd:81:0d:3e:a0:4d:18:8f:07:04:
         54:fe:c7:22:61:0d:45:ab:67:7c:60:51:20:65:67:1d:0f:70:
         b9:bb:cb:05:0d:db:c1:eb:9c:a7:94:0a:7e:3d:ef:22:ae:1f:
         30:07:bf:42:83:e9:1a:38:d0:61:0e:ac:59:cd:fa:61:bf:ed:
         ec:eb:67:a9:8a:dc:38:a9:a4:2f:36:73:8f:6d:d6:84:80:c6:
         5c:13:33:3b:13:e7:c0:81:cb:cf:ad:36:40:40:7d:5b:5a:a7:
         f5:9f:59:e3
-----BEGIN CERTIFICATE-----
MIIFgDCCBGigAwIBAgICCKwwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
OEYyRDBBUjExMC8GA1UEBRMoNzk3RDg4RDgxM0UyMEZGRjk4MkNDNzQxOUU5NjlC
QUVBNkJGRDY5QjAeFw0yMTA4MjAwNjAxNDZaFw0yMjExMjAwNjAxNDZaMBgxFjAU
BgNVBAMMDTYxMWY0NTRlLWQ2YzUwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQDXUHKB8VPADH9FENs0T9jJ6mlIcjzZHjF7B2i1yz47ikRzlHrVMHZSaoU8
nmpiniJW78NyX8BhQaTxYJiPq7LcpmCibQPJGJgzxockE0oYIfvjYaAT/fDIFzTK
f1HXAO56ZQNa/Ok2ma7BjTTPLzlkxqe6ZltijiIDcd2Em8s/UyX928qnkFVsNsnF
jbG2/JxWUtYULgmUjjIhkpfhl22d0pA7/RnV+IkF0H5rbO98HwET+V01p4U0PsZ3
UGhnjVsLI/IQeb9YKiqObgWqOzYdsERjE5zw00bPtvBFDv5x0UMxkIC9I732uEvY
78/87l4NU/GAnHvvmtTZxA9jdNxtAgMBAAGjggKiMIICnjAdBgNVHQ4EFgQUPUjl
ntAgJXChdmoEgz70X+eN7OAwHwYDVR0jBBgwFoAUeX2I2BPiD/+YLMdBnpabrqa/
1pswDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNjhGMkQwLzkyRjg2RTFDNkUwNTExRThBMUI1ODU0QkY4QUVBMjI4L2VYMkky
QlBpRF8tWUxNZEJucGFicnFhXzFwcy5jcmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hcmlu
L2VYMkkyQlBpRF8tWUxNZEJucGFicnFhXzFwcy5jZXIwTwYDVR0gAQH/BEUwQzBB
BggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5pYy5u
ZXQvcG9saWN5L0NQUy5wZGYwgdsGCCsGAQUFBwELBIHOMIHLMIGRBggrBgEFBQcw
C4aBhHJzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9y
ZXBvc2l0b3J5L0YzNjhGMkQwLzkyRjg2RTFDNkUwNTExRThBMUI1ODU0QkY4QUVB
MjI4L0ZDM0ZCNzM4MDE3QjExRUNCQUEzOUYwM0Q4QTAxNENFLnJvYTA1BggrBgEF
BQcwDYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54bWww
HwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBACc4QQwDQYJKoZIhvcNAQELBQAD
ggEBAEB5saEsxkSHuBMOGshHwp/foPxxZKYM+NgfOrJW3rBxZWb0voC6Ng4I1uLf
+nc2Dk2NzZBnnXy+AcUavsNR3freVvYpAsgWvnJxgiVXqfhm+SDo0snOUybp3Coi
+Uj/IpYUuFgHY8+Tt1SMC/8n+d/JJCoziNk5Zt7MaQXGQhUi9GJSHUr9FWxw0bhS
0sTWOhjqWOmQ3DgM/YENPqBNGI8HBFT+xyJhDUWrZ3xgUSBlZx0PcLm7ywUN28Hr
nKeUCn497yKuHzAHv0KD6Ro40GEOrFnN+mG/7ezrZ6mK3DippC82c49t1oSAxlwT
MzsT58CBy8+tNkBAfVtap/WfWeM=
-----END CERTIFICATE-----