Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/BAB4EFF0F9D711EB801D9303D8A014CE.roa
File:                     BAB4EFF0F9D711EB801D9303D8A014CE.roa (raw, json)
Hash identifier:          c/uBSXv+7VwPR1n54ZZxCklXDBHDaJ+OAF6XA4zJd68=
Subject key identifier:   30:A4:2B:CE:62:43:94:EB:39:7B:DD:E6:42:35:38:73:21:F2:E8:E1
Certificate issuer:       /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial:       08A9
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/BAB4EFF0F9D711EB801D9303D8A014CE.roa
Signing time:             Tue 10 Aug 2021 12:38:10 +0000
ROA not before:           Tue 10 Aug 2021 12:38:05 +0000
ROA not after:            Mon 10 Oct 2022 12:38:05 +0000
asID:                     9009
IP address blocks:        154.95.0.0/23 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2217 (0x8a9)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
        Validity
            Not Before: Aug 10 12:38:05 2021 GMT
            Not After : Oct 10 12:38:05 2022 GMT
        Subject: CN=61127332-105a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:2a:5d:1c:30:4a:d9:d8:d0:4d:f2:c8:3f:3f:
                    d8:6c:51:93:12:ad:96:b6:8a:eb:b3:63:f3:c9:fe:
                    f8:dd:c1:8a:4e:16:b9:6f:17:c3:a1:01:13:d6:98:
                    e7:ea:12:03:07:f3:98:40:45:9b:44:2a:51:74:87:
                    be:fa:75:b2:71:65:f4:73:25:1c:76:28:10:9f:73:
                    a7:af:a3:92:34:fc:89:e2:de:c3:ea:96:b7:7c:05:
                    77:7e:4a:90:a5:89:23:8c:18:64:29:ff:fc:8a:51:
                    4f:ff:de:4d:5b:6a:2e:bc:91:0d:66:7c:e2:5f:e3:
                    33:5a:fe:a4:80:0e:c2:77:a1:9b:1e:08:a6:2b:bf:
                    e7:d2:53:b4:ac:0d:3a:83:c2:c5:df:3b:40:f2:e3:
                    51:9f:80:a7:64:3e:f8:9f:d1:46:b8:f1:d7:e6:11:
                    c9:2f:0a:2a:78:d3:20:61:d0:69:99:50:2b:ae:5d:
                    79:79:56:b5:d0:81:83:1f:64:eb:db:bb:fc:2a:68:
                    8e:ce:36:b0:ad:40:7b:d8:dd:a2:8d:99:99:47:d3:
                    24:b9:e8:a3:70:2d:87:61:69:14:47:9c:d5:4b:ef:
                    d8:93:67:8c:2e:f0:65:be:e1:ec:72:fd:a1:19:71:
                    61:2f:24:37:2c:f5:37:80:01:4a:e3:a3:d6:d4:2f:
                    0c:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                30:A4:2B:CE:62:43:94:EB:39:7B:DD:E6:42:35:38:73:21:F2:E8:E1
            X509v3 Authority Key Identifier:
                keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/BAB4EFF0F9D711EB801D9303D8A014CE.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  154.95.0.0/23

    Signature Algorithm: sha256WithRSAEncryption
         0f:0a:09:50:5e:9c:f4:fe:3b:11:e5:f3:79:eb:b5:a7:e7:0a:
         8c:5b:ef:4b:4b:02:83:b1:d3:cd:a8:e6:89:78:0c:23:ed:03:
         c9:32:53:01:33:60:76:f9:db:d6:9a:f6:bf:7f:e4:1e:57:1e:
         42:90:c7:16:75:56:68:7f:45:10:00:02:e7:d6:2d:99:ea:da:
         49:96:aa:5f:6a:df:c9:e9:dc:0f:48:0e:43:9e:35:2a:c8:f4:
         0f:91:9e:d9:9d:5a:7b:6b:d8:b3:74:2a:bd:e7:2f:ba:60:a6:
         8e:60:e6:9c:fd:76:54:38:97:67:11:8e:78:5b:77:02:75:e7:
         b8:6c:96:a3:62:16:61:60:84:6f:bc:e6:4e:86:8d:30:a2:64:
         ec:72:40:b4:bf:8d:96:7a:fa:e1:4c:db:32:16:89:6f:46:bf:
         2e:4a:90:e9:74:df:df:30:d3:16:4f:1f:27:03:80:64:c9:db:
         19:de:27:eb:73:82:e2:de:c9:12:7c:e8:7a:e6:42:bd:21:3f:
         ed:51:9d:1e:91:01:55:b6:c1:da:28:68:6f:d1:0f:41:66:96:
         f9:4b:ab:1f:d2:0c:48:b0:ee:6b:fd:d9:f2:58:f4:28:e5:72:
         99:11:12:c8:e6:ba:1d:39:d5:93:03:44:d0:b4:db:34:73:32:
         be:5b:79:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----