Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/2C3E6B70E7C011ECB0C5559DF1222468.roa
File:                     2C3E6B70E7C011ECB0C5559DF1222468.roa (raw, json)
Hash identifier:          wWhGWJBGYrQ0AhQbGTxltCw1W1Ku4mZvf5hBWRi9Wfk=
Subject key identifier:   04:D3:69:57:7E:BF:AC:82:85:3F:A7:54:D4:38:9A:5C:D9:18:9E:E2
Certificate issuer:       /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial:       16AA
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/2C3E6B70E7C011ECB0C5559DF1222468.roa
Signing time:             Thu 09 Jun 2022 06:48:30 +0000
ROA not before:           Sun 25 Sep 2022 06:48:26 +0000
ROA not after:            Sun 30 Jul 2023 06:48:26 +0000
asID:                     133199
IP address blocks:        154.197.49.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 5802 (0x16aa)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
        Validity
            Not Before: Sep 25 06:48:26 2022 GMT
            Not After : Jul 30 06:48:26 2023 GMT
        Subject: CN=62a197be-3d1b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:a9:3f:a8:b0:54:0f:eb:c7:9b:7b:0b:de:cd:
                    45:bb:03:30:e6:06:b3:5c:8c:59:00:99:7d:20:9d:
                    c9:b6:5e:14:64:e8:88:c8:c0:a1:f7:2a:be:3a:9f:
                    3a:74:8b:0f:2e:a4:6f:4d:eb:5f:ce:d3:b1:d6:0d:
                    b9:39:06:18:6b:3a:17:17:a0:58:6c:32:99:dc:c6:
                    66:c2:0d:55:54:57:af:c4:b7:1f:9d:30:5c:64:0e:
                    02:4b:0d:f4:ed:20:ee:c7:54:5e:89:65:a2:44:eb:
                    4b:8a:e8:86:71:9c:34:35:af:5e:75:63:0d:78:17:
                    6b:10:1c:a6:07:e6:60:7f:ef:df:1e:1f:fc:64:d6:
                    0b:ab:0a:73:7c:00:fa:68:30:0b:16:57:67:94:da:
                    fe:aa:5f:d6:7a:58:d9:0c:d7:65:02:e0:72:6e:36:
                    ee:00:2b:69:58:34:8d:99:a1:68:65:1f:04:91:38:
                    41:c5:09:4c:8f:33:c7:a3:64:33:b8:a6:0e:00:43:
                    81:64:da:76:cf:22:72:41:fd:98:bc:a9:ca:f0:d3:
                    e7:4e:a0:d5:87:15:13:55:ea:66:b6:03:88:76:45:
                    dc:97:62:9b:d6:d5:e9:3a:07:f7:43:22:48:3f:40:
                    38:15:59:28:ad:19:3c:57:be:9e:a8:22:0a:e5:1b:
                    a4:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                04:D3:69:57:7E:BF:AC:82:85:3F:A7:54:D4:38:9A:5C:D9:18:9E:E2
            X509v3 Authority Key Identifier:
                keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/2C3E6B70E7C011ECB0C5559DF1222468.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  154.197.49.0/24

    Signature Algorithm: sha256WithRSAEncryption
         95:1b:f0:ef:f2:81:f7:7a:b7:9c:29:66:3a:e9:b0:b1:b5:14:
         8b:0c:52:20:3b:cf:17:3e:8e:c0:9b:82:34:75:d7:90:aa:53:
         b9:df:c4:b4:8f:ed:5f:d8:c9:3b:aa:74:77:4f:ca:b1:2a:9f:
         e1:2e:0e:9c:d9:69:71:f6:4f:ef:69:c0:a8:f8:78:2f:67:d8:
         fc:10:70:c0:f9:0c:02:5f:92:4d:b8:ef:0d:d5:79:ec:2e:2a:
         1f:ad:29:04:f5:d7:50:43:17:0a:20:6f:7b:98:1e:01:70:53:
         fb:01:55:a4:02:eb:26:25:98:ad:e0:64:97:d1:0f:2e:80:50:
         cd:1e:9c:00:93:f7:91:5a:3d:2b:b6:06:2e:ed:95:bf:98:b7:
         ab:21:fd:f7:3c:a5:cd:34:a4:e1:be:67:a6:e5:b6:a4:96:2f:
         aa:39:cb:36:60:90:b0:c2:86:b6:24:ee:7b:5a:3a:c0:ed:86:
         1b:33:61:46:e6:7f:51:99:0d:bf:d2:9b:b9:a3:a1:10:6a:36:
         a0:12:82:7a:88:0c:bc:d3:01:ac:fc:22:d8:97:0d:b7:53:09:
         fa:b6:fa:50:bc:a0:39:85:46:73:11:65:47:8a:aa:91:1c:58:
         4a:00:ae:c8:a4:cc:e4:e1:56:1c:4a:0b:5f:19:55:b5:e8:93:
         9a:9f:d0:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----