Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/0D2C13CE7D3D11ECBFDC6DA65A40D577.roa
File:                     0D2C13CE7D3D11ECBFDC6DA65A40D577.roa (raw, json)
Hash identifier:          F+J7zoxwEtah/qknPe9rSAe9nC/oCOebPprFPgZQ6zU=
Subject key identifier:   1A:B7:92:D7:4F:BD:75:04:78:4F:D8:E6:24:76:3C:D9:36:52:D2:0F
Certificate issuer:       /CN=F3682B65AF/serialNumber=0940E638283336DE5C8C5A40A4C23B34F3F9CA53
Certificate serial:       078D
Authority key identifier: 09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/0D2C13CE7D3D11ECBFDC6DA65A40D577.roa
Signing time:             Mon 24 Jan 2022 17:42:51 +0000
ROA not before:           Mon 24 Jan 2022 17:42:47 +0000
ROA not after:            Tue 24 Jan 2023 17:42:47 +0000
asID:                     43260
IP address blocks:        154.16.123.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1933 (0x78d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3682B65AF/serialNumber=0940E638283336DE5C8C5A40A4C23B34F3F9CA53
        Validity
            Not Before: Jan 24 17:42:47 2022 GMT
            Not After : Jan 24 17:42:47 2023 GMT
        Subject: CN=61eee51b-5568
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:02:e6:36:7d:52:e2:a3:e7:5a:cf:37:75:6f:
                    ac:01:ca:ad:5f:0d:2b:5d:88:68:20:3d:e7:be:29:
                    c9:95:59:b8:2f:73:70:ba:ac:b3:5a:07:f9:c0:51:
                    2b:c4:4b:33:b9:e8:e7:6a:2f:03:7d:a4:44:f5:07:
                    2f:9f:e1:ed:9e:b8:e4:f2:38:a2:f8:e6:c9:77:4d:
                    68:98:8c:99:2b:cf:67:4d:50:ad:89:84:f0:7f:be:
                    ba:3f:b5:3b:2a:a2:3d:20:ba:77:ad:98:9d:4a:e9:
                    14:c0:3b:47:b2:4c:0e:5a:7f:f7:f2:ae:e9:12:31:
                    6e:aa:ce:8b:93:f4:a0:50:1e:8b:6b:88:a4:ee:b0:
                    3e:d8:03:61:f9:cf:8f:95:fd:70:e8:a4:e4:83:aa:
                    2b:cd:0a:fa:c1:ec:f0:24:7f:7e:48:56:93:93:b6:
                    10:a9:8c:21:75:7f:7e:f4:9e:6e:42:3e:03:ac:e2:
                    70:b6:e3:04:9d:3c:0e:20:ec:62:fa:a0:b5:6c:38:
                    81:c5:40:cd:60:df:48:3c:10:d9:51:e9:9b:af:f6:
                    58:80:4b:c5:e5:39:5f:7a:12:79:dc:e5:e5:b0:5c:
                    7c:ca:c6:55:fc:0c:7c:06:ab:04:a1:fd:39:b5:89:
                    e3:e9:35:50:d3:7f:74:cd:db:3b:08:ef:21:a1:04:
                    98:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1A:B7:92:D7:4F:BD:75:04:78:4F:D8:E6:24:76:3C:D9:36:52:D2:0F
            X509v3 Authority Key Identifier:
                keyid:09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/CUDmOCgzNt5cjFpApMI7NPP5ylM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/0D2C13CE7D3D11ECBFDC6DA65A40D577.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  154.16.123.0/24

    Signature Algorithm: sha256WithRSAEncryption
         52:b2:33:aa:11:9c:1d:12:23:07:c8:34:e0:1d:2f:66:bd:64:
         ba:74:a7:a2:47:52:0f:b2:1f:5f:dd:dc:52:ae:12:19:47:3d:
         34:05:10:e6:b2:da:b0:f8:cb:ea:fa:8c:7d:2f:fa:bc:3b:1d:
         89:e5:8e:e1:ac:7a:f9:e3:6b:df:67:dc:6c:62:e1:d8:5e:99:
         37:94:1a:d5:69:d0:6e:dc:21:3e:03:3b:2a:c5:33:96:49:e4:
         33:c0:93:27:ee:1b:f2:43:c8:39:fa:59:85:a3:4d:c1:ea:07:
         8a:f5:47:94:1b:b0:a9:dc:d8:84:5a:16:ae:ea:83:0b:86:ac:
         c6:03:0d:94:80:aa:24:dc:5b:c0:0b:1b:94:06:f0:65:08:a4:
         3a:03:ee:00:98:e3:fe:08:16:57:03:d2:23:2a:ed:b2:22:e9:
         87:67:1d:cf:fc:77:df:69:f8:5f:d8:73:79:6e:7e:14:ef:64:
         cf:4e:71:b4:f7:13:ac:63:98:16:89:57:ac:aa:0e:0d:5c:eb:
         ad:b0:70:77:97:75:3a:51:15:5c:a7:1a:be:80:30:9b:a5:f1:
         49:99:eb:0a:1d:39:ea:da:98:b6:f7:6e:f7:5c:d4:eb:55:24:
         70:fa:f6:36:12:87:ef:7d:75:aa:fb:da:42:70:51:62:f0:cf:
         a2:6c:09:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----