Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F366742F/B09C4EFE3E6211EB82352F27F8AEA228/B974CFFCE5F411ECB9F66FDFF1222468.roa
File:                     B974CFFCE5F411ECB9F66FDFF1222468.roa (raw, json)
Hash identifier:          kUvdGHxK91iRkdikUcX76fb807Dd6a9wejNChlRPDEY=
Subject key identifier:   79:CD:76:39:8B:B5:71:3B:95:C4:12:EA:EC:F5:15:0F:55:70:8C:F5
Certificate issuer:       /CN=F366742FAF/serialNumber=452EABFC76D2DFC161F4E23AB30C069B1329094A
Certificate serial:       0234
Authority key identifier: 45:2E:AB:FC:76:D2:DF:C1:61:F4:E2:3A:B3:0C:06:9B:13:29:09:4A
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/RS6r_HbS38Fh9OI6swwGmxMpCUo.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F366742F/B09C4EFE3E6211EB82352F27F8AEA228/B974CFFCE5F411ECB9F66FDFF1222468.roa
Signing time:             Mon 06 Jun 2022 23:59:39 +0000
ROA not before:           Tue 06 Jun 2023 23:59:35 +0000
ROA not after:            Tue 06 Jun 2023 23:59:35 +0000
asID:                     7233
IP address blocks:        102.165.183.0/28 maxlen: 30
                          2001:43f8:1140:1::/64 maxlen: 120

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 564 (0x234)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F366742FAF/serialNumber=452EABFC76D2DFC161F4E23AB30C069B1329094A
        Validity
            Not Before: Jun  6 23:59:35 2023 GMT
            Not After : Jun  6 23:59:35 2023 GMT
        Subject: CN=629e94eb-5c6e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:d9:ea:d4:02:dc:ae:ce:86:e3:1b:e7:ac:08:
                    e9:88:b5:3c:ca:02:38:78:27:55:1b:47:42:18:ce:
                    8b:d7:8d:7b:0a:80:c3:1a:33:36:ef:8a:03:6f:35:
                    7d:02:d7:c0:c4:b0:af:e0:62:a1:94:4c:32:a1:4c:
                    5f:99:43:b2:cf:42:4f:bd:3a:71:2d:1d:d0:4f:12:
                    6e:f9:2e:9b:61:f6:3d:f8:59:82:0d:99:05:f4:57:
                    1d:06:0b:fc:78:16:54:fb:e5:ae:c0:6f:ed:b1:27:
                    c2:fc:a6:08:91:c6:b9:e5:31:fe:1a:89:63:7f:76:
                    f6:e0:7a:09:df:08:91:f8:a2:5e:0a:e0:39:01:4d:
                    af:af:64:4e:d9:57:6a:51:0f:bb:d4:f5:91:13:08:
                    cb:1f:0e:99:0b:1d:ae:01:de:60:a1:a7:3c:7f:4e:
                    78:84:e6:d9:01:97:92:b7:d6:56:b1:95:60:a8:32:
                    cb:66:66:60:f0:f8:d4:15:80:99:dc:3c:8f:ce:2b:
                    57:ab:33:8f:d2:25:c1:b1:88:b0:00:89:a9:11:7a:
                    f4:ab:b0:08:c4:0f:7e:1a:69:2e:5d:2e:4f:dd:1f:
                    40:f9:2c:2a:ad:c3:26:b4:d9:ae:02:df:bb:c7:c3:
                    80:07:53:b1:a3:bd:e8:49:d2:3d:0a:7b:0b:7e:20:
                    fb:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                79:CD:76:39:8B:B5:71:3B:95:C4:12:EA:EC:F5:15:0F:55:70:8C:F5
            X509v3 Authority Key Identifier:
                keyid:45:2E:AB:FC:76:D2:DF:C1:61:F4:E2:3A:B3:0C:06:9B:13:29:09:4A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F366742F/B09C4EFE3E6211EB82352F27F8AEA228/RS6r_HbS38Fh9OI6swwGmxMpCUo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/RS6r_HbS38Fh9OI6swwGmxMpCUo.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F366742F/B09C4EFE3E6211EB82352F27F8AEA228/B974CFFCE5F411ECB9F66FDFF1222468.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  102.165.183.0/28
                IPv6:
                  2001:43f8:1140:1::/64

    Signature Algorithm: sha256WithRSAEncryption
         7e:87:2e:fc:4c:62:2a:42:9d:e5:e0:85:d8:11:96:0b:cd:07:
         76:43:31:5a:80:95:b7:29:57:45:d6:3b:ed:c1:79:26:5d:c4:
         88:59:b3:a1:b2:84:da:4e:55:fb:07:c3:8a:21:02:bc:0d:9f:
         a7:26:6a:2b:e1:7d:80:ce:46:98:a4:db:df:a8:dd:43:7e:a4:
         27:df:a5:fa:0b:b8:86:b9:4c:5b:c5:f5:a9:7b:84:bf:0f:7e:
         4b:2b:66:db:12:d8:3e:d5:89:20:83:bd:5e:e8:d5:b5:32:a4:
         82:ea:60:da:18:d2:d4:c4:41:13:1d:27:d6:8a:e1:db:5f:c4:
         65:89:15:56:5c:ed:fd:41:b6:78:5b:f8:9a:64:17:2a:4f:9c:
         93:12:30:bf:5a:2e:1e:c3:e3:a4:10:00:7c:43:06:36:68:db:
         74:ce:c8:cd:1c:85:33:8e:5d:53:f2:25:cd:96:5c:85:23:7a:
         16:16:fd:9c:32:47:ae:a4:a2:31:c9:99:43:08:85:79:ea:47:
         1b:e7:8b:cd:ae:cc:2c:83:e6:cc:0e:b9:0b:7e:79:9d:48:91:
         83:cb:eb:4b:88:21:fb:8e:4b:e7:61:c9:e4:5e:b3:b9:a1:1b:
         ef:02:21:c8:a0:df:cd:8b:96:14:26:5d:f9:a1:74:71:59:fc:
         e8:56:6a:27
-----BEGIN CERTIFICATE-----
MIIFlzCCBH+gAwIBAgICAjQwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAwwKRjM2
Njc0MkZBRjExMC8GA1UEBRMoNDUyRUFCRkM3NkQyREZDMTYxRjRFMjNBQjMwQzA2
OUIxMzI5MDk0QTAeFw0yMzA2MDYyMzU5MzVaFw0yMzA2MDYyMzU5MzVaMBgxFjAU
BgNVBAMMDTYyOWU5NGViLTVjNmUwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQCZ2erUAtyuzobjG+esCOmItTzKAjh4J1UbR0IYzovXjXsKgMMaMzbvigNv
NX0C18DEsK/gYqGUTDKhTF+ZQ7LPQk+9OnEtHdBPEm75Lpth9j34WYINmQX0Vx0G
C/x4FlT75a7Ab+2xJ8L8pgiRxrnlMf4aiWN/dvbgegnfCJH4ol4K4DkBTa+vZE7Z
V2pRD7vU9ZETCMsfDpkLHa4B3mChpzx/TniE5tkBl5K31laxlWCoMstmZmDw+NQV
gJncPI/OK1erM4/SJcGxiLAAiakRevSrsAjED34aaS5dLk/dH0D5LCqtwya02a4C
37vHw4AHU7GjvehJ0j0Kewt+IPvlAgMBAAGjggK5MIICtTAdBgNVHQ4EFgQUec12
OYu1cTuVxBLq7PUVD1VwjPUwHwYDVR0jBBgwFoAURS6r/HbS38Fh9OI6swwGmxMp
CUowDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNjY3NDJGL0IwOUM0RUZFM0U2MjExRUI4MjM1MkYyN0Y4QUVBMjI4L1JTNnJf
SGJTMzhGaDlPSTZzd3dHbXhNcENVby5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljL1JTNnJfSGJTMzhGaDlPSTZzd3dHbXhNcENVby5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdsGCCsGAQUFBwELBIHOMIHLMIGRBggrBgEF
BQcwC4aBhHJzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJl
cl9yZXBvc2l0b3J5L0YzNjY3NDJGL0IwOUM0RUZFM0U2MjExRUI4MjM1MkYyN0Y4
QUVBMjI4L0I5NzRDRkZDRTVGNDExRUNCOUY2NkZERkYxMjIyNDY4LnJvYTA1Bggr
BgEFBQcwDYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54
bWwwMwYIKwYBBQUHAQcBAf8EJDAiMA0EAgABMAcDBQRmpbcAMBEEAgACMAsDCQAg
AUP4EUAAATANBgkqhkiG9w0BAQsFAAOCAQEAfocu/ExiKkKd5eCF2BGWC80HdkMx
WoCVtylXRdY77cF5Jl3EiFmzobKE2k5V+wfDiiECvA2fpyZqK+F9gM5GmKTb36jd
Q36kJ9+l+gu4hrlMW8X1qXuEvw9+Sytm2xLYPtWJIIO9XujVtTKkgupg2hjS1MRB
Ex0n1orh21/EZYkVVlzt/UG2eFv4mmQXKk+ckxIwv1ouHsPjpBAAfEMGNmjbdM7I
zRyFM45dU/IlzZZchSN6Fhb9nDJHrqSiMcmZQwiFeepHG+eLza7MLIPmzA65C355
nUiRg8vrS4gh+45L52HJ5F6zuaEb7wIhyKDfzYuWFCZd+aF0cVn86FZqJw==
-----END CERTIFICATE-----