Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/8F42A79463D711ECB4322DBA5A40D577.roa
File:                     8F42A79463D711ECB4322DBA5A40D577.roa (raw, json)
Hash identifier:          TsVxs7uhxZPlphzEVMiLzVg51PXo3wFO7Dm7K2BiroY=
Subject key identifier:   26:6A:65:F7:D6:C8:60:33:75:96:F3:3A:C3:2D:0B:70:35:72:DB:A6
Certificate issuer:       /CN=F3682B65AF/serialNumber=0940E638283336DE5C8C5A40A4C23B34F3F9CA53
Certificate serial:       0742
Authority key identifier: 09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/8F42A79463D711ECB4322DBA5A40D577.roa
Signing time:             Thu 23 Dec 2021 10:03:21 +0000
ROA not before:           Thu 23 Dec 2021 10:03:18 +0000
ROA not after:            Fri 23 Dec 2022 10:03:18 +0000
asID:                     60781
IP address blocks:        154.16.183.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1858 (0x742)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3682B65AF/serialNumber=0940E638283336DE5C8C5A40A4C23B34F3F9CA53
        Validity
            Not Before: Dec 23 10:03:18 2021 GMT
            Not After : Dec 23 10:03:18 2022 GMT
        Subject: CN=61c44969-1651
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:5a:43:f7:c7:d4:70:ef:28:1f:84:9b:91:4d:
                    d3:2d:72:f8:92:95:2c:b2:91:c5:ef:91:52:2e:01:
                    8f:f6:ad:49:40:7a:02:c3:13:27:78:c2:bb:29:65:
                    a0:a9:7e:b1:d4:b3:4d:e9:5a:8c:8f:c2:d9:13:8f:
                    4f:fa:4b:e5:63:63:02:29:03:09:ee:36:12:4c:58:
                    e0:d4:51:00:08:bc:36:4e:d6:76:87:23:f1:cc:58:
                    3b:94:1e:e5:97:4d:2e:e8:3c:fd:da:14:11:85:65:
                    de:d0:cf:a4:d0:2e:bf:1c:53:69:24:26:f6:4f:e6:
                    43:98:d3:a4:55:2d:61:3c:90:2a:d1:2a:f9:dc:0d:
                    45:2e:6d:6a:51:0b:17:01:15:14:68:93:1e:92:7b:
                    74:a0:e8:87:08:83:de:f7:4f:17:34:70:7f:ce:21:
                    48:6d:cd:0b:6d:0d:2c:c2:ba:0d:42:7b:b5:0a:f0:
                    84:db:b1:52:e4:1d:da:4e:58:ef:5f:a3:91:d0:d1:
                    91:e5:8e:75:82:3f:a3:4b:3b:77:12:eb:64:9b:64:
                    a5:ef:37:ec:07:88:48:b7:0d:1c:d5:43:dd:ff:1e:
                    cd:85:a0:a3:90:1c:53:2b:6e:a8:aa:9c:d7:77:fd:
                    f8:4e:c1:83:a5:de:0d:84:81:29:31:31:ed:79:41:
                    3e:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                26:6A:65:F7:D6:C8:60:33:75:96:F3:3A:C3:2D:0B:70:35:72:DB:A6
            X509v3 Authority Key Identifier:
                keyid:09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/CUDmOCgzNt5cjFpApMI7NPP5ylM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/8F42A79463D711ECB4322DBA5A40D577.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  154.16.183.0/24

    Signature Algorithm: sha256WithRSAEncryption
         1b:43:25:55:4d:66:96:71:cb:82:96:1e:64:cd:e5:02:d8:07:
         3d:d0:fe:d5:c7:72:a3:6b:b6:8d:10:2b:61:24:b0:94:dd:90:
         74:cc:49:ae:7e:e5:75:8c:8b:af:76:cd:2f:b6:97:0a:a4:ba:
         a8:cd:07:e1:ff:bb:49:cf:85:b8:9c:4e:04:87:7a:87:7d:84:
         a9:41:3f:c9:c7:5b:cc:b4:16:79:12:53:78:40:9f:f1:e2:70:
         a4:ed:f9:93:fa:a7:22:5a:dd:cf:2f:44:aa:0e:27:a9:ea:9b:
         19:d7:98:af:40:11:19:d7:9f:cb:25:b1:8a:f5:20:b4:8f:42:
         50:88:e0:66:06:b7:d3:52:73:a4:12:01:e8:dc:aa:dc:0d:a5:
         80:85:96:38:2e:54:e9:c2:57:53:ea:1c:a1:d7:5f:ff:06:cc:
         a1:0a:09:a4:7c:84:3b:d8:f9:4d:dd:81:f3:ae:55:1e:e4:65:
         66:8b:0c:a6:ec:4a:58:ea:19:79:98:c1:e3:7a:8b:1b:d9:a8:
         37:85:5c:d2:c4:b1:8e:53:0d:e9:c5:22:e6:4a:53:a1:3a:52:
         24:0c:20:ff:10:a2:ee:4b:2c:db:96:d4:55:34:33:6e:34:ea:
         44:27:76:fa:e4:d5:d3:08:68:35:77:f3:60:7d:ca:35:25:1f:
         67:5d:c5:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----