Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/6700B6168C8E11EBBBDC857DF8AEA228.roa
File:                     6700B6168C8E11EBBBDC857DF8AEA228.roa (raw, json)
Hash identifier:          QZmQ6m89UjamoXWwkl5hC+m4fTsREO4UV4P1H3jFayw=
Subject key identifier:   1C:B2:CC:42:B9:0C:1F:91:EA:C4:59:27:5A:C2:B7:01:07:EC:12:0E
Certificate issuer:       /CN=F3682B65AF/serialNumber=0940E638283336DE5C8C5A40A4C23B34F3F9CA53
Certificate serial:       0506
Authority key identifier: 09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/6700B6168C8E11EBBBDC857DF8AEA228.roa
Signing time:             Wed 24 Mar 2021 10:48:01 +0000
ROA not before:           Wed 24 Mar 2021 10:47:57 +0000
ROA not after:            Thu 24 Mar 2022 10:47:57 +0000
asID:                     26636
IP address blocks:        154.16.156.0/23 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1286 (0x506)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3682B65AF/serialNumber=0940E638283336DE5C8C5A40A4C23B34F3F9CA53
        Validity
            Not Before: Mar 24 10:47:57 2021 GMT
            Not After : Mar 24 10:47:57 2022 GMT
        Subject: CN=605b18e0-2c87
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:49:08:c6:d6:b0:a0:1c:63:bd:5e:c2:6a:92:
                    8d:fe:de:08:58:3d:ec:a4:f6:45:35:d8:d2:97:1e:
                    33:30:f9:fd:46:5a:d8:e6:cf:e5:f8:35:f5:bf:5f:
                    53:aa:85:49:11:10:83:fa:c8:b3:5e:25:a9:78:01:
                    e8:f5:d4:f4:00:24:da:2a:bc:9a:75:4f:31:3c:5e:
                    4b:9c:f6:a5:d6:b9:19:f6:71:62:35:9e:32:4c:59:
                    d9:00:8f:c3:7a:c6:54:5e:12:11:02:bc:7a:06:78:
                    b0:c3:c6:6e:65:7a:64:b1:92:39:5a:43:63:01:8a:
                    c1:37:73:ea:04:07:17:85:75:05:dd:9a:c4:b2:42:
                    39:9a:58:7e:a0:d1:f1:34:c4:64:a3:6e:1c:34:94:
                    0c:1c:95:d8:f4:ec:f6:a5:f9:25:86:13:74:81:53:
                    88:0f:8c:b0:83:36:d6:51:61:a2:9e:13:4b:cb:31:
                    d7:34:25:cd:86:b8:e0:4f:67:23:ae:3c:7a:09:98:
                    50:ff:7e:88:da:82:2c:5e:05:9c:c9:aa:e6:b7:21:
                    9c:ae:fe:f2:50:64:61:1b:69:49:ce:69:7b:f8:94:
                    12:18:32:fc:96:4c:c1:27:67:2e:74:76:e8:70:ce:
                    f5:5f:e8:b9:7d:4d:03:81:63:a7:f2:8d:11:9a:17:
                    a4:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1C:B2:CC:42:B9:0C:1F:91:EA:C4:59:27:5A:C2:B7:01:07:EC:12:0E
            X509v3 Authority Key Identifier:
                keyid:09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/CUDmOCgzNt5cjFpApMI7NPP5ylM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/6700B6168C8E11EBBBDC857DF8AEA228.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  154.16.156.0/23

    Signature Algorithm: sha256WithRSAEncryption
         4f:7e:8c:25:7c:56:91:d9:4d:72:f3:8d:d1:ed:30:e1:7e:5c:
         08:b0:9c:4b:5f:f7:e3:b3:27:2e:76:21:1c:f8:8e:12:c0:be:
         9c:fe:3c:f5:cb:fb:2e:57:ac:65:81:32:a4:8a:a1:3d:8e:84:
         63:1b:e9:ef:82:e3:32:61:ee:92:fd:f8:65:3a:86:2c:6e:db:
         a0:3e:8a:80:89:49:5c:de:36:4c:b1:aa:60:5a:6e:03:02:d1:
         b4:c7:a3:f8:82:ce:62:1b:a6:12:11:bd:ec:59:91:cf:08:a2:
         14:ef:53:b1:ff:a0:96:d2:7e:08:63:e7:31:4d:e4:55:7e:49:
         1c:e0:bc:24:dd:66:cd:ac:3b:a9:30:4e:30:e4:85:2c:80:54:
         a4:0c:f7:00:51:6c:8e:78:79:9a:53:72:30:b4:2c:cf:7a:4e:
         93:44:49:aa:b5:07:60:48:ce:ef:91:81:1f:32:2c:ed:27:01:
         d3:e4:52:37:37:2a:93:8e:c2:51:96:c0:9b:f6:3e:17:3a:e9:
         2c:e7:16:53:f9:68:dd:fc:da:68:5a:e5:7d:67:be:ef:d8:17:
         24:ef:90:72:82:e6:cb:93:08:24:fc:4b:a4:de:f1:d4:95:6f:
         96:6e:25:13:26:94:66:89:68:5b:c5:84:66:a8:45:af:05:94:
         49:c3:d4:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----