Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/32B9D4462CBC11EB9EBDA60FF8AEA228.roa
File:                     32B9D4462CBC11EB9EBDA60FF8AEA228.roa (raw, json)
Hash identifier:          ylXZSxlXLmWipMAaYvZAxpaUckurbhV2LqJrns5VF90=
Subject key identifier:   94:A6:34:6F:AB:BC:B5:61:B7:E2:64:BE:45:00:34:93:26:28:27:EE
Certificate issuer:       /CN=F3682B65AF/serialNumber=0940E638283336DE5C8C5A40A4C23B34F3F9CA53
Certificate serial:       041F
Authority key identifier: 09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/32B9D4462CBC11EB9EBDA60FF8AEA228.roa
Signing time:             Sun 22 Nov 2020 12:13:59 +0000
ROA not before:           Sun 22 Nov 2020 12:13:53 +0000
ROA not after:            Tue 22 Nov 2022 12:13:53 +0000
asID:                     212336
IP address blocks:        154.16.83.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1055 (0x41f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3682B65AF/serialNumber=0940E638283336DE5C8C5A40A4C23B34F3F9CA53
        Validity
            Not Before: Nov 22 12:13:53 2020 GMT
            Not After : Nov 22 12:13:53 2022 GMT
        Subject: CN=5fba5606-f1f8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:0d:93:f5:4a:d3:1f:17:45:01:dc:02:d4:b6:
                    c0:56:e3:71:e1:14:f5:b4:4c:60:ae:b3:e4:15:ac:
                    ec:b3:84:b8:e3:9b:eb:0b:1c:73:a0:c6:b0:24:40:
                    20:25:f7:d3:59:ae:0f:ea:70:12:d2:06:a8:b7:6a:
                    a3:11:71:07:47:28:04:d0:e8:d5:6c:8c:53:ef:fb:
                    5e:0c:20:1a:58:3d:63:f5:04:8e:4f:e1:d1:24:93:
                    c0:87:44:e5:69:84:dc:c9:c6:fd:e7:e6:56:b6:c6:
                    56:ee:80:75:45:33:7f:04:0b:d2:df:88:84:5c:67:
                    2b:ad:e6:48:b9:05:65:6f:3d:1d:15:a6:f0:b8:e3:
                    7b:30:db:3f:ad:ce:b6:7f:28:54:f9:4a:ee:23:e8:
                    15:81:44:7b:85:16:8e:2d:ce:ba:47:01:fc:65:b4:
                    ea:71:8d:e0:2f:de:16:35:b5:d9:09:4f:3e:4d:2d:
                    9b:3a:84:ce:38:9b:8e:5e:05:4e:53:ba:96:cb:d0:
                    55:5f:e5:16:c3:2d:05:cb:c6:97:11:c2:b4:41:f7:
                    f2:ec:77:ec:a3:45:e2:fa:85:41:57:4b:2e:bb:5a:
                    64:81:44:54:8c:19:37:0b:ed:b8:58:19:54:a7:63:
                    5a:0e:13:d3:76:1d:53:bb:69:75:81:4f:14:f7:c5:
                    31:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                94:A6:34:6F:AB:BC:B5:61:B7:E2:64:BE:45:00:34:93:26:28:27:EE
            X509v3 Authority Key Identifier:
                keyid:09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/CUDmOCgzNt5cjFpApMI7NPP5ylM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/32B9D4462CBC11EB9EBDA60FF8AEA228.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  154.16.83.0/24

    Signature Algorithm: sha256WithRSAEncryption
         8f:6d:90:33:ae:f3:b4:61:8b:2a:16:8e:65:7e:45:41:1c:84:
         1a:3a:a8:c6:7a:80:55:25:43:10:69:4a:35:ca:f9:ce:09:a8:
         62:ab:be:22:a2:98:a1:a7:8d:29:5f:87:17:8b:f7:74:df:7d:
         3f:8a:d9:2d:48:e8:a7:b6:8c:ef:e1:09:71:78:3a:f5:f8:77:
         05:1e:27:0b:c4:b4:4e:a0:15:15:98:61:9c:1b:32:6d:97:d5:
         cf:14:10:06:e2:ef:dd:05:91:e8:95:ee:d4:5e:c3:f6:de:6f:
         92:77:83:52:47:19:02:9b:37:bd:a5:33:3a:ec:e0:fe:27:c9:
         9d:8e:e6:c2:33:de:6b:6f:d6:a7:b8:90:86:42:ef:d2:d1:d3:
         a7:88:12:e2:03:82:a8:3b:97:c9:61:ec:c8:06:36:c3:36:7d:
         f1:b9:fd:32:4d:64:24:41:ca:1e:0d:5a:e1:f8:dc:e3:50:2a:
         3b:47:93:64:65:ea:d1:97:27:5a:52:29:ae:6c:63:d9:ba:0e:
         5f:cf:05:e7:c9:35:8e:14:c3:c3:ea:81:25:ad:33:71:1c:f2:
         10:0a:55:26:c2:55:6b:0b:28:e1:43:01:6b:0a:e0:27:84:56:
         e7:cb:30:e6:21:25:2e:b0:20:93:17:ac:43:3d:14:ed:55:44:
         d4:bf:01:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----