Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/4278AC82C29211EC9284B3F8F1222468.roa
File:                     4278AC82C29211EC9284B3F8F1222468.roa (raw, json)
Hash identifier:          s8ibg9gSRI1TtUsg1YSjhQmCmO3ZEMXyKGm6vm3i5eY=
Subject key identifier:   3B:01:AF:CA:AA:8B:05:4A:30:E2:CF:5F:14:A4:19:B4:2E:2E:E4:11
Certificate issuer:       /CN=F3682B65AF/serialNumber=0940E638283336DE5C8C5A40A4C23B34F3F9CA53
Certificate serial:       0836
Authority key identifier: 09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/4278AC82C29211EC9284B3F8F1222468.roa
Signing time:             Fri 22 Apr 2022 23:16:38 +0000
ROA not before:           Sat 23 Apr 2022 23:16:33 +0000
ROA not after:            Mon 23 May 2022 23:16:33 +0000
asID:                     26548
IP address blocks:        154.16.7.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2102 (0x836)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3682B65AF/serialNumber=0940E638283336DE5C8C5A40A4C23B34F3F9CA53
        Validity
            Not Before: Apr 23 23:16:33 2022 GMT
            Not After : May 23 23:16:33 2022 GMT
        Subject: CN=62633756-2738
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:18:8d:97:bd:f1:c3:1c:97:0e:6d:f8:44:d3:
                    30:e3:2b:19:dc:37:f4:8b:c8:d2:00:4d:e0:38:61:
                    c8:b1:33:f8:e2:55:b3:3e:1a:86:ac:4d:7d:26:35:
                    30:42:25:6c:8f:72:0c:c6:6f:3a:b6:94:c7:57:cf:
                    67:d7:fb:ea:9c:c8:7b:41:43:4c:7b:af:55:8f:e2:
                    8e:cd:2a:c6:7d:6c:7a:f5:52:1d:43:f2:55:e0:a4:
                    09:f8:1e:89:fc:5e:99:d0:ce:95:2e:2b:c8:c6:51:
                    ac:82:12:ce:6f:96:85:5c:1e:b3:7f:e6:1c:f8:28:
                    2d:6b:5d:d5:33:62:38:51:c2:5b:a2:69:59:dc:bc:
                    0e:0a:99:03:99:d8:fe:33:5d:df:28:d2:dd:c5:4c:
                    ee:d8:5f:73:25:a9:5b:a5:ee:54:86:d6:33:01:2d:
                    63:65:fe:45:c2:fc:d3:f7:7c:95:1c:2a:e6:9d:66:
                    db:9f:f8:87:7b:bb:e7:c0:00:da:7e:91:dc:0e:62:
                    5c:ab:d7:03:cb:7f:d3:aa:2f:1b:bf:b0:ed:4d:7c:
                    3c:eb:54:e8:21:be:0b:ca:7b:b5:c7:62:9e:cd:4e:
                    fc:1c:26:d9:80:39:36:b9:54:71:83:ec:c1:3c:a6:
                    ec:11:77:95:dc:44:f9:3b:10:3f:a4:ad:49:b4:ec:
                    1a:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3B:01:AF:CA:AA:8B:05:4A:30:E2:CF:5F:14:A4:19:B4:2E:2E:E4:11
            X509v3 Authority Key Identifier:
                keyid:09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/CUDmOCgzNt5cjFpApMI7NPP5ylM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/4278AC82C29211EC9284B3F8F1222468.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  154.16.7.0/24

    Signature Algorithm: sha256WithRSAEncryption
         64:cd:d0:e8:0c:0f:dc:92:0b:3a:da:3f:a0:18:24:eb:1d:96:
         66:9e:68:a2:b2:23:bd:8a:28:08:48:63:1d:c0:24:12:2e:64:
         9a:01:3a:b3:70:1a:a8:40:ac:ea:d7:17:21:63:0c:79:85:29:
         9c:02:b0:15:2d:b3:53:80:9e:8b:53:33:ae:3d:de:8b:39:97:
         58:7c:06:f4:ab:08:e0:5d:18:72:c1:3e:1c:ed:0e:51:00:59:
         f3:27:2e:14:bd:d1:a9:86:14:ae:c6:d1:e3:ea:33:1f:b9:bd:
         8a:f7:4c:d2:1d:2a:0b:49:21:f7:df:69:4a:6b:16:8d:64:e1:
         31:58:75:4c:a2:35:d4:cb:a1:9e:0f:5f:76:0f:f1:79:c2:5a:
         75:0f:fa:dd:da:16:6c:fc:2e:23:0c:e0:42:1e:32:64:59:6a:
         7e:aa:ac:4c:f9:91:cd:52:a2:91:e7:a6:54:5f:0e:1c:63:d6:
         b1:94:e3:c4:ca:53:aa:4f:43:f6:ac:74:b0:1e:a7:ec:90:3f:
         48:fa:57:f1:5e:ce:b7:fd:22:7e:2d:38:c0:ca:56:76:7a:a6:
         e1:6b:74:0f:a7:8c:83:17:50:d2:1c:90:ae:46:5f:43:84:67:
         a8:ac:1a:b8:84:cf:31:6c:36:a1:e8:1c:17:6b:a6:7b:ce:ac:
         6d:3f:e0:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----