Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/42A7328C16C111EC9B72776BD8A014CE.roa
File:                     42A7328C16C111EC9B72776BD8A014CE.roa (raw, json)
Hash identifier:          naC/KsSWNAW6wf8XKxolWvNuqutkW8C3a46Q69iF7hg=
Subject key identifier:   DA:B2:3F:C9:BA:10:28:D4:01:CC:A0:D3:C5:73:54:27:24:14:8D:E3
Certificate issuer:       /CN=F3682B65AF/serialNumber=0940E638283336DE5C8C5A40A4C23B34F3F9CA53
Certificate serial:       0678
Authority key identifier: 09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/42A7328C16C111EC9B72776BD8A014CE.roa
Signing time:             Thu 16 Sep 2021 07:39:44 +0000
ROA not before:           Thu 16 Sep 2021 07:39:40 +0000
ROA not after:            Fri 16 Sep 2022 07:39:40 +0000
asID:                     1239
IP address blocks:        154.16.77.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1656 (0x678)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3682B65AF/serialNumber=0940E638283336DE5C8C5A40A4C23B34F3F9CA53
        Validity
            Not Before: Sep 16 07:39:40 2021 GMT
            Not After : Sep 16 07:39:40 2022 GMT
        Subject: CN=6142f4c0-97d3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:7b:78:cc:ee:f2:37:0a:d9:35:7d:df:a3:34:
                    41:0a:82:bc:6c:4a:85:23:81:e5:00:81:8c:da:5d:
                    11:c2:1f:1b:3d:73:71:88:a2:d6:77:d5:d0:5e:fa:
                    ca:a7:2d:ba:28:0c:14:32:85:56:b1:35:57:ec:bc:
                    37:dd:7b:cd:30:86:bf:e4:41:61:87:b0:02:c3:9f:
                    de:8c:69:34:1e:ab:79:8d:9d:68:fa:8a:e9:f8:ab:
                    2c:7f:be:42:09:c9:47:0e:81:12:d1:5e:c3:b4:05:
                    60:61:78:a6:c5:3d:30:1b:c8:de:d2:5e:fe:13:78:
                    af:04:0d:6a:c4:fc:66:87:1c:b5:79:f7:7c:0a:50:
                    02:98:2b:07:27:de:9e:9f:e0:11:a8:42:1f:39:20:
                    7e:e1:94:50:d7:31:b6:34:09:5e:a6:78:ef:49:a4:
                    3a:97:93:55:cf:f0:3f:05:8f:67:01:32:50:35:f6:
                    8d:ab:05:02:9b:b1:3b:2c:f0:d2:da:e6:ac:a2:f3:
                    31:c6:b6:f1:69:20:1e:a2:c0:b0:84:7c:2f:9e:9a:
                    7a:cd:b9:f5:5a:b0:4a:ef:18:34:f0:68:aa:d8:8a:
                    3d:e9:1b:c1:29:87:79:56:c1:74:58:84:75:fb:1f:
                    d5:6f:3e:fd:77:71:77:af:d8:76:ff:6e:ea:7c:36:
                    83:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DA:B2:3F:C9:BA:10:28:D4:01:CC:A0:D3:C5:73:54:27:24:14:8D:E3
            X509v3 Authority Key Identifier:
                keyid:09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/CUDmOCgzNt5cjFpApMI7NPP5ylM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/42A7328C16C111EC9B72776BD8A014CE.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  154.16.77.0/24

    Signature Algorithm: sha256WithRSAEncryption
         66:f2:e7:a9:00:50:bd:a0:86:2b:50:95:7a:ea:12:a5:c8:08:
         d9:80:57:84:69:d2:71:a2:ca:c8:b0:75:4b:9e:73:a0:e3:30:
         14:cd:42:26:65:7c:ef:37:e5:d4:3e:3d:e3:75:8e:33:83:ae:
         fd:1b:39:b2:72:db:be:9d:36:f4:c3:41:70:24:74:7d:f1:61:
         99:ce:a1:52:58:99:c1:f9:77:dc:23:31:1c:8f:31:bc:1a:a7:
         63:e4:bf:95:1e:89:34:fd:58:f5:d2:80:c9:37:8b:f7:26:d0:
         59:0c:01:e0:ca:a4:11:27:6d:1b:1d:d6:09:92:3d:5a:a3:9a:
         fb:a5:a4:fb:59:36:ba:92:8a:78:23:1c:92:65:10:11:4c:70:
         f9:d3:dc:a6:e6:63:bf:e1:61:6b:ea:41:31:df:79:75:76:84:
         f1:48:00:03:53:9f:e9:e6:e3:62:0d:b4:f1:6d:04:b5:41:a8:
         f1:e5:35:f1:9d:15:65:09:2b:36:a8:b9:80:e5:1b:ea:a2:97:
         2c:bb:f6:ff:18:86:d9:fa:90:82:47:02:b8:fc:f1:c0:f8:12:
         5c:6b:9e:0f:24:aa:af:13:9f:e3:65:94:bc:ec:fd:1c:2f:72:
         9d:2b:74:ba:8f:f7:29:47:19:99:4b:d0:9d:b3:ee:eb:a3:f4:
         a4:7e:98:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----