Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/0E16CA62738411EC8CA591B65A40D577.roa
File:                     0E16CA62738411EC8CA591B65A40D577.roa (raw, json)
Hash identifier:          vzwWtkF+QbLYjc+UnMOIByZn7BMuMqFr+cl/KDrMsfY=
Subject key identifier:   CF:8E:89:EF:48:FA:8C:5A:43:EC:00:B2:D9:0D:FB:9F:80:1A:79:74
Certificate issuer:       /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial:       115F
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access:    rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/0E16CA62738411EC8CA591B65A40D577.roa
Signing time:             Wed 12 Jan 2022 08:45:55 +0000
ROA not before:           Wed 12 Jan 2022 08:45:50 +0000
ROA not after:            Fri 30 Dec 2022 08:45:50 +0000
asID:                     328608
IP address blocks:        45.195.77.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4447 (0x115f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
        Validity
            Not Before: Jan 12 08:45:50 2022 GMT
            Not After : Dec 30 08:45:50 2022 GMT
        Subject: CN=61de9543-0a30
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:fa:93:8e:01:e6:d8:65:67:5f:d5:69:86:ca:
                    ca:7f:81:7b:b9:2b:42:89:9b:b2:2f:95:90:78:8e:
                    22:42:fd:bf:18:dd:b1:e6:21:67:c0:56:e1:44:19:
                    3c:ec:bb:27:e9:8c:eb:10:ff:2d:3a:71:9c:29:d5:
                    34:45:b6:17:5e:36:c6:78:12:03:f0:c4:74:f7:79:
                    76:b4:a4:f8:d8:86:f9:56:2e:7c:43:33:53:40:54:
                    63:0f:73:84:52:ce:46:a7:ac:cf:8f:82:20:13:f3:
                    71:ce:5b:d9:5e:45:26:e7:c5:09:a9:da:7e:96:e7:
                    25:79:89:c4:f9:f7:27:2c:4b:49:a1:91:f3:e9:42:
                    fd:8f:fc:1a:da:c9:5c:ab:f1:da:8c:1a:d7:0e:c2:
                    10:d6:35:ee:9f:b6:2f:6b:42:f2:4f:15:f4:ee:5f:
                    f6:ec:f4:6d:fb:b6:bb:97:1c:b2:8f:08:98:59:81:
                    2d:43:65:6c:25:db:ca:1b:67:01:c3:4f:85:1e:55:
                    2a:75:0f:6d:7e:67:b6:00:b3:ff:3f:86:6b:71:ea:
                    77:72:33:32:63:ee:95:d9:0d:cc:5e:e9:75:52:b7:
                    fc:65:63:c8:d5:1f:e3:3e:bf:67:b2:14:ca:51:6f:
                    05:ae:45:55:13:77:2c:e4:5e:d5:c4:e4:2a:08:6b:
                    f1:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CF:8E:89:EF:48:FA:8C:5A:43:EC:00:B2:D9:0D:FB:9F:80:1A:79:74
            X509v3 Authority Key Identifier:
                keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/0E16CA62738411EC8CA591B65A40D577.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.195.77.0/24

    Signature Algorithm: sha256WithRSAEncryption
         82:f2:91:62:e3:f7:64:62:8d:9c:44:b8:9b:8f:b6:df:5a:4c:
         2d:24:10:97:37:d7:92:32:30:d5:d5:ba:de:57:08:f3:59:08:
         71:e9:90:11:47:c6:ce:f3:51:76:3d:a9:a3:0d:48:26:12:22:
         fb:e6:bc:10:86:77:5f:53:df:b2:dd:1f:e4:30:05:ca:f2:b1:
         e2:2b:86:25:8b:47:e6:51:0a:57:6d:7b:7e:9a:c6:0a:df:07:
         2d:ae:08:e5:df:4b:c2:14:63:d3:01:a5:13:b9:1a:9c:ed:92:
         5b:34:79:b5:d3:88:b6:6c:e9:46:e5:9e:07:37:75:0d:05:fb:
         48:b2:ed:bb:93:86:a0:8d:16:f6:c8:f0:c8:8f:2e:46:16:c7:
         db:3b:a0:3a:9f:c5:9c:81:26:cd:f9:2e:23:9d:43:ff:44:7a:
         c0:21:f2:b9:f7:84:23:5b:c9:75:76:8b:90:48:bf:37:c7:1c:
         c1:a4:bd:6e:70:8a:9d:09:8d:87:2f:9b:9e:5b:6e:f9:29:65:
         ed:f2:62:bb:2c:96:4d:a7:32:0f:66:68:f3:2b:cd:8d:4c:62:
         ec:53:86:cd:94:86:8c:a9:08:96:d6:ad:f3:08:f9:c4:b8:40:
         c5:e6:9d:30:b3:eb:ae:65:64:94:8a:12:83:72:21:27:28:dd:
         9f:83:95:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----