Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/7BB4CFF621F411ECB0F2837ED8A014CE.roa
File:                     7BB4CFF621F411ECB0F2837ED8A014CE.roa (raw, json)
Hash identifier:          vAdKahn8/FejssZ5TbEb65MI7bEnWXwnJZPN1A1eXgk=
Subject key identifier:   4D:22:C4:5B:48:65:6E:EF:80:0E:F2:AD:D1:A2:A8:3E:DF:A8:CE:0D
Certificate issuer:       /CN=F3682B65AF/serialNumber=0940E638283336DE5C8C5A40A4C23B34F3F9CA53
Certificate serial:       06A1
Authority key identifier: 09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/7BB4CFF621F411ECB0F2837ED8A014CE.roa
Signing time:             Thu 30 Sep 2021 13:44:07 +0000
ROA not before:           Thu 30 Sep 2021 13:44:02 +0000
ROA not after:            Fri 30 Sep 2022 13:44:02 +0000
asID:                     60781
IP address blocks:        154.16.160.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1697 (0x6a1)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3682B65AF/serialNumber=0940E638283336DE5C8C5A40A4C23B34F3F9CA53
        Validity
            Not Before: Sep 30 13:44:02 2021 GMT
            Not After : Sep 30 13:44:02 2022 GMT
        Subject: CN=6155bf27-c4fe
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:e2:16:3d:b3:2c:97:c5:4c:e1:ab:80:77:c2:
                    99:ef:54:b4:37:27:d3:eb:6e:2b:d5:3e:82:eb:37:
                    9f:b2:06:99:7b:74:11:36:fc:3b:f6:db:b9:f7:e7:
                    0e:14:07:e0:ec:3b:ad:71:96:44:ba:76:bd:c6:d4:
                    1f:f5:8c:ce:46:00:38:5b:f2:9c:f3:44:8b:da:34:
                    be:28:de:67:79:01:37:c0:05:9e:14:6d:c8:3f:10:
                    97:af:4e:54:73:94:73:68:cc:c1:f6:f4:ab:31:c9:
                    91:57:83:65:f7:25:2e:8c:14:fa:fc:82:67:18:ac:
                    3c:54:47:c0:ff:15:15:b6:de:0c:30:e4:8c:2b:8a:
                    a2:b4:04:96:11:d8:af:ae:9c:8a:68:fd:ef:bb:11:
                    45:af:86:b7:c9:52:ea:e8:6c:34:69:11:7a:57:26:
                    6a:3a:b2:c1:b5:a3:68:b5:67:1d:23:30:18:bf:35:
                    5c:cd:4f:84:c2:c4:73:e8:1c:c4:72:3d:cb:1b:f2:
                    2a:6d:be:09:a8:ce:f6:db:c8:3f:89:c8:bd:8f:44:
                    81:88:1c:95:69:d3:ce:b9:75:bd:98:7a:f5:28:21:
                    24:40:87:29:3a:b4:3c:48:56:d3:5d:dc:69:29:22:
                    67:9d:29:c9:3d:4b:03:2a:23:3c:ab:22:3c:e1:81:
                    5c:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4D:22:C4:5B:48:65:6E:EF:80:0E:F2:AD:D1:A2:A8:3E:DF:A8:CE:0D
            X509v3 Authority Key Identifier:
                keyid:09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/CUDmOCgzNt5cjFpApMI7NPP5ylM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/7BB4CFF621F411ECB0F2837ED8A014CE.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  154.16.160.0/24

    Signature Algorithm: sha256WithRSAEncryption
         cc:21:3d:c7:91:cb:23:8a:bf:6a:2a:c5:f2:35:42:25:f2:3d:
         40:d2:88:96:63:f5:bc:87:7d:bc:ae:59:35:04:0e:b2:af:70:
         b3:cf:31:74:20:6d:53:2f:a8:25:76:8c:21:6e:4e:45:0e:5b:
         91:80:eb:d2:a7:64:80:a5:44:17:34:c2:b1:05:5c:aa:0a:43:
         08:af:12:ce:1e:0b:89:67:b8:50:41:ef:2f:df:6f:c4:d9:50:
         25:63:4f:57:13:ff:ab:b7:dc:a3:2d:4a:70:81:4d:d9:a4:43:
         1a:11:3b:9a:08:d1:7c:b4:cf:ca:f0:eb:df:29:f8:2c:25:9c:
         d2:b2:34:a1:0e:91:d0:b6:66:d9:55:89:07:f8:5f:ce:03:c8:
         16:8d:16:e9:8c:2b:1d:cf:a3:41:bf:ff:ba:63:e4:f7:12:2c:
         bf:3f:37:24:62:c3:66:5f:c5:37:39:b5:64:ad:48:b7:42:b7:
         cb:64:90:8b:b2:c9:63:12:f0:2b:46:f6:4e:14:80:fd:51:d2:
         9d:1e:35:94:b8:40:f0:ab:10:92:ae:df:5a:bf:12:a7:7c:32:
         5c:92:f7:a6:0e:f9:22:81:4f:65:9b:db:fd:7c:b3:0f:71:42:
         aa:93:89:3b:44:1e:05:f8:04:76:0d:ff:15:b3:ad:3c:a1:4d:
         af:a8:3b:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----