Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/283DD4021AB611ECB1F3BA25D8A014CE.roa
File:                     283DD4021AB611ECB1F3BA25D8A014CE.roa (raw, json)
Hash identifier:          maf0Bo1ifUkdzy9Gzob7C8yiRe5tXZMibX+/oBB5VGE=
Subject key identifier:   6F:39:EA:D0:A4:A0:94:D2:81:C8:0A:9D:E4:5B:3B:C2:4D:35:80:A7
Certificate issuer:       /CN=F3682B65AF/serialNumber=0940E638283336DE5C8C5A40A4C23B34F3F9CA53
Certificate serial:       0689
Authority key identifier: 09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/283DD4021AB611ECB1F3BA25D8A014CE.roa
Signing time:             Tue 21 Sep 2021 08:30:20 +0000
ROA not before:           Tue 21 Sep 2021 08:30:17 +0000
ROA not after:            Wed 21 Sep 2022 08:30:17 +0000
asID:                     22773
IP address blocks:        154.16.242.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1673 (0x689)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3682B65AF/serialNumber=0940E638283336DE5C8C5A40A4C23B34F3F9CA53
        Validity
            Not Before: Sep 21 08:30:17 2021 GMT
            Not After : Sep 21 08:30:17 2022 GMT
        Subject: CN=6149981c-1889
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:69:94:e8:4b:0f:00:21:50:fd:69:8c:c6:f0:
                    df:1c:87:54:33:ba:56:32:2a:d2:9b:27:c1:63:50:
                    ea:ce:dc:af:db:75:c6:95:ca:63:fa:3d:17:1b:da:
                    d7:2a:33:bd:26:c9:53:b4:64:5c:f8:cb:79:d3:f3:
                    ad:e4:e1:a7:8f:59:f1:04:64:bb:bc:5c:14:7a:f6:
                    f3:82:46:45:96:33:82:c7:ba:02:17:ed:a6:63:38:
                    ee:71:6c:d9:dc:71:63:bb:02:58:c2:a4:b8:8d:f5:
                    f9:f9:0e:bd:bb:48:bc:37:10:96:29:54:fa:f7:3c:
                    2a:b3:a1:16:3f:e0:46:63:fe:b9:18:7b:9c:bd:da:
                    89:8e:3b:9b:2b:2e:50:85:03:f1:45:ba:57:5f:7b:
                    0e:25:38:a6:26:9e:b4:cc:12:17:08:6c:6a:8a:af:
                    12:6c:e1:61:da:97:d8:e5:86:75:7a:1b:68:44:f9:
                    d0:e5:2d:e5:2b:80:aa:24:b8:5e:14:da:8f:aa:9e:
                    f5:c9:dc:84:7c:dd:78:71:e6:1f:50:a4:77:77:1e:
                    cd:16:0b:b1:fa:03:7e:de:57:60:e3:7f:45:d5:d6:
                    e9:3e:0e:5f:68:00:31:9c:53:d2:e0:0e:aa:fc:f9:
                    23:96:b6:6f:72:ea:c1:79:6a:23:5d:0c:38:d8:52:
                    f3:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6F:39:EA:D0:A4:A0:94:D2:81:C8:0A:9D:E4:5B:3B:C2:4D:35:80:A7
            X509v3 Authority Key Identifier:
                keyid:09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/CUDmOCgzNt5cjFpApMI7NPP5ylM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/283DD4021AB611ECB1F3BA25D8A014CE.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  154.16.242.0/24

    Signature Algorithm: sha256WithRSAEncryption
         1d:9a:e3:a7:e2:7a:50:f9:5e:7d:e2:a1:fb:5d:c1:ac:db:08:
         c4:70:fe:f8:f7:0f:e0:2b:3e:6a:79:a2:c7:51:0b:30:6d:03:
         f7:5d:5e:ec:47:5c:5f:d2:b3:55:2f:04:9b:b5:4f:a3:2e:1a:
         06:0c:73:34:79:26:de:25:4b:0c:47:ca:bb:e6:08:5c:72:34:
         8c:f3:86:12:9a:38:1e:2d:cd:d8:94:a7:8a:e0:88:64:e4:cd:
         1c:c9:64:20:15:31:cc:44:4a:da:39:6a:ea:df:34:aa:43:bc:
         a2:67:26:4c:e7:02:de:9b:57:48:81:38:b3:ee:e9:e4:0f:e4:
         0d:f4:b7:40:32:8c:25:ea:c1:3e:da:be:01:cb:0e:7f:f5:5f:
         0f:61:b2:aa:34:17:55:44:0b:79:58:2a:42:1d:71:ad:f9:a2:
         27:d3:4c:44:4a:50:5f:7c:30:c0:14:99:f3:a9:58:37:6d:a3:
         73:49:2b:06:23:fa:d9:b5:53:5e:41:f0:13:f2:93:f8:88:e7:
         8b:9b:6d:03:32:04:68:b3:77:f1:23:20:36:33:d6:de:b7:86:
         2a:69:38:85:5e:57:65:5f:80:d8:95:ab:83:ec:da:5f:c9:f1:
         6c:d9:3b:8a:fb:d6:a7:f5:56:10:55:92:93:d7:a6:12:29:0b:
         91:d2:61:93
-----BEGIN CERTIFICATE-----
MIIFgzCCBGugAwIBAgICBokwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
ODJCNjVBRjExMC8GA1UEBRMoMDk0MEU2MzgyODMzMzZERTVDOEM1QTQwQTRDMjNC
MzRGM0Y5Q0E1MzAeFw0yMTA5MjEwODMwMTdaFw0yMjA5MjEwODMwMTdaMBgxFjAU
BgNVBAMMDTYxNDk5ODFjLTE4ODkwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQCraZToSw8AIVD9aYzG8N8ch1QzulYyKtKbJ8FjUOrO3K/bdcaVymP6PRcb
2tcqM70myVO0ZFz4y3nT863k4aePWfEEZLu8XBR69vOCRkWWM4LHugIX7aZjOO5x
bNnccWO7AljCpLiN9fn5Dr27SLw3EJYpVPr3PCqzoRY/4EZj/rkYe5y92omOO5sr
LlCFA/FFuldfew4lOKYmnrTMEhcIbGqKrxJs4WHal9jlhnV6G2hE+dDlLeUrgKok
uF4U2o+qnvXJ3IR83Xhx5h9QpHd3Hs0WC7H6A37eV2Djf0XV1uk+Dl9oADGcU9Lg
Dqr8+SOWtm9y6sF5aiNdDDjYUvOXAgMBAAGjggKlMIICoTAdBgNVHQ4EFgQUbznq
0KSglNKByAqd5Fs7wk01gKcwHwYDVR0jBBgwFoAUCUDmOCgzNt5cjFpApMI7NPP5
ylMwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNjgyQjY1LzRFODUxRTM0REI1NTExRTg4NUIyOTk1MUY4QUVBMjI4L0NVRG1P
Q2d6TnQ1Y2pGcEFwTUk3TlBQNXlsTS5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljL0NVRG1PQ2d6TnQ1Y2pGcEFwTUk3TlBQNXlsTS5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdsGCCsGAQUFBwELBIHOMIHLMIGRBggrBgEF
BQcwC4aBhHJzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJl
cl9yZXBvc2l0b3J5L0YzNjgyQjY1LzRFODUxRTM0REI1NTExRTg4NUIyOTk1MUY4
QUVBMjI4LzI4M0RENDAyMUFCNjExRUNCMUYzQkEyNUQ4QTAxNENFLnJvYTA1Bggr
BgEFBQcwDYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54
bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBACaEPIwDQYJKoZIhvcNAQEL
BQADggEBAB2a46fielD5Xn3ioftdwazbCMRw/vj3D+ArPmp5osdRCzBtA/ddXuxH
XF/Ss1UvBJu1T6MuGgYMczR5Jt4lSwxHyrvmCFxyNIzzhhKaOB4tzdiUp4rgiGTk
zRzJZCAVMcxESto5aurfNKpDvKJnJkznAt6bV0iBOLPu6eQP5A30t0AyjCXqwT7a
vgHLDn/1Xw9hsqo0F1VEC3lYKkIdca35oifTTERKUF98MMAUmfOpWDdto3NJKwYj
+tm1U15B8BPyk/iI54ubbQMyBGizd/EjIDYz1t63hippOIVeV2VfgNiVq4Ps2l/J
8WzZO4r71qf1VhBVkpPXphIpC5HSYZM=
-----END CERTIFICATE-----