Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/45845FCE778E11EC9DB088935A40D577.roa
File:                     45845FCE778E11EC9DB088935A40D577.roa (raw, json)
Hash identifier:          tvaH+OSe48+UR5XAzUeELUk6wWm1/H7zpm8Bnrol9NI=
Subject key identifier:   98:9B:5B:A7:32:85:A4:9F:88:3A:D6:E8:50:FE:59:3C:08:90:82:EF
Certificate issuer:       /CN=F3682B65AF/serialNumber=0940E638283336DE5C8C5A40A4C23B34F3F9CA53
Certificate serial:       0782
Authority key identifier: 09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/45845FCE778E11EC9DB088935A40D577.roa
Signing time:             Mon 17 Jan 2022 12:09:08 +0000
ROA not before:           Mon 17 Jan 2022 12:09:04 +0000
ROA not after:            Tue 17 Jan 2023 12:09:04 +0000
asID:                     32181
IP address blocks:        154.16.148.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1922 (0x782)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3682B65AF/serialNumber=0940E638283336DE5C8C5A40A4C23B34F3F9CA53
        Validity
            Not Before: Jan 17 12:09:04 2022 GMT
            Not After : Jan 17 12:09:04 2023 GMT
        Subject: CN=61e55c64-534a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:d9:4b:89:5e:7f:2b:ae:37:b2:f4:a2:d8:7e:
                    5b:76:75:50:7d:c3:63:dd:32:32:ff:c0:c1:41:5c:
                    09:d1:95:87:fc:4c:82:13:6c:08:75:b2:e0:fd:cd:
                    6d:e6:9c:2b:42:d2:b5:c8:e9:6c:63:9b:01:f7:c7:
                    39:79:e6:86:23:5f:1a:04:b1:b3:15:c0:69:92:01:
                    b2:66:e4:15:73:ab:bc:a4:4f:18:1d:ce:3e:bd:6e:
                    a7:97:bb:57:af:ae:3c:67:63:69:bd:b7:01:a9:ab:
                    ae:6b:75:df:6c:12:5c:d7:3d:5b:d7:9d:ee:cb:39:
                    99:23:9d:a1:ad:fd:ce:f9:02:82:d7:99:8c:0d:ea:
                    ce:12:de:49:96:d1:13:ad:47:f9:d3:1d:8e:4b:30:
                    73:ea:ee:83:e7:ac:e5:bf:e9:72:f0:0d:13:de:2c:
                    f9:43:c8:af:d8:2c:65:23:8f:31:a6:9d:3c:33:03:
                    2d:e0:d9:43:58:74:ac:a7:63:f7:ec:ed:2b:80:11:
                    e0:bc:b1:b0:28:49:0d:38:21:2b:63:92:df:27:68:
                    fd:ff:1e:53:46:a7:c8:f5:82:46:37:47:67:1d:a3:
                    89:9e:f6:e9:ba:92:dd:30:09:e0:07:7e:97:6d:9b:
                    d6:61:c1:54:45:fa:b5:e5:97:2a:0d:f9:64:e9:a7:
                    ee:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                98:9B:5B:A7:32:85:A4:9F:88:3A:D6:E8:50:FE:59:3C:08:90:82:EF
            X509v3 Authority Key Identifier:
                keyid:09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/CUDmOCgzNt5cjFpApMI7NPP5ylM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/45845FCE778E11EC9DB088935A40D577.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  154.16.148.0/24

    Signature Algorithm: sha256WithRSAEncryption
         15:0b:dd:41:92:a1:8c:20:1a:6e:f9:47:e2:8a:5b:12:80:a3:
         f2:24:5f:ea:90:01:8b:f1:6c:72:4c:7f:6f:8e:f2:a2:58:1a:
         fe:ec:86:c5:9e:42:5d:38:a4:90:3c:4a:59:be:c2:af:70:a3:
         c5:d6:4c:7e:5b:28:97:72:8d:73:55:b8:97:50:1c:48:6a:f2:
         92:7c:65:5e:d1:dc:a0:4d:59:4d:9a:49:fa:d1:ea:e9:2c:81:
         c2:da:f3:b7:9b:14:dd:94:1f:f9:94:20:55:51:73:d6:a8:3b:
         0e:ad:0c:1c:84:5b:75:a4:9e:3f:1b:2c:00:f0:9a:1d:52:a6:
         58:13:28:75:e9:4f:16:4a:69:68:01:0d:66:ed:a2:f7:37:e8:
         0b:17:06:71:fd:51:ad:bd:dd:6a:54:6c:88:90:8f:e7:af:ba:
         f5:6d:ca:fb:53:1f:6f:32:cf:03:53:fc:87:6f:8a:8b:4d:31:
         a2:0e:60:ba:22:e0:4f:68:0b:f1:72:bd:57:75:45:37:3d:92:
         46:57:d9:b1:1d:ce:25:45:eb:9d:3e:f3:3d:fe:78:94:c1:21:
         48:ef:bb:0b:ce:59:e3:83:3c:e2:a0:b1:e9:cb:03:39:0e:e7:
         bc:e8:92:e7:cc:04:cc:a5:cc:36:77:14:d1:94:5f:31:2a:3f:
         5c:0e:05:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----