Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/37F4D326C04E11EC919D5DCE5A40D577.roa
File:                     37F4D326C04E11EC919D5DCE5A40D577.roa (raw, json)
Hash identifier:          bWxybmwcNMYydDyiByDeNbHKk8nO6EVpobyezs8s4ro=
Subject key identifier:   27:E2:A6:99:B8:4F:03:75:55:7E:DA:5D:38:A9:98:F6:A5:6D:76:47
Certificate issuer:       /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial:       15DB
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/37F4D326C04E11EC919D5DCE5A40D577.roa
Signing time:             Wed 20 Apr 2022 02:04:32 +0000
ROA not before:           Wed 20 Apr 2022 02:04:28 +0000
ROA not after:            Sat 31 Dec 2022 02:04:28 +0000
asID:                     35916
IP address blocks:        154.194.128.0/17 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 5595 (0x15db)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
        Validity
            Not Before: Apr 20 02:04:28 2022 GMT
            Not After : Dec 31 02:04:28 2022 GMT
        Subject: CN=625f6a30-2672
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:da:a6:a8:cf:ba:be:68:11:a3:dc:a1:b0:5e:
                    3f:cb:2e:fa:c7:06:57:46:57:12:e8:de:05:5d:0d:
                    b2:91:96:b0:76:29:b9:6b:97:3a:a5:f0:6e:0b:cf:
                    6b:44:d5:c0:b9:89:8a:0f:37:26:07:54:c5:0e:16:
                    fb:90:3a:95:c3:08:b7:df:95:29:9b:f1:5a:2f:54:
                    c5:e3:56:98:84:09:68:fd:26:61:9e:cc:41:98:5f:
                    cc:ce:5c:05:a7:32:51:c6:71:40:ca:96:0f:25:bb:
                    06:30:2e:5b:2b:62:17:b0:f4:b8:1e:e7:4f:51:28:
                    59:15:ee:13:e7:34:b0:d3:d4:32:0b:11:df:f0:ae:
                    6e:5b:64:93:e0:e8:88:af:1c:17:84:2e:5c:18:11:
                    70:45:c8:96:bb:ff:8a:2f:e6:c0:d9:d7:e8:45:56:
                    6b:02:12:e7:29:25:54:f8:4a:c9:22:fc:31:bf:93:
                    39:46:06:be:44:b8:c3:6f:72:44:c7:47:5d:e0:bc:
                    df:29:6a:43:bd:54:8e:97:3d:de:46:a4:78:84:c7:
                    15:8a:af:24:ce:2d:49:b0:d7:b8:3a:81:8a:88:32:
                    ca:1a:40:91:ce:b9:40:fa:52:ea:e4:77:0c:d3:bb:
                    1b:67:be:68:81:f3:1e:74:34:aa:de:2b:1e:0b:18:
                    2a:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                27:E2:A6:99:B8:4F:03:75:55:7E:DA:5D:38:A9:98:F6:A5:6D:76:47
            X509v3 Authority Key Identifier:
                keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/37F4D326C04E11EC919D5DCE5A40D577.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  154.194.128.0/17

    Signature Algorithm: sha256WithRSAEncryption
         b6:9c:b9:5b:8d:2c:24:e4:f1:98:c5:96:02:6c:08:16:a1:66:
         6c:3f:71:ab:f2:4b:07:64:64:5c:65:b1:57:13:b2:59:6f:54:
         fb:8e:45:ab:95:aa:80:9a:5c:02:c2:fd:51:fa:a7:4b:51:b7:
         3d:13:ef:d6:d6:c9:32:b5:76:4f:37:40:8c:f8:d0:d1:20:d9:
         7f:64:d3:3f:19:3b:bf:40:a0:36:1b:72:fa:a6:d7:ca:90:e3:
         8c:7f:5b:72:32:3a:95:a1:01:5b:e4:c8:f0:f7:e1:18:f4:72:
         77:1a:e5:f5:42:7d:1d:82:70:e6:e1:e0:1b:f1:00:10:8d:3e:
         7c:38:bf:76:d3:92:03:64:5b:25:1a:97:26:59:9f:95:70:cb:
         cd:8c:6e:2b:8d:b2:3d:f2:dd:de:6e:5e:30:f1:fa:98:e1:10:
         93:71:7f:b4:6b:ea:06:79:98:ae:a5:2d:02:75:65:1e:28:17:
         25:94:cb:74:82:e6:e7:4b:aa:aa:27:9d:aa:ab:f2:cc:8b:fe:
         d5:d5:3c:3c:51:33:3b:93:5d:f8:9e:b2:ae:49:93:44:19:f6:
         20:4d:67:15:3d:78:9a:ad:64:86:9e:32:ba:87:d5:79:6c:9a:
         62:e6:1e:83:a8:5e:16:94:2e:03:30:37:2d:69:91:93:2f:9b:
         0c:fa:15:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----