Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F363763A/B60ABD70536F11ED855D7AA2F1222468/3F829548537311ED991083ABF1222468.roa
File:                     3F829548537311ED991083ABF1222468.roa (raw, json)
Hash identifier:          WRUFsFJ4y9Ryur5q5PfqB5S3ImidmytDHYVSluJmnWw=
Subject key identifier:   F9:BB:E6:26:89:E7:96:5E:99:92:24:25:D1:68:E6:F2:99:33:30:F2
Certificate issuer:       /CN=F363763AAF/serialNumber=099DBB9928A5C29FA5922CFDB95F190EC0FB4AC8
Certificate serial:       04
Authority key identifier: 09:9D:BB:99:28:A5:C2:9F:A5:92:2C:FD:B9:5F:19:0E:C0:FB:4A:C8
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/CZ27mSilwp-lkiz9uV8ZDsD7Ssg.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F363763A/B60ABD70536F11ED855D7AA2F1222468/3F829548537311ED991083ABF1222468.roa
Signing time:             Mon 24 Oct 2022 08:09:57 +0000
ROA not before:           Mon 24 Oct 2022 08:09:53 +0000
ROA not after:            Tue 24 Oct 2023 08:09:53 +0000
asID:                     328535
IP address blocks:        2c0f:d80::/32 maxlen: 32

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4 (0x4)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F363763AAF/serialNumber=099DBB9928A5C29FA5922CFDB95F190EC0FB4AC8
        Validity
            Not Before: Oct 24 08:09:53 2022 GMT
            Not After : Oct 24 08:09:53 2023 GMT
        Subject: CN=63564855-84f6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:cd:6d:93:13:2e:68:ce:00:2d:72:de:e8:08:
                    7f:5f:2b:ab:07:a2:da:24:66:36:87:15:5c:0e:8d:
                    07:df:28:e3:ba:ee:39:cd:e8:7f:88:ce:63:ef:14:
                    b6:21:7a:9d:e5:07:6b:0a:32:e6:3a:2c:bc:17:43:
                    95:c7:03:e8:de:95:87:d8:21:af:dd:fa:14:f6:33:
                    a6:0b:3e:1a:51:46:70:52:37:30:58:61:66:41:7f:
                    08:cd:f9:d5:2a:ef:a0:b8:2c:6f:ff:a4:67:ee:a6:
                    0d:8a:fe:d0:b7:b0:5f:a4:7e:ef:2a:97:87:2e:d0:
                    f5:85:16:f8:30:c2:d4:b2:03:e6:7e:fc:82:85:3f:
                    5a:ec:bd:f7:2b:71:ee:a1:b9:15:0d:e1:b3:4d:a5:
                    a7:c4:b0:11:42:46:c8:39:d8:27:69:82:12:e3:64:
                    da:9c:0c:56:59:5f:91:c7:32:6d:ec:08:de:99:c4:
                    ec:d9:0d:2b:de:6b:e5:54:27:64:9b:fa:2c:1b:90:
                    7c:83:ff:93:f0:b3:14:93:74:66:74:10:c0:8a:a1:
                    33:48:5e:a7:75:c9:f4:8f:50:07:f2:a2:df:62:94:
                    2b:38:fe:38:46:ef:69:67:1b:ae:16:58:96:49:d8:
                    2e:ef:d3:65:85:e4:e3:09:8f:e1:45:7c:33:1f:4e:
                    77:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F9:BB:E6:26:89:E7:96:5E:99:92:24:25:D1:68:E6:F2:99:33:30:F2
            X509v3 Authority Key Identifier:
                keyid:09:9D:BB:99:28:A5:C2:9F:A5:92:2C:FD:B9:5F:19:0E:C0:FB:4A:C8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F363763A/B60ABD70536F11ED855D7AA2F1222468/CZ27mSilwp-lkiz9uV8ZDsD7Ssg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/CZ27mSilwp-lkiz9uV8ZDsD7Ssg.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F363763A/B60ABD70536F11ED855D7AA2F1222468/3F829548537311ED991083ABF1222468.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  2c0f:d80::/32

    Signature Algorithm: sha256WithRSAEncryption
         b1:6a:41:e1:29:7f:2e:61:b6:64:d7:f1:41:eb:c7:eb:08:0f:
         9a:17:c2:84:d7:5f:76:0f:bc:dd:5b:81:f6:aa:6a:28:5b:f6:
         ea:67:fc:74:9a:87:3b:6f:16:c1:40:24:5c:cf:62:83:48:5e:
         1d:d1:94:26:6c:cc:5e:17:22:74:8a:92:bd:14:8a:2a:09:6c:
         4f:12:d3:ea:36:64:85:53:21:54:40:fa:0a:6e:93:e3:41:ad:
         51:a1:e6:3c:d8:33:38:10:b4:82:24:26:11:71:3e:aa:b9:e8:
         8b:e9:49:0f:d3:7a:e7:0b:d2:f7:b9:5a:cd:9b:d2:8d:80:6a:
         ba:50:f9:95:28:f1:dd:e9:7b:cf:f9:6b:d9:c0:51:53:c2:c2:
         ab:82:ba:18:52:42:a8:1c:79:4d:00:87:30:1c:13:49:f5:a7:
         89:00:62:66:7d:ba:8b:fa:6c:1a:bd:f8:1e:7d:00:48:9b:b3:
         81:95:91:1f:31:a7:17:83:16:54:df:9f:d8:2b:f0:f1:55:0e:
         13:97:23:ed:e5:86:72:98:30:f8:ee:07:d6:5c:3f:19:1d:c6:
         cf:9d:55:4c:a1:b8:4c:27:08:da:ef:cf:af:46:52:bc:75:00:
         bc:8a:34:ae:ab:bf:d7:4b:3d:cb:f4:d4:a7:19:1e:13:7c:5f:
         fc:a6:12:6c
-----BEGIN CERTIFICATE-----
MIIFgzCCBGugAwIBAgIBBDANBgkqhkiG9w0BAQsFADBIMRMwEQYDVQQDDApGMzYz
NzYzQUFGMTEwLwYDVQQFEygwOTlEQkI5OTI4QTVDMjlGQTU5MjJDRkRCOTVGMTkw
RUMwRkI0QUM4MB4XDTIyMTAyNDA4MDk1M1oXDTIzMTAyNDA4MDk1M1owGDEWMBQG
A1UEAwwNNjM1NjQ4NTUtODRmNjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBANvNbZMTLmjOAC1y3ugIf18rqwei2iRmNocVXA6NB98o47ruOc3of4jOY+8U
tiF6neUHawoy5josvBdDlccD6N6Vh9ghr936FPYzpgs+GlFGcFI3MFhhZkF/CM35
1SrvoLgsb/+kZ+6mDYr+0LewX6R+7yqXhy7Q9YUW+DDC1LID5n78goU/Wuy99ytx
7qG5FQ3hs02lp8SwEUJGyDnYJ2mCEuNk2pwMVllfkccybewI3pnE7NkNK95r5VQn
ZJv6LBuQfIP/k/CzFJN0ZnQQwIqhM0hep3XJ9I9QB/Ki32KUKzj+OEbvaWcbrhZY
lknYLu/TZYXk4wmP4UV8Mx9Odx8CAwEAAaOCAqYwggKiMB0GA1UdDgQWBBT5u+Ym
ieeWXpmSJCXRaObymTMw8jAfBgNVHSMEGDAWgBQJnbuZKKXCn6WSLP25XxkOwPtK
yDAOBgNVHQ8BAf8EBAMCB4AwgZUGA1UdHwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6
Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVyX3JlcG9zaXRvcnkv
RjM2Mzc2M0EvQjYwQUJENzA1MzZGMTFFRDg1NUQ3QUEyRjEyMjI0NjgvQ1oyN21T
aWx3cC1sa2l6OXVWOFpEc0Q3U3NnLmNybDBnBggrBgEFBQcBAQRbMFkwVwYIKwYB
BQUHMAKGS3JzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L2Fmcmlu
aWMvQ1oyN21TaWx3cC1sa2l6OXVWOFpEc0Q3U3NnLmNlcjBPBgNVHSABAf8ERTBD
MEEGCCsGAQUFBw4CMDUwMwYIKwYBBQUHAgEWJ2h0dHBzOi8vcnBraS5hZnJpbmlj
Lm5ldC9wb2xpY3kvQ1BTLnBkZjCB2wYIKwYBBQUHAQsEgc4wgcswgZEGCCsGAQUF
BzALhoGEcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVy
X3JlcG9zaXRvcnkvRjM2Mzc2M0EvQjYwQUJENzA1MzZGMTFFRDg1NUQ3QUEyRjEy
MjI0NjgvM0Y4Mjk1NDg1MzczMTFFRDk5MTA4M0FCRjEyMjI0Njgucm9hMDUGCCsG
AQUFBzANhilodHRwczovL3JyZHAuYWZyaW5pYy5uZXQvbm90aWZpY2F0aW9uLnht
bDAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMFACwPDYAwDQYJKoZIhvcNAQEL
BQADggEBALFqQeEpfy5htmTX8UHrx+sID5oXwoTXX3YPvN1bgfaqaihb9upn/HSa
hztvFsFAJFzPYoNIXh3RlCZszF4XInSKkr0UiioJbE8S0+o2ZIVTIVRA+gpuk+NB
rVGh5jzYMzgQtIIkJhFxPqq56IvpSQ/TeucL0ve5Ws2b0o2AarpQ+ZUo8d3pe8/5
a9nAUVPCwquCuhhSQqgceU0AhzAcE0n1p4kAYmZ9uov6bBq9+B59AEibs4GVkR8x
pxeDFlTfn9gr8PFVDhOXI+3lhnKYMPjuB9ZcPxkdxs+dVUyhuEwnCNrvz69GUrx1
ALyKNK6rv9dLPcv01KcZHhN8X/ymEmw=
-----END CERTIFICATE-----