Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/4E277B06F85411ECA4E15ACBF1222468.roa
File:                     4E277B06F85411ECA4E15ACBF1222468.roa (raw, json)
Hash identifier:          t1oyVp2hKxleIaFtlwGjAizccSJ801L2nXojycAQsZo=
Subject key identifier:   51:35:52:5B:7B:3D:86:CD:15:B8:EF:BC:1F:02:C7:1B:83:69:C3:56
Certificate issuer:       /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial:       1711
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/4E277B06F85411ECA4E15ACBF1222468.roa
Signing time:             Thu 30 Jun 2022 09:09:12 +0000
ROA not before:           Thu 30 Jun 2022 09:09:06 +0000
ROA not after:            Fri 30 Dec 2022 09:09:06 +0000
asID:                     328608
IP address blocks:        154.93.32.0/19 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 5905 (0x1711)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
        Validity
            Not Before: Jun 30 09:09:06 2022 GMT
            Not After : Dec 30 09:09:06 2022 GMT
        Subject: CN=62bd6837-1eb4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:5d:c7:80:ee:5f:cb:71:ce:91:28:d5:0a:30:
                    74:37:92:66:a3:41:f8:80:9e:f0:cd:6b:b6:e6:a3:
                    94:44:a4:92:80:76:64:2d:9d:cb:f1:eb:32:02:e5:
                    84:c7:aa:24:dc:f0:fc:f8:ec:74:fc:36:16:aa:e3:
                    83:35:43:0f:27:78:31:60:d0:3e:61:b4:7e:be:66:
                    87:17:82:51:bf:ce:b2:3c:ae:9e:3b:39:25:a8:2b:
                    40:8d:eb:5f:49:7a:9b:5d:73:be:32:53:c5:f4:c7:
                    08:e4:01:9d:b3:bb:fc:63:fa:db:47:af:c4:8d:61:
                    0c:c4:51:55:f8:29:88:28:80:a3:33:cb:d9:85:d7:
                    32:6d:45:d6:58:de:30:46:21:69:a2:6d:fe:d0:ac:
                    11:d1:d1:60:cd:c4:ed:bd:25:19:8b:44:1d:63:ac:
                    46:19:4e:da:c8:1c:dd:09:d2:b9:89:46:21:b4:df:
                    59:8d:aa:57:fe:0a:1d:3e:0d:fe:3d:a2:63:99:d1:
                    69:19:f2:8d:b6:0e:04:bb:24:7a:42:97:a2:ea:59:
                    f6:f6:13:9e:c7:01:f5:93:4d:49:d6:10:e5:7c:23:
                    c0:88:38:5d:bb:b9:85:0d:68:71:88:93:d6:9d:0e:
                    4c:84:7d:96:d7:8c:b0:de:45:61:64:d9:d9:11:20:
                    c0:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                51:35:52:5B:7B:3D:86:CD:15:B8:EF:BC:1F:02:C7:1B:83:69:C3:56
            X509v3 Authority Key Identifier:
                keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/4E277B06F85411ECA4E15ACBF1222468.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  154.93.32.0/19

    Signature Algorithm: sha256WithRSAEncryption
         29:ad:d9:c1:2b:69:e0:5d:04:a5:ee:b9:fc:5e:9a:ad:0e:81:
         8f:27:f2:c2:88:25:66:04:83:6f:9a:81:af:dd:4a:1f:32:9e:
         d2:45:2d:33:b6:5b:ac:86:77:bd:d7:96:98:2d:bd:6d:9d:36:
         04:6c:c3:0a:63:cf:e8:02:66:b6:e3:75:52:6d:2b:49:01:28:
         14:47:87:09:13:6b:bd:b0:72:38:64:23:22:cd:ae:01:8f:42:
         70:7b:cc:a9:ea:55:e9:2c:c6:01:31:4f:a2:8d:53:ea:1f:24:
         59:05:41:47:0a:f7:0d:3e:17:9d:32:44:25:00:41:8d:3d:cf:
         4f:2f:2c:09:10:8b:e0:9f:d4:24:06:f1:d8:6f:2a:d6:69:3b:
         40:9e:63:dc:91:8e:a3:e7:e1:af:06:e2:b9:f5:4a:39:dc:7a:
         2b:4f:80:df:19:0b:34:34:09:99:0f:3a:d1:a7:08:c0:76:0a:
         21:09:69:de:39:cd:7a:79:7f:35:61:e9:7b:b7:df:6c:78:7d:
         d9:9d:b7:40:34:0c:08:70:5d:6b:52:0c:16:d3:92:d2:53:aa:
         c2:e4:17:10:2b:a1:e7:2f:8a:0e:e6:6a:c5:dd:76:65:0e:66:
         96:d8:0e:0f:7a:9f:a9:23:7a:46:ac:95:de:cc:04:1e:53:98:
         e8:a5:ac:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----