Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/1DD11D467F8911E9BE98825BF8AEA228.roa
File:                     1DD11D467F8911E9BE98825BF8AEA228.roa (raw, json)
Hash identifier:          3dgeigeFmNau8R50dUPsiA3aolkebAFbUGzxVE0NoOY=
Subject key identifier:   6B:DB:43:A2:35:1A:69:79:AD:04:FE:70:93:36:6E:DB:23:A6:E2:F9
Certificate issuer:       /CN=F3682B65AF/serialNumber=0940E638283336DE5C8C5A40A4C23B34F3F9CA53
Certificate serial:       010F
Authority key identifier: 09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/1DD11D467F8911E9BE98825BF8AEA228.roa
Signing time:             Sun 26 May 2019 07:37:30 +0000
ROA not before:           Sun 26 May 2019 07:37:25 +0000
ROA not after:            Wed 25 May 2022 07:37:25 +0000
asID:                     20278
IP address blocks:        154.16.205.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 271 (0x10f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3682B65AF/serialNumber=0940E638283336DE5C8C5A40A4C23B34F3F9CA53
        Validity
            Not Before: May 26 07:37:25 2019 GMT
            Not After : May 25 07:37:25 2022 GMT
        Subject: CN=5cea423a-1896
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:eb:7b:d6:d2:6c:9f:ba:c1:af:3a:c0:c9:55:
                    a1:34:e4:7a:a4:9b:52:37:7f:22:ab:35:c1:45:ec:
                    73:dc:97:94:80:a2:8b:80:5d:11:ae:2b:73:1a:09:
                    4c:b1:d3:23:6f:d2:25:13:00:50:21:f4:71:1b:2e:
                    16:49:2d:c1:26:24:29:ea:22:e2:fe:d0:64:f7:cc:
                    b7:ad:d0:3c:0a:8f:14:a5:c0:34:e8:dd:a1:38:ff:
                    c6:53:76:42:c7:6b:d4:17:38:2a:10:75:22:87:5c:
                    01:d7:5e:ce:f6:ac:fb:b5:1f:4d:a1:7e:93:fb:fb:
                    55:34:ca:7f:6e:e1:b8:1a:e5:44:34:e4:87:aa:a9:
                    12:db:14:8a:d1:eb:63:2d:f3:98:1b:83:3b:71:b2:
                    e1:c1:f3:67:12:2b:52:a5:c1:e1:68:0b:46:26:a7:
                    1e:6c:01:ac:c3:9e:48:47:a1:72:4e:83:86:05:8c:
                    83:0b:a9:41:3f:13:4e:39:56:6d:62:07:50:8d:1d:
                    ef:cc:dd:47:51:db:dc:1c:77:e5:87:62:4b:be:40:
                    d9:4b:f9:77:ae:2f:e1:50:f9:de:25:b8:06:92:de:
                    99:16:2e:69:c8:25:14:2b:85:4d:70:88:ab:c4:fc:
                    48:f9:bd:79:6c:b6:a7:f6:54:9d:2e:43:16:9a:50:
                    49:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6B:DB:43:A2:35:1A:69:79:AD:04:FE:70:93:36:6E:DB:23:A6:E2:F9
            X509v3 Authority Key Identifier:
                keyid:09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/CUDmOCgzNt5cjFpApMI7NPP5ylM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/1DD11D467F8911E9BE98825BF8AEA228.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  154.16.205.0/24

    Signature Algorithm: sha256WithRSAEncryption
         1d:ff:53:9f:18:d7:14:b9:f9:5c:bb:fa:6e:a0:08:48:5f:50:
         c4:3a:38:9c:c0:61:8d:7a:47:82:c3:f1:40:cb:d3:ae:a1:1d:
         d8:50:41:d7:ad:bd:d7:6f:8d:5f:3a:52:20:8a:32:b9:e1:a4:
         c6:5e:58:3c:be:66:66:e1:83:71:b3:bd:f2:3b:15:3a:01:b0:
         c9:de:42:62:c1:b0:4d:03:c7:b8:83:02:b6:72:84:a3:de:b6:
         83:c8:6f:2f:07:3f:fc:a7:83:aa:89:73:0a:74:8d:b1:7b:31:
         cb:80:68:fb:76:49:22:a1:04:40:da:d0:23:42:43:9f:62:b7:
         b9:3c:e6:9d:2b:ad:2e:24:d8:33:7d:fa:83:3a:a5:1d:08:29:
         e0:62:90:0b:a2:2f:25:40:f4:d5:ea:30:d7:19:b2:65:de:77:
         93:0d:11:8d:62:e5:e1:24:a9:84:51:73:37:77:6f:2b:4e:05:
         87:f7:a4:cf:c3:62:35:72:63:a6:68:6b:ae:03:ca:99:2d:91:
         c6:66:8a:86:79:02:9a:1a:8f:7d:4e:ed:ff:9b:0e:05:e8:98:
         cb:0e:cd:4b:4a:e9:41:ee:48:e6:3c:81:8a:20:50:69:73:05:
         47:c4:45:27:c5:c4:19:7e:f0:da:3c:63:88:26:06:d7:da:74:
         49:7f:25:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----