Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/EE6311EA778D11ECAEA082925A40D577.roa
File:                     EE6311EA778D11ECAEA082925A40D577.roa (raw, json)
Hash identifier:          dcF53FGAJbkn4jOta27RTPv3PpeSOhI13hbxWqsTm5s=
Subject key identifier:   F7:4C:2F:E7:9B:59:76:6C:A9:38:CC:2E:54:FB:4F:B9:60:F1:C5:CF
Certificate issuer:       /CN=F3682B65AF/serialNumber=0940E638283336DE5C8C5A40A4C23B34F3F9CA53
Certificate serial:       0780
Authority key identifier: 09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/EE6311EA778D11ECAEA082925A40D577.roa
Signing time:             Mon 17 Jan 2022 12:06:42 +0000
ROA not before:           Mon 17 Jan 2022 12:06:36 +0000
ROA not after:            Tue 17 Jan 2023 12:06:36 +0000
asID:                     212238
IP address blocks:        154.16.149.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1920 (0x780)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3682B65AF/serialNumber=0940E638283336DE5C8C5A40A4C23B34F3F9CA53
        Validity
            Not Before: Jan 17 12:06:36 2022 GMT
            Not After : Jan 17 12:06:36 2023 GMT
        Subject: CN=61e55bd1-f681
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:b3:42:bf:fb:ff:64:77:18:1f:45:45:73:5c:
                    2f:d3:93:74:8a:6f:3e:ff:2e:86:b4:b0:81:0a:a6:
                    46:10:43:b1:1f:6c:1f:d1:7c:dd:7d:8f:0a:f3:a0:
                    c1:7b:55:99:96:14:68:e5:b5:91:12:c7:48:23:4f:
                    84:1c:07:94:83:4f:41:0a:05:5d:8d:0e:28:cf:1c:
                    cd:6b:13:b4:1f:09:70:92:9c:f0:53:8f:1d:80:4f:
                    b2:c1:87:19:fd:07:ff:56:39:00:b7:46:66:dd:da:
                    a7:54:f2:64:92:da:c4:00:87:5e:48:39:ba:63:ce:
                    94:49:dd:f2:47:e5:4f:10:5f:75:2b:1e:2c:0b:d4:
                    1c:ab:a8:7b:e9:e9:b1:98:4d:5a:c3:ff:35:f1:ec:
                    3f:86:08:9e:d2:51:4c:5c:84:87:cc:6c:0e:b4:41:
                    92:0f:64:19:6b:83:8a:dc:fb:54:e9:ed:ea:4e:8a:
                    5d:a0:af:ab:3a:95:20:36:fb:18:8a:32:34:39:bf:
                    c2:a0:1e:e2:c2:11:02:9c:56:23:d1:4d:b3:2b:e6:
                    64:5c:03:c0:78:32:90:40:b6:5d:fe:89:66:22:48:
                    9a:56:74:3d:e6:ae:73:9f:c9:52:ce:d9:90:d6:cf:
                    c6:c5:26:45:1e:6c:af:b1:34:ea:78:d0:35:87:02:
                    2c:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F7:4C:2F:E7:9B:59:76:6C:A9:38:CC:2E:54:FB:4F:B9:60:F1:C5:CF
            X509v3 Authority Key Identifier:
                keyid:09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/CUDmOCgzNt5cjFpApMI7NPP5ylM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/EE6311EA778D11ECAEA082925A40D577.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  154.16.149.0/24

    Signature Algorithm: sha256WithRSAEncryption
         5d:56:5e:88:0f:6f:a0:ec:c1:c2:d1:34:57:05:a1:0e:0b:6e:
         2d:b7:00:95:db:fa:1d:74:1d:55:d3:b2:88:6e:44:7a:8f:c6:
         73:de:3d:91:5c:8a:21:32:92:b9:f7:b3:01:e2:15:8b:7b:05:
         07:fb:4a:3f:3b:37:dd:33:56:c2:76:c4:22:72:31:ed:9e:4e:
         ac:ef:06:51:af:62:83:32:28:40:33:4f:9d:a6:82:55:09:23:
         db:26:35:c6:68:34:1e:01:41:cb:b5:9a:5a:d4:bd:27:44:12:
         8e:94:68:b3:48:a5:42:4e:46:f1:0a:f5:43:0f:dd:6d:3a:48:
         bd:4f:22:19:88:06:92:b3:7e:71:8c:28:35:94:91:43:a6:11:
         1d:80:dd:40:ed:23:52:d8:16:43:bd:3c:56:d7:bb:3f:5b:31:
         84:94:08:92:92:41:bf:42:31:7f:42:60:86:c9:7f:2b:1a:ac:
         a5:27:ee:f7:03:15:d7:da:35:a5:62:d1:00:cf:17:9a:72:61:
         1f:19:ca:4a:dc:cc:f8:28:e9:4d:00:e6:4f:27:07:5d:89:65:
         ad:3a:3a:15:56:bd:bc:cc:30:a8:85:f6:1d:af:de:fb:b9:03:
         53:e7:58:17:cf:c2:5b:9c:13:51:eb:94:94:1b:e7:fa:d9:7c:
         fe:e4:67:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----