Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/4B91658E16C111ECAADA806BD8A014CE.roa
File:                     4B91658E16C111ECAADA806BD8A014CE.roa (raw, json)
Hash identifier:          sOzq1SrFzHgNj/utpC/rbDlqp6PmNmUB8jyrlh5tT/c=
Subject key identifier:   1B:52:F8:28:FE:32:B4:B8:C9:E5:FB:C3:C5:89:E1:B5:7D:53:EA:12
Certificate issuer:       /CN=F3682B65AF/serialNumber=0940E638283336DE5C8C5A40A4C23B34F3F9CA53
Certificate serial:       067A
Authority key identifier: 09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/4B91658E16C111ECAADA806BD8A014CE.roa
Signing time:             Thu 16 Sep 2021 07:39:59 +0000
ROA not before:           Thu 16 Sep 2021 07:39:56 +0000
ROA not after:            Fri 16 Sep 2022 07:39:56 +0000
asID:                     1239
IP address blocks:        154.16.37.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1658 (0x67a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3682B65AF/serialNumber=0940E638283336DE5C8C5A40A4C23B34F3F9CA53
        Validity
            Not Before: Sep 16 07:39:56 2021 GMT
            Not After : Sep 16 07:39:56 2022 GMT
        Subject: CN=6142f4cf-ecaa
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:35:c5:85:cc:26:a0:56:c1:19:2a:1e:64:b5:
                    f7:93:72:1d:02:92:be:1c:03:8e:d6:3d:e8:be:ba:
                    3b:65:2b:99:6b:16:85:a0:b6:0f:bb:0c:b2:7d:5d:
                    83:5a:48:c5:00:00:9f:df:c8:ba:84:d0:bc:1c:39:
                    51:17:54:e0:7a:a0:04:5a:67:7e:8c:50:c8:28:23:
                    57:99:08:b5:41:78:8c:14:6c:32:24:db:6c:44:d8:
                    5d:e7:18:e5:ca:5d:27:56:b4:32:ef:fb:a0:ce:98:
                    3e:be:c8:da:1e:09:eb:67:84:fc:7f:23:78:d4:c3:
                    0f:61:00:ec:af:c5:62:14:15:3f:49:dd:54:8d:84:
                    a7:8c:0d:26:89:74:c8:82:b4:e7:0c:2d:b2:b7:73:
                    8c:6e:a1:39:24:d6:8f:ce:bd:e3:4e:d1:0d:8b:01:
                    54:cd:31:b0:13:ca:05:a9:57:b8:db:7b:07:8e:6e:
                    a2:9b:67:c9:92:ba:e0:81:52:ac:83:5d:f6:ab:fa:
                    c4:e1:f1:0f:50:1c:bf:94:cf:79:81:fe:7d:ba:b3:
                    2b:90:3b:28:ac:e0:34:09:78:df:26:42:01:95:7e:
                    c8:53:d5:f7:5b:d7:35:cc:3d:4b:c7:0a:c6:d2:7a:
                    bc:fe:2c:a4:8c:78:09:87:c8:0a:88:6c:2c:19:64:
                    a5:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1B:52:F8:28:FE:32:B4:B8:C9:E5:FB:C3:C5:89:E1:B5:7D:53:EA:12
            X509v3 Authority Key Identifier:
                keyid:09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/CUDmOCgzNt5cjFpApMI7NPP5ylM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/4B91658E16C111ECAADA806BD8A014CE.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  154.16.37.0/24

    Signature Algorithm: sha256WithRSAEncryption
         ba:84:2b:50:56:2f:67:93:56:5f:c8:9f:8e:c5:f6:bd:b0:82:
         d3:68:58:dd:7b:92:d8:2d:26:c1:8f:41:fe:d5:f8:0f:48:40:
         c5:5e:a4:0d:b9:75:81:1c:1b:0d:09:9b:be:54:cf:74:cb:ca:
         4b:33:1b:79:3a:2d:57:ba:3d:07:59:d0:d2:d0:4b:3a:b0:5f:
         05:62:83:d4:6e:bb:ef:1d:c3:ba:7a:6d:53:76:48:06:84:30:
         d3:ca:5c:7f:45:c6:1c:55:43:57:9e:52:6d:85:e0:6e:9c:db:
         4e:bb:9a:9a:56:65:e8:39:de:85:5b:f4:68:58:f4:91:ac:b4:
         53:2b:36:bb:60:09:21:78:df:d5:6a:9b:05:e9:d1:06:5e:c2:
         65:b2:3a:9b:a4:07:28:eb:f4:d2:7a:57:78:9d:ef:80:9a:4e:
         30:e9:4b:64:54:4f:54:4e:ed:88:f3:97:48:dc:07:ad:04:b3:
         2f:c2:a0:fe:1b:d5:3c:25:cb:78:a4:e1:72:8d:c1:86:08:1d:
         eb:9a:56:b6:fb:42:7c:93:25:93:99:54:70:5e:a0:73:ab:52:
         ad:fc:d7:a9:14:6e:7c:f3:c2:82:49:a2:74:85:4c:0e:dc:18:
         3a:ce:a1:fd:94:9a:8d:1f:eb:61:5d:dc:c0:37:44:88:3b:f5:
         74:0a:af:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----