Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368B07F/AA8ADE84B9C411E79806DE61F8AEA228/E48FC09ABAAA11EC801B09965A40D577.roa
File:                     E48FC09ABAAA11EC801B09965A40D577.roa (raw, json)
Hash identifier:          UuFbO7qsvRgQyXC7b8TFWAwnB7PZGfXwUQVp3v4CjA4=
Subject key identifier:   86:78:8C:A5:45:E3:46:0C:2A:64:DF:BC:EE:66:71:69:B2:DE:21:38
Certificate issuer:       /CN=F368B07FAR/serialNumber=AEFB349D234C6C66C424925BEE10299DAAF0B9BC
Certificate serial:       0691
Authority key identifier: AE:FB:34:9D:23:4C:6C:66:C4:24:92:5B:EE:10:29:9D:AA:F0:B9:BC
Authority info access:    rsync://rpki.afrinic.net/repository/arin/rvs0nSNMbGbEJJJb7hApnarwubw.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368B07F/AA8ADE84B9C411E79806DE61F8AEA228/E48FC09ABAAA11EC801B09965A40D577.roa
Signing time:             Tue 12 Apr 2022 21:52:48 +0000
ROA not before:           Tue 12 Apr 2022 21:52:45 +0000
ROA not after:            Tue 27 Feb 2024 21:52:45 +0000
asID:                     37314
IP address blocks:        165.16.128.0/19 maxlen: 19

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1681 (0x691)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368B07FAR/serialNumber=AEFB349D234C6C66C424925BEE10299DAAF0B9BC
        Validity
            Not Before: Apr 12 21:52:45 2022 GMT
            Not After : Feb 27 21:52:45 2024 GMT
        Subject: CN=6255f4b0-784b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:4a:9a:cf:80:b6:40:e5:bc:8d:de:f7:2a:1e:
                    a6:8c:18:50:48:05:0f:be:9b:d2:35:1c:b7:4f:2b:
                    43:06:b6:f4:4d:3d:1d:f9:99:e1:6b:9f:12:79:56:
                    4e:84:0a:df:39:20:a5:24:e6:a5:fd:70:eb:85:33:
                    3b:d7:c2:f7:fc:fd:40:4f:1e:35:dc:de:38:54:a2:
                    b7:79:12:03:98:4f:ac:1e:db:07:57:9b:5b:ca:5a:
                    9c:75:e7:e9:28:8f:b2:6a:e4:7f:c6:28:64:14:ba:
                    ea:59:cf:56:ca:ec:6b:98:09:e4:c3:cd:6d:9b:0e:
                    96:68:23:d2:6e:1c:14:ad:ce:ff:5c:e1:8f:b6:b2:
                    9e:68:b3:bd:9c:79:44:87:d7:1e:15:83:78:0d:a2:
                    45:84:77:9c:2d:e4:c6:98:16:e9:d4:29:cc:ae:cc:
                    f0:d9:7a:3f:ce:c9:62:55:b7:1a:2e:cb:79:50:4a:
                    20:85:54:22:30:4e:69:b5:5e:6b:c7:a1:c0:24:bc:
                    29:aa:99:fd:21:a4:93:c4:57:74:55:52:ee:78:41:
                    2f:c2:ed:5a:cd:55:6c:a6:0b:21:1e:41:45:9f:5e:
                    4d:3c:c7:b0:35:5d:e3:29:7b:4d:60:3a:c0:f2:1e:
                    87:71:ab:a0:7f:cd:0c:19:a0:fd:ea:aa:57:86:15:
                    1a:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                86:78:8C:A5:45:E3:46:0C:2A:64:DF:BC:EE:66:71:69:B2:DE:21:38
            X509v3 Authority Key Identifier:
                keyid:AE:FB:34:9D:23:4C:6C:66:C4:24:92:5B:EE:10:29:9D:AA:F0:B9:BC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368B07F/AA8ADE84B9C411E79806DE61F8AEA228/rvs0nSNMbGbEJJJb7hApnarwubw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/rvs0nSNMbGbEJJJb7hApnarwubw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368B07F/AA8ADE84B9C411E79806DE61F8AEA228/E48FC09ABAAA11EC801B09965A40D577.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  165.16.128.0/19

    Signature Algorithm: sha256WithRSAEncryption
         73:60:85:32:bd:b6:07:32:d4:d3:83:15:d1:f6:d4:92:91:1c:
         7b:3e:74:e7:dd:43:5a:a5:e0:e2:00:b6:88:9b:25:e8:d6:4d:
         26:11:69:3d:3f:5f:19:ce:ac:01:9b:3e:bd:8a:b0:09:94:de:
         51:b9:69:ce:b8:2e:55:40:d2:29:1c:2e:ad:37:5d:a7:3f:69:
         2b:f7:c2:1b:fb:4c:b6:38:7b:a9:8c:a8:85:25:52:f4:09:e8:
         4a:33:4b:8a:d5:93:a8:69:00:91:e8:7c:b1:2c:8a:7b:a3:13:
         25:44:6d:75:71:97:94:b2:99:70:aa:59:9d:21:05:c1:46:b3:
         c8:63:b6:45:9b:10:04:eb:8c:8d:03:8e:6f:ae:12:3f:06:8b:
         5e:d3:35:b3:88:47:44:e4:13:9a:3b:ff:7f:f9:67:2a:a9:50:
         03:60:bb:08:9a:38:90:5a:56:75:5b:ce:3d:26:6b:25:77:c8:
         3d:03:96:45:1b:cd:3d:d2:e5:09:95:96:46:c5:45:be:18:b5:
         df:2e:32:b7:85:e3:dd:e6:ad:ab:22:5c:fb:a4:74:b1:6c:e6:
         19:63:e3:6a:2b:76:33:0b:70:d6:ac:f7:a2:02:2c:74:85:c1:
         1a:fc:1b:94:66:ff:f2:56:52:7d:fc:9a:7e:16:6e:b9:ee:0e:
         d4:47:77:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----