Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/96CAAB9CAF7211ECA1A29EA55A40D577.roa
File:                     96CAAB9CAF7211ECA1A29EA55A40D577.roa (raw, json)
Hash identifier:          22bvaNwRE8e4TUZApcrArDfcGjCtQLAdiW/oW7NgIhI=
Subject key identifier:   AC:5D:B1:49:79:6F:C3:E4:24:B8:15:64:A7:32:68:2D:49:67:6B:9C
Certificate issuer:       /CN=F3682B65AF/serialNumber=0940E638283336DE5C8C5A40A4C23B34F3F9CA53
Certificate serial:       080B
Authority key identifier: 09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/96CAAB9CAF7211ECA1A29EA55A40D577.roa
Signing time:             Tue 29 Mar 2022 15:12:03 +0000
ROA not before:           Tue 29 Mar 2022 15:11:59 +0000
ROA not after:            Wed 29 Mar 2023 15:11:59 +0000
asID:                     30058
IP address blocks:        154.16.7.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2059 (0x80b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3682B65AF/serialNumber=0940E638283336DE5C8C5A40A4C23B34F3F9CA53
        Validity
            Not Before: Mar 29 15:11:59 2022 GMT
            Not After : Mar 29 15:11:59 2023 GMT
        Subject: CN=624321c3-fc63
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:20:a0:02:1d:79:9c:3e:6f:91:6f:83:53:83:
                    cd:c3:00:9d:73:0b:98:10:c5:35:e9:18:4b:ac:a4:
                    bf:26:d4:d3:59:f3:da:f9:56:00:e4:c0:99:c0:ee:
                    12:ce:18:d1:59:02:9d:32:0c:07:32:21:21:87:9f:
                    36:57:8c:f7:0f:52:b7:78:8e:21:84:54:5d:d1:18:
                    1e:78:6c:26:83:c4:2a:ee:15:3c:c6:80:66:1c:bd:
                    4e:f3:7a:3f:0c:29:68:8f:ed:cd:16:06:52:d3:da:
                    bc:dc:15:25:36:92:76:50:d5:ff:09:a1:fc:a9:dc:
                    c3:a5:1f:3d:87:9b:b6:2f:51:29:26:81:f8:07:f4:
                    45:74:bd:d2:02:92:85:48:2a:ba:c3:5b:12:33:23:
                    66:fb:f2:29:22:a8:1d:5e:fb:33:f4:1c:61:f8:96:
                    27:33:a8:4e:57:1a:a2:0a:b4:94:53:e8:9b:73:23:
                    3f:3c:de:24:96:e2:6c:46:06:65:84:70:15:9f:2d:
                    4d:d5:15:aa:d9:ee:cd:d8:a4:ba:25:ac:71:a4:d4:
                    d9:41:e7:4e:15:9a:5f:f3:ad:24:72:e0:90:1a:c1:
                    bf:ee:b1:a3:7c:34:bf:bb:df:66:20:42:c8:ff:f4:
                    63:96:25:e1:47:ce:da:a0:bd:9b:6f:e2:7e:cc:0d:
                    df:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AC:5D:B1:49:79:6F:C3:E4:24:B8:15:64:A7:32:68:2D:49:67:6B:9C
            X509v3 Authority Key Identifier:
                keyid:09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/CUDmOCgzNt5cjFpApMI7NPP5ylM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/96CAAB9CAF7211ECA1A29EA55A40D577.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  154.16.7.0/24

    Signature Algorithm: sha256WithRSAEncryption
         05:e2:8d:0c:39:03:43:9b:d1:3e:33:a7:13:93:ac:e4:a7:01:
         79:e9:3a:b1:44:e8:1e:3e:e7:fa:7a:07:3f:69:1e:24:41:61:
         1b:e5:16:48:53:3d:25:a4:da:2d:1c:dd:11:9d:09:f0:8c:dc:
         80:b5:43:21:0d:27:a0:03:62:f1:73:61:63:1a:0e:b8:63:e8:
         6d:e8:ec:27:2d:03:57:6a:d1:1d:9b:cf:16:45:c1:1e:d2:95:
         74:97:b1:5f:ab:43:f6:12:a7:f6:45:6b:da:01:cd:57:8a:c8:
         60:a0:be:a2:3d:92:39:8f:46:8e:cf:83:16:5a:fd:aa:a0:30:
         5b:03:28:70:ab:7a:99:35:51:df:ce:11:00:fc:b0:e7:42:e2:
         79:b4:df:67:46:c8:1e:b5:fe:28:51:11:4f:f8:7f:42:52:4e:
         f2:4e:6e:71:5a:e8:fd:d2:f5:f5:89:a6:8f:e9:88:be:ba:fb:
         5d:06:cc:39:d4:0a:fd:ec:cc:85:92:e3:36:09:2a:b7:08:88:
         27:1e:3d:1d:af:b5:90:b0:bf:21:6e:10:fd:8d:c7:1d:f5:16:
         22:a1:56:ea:1a:bb:5b:f4:55:aa:60:7e:2d:3a:bd:f4:dc:f8:
         dc:95:26:93:37:79:12:5b:53:b6:15:00:36:5b:9a:82:39:af:
         82:de:1a:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----