Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/08E6F0DE7FA911E99EA87072F8AEA228.roa
File:                     08E6F0DE7FA911E99EA87072F8AEA228.roa (raw, json)
Hash identifier:          z3NnW4f0r1NAoDahJ3overj/O+SviNRyM6SwZPbKaag=
Subject key identifier:   07:45:3E:43:67:83:5F:9F:4F:86:BD:B0:DD:25:60:E5:56:27:A1:A0
Certificate issuer:       /CN=F3682B65AF/serialNumber=0940E638283336DE5C8C5A40A4C23B34F3F9CA53
Certificate serial:       0125
Authority key identifier: 09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/08E6F0DE7FA911E99EA87072F8AEA228.roa
Signing time:             Sun 26 May 2019 11:25:59 +0000
ROA not before:           Sun 26 May 2019 11:25:54 +0000
ROA not after:            Wed 25 May 2022 11:25:54 +0000
asID:                     40676
IP address blocks:        154.16.137.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 293 (0x125)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3682B65AF/serialNumber=0940E638283336DE5C8C5A40A4C23B34F3F9CA53
        Validity
            Not Before: May 26 11:25:54 2019 GMT
            Not After : May 25 11:25:54 2022 GMT
        Subject: CN=5cea77c7-4b0a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:01:6e:2e:6e:ce:d1:df:26:73:ca:3b:42:ad:
                    5d:42:8b:68:fe:92:13:e4:cf:96:f2:ab:98:af:cd:
                    b1:da:93:ac:7f:9c:6c:15:4c:5f:86:8f:c6:50:ef:
                    6f:36:56:2e:34:ec:a5:62:91:52:81:2b:18:e8:4f:
                    a1:ea:4d:c6:b7:5e:3a:7a:65:bd:ed:5d:ea:2b:ba:
                    c9:c0:55:72:00:c8:20:98:17:71:83:72:8a:3f:d4:
                    29:8e:68:a2:68:2b:3c:21:1d:6c:94:54:af:6f:7b:
                    c3:13:1c:a8:20:1a:ac:66:6a:8b:0b:4a:5d:de:76:
                    a2:44:a9:0e:5f:a5:3f:4f:b2:e2:28:35:d1:64:7e:
                    70:88:bc:e1:1a:19:d9:ed:18:f8:e6:f9:7f:3f:a3:
                    db:1b:d1:2f:b6:2b:37:85:81:54:66:7e:1a:15:b1:
                    23:91:02:a9:6c:f9:6a:ce:3f:12:fe:3e:e1:46:8d:
                    9f:63:3e:f4:d4:07:6b:ef:7d:3a:ad:b2:1a:65:4c:
                    55:44:90:ee:82:3d:96:51:46:68:09:55:ae:a3:9a:
                    3b:03:e9:13:9e:e0:e2:70:8f:46:c1:4c:9f:66:51:
                    f6:ee:e6:0c:7c:ef:33:b6:a8:7a:b1:7c:e4:e1:83:
                    5e:73:a4:1d:d0:17:43:9f:c8:b7:03:38:85:39:a6:
                    51:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                07:45:3E:43:67:83:5F:9F:4F:86:BD:B0:DD:25:60:E5:56:27:A1:A0
            X509v3 Authority Key Identifier:
                keyid:09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/CUDmOCgzNt5cjFpApMI7NPP5ylM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/08E6F0DE7FA911E99EA87072F8AEA228.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  154.16.137.0/24

    Signature Algorithm: sha256WithRSAEncryption
         5c:98:92:60:9e:a8:9a:39:e4:c2:93:a6:8a:02:5c:5a:65:22:
         46:47:4f:e2:0c:49:83:e2:81:21:2e:5b:ac:23:70:b4:e8:70:
         d6:32:d5:f5:6c:2c:4e:5d:0b:cd:ca:90:5e:de:24:ec:2f:d0:
         d4:e8:0d:1a:d1:d3:40:e7:2b:3e:59:af:80:ea:b8:4e:b7:14:
         ef:0f:1f:26:cf:c9:3f:5b:48:b2:52:41:ed:a7:1b:7f:cb:63:
         21:59:58:f6:78:36:91:4c:2a:0a:ef:15:9b:89:19:16:db:7b:
         3d:e0:06:5a:02:ef:8b:d9:48:6b:36:5e:6c:d8:6d:ec:89:f8:
         ca:4b:cb:12:71:f9:a8:ae:33:51:9b:46:ec:9b:00:b9:60:0b:
         ae:ba:40:c7:4f:94:b9:ca:0d:82:6a:86:7d:bc:ac:85:c2:48:
         32:59:21:99:3c:e9:9c:7e:6e:d5:30:cd:77:59:f3:61:e0:38:
         e2:0a:10:17:35:03:66:02:5c:c5:bd:29:3e:e0:38:ac:3b:44:
         61:84:55:16:e2:7d:eb:3a:2e:e8:d1:ee:c7:e1:ce:1f:8f:38:
         0c:f2:26:15:7b:f3:b1:c6:c6:a6:e7:4c:04:0d:ce:9e:ec:de:
         6a:3c:49:0c:1c:c4:15:d7:d4:41:37:c7:aa:b6:4a:85:50:e0:
         7d:0b:e3:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----