Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/32CFD276682211EC8842C7CC5A40D577.roa
File:                     32CFD276682211EC8842C7CC5A40D577.roa (raw, json)
Hash identifier:          n0U8R6FIv9MMpwmDI60fPPMNjEKVv/eWjdaD8cCtBtE=
Subject key identifier:   D9:1D:8F:C6:4A:F5:98:29:21:EF:E1:52:87:B5:13:93:18:E7:2F:42
Certificate issuer:       /CN=F3682B65AF/serialNumber=0940E638283336DE5C8C5A40A4C23B34F3F9CA53
Certificate serial:       074D
Authority key identifier: 09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/32CFD276682211EC8842C7CC5A40D577.roa
Signing time:             Tue 28 Dec 2021 21:07:43 +0000
ROA not before:           Tue 28 Dec 2021 21:07:38 +0000
ROA not after:            Wed 28 Dec 2022 21:07:38 +0000
asID:                     19437
IP address blocks:        154.16.182.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1869 (0x74d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3682B65AF/serialNumber=0940E638283336DE5C8C5A40A4C23B34F3F9CA53
        Validity
            Not Before: Dec 28 21:07:38 2021 GMT
            Not After : Dec 28 21:07:38 2022 GMT
        Subject: CN=61cb7c9f-b777
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:21:03:1c:2f:73:5c:e7:df:41:98:b5:98:5d:
                    d1:5e:2d:64:b6:9b:1b:82:f3:b2:54:70:cd:19:24:
                    1e:7f:f0:86:c0:5f:cd:52:c2:6e:00:6a:22:8a:c6:
                    10:0d:98:00:15:24:b7:9a:cf:f2:a3:76:28:3d:27:
                    2f:07:75:c4:93:a8:2d:06:f5:a0:e1:44:b0:1e:2d:
                    1b:ce:41:63:fe:6d:8c:00:76:f5:c2:6d:c9:32:a5:
                    24:9d:7a:f7:6c:62:a4:90:7e:48:c0:c8:65:86:13:
                    3b:b0:da:97:cd:d1:56:53:54:61:df:89:5e:8c:45:
                    7f:d8:6c:12:26:98:db:9a:55:bf:c7:6f:59:45:fe:
                    42:20:5d:40:5b:79:bf:ff:93:d7:44:8e:d6:b9:59:
                    e1:8c:da:4a:64:f7:37:99:19:11:99:1a:d0:df:2c:
                    0a:7e:09:18:06:65:a1:c2:07:d7:48:64:e1:58:22:
                    78:68:e9:99:2e:7a:55:5d:9f:bb:4d:5e:38:8e:40:
                    68:1f:03:68:7a:89:05:17:e2:4a:54:99:10:11:a2:
                    64:8d:0e:43:23:d4:de:75:25:7d:01:ac:30:5d:7f:
                    0c:f9:2f:7e:b7:75:ae:5c:9c:51:d5:8a:20:5d:99:
                    03:02:c8:4d:81:90:7d:87:6c:2d:d6:b4:50:10:6c:
                    02:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D9:1D:8F:C6:4A:F5:98:29:21:EF:E1:52:87:B5:13:93:18:E7:2F:42
            X509v3 Authority Key Identifier:
                keyid:09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/CUDmOCgzNt5cjFpApMI7NPP5ylM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/32CFD276682211EC8842C7CC5A40D577.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  154.16.182.0/24

    Signature Algorithm: sha256WithRSAEncryption
         4b:93:85:42:e3:ae:ba:69:ed:29:21:e5:b7:29:2c:e5:e0:a3:
         5c:39:ba:49:ab:76:a5:f5:ca:e1:84:4c:85:75:a1:6a:f0:1f:
         68:00:ad:78:70:c8:25:8a:7f:fe:a0:22:49:9a:16:cd:25:14:
         b7:e3:65:0a:83:07:25:f9:ae:13:07:94:ee:6f:2b:f4:ac:7b:
         7d:2c:ef:c5:d9:53:83:cd:89:40:a7:1a:6b:49:16:4f:2d:f1:
         ff:59:a1:3f:6f:e3:03:bf:d3:36:f5:73:e1:6a:e9:71:4f:fb:
         f3:f7:d2:ff:d1:22:76:0b:5e:bd:d2:e7:a3:e3:30:22:73:9b:
         9a:54:55:cc:5b:d6:47:f5:41:9a:6f:e0:ca:5b:65:32:f5:f6:
         9d:73:46:4f:53:3f:59:04:b9:b8:ae:47:19:f4:46:40:8f:3d:
         e5:da:47:b2:17:67:02:b4:48:d6:64:70:7e:99:98:6c:cc:d7:
         77:a9:6f:60:ca:14:c9:b4:3e:9e:9a:7e:15:6e:62:7e:66:ad:
         fa:41:5f:7c:d9:d6:7d:bd:7b:21:39:d5:6b:21:04:ff:c3:69:
         d3:b6:55:c4:61:99:e9:0b:92:02:05:e6:d2:d2:3e:cd:25:46:
         21:9b:64:96:97:8a:77:2f:9f:60:d1:bd:99:d3:f4:7d:20:91:
         c0:9f:5f:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----