Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/B8CA63C0EA4311EC839E309AF1222468.roa
File:                     B8CA63C0EA4311EC839E309AF1222468.roa (raw, json)
Hash identifier:          ovaOVymzitkxKxpzPZOracJSjM3sJ8SF3HE0AOJeY2s=
Subject key identifier:   A3:7B:DD:CB:97:F5:91:BC:2D:6E:17:8F:72:94:EE:D9:74:82:37:E7
Certificate issuer:       /CN=F3682B65AF/serialNumber=0940E638283336DE5C8C5A40A4C23B34F3F9CA53
Certificate serial:       0895
Authority key identifier: 09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/B8CA63C0EA4311EC839E309AF1222468.roa
Signing time:             Sun 12 Jun 2022 11:35:13 +0000
ROA not before:           Sun 12 Jun 2022 11:35:09 +0000
ROA not after:            Mon 12 Jun 2023 11:35:09 +0000
asID:                     398464
IP address blocks:        154.16.254.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2197 (0x895)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3682B65AF/serialNumber=0940E638283336DE5C8C5A40A4C23B34F3F9CA53
        Validity
            Not Before: Jun 12 11:35:09 2022 GMT
            Not After : Jun 12 11:35:09 2023 GMT
        Subject: CN=62a5cf71-8689
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f2:dc:a3:27:df:4c:d0:b0:19:8a:8b:e5:64:2a:
                    3c:a2:9b:40:e5:e7:63:80:6a:87:af:c6:b8:40:61:
                    2f:c4:6b:74:5d:54:f9:aa:46:88:cb:83:fb:ea:19:
                    4f:d3:2a:8f:8a:bf:fd:12:01:2e:44:65:1b:24:9d:
                    d0:3d:78:65:62:cf:5d:f1:bb:67:41:47:98:d9:9f:
                    92:dc:d6:b9:fc:c6:dc:98:52:6a:dd:00:e4:71:86:
                    76:aa:b1:20:fc:1e:e5:6f:bc:9f:82:37:39:bd:28:
                    93:34:4a:79:6e:72:65:fa:9c:d6:57:2e:c4:71:a2:
                    28:0e:45:59:70:1c:1f:25:4c:f3:de:22:ac:7c:47:
                    1a:94:93:8c:c1:2f:1a:69:3f:eb:6c:57:6d:9f:eb:
                    f4:c2:0b:c5:41:c9:4f:4c:18:f5:d7:25:3a:59:86:
                    b0:15:7f:c1:8f:9a:6f:32:3b:a5:68:03:fb:07:2a:
                    3e:27:56:63:f8:cd:75:ea:bd:8d:91:47:cf:99:db:
                    28:5e:57:4d:e3:5f:37:3a:c6:e0:01:0c:c0:79:c9:
                    59:bd:c2:32:c3:ad:0b:8b:c9:94:a2:7b:43:3e:0a:
                    c3:60:40:25:6a:57:0e:c8:ce:23:6c:86:64:68:06:
                    62:33:48:c8:95:ed:a2:58:25:cf:69:da:be:13:ec:
                    2c:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A3:7B:DD:CB:97:F5:91:BC:2D:6E:17:8F:72:94:EE:D9:74:82:37:E7
            X509v3 Authority Key Identifier:
                keyid:09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/CUDmOCgzNt5cjFpApMI7NPP5ylM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/B8CA63C0EA4311EC839E309AF1222468.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  154.16.254.0/24

    Signature Algorithm: sha256WithRSAEncryption
         0c:28:6f:e9:a9:11:14:62:48:5d:e0:8a:b6:dd:87:dc:cb:c3:
         8b:ec:41:d9:65:99:35:c2:f2:87:36:05:03:49:66:84:d1:5c:
         81:44:44:38:b9:54:5e:9f:6d:10:29:12:a7:7a:ba:7c:18:2b:
         25:3c:bc:c0:90:0b:43:d4:11:d3:dc:d4:f0:0b:c0:e8:fa:be:
         a2:e8:3e:f5:83:55:b2:60:4a:f8:9c:a3:ca:1a:b8:b0:d3:c3:
         3e:a6:2e:0d:fd:4b:31:15:5b:24:45:b7:be:7e:6c:61:03:d5:
         68:14:d1:e7:32:3b:50:76:32:9d:b0:7d:57:38:d3:eb:a6:d8:
         99:5b:bb:40:13:e4:01:46:a7:87:f7:e0:9f:82:98:18:d1:e5:
         52:9a:01:cf:8b:5b:af:33:c8:04:6c:4f:d3:c8:6c:ca:92:eb:
         a7:61:72:52:93:63:a7:c3:d0:35:c3:0e:5c:11:ae:2b:d0:41:
         b8:dc:d8:52:79:0c:11:66:a2:af:d7:18:aa:a5:a6:6d:2d:a3:
         9e:2e:84:c7:39:a7:8f:8e:0e:0a:dc:ba:1d:ce:46:fa:08:87:
         7f:e0:25:83:f3:a1:01:2c:e6:84:3f:6b:33:4a:48:be:2f:f3:
         67:67:a4:b5:d6:06:4c:f9:8b:08:e5:cf:09:9d:26:bd:a7:cd:
         ba:fa:10:e4
-----BEGIN CERTIFICATE-----
MIIFgzCCBGugAwIBAgICCJUwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAwwKRjM2
ODJCNjVBRjExMC8GA1UEBRMoMDk0MEU2MzgyODMzMzZERTVDOEM1QTQwQTRDMjNC
MzRGM0Y5Q0E1MzAeFw0yMjA2MTIxMTM1MDlaFw0yMzA2MTIxMTM1MDlaMBgxFjAU
BgNVBAMMDTYyYTVjZjcxLTg2ODkwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQDy3KMn30zQsBmKi+VkKjyim0Dl52OAaoevxrhAYS/Ea3RdVPmqRojLg/vq
GU/TKo+Kv/0SAS5EZRskndA9eGViz13xu2dBR5jZn5Lc1rn8xtyYUmrdAORxhnaq
sSD8HuVvvJ+CNzm9KJM0SnlucmX6nNZXLsRxoigORVlwHB8lTPPeIqx8RxqUk4zB
LxppP+tsV22f6/TCC8VByU9MGPXXJTpZhrAVf8GPmm8yO6VoA/sHKj4nVmP4zXXq
vY2RR8+Z2yheV03jXzc6xuABDMB5yVm9wjLDrQuLyZSie0M+CsNgQCVqVw7IziNs
hmRoBmIzSMiV7aJYJc9p2r4T7CwRAgMBAAGjggKlMIICoTAdBgNVHQ4EFgQUo3vd
y5f1kbwtbhePcpTu2XSCN+cwHwYDVR0jBBgwFoAUCUDmOCgzNt5cjFpApMI7NPP5
ylMwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNjgyQjY1LzRFODUxRTM0REI1NTExRTg4NUIyOTk1MUY4QUVBMjI4L0NVRG1P
Q2d6TnQ1Y2pGcEFwTUk3TlBQNXlsTS5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljL0NVRG1PQ2d6TnQ1Y2pGcEFwTUk3TlBQNXlsTS5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdsGCCsGAQUFBwELBIHOMIHLMIGRBggrBgEF
BQcwC4aBhHJzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJl
cl9yZXBvc2l0b3J5L0YzNjgyQjY1LzRFODUxRTM0REI1NTExRTg4NUIyOTk1MUY4
QUVBMjI4L0I4Q0E2M0MwRUE0MzExRUM4MzlFMzA5QUYxMjIyNDY4LnJvYTA1Bggr
BgEFBQcwDYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54
bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBACaEP4wDQYJKoZIhvcNAQEL
BQADggEBAAwob+mpERRiSF3girbdh9zLw4vsQdllmTXC8oc2BQNJZoTRXIFERDi5
VF6fbRApEqd6unwYKyU8vMCQC0PUEdPc1PALwOj6vqLoPvWDVbJgSvico8oauLDT
wz6mLg39SzEVWyRFt75+bGED1WgU0ecyO1B2Mp2wfVc40+um2Jlbu0AT5AFGp4f3
4J+CmBjR5VKaAc+LW68zyARsT9PIbMqS66dhclKTY6fD0DXDDlwRrivQQbjc2FJ5
DBFmoq/XGKqlpm0to54uhMc5p4+ODgrcuh3ORvoIh3/gJYPzoQEs5oQ/azNKSL4v
82dnpLXWBkz5iwjlzwmdJr2nzbr6EOQ=
-----END CERTIFICATE-----