Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/0D3BC6F4964F11ECA5B05ECC5A40D577.roa
File:                     0D3BC6F4964F11ECA5B05ECC5A40D577.roa (raw, json)
Hash identifier:          /JmSlu5spLYVXj1kip93SVwKw4A5zqZs/V1pFyC05cA=
Subject key identifier:   47:A2:6B:D1:59:4A:74:67:C3:A8:4A:5B:DC:98:59:F4:1C:0B:CC:5F
Certificate issuer:       /CN=F36C58D6AF/serialNumber=48A2F2C4AA4AEA39BE46BFE5F99C92629BBED8FC
Certificate serial:       05EF
Authority key identifier: 48:A2:F2:C4:AA:4A:EA:39:BE:46:BF:E5:F9:9C:92:62:9B:BE:D8:FC
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/0D3BC6F4964F11ECA5B05ECC5A40D577.roa
Signing time:             Fri 25 Feb 2022 15:24:41 +0000
ROA not before:           Fri 25 Feb 2022 15:24:38 +0000
ROA not after:            Sat 25 Feb 2023 15:24:38 +0000
asID:                     209453
IP address blocks:        2c0f:ee78:8008::/48 maxlen: 48

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1519 (0x5ef)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36C58D6AF/serialNumber=48A2F2C4AA4AEA39BE46BFE5F99C92629BBED8FC
        Validity
            Not Before: Feb 25 15:24:38 2022 GMT
            Not After : Feb 25 15:24:38 2023 GMT
        Subject: CN=6218f4b9-77a3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:f2:3a:a5:dd:83:e0:cf:6d:28:dd:cf:06:b1:
                    19:37:35:09:5b:d2:c1:6e:0d:47:bb:77:e5:f9:36:
                    17:18:72:07:99:58:99:a1:5c:aa:26:c3:76:e9:4a:
                    b0:b4:e1:7e:ff:bd:cf:62:76:06:ed:39:aa:82:a0:
                    bb:e4:e3:08:fc:f0:18:cb:8e:5d:2d:97:c5:d4:3b:
                    42:f0:10:7d:6d:38:14:50:bb:7a:53:94:7c:d1:83:
                    d8:8c:b1:2b:00:b9:d8:9b:25:f4:a5:de:8f:2c:cb:
                    27:5e:a3:f8:fa:a3:e6:4b:97:99:c9:c6:bd:55:60:
                    0a:9a:7f:02:76:ad:29:79:38:1f:b6:fe:3a:24:7f:
                    0e:30:6c:9e:52:05:e8:84:21:1d:a0:c6:26:dd:11:
                    f8:e1:8d:f2:8b:32:e8:8f:bd:2a:4c:bc:86:45:fe:
                    54:9f:60:fc:cf:e6:4e:d7:16:bc:9e:cf:16:53:3d:
                    09:16:f5:40:2f:54:dc:95:07:87:1b:08:86:f6:0d:
                    72:df:43:81:2a:ab:77:2c:b1:5f:4b:17:f7:41:8f:
                    06:29:6f:96:9f:7d:32:6d:2d:01:11:b6:e8:ac:c2:
                    10:07:5f:ae:4d:a6:7f:32:a6:9c:3d:78:bc:92:eb:
                    fe:de:f0:f1:16:09:70:c3:54:e7:93:a7:a5:26:4f:
                    64:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                47:A2:6B:D1:59:4A:74:67:C3:A8:4A:5B:DC:98:59:F4:1C:0B:CC:5F
            X509v3 Authority Key Identifier:
                keyid:48:A2:F2:C4:AA:4A:EA:39:BE:46:BF:E5:F9:9C:92:62:9B:BE:D8:FC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/0D3BC6F4964F11ECA5B05ECC5A40D577.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  2c0f:ee78:8008::/48

    Signature Algorithm: sha256WithRSAEncryption
         07:b7:27:b6:9e:4a:a2:6b:4f:95:a7:30:35:13:b8:99:3f:05:
         b0:c4:20:6f:91:bc:75:4b:07:f1:2a:f2:43:09:05:ab:07:41:
         5e:9f:76:ab:e5:bf:06:c6:b2:e9:53:33:6a:d7:49:ae:66:a3:
         0c:5b:92:4e:07:66:ef:90:80:62:c3:16:9d:fd:aa:8d:4b:fa:
         4f:52:9b:a6:b5:96:9a:09:42:3a:33:94:81:c8:db:33:e8:2a:
         1d:1d:a4:75:f1:6b:7f:b5:8c:af:b1:04:0c:00:3f:0e:f9:84:
         74:9e:87:af:fe:46:ce:34:8b:45:7e:a0:10:a1:da:9b:c6:34:
         b2:6b:50:aa:c0:17:2c:b7:75:9d:0b:82:d0:54:bd:90:21:08:
         ac:68:38:79:bc:39:0a:ee:15:e4:c9:3f:8b:93:49:ad:58:84:
         c7:6e:55:26:79:91:e9:62:10:18:f1:ba:1f:64:2f:90:0b:7b:
         a5:1a:c5:00:d3:f2:10:82:fc:3f:1d:ec:fd:d5:0b:6a:4a:39:
         f5:f4:ba:fe:c0:f2:d1:25:80:93:dc:cf:ad:27:0c:78:33:74:
         50:fa:b6:c2:b2:94:41:91:f6:c2:cc:d2:01:16:49:c4:b1:73:
         ec:23:ff:63:c5:fb:87:b9:ff:e6:1d:71:54:1c:e0:81:21:08:
         8e:3a:6a:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----