Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/BD161992D5B311EBB093E56FF8AEA228.roa
File:                     BD161992D5B311EBB093E56FF8AEA228.roa (raw, json)
Hash identifier:          638ukReYVeZCZgbvsCB7MHnJOWHdWxAeBPVbgiQ1bzY=
Subject key identifier:   12:9A:4C:B4:D3:40:51:96:0E:9C:29:70:58:95:B0:D8:74:D6:18:F3
Certificate issuer:       /CN=F3682B65AF/serialNumber=0940E638283336DE5C8C5A40A4C23B34F3F9CA53
Certificate serial:       05CF
Authority key identifier: 09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/BD161992D5B311EBB093E56FF8AEA228.roa
Signing time:             Fri 25 Jun 2021 12:49:11 +0000
ROA not before:           Fri 25 Jun 2021 12:49:07 +0000
ROA not after:            Sun 25 Jun 2023 12:49:07 +0000
asID:                     61317
IP address blocks:        2c0f:f738:3802::/48 maxlen: 48

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1487 (0x5cf)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3682B65AF/serialNumber=0940E638283336DE5C8C5A40A4C23B34F3F9CA53
        Validity
            Not Before: Jun 25 12:49:07 2021 GMT
            Not After : Jun 25 12:49:07 2023 GMT
        Subject: CN=60d5d0c7-d35e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:07:55:cd:95:53:79:c6:b3:3c:8e:8f:77:ba:
                    56:fa:ae:65:af:38:31:88:9d:d2:21:75:ef:d8:03:
                    b5:3e:d8:a7:e2:b1:4f:f1:26:7d:7f:ee:e0:a7:ba:
                    59:22:aa:b2:7c:4f:bf:ef:44:02:76:cc:83:23:d9:
                    c4:ee:38:00:c8:6c:40:b9:d3:33:fd:b0:72:ea:74:
                    87:04:fd:13:38:f0:a7:fa:ed:f8:40:5b:49:5d:53:
                    3c:10:de:b6:99:4f:1c:25:d7:9a:02:e8:9f:94:18:
                    81:d5:06:83:92:b6:82:bb:65:d2:6a:68:28:0b:e3:
                    6c:84:84:3a:4b:c9:7e:23:5a:38:b5:33:b3:a9:9a:
                    18:63:f3:fa:cc:6f:e4:e8:32:f1:57:99:ff:77:fa:
                    a0:43:9d:4b:f2:2f:9f:4b:75:20:0a:69:03:5f:c2:
                    2e:c8:5b:82:a9:46:9a:18:a2:61:66:7f:15:26:81:
                    d8:86:3a:e2:10:83:95:58:58:fe:8a:b8:fb:2a:a5:
                    81:49:75:1a:17:ee:71:74:69:84:47:bf:b3:0c:61:
                    dd:6c:11:bb:42:cf:a3:49:65:ce:1e:d8:a4:19:d1:
                    3a:31:63:ff:bb:88:c4:4b:0d:3d:1b:0b:a7:c1:b7:
                    e1:61:dc:bc:02:d0:a3:f6:a8:ad:05:c7:f7:22:28:
                    c9:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                12:9A:4C:B4:D3:40:51:96:0E:9C:29:70:58:95:B0:D8:74:D6:18:F3
            X509v3 Authority Key Identifier:
                keyid:09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/CUDmOCgzNt5cjFpApMI7NPP5ylM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/BD161992D5B311EBB093E56FF8AEA228.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  2c0f:f738:3802::/48

    Signature Algorithm: sha256WithRSAEncryption
         84:9d:a4:c4:d1:04:b4:d9:62:dd:14:20:67:fd:6d:8c:de:cc:
         38:eb:fc:05:a8:94:ba:61:43:3f:3a:0e:99:bd:b0:90:c2:c9:
         f8:f4:69:ba:b2:cf:62:ea:77:f6:1a:79:f6:64:4d:88:7d:7f:
         e3:27:e5:95:fa:4b:03:0f:d0:6b:f5:4d:78:e7:46:dc:90:1f:
         f0:2a:bd:63:75:90:3d:cf:23:6a:88:3d:0f:50:5a:fa:2a:8f:
         92:e6:bf:ba:33:81:f8:ba:f8:ac:89:ff:9f:2e:16:d8:bc:de:
         bc:c3:ee:ed:eb:19:76:b9:cc:3d:2a:76:a8:80:e4:6c:2c:c1:
         48:fc:c0:c5:c0:b5:ec:65:c5:1c:25:b8:c9:ef:4d:95:80:46:
         28:62:68:f7:f0:2f:f4:2a:db:f4:36:ac:0a:26:ea:0d:0e:ac:
         9d:b7:7c:1b:d0:f2:1d:55:39:f1:4f:01:32:44:b7:84:56:0d:
         9c:cb:9a:40:4d:46:a0:ff:54:a4:c5:c8:71:9e:0e:2b:07:4d:
         c4:e0:6b:c9:d9:ec:a1:e6:e1:38:8b:95:cb:5d:4a:03:f7:17:
         ba:60:e2:c5:61:83:a1:d4:ba:05:21:03:6a:7f:81:71:8b:dc:
         9f:c9:41:4d:9e:11:5d:ad:46:01:47:3c:25:cc:68:16:27:df:
         12:87:8f:8b
-----BEGIN CERTIFICATE-----
MIIFhjCCBG6gAwIBAgICBc8wDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
ODJCNjVBRjExMC8GA1UEBRMoMDk0MEU2MzgyODMzMzZERTVDOEM1QTQwQTRDMjNC
MzRGM0Y5Q0E1MzAeFw0yMTA2MjUxMjQ5MDdaFw0yMzA2MjUxMjQ5MDdaMBgxFjAU
BgNVBAMTDTYwZDVkMGM3LWQzNWUwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQDBB1XNlVN5xrM8jo93ulb6rmWvODGIndIhde/YA7U+2KfisU/xJn1/7uCn
ulkiqrJ8T7/vRAJ2zIMj2cTuOADIbEC50zP9sHLqdIcE/RM48Kf67fhAW0ldUzwQ
3raZTxwl15oC6J+UGIHVBoOStoK7ZdJqaCgL42yEhDpLyX4jWji1M7Opmhhj8/rM
b+ToMvFXmf93+qBDnUvyL59LdSAKaQNfwi7IW4KpRpoYomFmfxUmgdiGOuIQg5VY
WP6KuPsqpYFJdRoX7nF0aYRHv7MMYd1sEbtCz6NJZc4e2KQZ0ToxY/+7iMRLDT0b
C6fBt+Fh3LwC0KP2qK0Fx/ciKMmtAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUEppM
tNNAUZYOnClwWJWw2HTWGPMwHwYDVR0jBBgwFoAUCUDmOCgzNt5cjFpApMI7NPP5
ylMwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNjgyQjY1LzRFODUxRTM0REI1NTExRTg4NUIyOTk1MUY4QUVBMjI4L0NVRG1P
Q2d6TnQ1Y2pGcEFwTUk3TlBQNXlsTS5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljL0NVRG1PQ2d6TnQ1Y2pGcEFwTUk3TlBQNXlsTS5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdsGCCsGAQUFBwELBIHOMIHLMIGRBggrBgEF
BQcwC4aBhHJzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJl
cl9yZXBvc2l0b3J5L0YzNjgyQjY1LzRFODUxRTM0REI1NTExRTg4NUIyOTk1MUY4
QUVBMjI4L0JEMTYxOTkyRDVCMzExRUJCMDkzRTU2RkY4QUVBMjI4LnJvYTA1Bggr
BgEFBQcwDYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54
bWwwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgACMAkDBwAsD/c4OAIwDQYJKoZIhvcN
AQELBQADggEBAISdpMTRBLTZYt0UIGf9bYzezDjr/AWolLphQz86Dpm9sJDCyfj0
abqyz2Lqd/YaefZkTYh9f+Mn5ZX6SwMP0Gv1TXjnRtyQH/AqvWN1kD3PI2qIPQ9Q
Wvoqj5Lmv7ozgfi6+KyJ/58uFti83rzD7u3rGXa5zD0qdqiA5GwswUj8wMXAtexl
xRwluMnvTZWARihiaPfwL/Qq2/Q2rAom6g0OrJ23fBvQ8h1VOfFPATJEt4RWDZzL
mkBNRqD/VKTFyHGeDisHTcTga8nZ7KHm4TiLlctdSgP3F7pg4sVhg6HUugUhA2p/
gXGL3J/JQU2eEV2tRgFHPCXMaBYn3xKHj4s=
-----END CERTIFICATE-----