Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3636185/6EFD78B6270911ECAF80DC7BD8A014CE/BD6B420A289B11ED9248FAB6F1222468.roa
File:                     BD6B420A289B11ED9248FAB6F1222468.roa (raw, json)
Hash identifier:          phlHm2lwgaZARwZf8NZGIVGwlgUULbKBhiwH5VdxsjI=
Subject key identifier:   B3:D0:39:4F:C0:C3:83:C4:3D:3B:23:E1:A5:3E:E6:99:5A:E5:F0:B1
Certificate issuer:       /CN=F3636185AF/serialNumber=EF8798989E4B8FB35946574F7BC7F08E2CF7FE4B
Certificate serial:       015D
Authority key identifier: EF:87:98:98:9E:4B:8F:B3:59:46:57:4F:7B:C7:F0:8E:2C:F7:FE:4B
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/74eYmJ5Lj7NZRldPe8fwjiz3_ks.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3636185/6EFD78B6270911ECAF80DC7BD8A014CE/BD6B420A289B11ED9248FAB6F1222468.roa
Signing time:             Tue 30 Aug 2022 19:41:28 +0000
ROA not before:           Tue 30 Aug 2022 19:41:22 +0000
ROA not after:            Wed 24 Jan 2024 19:41:22 +0000
asID:                     26506
IP address blocks:        2c0f:fed8:2::/48 maxlen: 48

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 349 (0x15d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3636185AF/serialNumber=EF8798989E4B8FB35946574F7BC7F08E2CF7FE4B
        Validity
            Not Before: Aug 30 19:41:22 2022 GMT
            Not After : Jan 24 19:41:22 2024 GMT
        Subject: CN=630e67e8-d883
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:ee:5e:87:31:ee:b9:9c:6e:c1:83:1b:40:36:
                    42:67:6c:8b:c2:86:a4:65:07:39:10:ab:d5:13:5d:
                    b0:c2:94:9a:7f:e8:64:47:f1:a6:f2:11:5b:68:46:
                    f2:1a:b3:ed:28:16:6c:e4:8f:a1:6b:32:c8:45:f5:
                    6d:83:d4:48:50:c7:e9:d4:d5:26:9a:f6:35:93:b7:
                    d5:78:76:17:b8:ef:3f:61:ce:ae:8a:0d:eb:54:86:
                    e4:18:60:dd:6d:6f:75:aa:ed:ad:b0:11:6d:6c:9b:
                    12:84:60:5c:a2:01:07:e7:10:6d:69:d9:54:ad:79:
                    0c:5a:84:b5:c3:ba:7e:dc:a9:0d:6b:ad:86:42:a0:
                    90:d8:28:38:bd:d7:4a:87:ed:af:71:ef:c8:d8:d0:
                    22:83:9c:74:03:94:f1:d1:72:f8:2b:96:29:3c:db:
                    96:6c:66:74:3a:7a:ae:f6:c7:a4:1a:16:4d:cc:00:
                    f6:ea:d3:ce:c1:1a:ce:e0:5c:2e:01:dc:1d:e4:33:
                    1d:83:15:89:d1:cd:c3:7a:39:b3:5b:a3:f4:18:a6:
                    8f:13:f9:db:c2:a6:7c:3e:59:c4:32:3e:3a:ae:29:
                    13:9f:c9:aa:26:ec:62:27:55:dc:97:b5:88:47:8e:
                    62:2e:fa:b8:04:3f:b9:55:74:fa:ac:89:c0:9c:bd:
                    1d:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B3:D0:39:4F:C0:C3:83:C4:3D:3B:23:E1:A5:3E:E6:99:5A:E5:F0:B1
            X509v3 Authority Key Identifier:
                keyid:EF:87:98:98:9E:4B:8F:B3:59:46:57:4F:7B:C7:F0:8E:2C:F7:FE:4B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3636185/6EFD78B6270911ECAF80DC7BD8A014CE/74eYmJ5Lj7NZRldPe8fwjiz3_ks.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/74eYmJ5Lj7NZRldPe8fwjiz3_ks.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3636185/6EFD78B6270911ECAF80DC7BD8A014CE/BD6B420A289B11ED9248FAB6F1222468.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  2c0f:fed8:2::/48

    Signature Algorithm: sha256WithRSAEncryption
         4b:1b:d8:bc:6f:67:f3:cd:8a:74:bf:8d:86:15:7c:d1:3d:d0:
         f1:9c:3a:07:37:b7:8d:98:6a:77:07:05:d0:47:cf:33:91:fb:
         51:66:fb:46:0a:1b:18:18:9e:93:d8:74:46:4a:a0:9e:0a:38:
         77:7d:a5:75:8f:c3:3d:24:b5:e3:36:f3:00:3f:6a:cc:88:0e:
         80:ba:8d:52:28:dd:ac:ca:79:0e:d9:76:2a:26:3e:6c:47:96:
         7d:6a:4c:ca:44:c1:c0:34:46:1b:8e:c6:94:3c:6a:bb:4b:d8:
         e8:87:1e:d2:5f:9e:69:4a:ec:a1:df:f0:7e:b2:d2:73:6f:47:
         c1:41:8b:12:a1:f6:5e:56:32:27:2d:aa:62:de:33:54:ec:3f:
         18:cc:38:fe:bb:43:f1:84:37:97:dc:84:c4:4f:ea:98:b4:74:
         78:52:19:7c:e5:59:0a:49:52:8c:d0:93:1a:c8:a3:7c:2a:d3:
         1f:0d:c2:15:35:b4:90:41:48:4f:61:f9:26:d3:ff:d9:3c:39:
         05:87:89:0f:5a:ae:06:36:19:ce:4a:11:0b:a4:30:c0:b5:bd:
         27:92:78:54:26:6c:91:78:0f:87:78:63:2d:35:b6:ba:97:fc:
         91:0f:7c:01:29:3a:df:5e:c5:8d:f7:9e:fc:53:8c:68:9f:0e:
         77:0e:4e:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----