Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36F0628/F0CCBE7CFBA011EBAB786C49D8A014CE/515F25FC35E011EDA23382DCF1222468.roa
File:                     515F25FC35E011EDA23382DCF1222468.roa (raw, json)
Hash identifier:          hoBFWS5pw46fzoBHJqwPoZhYu8IvDi4OCLlmU9Ji3oc=
Subject key identifier:   A1:1D:F8:29:C9:A1:52:8E:17:0E:5D:48:56:E2:8B:91:F6:E7:5C:10
Certificate issuer:       /CN=F36F0628AF/serialNumber=8605D7599A0402F70EC2F258D6C16BD2E4E8D1FE
Certificate serial:       01CE
Authority key identifier: 86:05:D7:59:9A:04:02:F7:0E:C2:F2:58:D6:C1:6B:D2:E4:E8:D1:FE
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/hgXXWZoEAvcOwvJY1sFr0uTo0f4.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36F0628/F0CCBE7CFBA011EBAB786C49D8A014CE/515F25FC35E011EDA23382DCF1222468.roa
Signing time:             Fri 16 Sep 2022 16:55:07 +0000
ROA not before:           Fri 16 Sep 2022 16:55:01 +0000
ROA not after:            Fri 16 Dec 2022 16:55:01 +0000
asID:                     29465
IP address blocks:        196.44.117.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 462 (0x1ce)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36F0628AF/serialNumber=8605D7599A0402F70EC2F258D6C16BD2E4E8D1FE
        Validity
            Not Before: Sep 16 16:55:01 2022 GMT
            Not After : Dec 16 16:55:01 2022 GMT
        Subject: CN=6324aa6b-822b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:3e:b5:74:14:2a:20:7b:00:43:26:19:42:a4:
                    0b:9c:45:7b:e4:5e:1f:db:f8:4b:12:56:08:a3:27:
                    a8:ed:91:f0:b3:9c:58:9f:20:14:c8:2a:89:60:7a:
                    8d:a8:f1:a8:36:8c:91:41:09:d2:c6:14:90:0e:0e:
                    c8:ef:b6:c1:c2:87:70:ef:20:a1:ca:78:45:a7:bc:
                    33:cc:05:18:26:de:6a:df:bb:8e:b2:57:80:5a:d5:
                    af:0c:94:1f:49:fb:fd:d6:e2:fb:db:8c:e5:59:6c:
                    b9:90:28:0c:05:a8:6c:71:02:84:0a:49:76:8d:8f:
                    a3:55:51:e3:6d:49:c0:69:d2:33:eb:f5:96:48:e7:
                    ed:fc:5a:34:78:8e:1f:ec:26:ac:e3:a0:4c:fe:f5:
                    89:0d:59:99:c2:e5:7e:bb:4a:e4:12:7c:ef:43:7d:
                    64:09:aa:b0:3a:2f:58:be:2b:fd:c9:62:aa:3f:f6:
                    7d:5e:96:41:2d:65:11:ac:d4:8b:c5:75:92:82:8b:
                    5b:59:8e:7c:cf:4f:40:09:c0:be:03:d4:51:b8:d5:
                    d3:f2:a6:dc:82:55:2f:52:1f:6a:88:c7:49:e9:81:
                    29:f8:c4:62:3f:55:42:cd:9a:20:bb:57:be:65:60:
                    2b:f1:ec:ea:fa:f6:42:e0:ed:b3:fe:f0:78:f9:4c:
                    23:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A1:1D:F8:29:C9:A1:52:8E:17:0E:5D:48:56:E2:8B:91:F6:E7:5C:10
            X509v3 Authority Key Identifier:
                keyid:86:05:D7:59:9A:04:02:F7:0E:C2:F2:58:D6:C1:6B:D2:E4:E8:D1:FE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36F0628/F0CCBE7CFBA011EBAB786C49D8A014CE/hgXXWZoEAvcOwvJY1sFr0uTo0f4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/hgXXWZoEAvcOwvJY1sFr0uTo0f4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36F0628/F0CCBE7CFBA011EBAB786C49D8A014CE/515F25FC35E011EDA23382DCF1222468.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  196.44.117.0/24

    Signature Algorithm: sha256WithRSAEncryption
         32:53:ed:86:fa:b2:76:d6:45:a4:84:19:67:67:98:d1:71:6f:
         37:4c:37:72:f4:b5:0d:9d:4f:cf:08:0b:47:03:b1:b2:2c:06:
         9c:63:0c:bb:37:59:b3:26:52:82:d5:af:0c:c1:5e:d9:db:b7:
         39:00:66:88:1a:32:a1:86:a0:88:ce:78:34:14:f1:55:7e:3e:
         89:81:dd:35:4d:91:7d:43:da:e8:de:5c:9d:d6:05:74:4c:2c:
         91:95:09:b8:22:33:73:d7:ff:5e:ee:60:94:d8:00:e5:f1:33:
         8c:a6:ac:07:f3:b7:63:8d:76:60:d4:53:af:2e:d8:06:15:fc:
         79:3b:ef:81:da:c1:4c:90:80:0d:21:5a:8f:4a:19:8d:d8:8a:
         42:3b:aa:b8:65:52:0e:8e:40:54:d5:5e:d2:37:cc:43:40:de:
         2c:4d:2c:a9:45:02:4c:13:98:32:22:1c:7e:1a:8c:9d:34:11:
         65:61:d7:3e:8c:75:28:52:11:7e:a5:52:42:c7:15:dc:d8:ee:
         e5:d9:0c:9b:ee:9d:a1:dd:24:6c:bc:ca:49:47:02:bf:26:1b:
         d2:2d:9a:bc:86:77:9b:d2:37:f1:f0:d4:ed:8d:4f:e5:97:92:
         3d:2b:90:08:a9:68:68:e1:13:e2:78:f0:e1:c8:70:2a:6f:c5:
         a2:23:e2:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----