Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F366742F/B09C4EFE3E6211EB82352F27F8AEA228/2EE1E4A0E5F511ECB465DAE0F1222468.roa
File:                     2EE1E4A0E5F511ECB465DAE0F1222468.roa (raw, json)
Hash identifier:          9Dj6eyKAfNdQG9Sy4TPQHYreE06u4FxLs8yxUb+AQcQ=
Subject key identifier:   C9:27:AC:8A:D3:45:6E:83:96:59:0E:EF:9C:31:7A:E9:91:B7:AC:09
Certificate issuer:       /CN=F366742FAF/serialNumber=452EABFC76D2DFC161F4E23AB30C069B1329094A
Certificate serial:       0236
Authority key identifier: 45:2E:AB:FC:76:D2:DF:C1:61:F4:E2:3A:B3:0C:06:9B:13:29:09:4A
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/RS6r_HbS38Fh9OI6swwGmxMpCUo.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F366742F/B09C4EFE3E6211EB82352F27F8AEA228/2EE1E4A0E5F511ECB465DAE0F1222468.roa
Signing time:             Tue 07 Jun 2022 00:02:56 +0000
ROA not before:           Tue 06 Jun 2023 00:00:52 +0000
ROA not after:            Tue 06 Jun 2023 00:00:52 +0000
asID:                     34010
IP address blocks:        102.165.183.0/28 maxlen: 29
                          2001:43f8:1140:1::/64 maxlen: 65

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 566 (0x236)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F366742FAF/serialNumber=452EABFC76D2DFC161F4E23AB30C069B1329094A
        Validity
            Not Before: Jun  6 00:00:52 2023 GMT
            Not After : Jun  6 00:00:52 2023 GMT
        Subject: CN=629e95b0-e227
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:e0:8e:87:78:23:1b:41:08:3e:ea:9d:86:09:
                    57:84:25:a0:9c:d1:7d:97:49:79:d4:5e:7a:26:7b:
                    7e:81:c9:82:3a:5a:a6:61:7d:12:ce:c9:41:8f:9c:
                    96:d7:8a:b2:64:f8:e2:c3:03:3f:56:8f:a9:59:79:
                    77:db:8a:19:24:39:44:71:47:6a:f6:0e:91:bf:49:
                    6e:a6:8c:91:09:69:36:3e:1a:7f:d7:77:3d:39:ca:
                    cc:71:f5:3a:c2:63:40:0a:e4:43:95:91:37:0d:e6:
                    fb:14:40:1b:4b:a1:1e:c5:07:ca:32:68:1f:4f:01:
                    9d:2a:49:97:ff:cb:7f:58:e0:70:3f:5b:71:eb:0f:
                    0e:ee:98:88:d9:33:61:a8:65:4c:f1:2b:96:e5:a1:
                    17:27:81:b4:01:29:3d:fe:ba:ef:43:d8:9c:d4:72:
                    54:48:a0:3a:18:e2:f1:aa:88:78:30:53:e1:28:d7:
                    cc:e7:97:e6:00:0f:33:ed:e4:b3:56:19:32:85:aa:
                    25:60:55:5f:01:8f:d6:3d:05:8d:95:85:1b:ec:be:
                    03:22:33:21:97:6d:48:f9:44:a9:4d:73:64:b3:91:
                    75:8c:95:e0:f6:7c:6a:e6:6d:73:86:e1:0f:55:94:
                    bf:3f:a8:bd:36:e8:0a:0a:c2:be:42:14:a4:72:7d:
                    11:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C9:27:AC:8A:D3:45:6E:83:96:59:0E:EF:9C:31:7A:E9:91:B7:AC:09
            X509v3 Authority Key Identifier:
                keyid:45:2E:AB:FC:76:D2:DF:C1:61:F4:E2:3A:B3:0C:06:9B:13:29:09:4A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F366742F/B09C4EFE3E6211EB82352F27F8AEA228/RS6r_HbS38Fh9OI6swwGmxMpCUo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/RS6r_HbS38Fh9OI6swwGmxMpCUo.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F366742F/B09C4EFE3E6211EB82352F27F8AEA228/2EE1E4A0E5F511ECB465DAE0F1222468.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  102.165.183.0/28
                IPv6:
                  2001:43f8:1140:1::/64

    Signature Algorithm: sha256WithRSAEncryption
         82:d0:a4:1a:de:66:02:cb:c6:1d:0f:38:50:21:42:a8:38:93:
         42:ee:1d:16:53:a7:d3:62:51:0d:79:32:bc:2e:5c:a1:23:54:
         83:bf:ef:46:92:0a:c6:78:ba:f4:e0:70:cd:43:95:2e:20:43:
         a6:2b:60:98:4b:43:bc:1f:dc:c9:06:94:7a:2d:2e:31:60:17:
         67:63:00:bf:11:49:88:1d:8d:4d:53:0a:44:e6:57:0b:ed:07:
         99:78:58:23:d5:69:59:cc:9f:01:f7:d1:51:78:59:cb:9c:4d:
         2f:04:9a:b0:fd:b1:65:79:56:49:70:10:1a:f3:0a:4f:cd:74:
         1c:ad:61:c1:08:95:27:1c:af:f5:ab:0b:4e:ee:91:8d:dd:78:
         d5:dc:a5:e3:b6:13:c4:c2:18:38:e0:37:81:a5:0e:81:f1:b8:
         fd:8d:9c:65:b9:ac:23:1b:ae:61:33:c8:e1:cc:7d:0e:21:79:
         3b:76:05:c2:df:3b:b7:81:8a:dd:12:67:22:bd:4e:48:51:53:
         eb:07:c3:6b:40:bf:30:fe:2f:ca:31:bb:b1:f2:42:e9:a8:66:
         6d:26:30:5f:c9:84:45:83:70:23:fd:95:b9:18:f4:c4:a9:be:
         3b:b3:67:40:74:aa:78:61:d8:dc:2f:89:8e:c4:32:5e:0c:00:
         8f:15:8e:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----