Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/DCE16568639A11EC81755E8A5A40D577.roa
File:                     DCE16568639A11EC81755E8A5A40D577.roa (raw, json)
Hash identifier:          mOx0YNzhBLhkhOMFdh8uc4b9pHtjB2zLgbpKUBCzczc=
Subject key identifier:   12:33:48:39:59:D0:0B:18:01:3F:4E:A0:C6:12:2F:B6:D6:1B:5B:D1
Certificate issuer:       /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial:       1416
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/DCE16568639A11EC81755E8A5A40D577.roa
Signing time:             Thu 23 Dec 2021 02:48:52 +0000
ROA not before:           Thu 23 Dec 2021 02:48:49 +0000
ROA not after:            Fri 30 Dec 2022 02:48:49 +0000
asID:                     328608
IP address blocks:        154.212.32.0/19 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 5142 (0x1416)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
        Validity
            Not Before: Dec 23 02:48:49 2021 GMT
            Not After : Dec 30 02:48:49 2022 GMT
        Subject: CN=61c3e394-2bbc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:36:07:81:5d:e2:44:9e:02:44:87:f3:52:7a:
                    e1:42:d6:20:1a:4c:86:8c:12:66:6a:c4:88:7f:f2:
                    74:0a:46:5e:ee:ed:9d:7d:de:76:82:cd:89:40:44:
                    30:c5:33:08:83:d7:da:b3:d0:8d:e2:9e:3c:18:0e:
                    0a:60:fa:57:0e:d8:bd:66:0f:99:f5:b6:bf:4d:65:
                    f1:4c:ab:67:9a:b1:94:86:ec:c8:4c:86:6e:80:fd:
                    5f:b9:71:5b:1f:fb:9f:d0:74:ec:8e:52:70:37:ea:
                    ac:f1:75:35:a6:93:e2:7c:dc:a0:0b:a2:2f:a2:75:
                    b9:ce:68:cd:a3:99:d2:e5:bb:29:71:cf:71:d1:bd:
                    c8:58:11:7a:80:1d:02:f6:b1:78:9a:7a:b1:78:80:
                    bf:14:3a:3f:07:7b:c4:b0:1e:c0:74:76:7a:4f:b1:
                    3b:2a:e9:36:29:7c:7d:9e:70:35:15:81:09:16:33:
                    54:f3:85:d2:bf:25:17:6b:5d:31:81:9d:0c:c5:80:
                    34:d0:80:f3:8e:fc:39:40:4f:01:7c:e0:9a:54:78:
                    00:a1:cb:1d:81:3f:aa:87:cb:9a:97:86:95:70:40:
                    b7:86:bc:42:f4:8b:af:1a:f8:83:b4:46:23:fe:f0:
                    15:d9:13:2a:3e:58:e0:bf:5f:d5:54:7b:40:fb:fc:
                    73:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                12:33:48:39:59:D0:0B:18:01:3F:4E:A0:C6:12:2F:B6:D6:1B:5B:D1
            X509v3 Authority Key Identifier:
                keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/DCE16568639A11EC81755E8A5A40D577.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  154.212.32.0/19

    Signature Algorithm: sha256WithRSAEncryption
         a8:f1:90:8d:bb:27:8b:6a:b6:f7:f4:10:26:9d:44:15:82:7c:
         c0:9a:9b:ed:8e:bc:83:d0:47:86:16:da:b6:a1:25:cc:d4:c3:
         f9:bb:cd:17:6c:26:92:f9:38:9a:d5:4e:93:0c:17:0d:70:a1:
         ab:03:8f:26:56:82:7a:42:5e:16:a6:38:f6:29:9b:79:60:bf:
         bd:03:3b:10:93:16:40:a6:82:95:54:67:14:6d:e3:7a:98:2a:
         7f:f4:1f:36:73:a9:21:98:04:24:2f:d5:60:77:1f:9d:99:b6:
         b9:e6:f0:7a:70:49:55:9f:a8:cc:a5:cc:7c:0f:19:bb:9e:9b:
         d9:b9:e6:b4:89:1d:dc:78:93:4a:38:97:b2:0e:ec:29:4f:30:
         59:74:fb:d1:5a:87:2e:be:11:37:d4:c0:e6:6a:40:25:8a:c5:
         38:a7:85:35:6a:36:08:44:8f:12:b6:f8:99:c5:4f:0b:52:15:
         2d:2d:a1:78:18:21:9c:de:4a:12:f3:a0:07:b6:02:02:d4:d0:
         ee:02:29:77:78:45:e2:12:a5:c7:94:39:fa:da:7d:10:60:3b:
         69:f7:07:61:f5:b0:c0:11:6a:56:0b:fc:54:23:9f:f1:1c:31:
         80:7d:78:2c:e6:de:33:6b:1b:8e:d8:36:ff:81:09:00:be:5e:
         fd:25:70:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----