Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/80067CD4D4C511EB987C5024F8AEA228.roa
File:                     80067CD4D4C511EB987C5024F8AEA228.roa (raw, json)
Hash identifier:          RL1KW+e/FEF32xmiJKi8qcVNlOl3kbvHkFmPpsnET2c=
Subject key identifier:   51:9B:6B:26:A9:A6:82:99:E2:65:B4:4F:74:E4:CC:96:AD:6E:D7:0C
Certificate issuer:       /CN=F3682B65AF/serialNumber=0940E638283336DE5C8C5A40A4C23B34F3F9CA53
Certificate serial:       05BF
Authority key identifier: 09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/80067CD4D4C511EB987C5024F8AEA228.roa
Signing time:             Thu 24 Jun 2021 08:23:49 +0000
ROA not before:           Thu 24 Jun 2021 08:23:43 +0000
ROA not after:            Fri 24 Jun 2022 08:23:43 +0000
asID:                     3356
IP address blocks:        154.16.212.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1471 (0x5bf)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3682B65AF/serialNumber=0940E638283336DE5C8C5A40A4C23B34F3F9CA53
        Validity
            Not Before: Jun 24 08:23:43 2021 GMT
            Not After : Jun 24 08:23:43 2022 GMT
        Subject: CN=60d44115-529d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:5e:60:2a:01:46:7c:dc:0d:f1:b0:f7:04:bb:
                    c1:98:ea:2b:43:ed:b6:d9:40:4b:dc:0d:20:31:d1:
                    ec:88:92:aa:76:96:12:a6:64:0f:23:8d:0d:6d:54:
                    57:90:7b:fc:df:41:8f:3c:7b:34:44:ff:25:af:d4:
                    85:99:06:a8:dd:1b:9a:b0:6c:96:a1:5f:b8:9e:95:
                    fb:94:97:1a:e3:f2:11:c4:0c:f7:06:f2:34:d1:a1:
                    93:d6:85:fe:7c:67:2e:f8:22:51:32:18:c8:34:55:
                    2f:fc:ae:93:4c:90:ef:7c:35:96:87:a4:6e:00:ca:
                    3f:89:dc:08:ff:08:e4:0c:31:af:a5:a1:6d:3a:55:
                    6c:a6:71:17:a0:3c:ca:b3:8c:17:63:6d:b7:fa:e4:
                    25:de:6d:92:4d:05:86:08:b7:66:db:3e:5d:8a:ad:
                    c6:53:11:94:b7:34:7d:98:f2:3c:4f:4b:f8:b9:2d:
                    29:69:53:12:b1:71:e6:03:c9:c6:60:c8:c5:5d:f1:
                    51:8a:8e:c1:20:af:89:0c:01:b0:3c:2d:08:97:9d:
                    2f:52:bc:09:75:2d:0c:71:09:e5:fe:65:ca:16:bb:
                    76:c2:a2:21:c2:dc:5b:1c:39:f2:59:72:22:1f:f6:
                    3f:8f:f0:f7:4d:1f:5a:5f:63:de:25:f8:be:9d:e1:
                    b4:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                51:9B:6B:26:A9:A6:82:99:E2:65:B4:4F:74:E4:CC:96:AD:6E:D7:0C
            X509v3 Authority Key Identifier:
                keyid:09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/CUDmOCgzNt5cjFpApMI7NPP5ylM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/80067CD4D4C511EB987C5024F8AEA228.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  154.16.212.0/24

    Signature Algorithm: sha256WithRSAEncryption
         34:0d:a3:3a:9a:6a:3f:6e:89:c5:30:62:9f:48:cb:45:f2:7a:
         ca:0a:35:5e:77:cd:ec:c6:ed:a8:71:55:62:97:23:27:30:c5:
         55:bf:e3:a8:ea:28:63:78:89:aa:ef:af:1c:71:3d:0a:93:32:
         0b:06:8f:98:f1:38:ca:2f:89:de:d4:d7:6a:ee:30:0a:3b:40:
         a2:fc:00:68:c7:ea:1f:dd:30:29:73:c2:2a:79:b9:f6:fa:96:
         2b:2b:c3:1c:76:51:46:42:2e:12:f8:10:fa:b9:46:ec:1e:bb:
         c0:57:25:e9:f7:f1:60:23:31:5f:8f:40:54:8d:da:70:48:86:
         7b:5e:47:37:0d:85:3a:df:9d:a8:05:71:02:d2:10:01:ed:76:
         d4:7a:7c:49:4f:c5:d8:d4:24:5e:7c:12:43:bb:20:dd:b2:2a:
         f4:40:f9:62:aa:33:21:9d:b8:a9:31:74:a5:66:9d:13:f5:dc:
         98:3e:28:8c:05:70:a9:bc:25:b3:f2:26:55:ba:14:1a:e0:70:
         81:da:67:0d:ef:b4:91:93:98:44:81:2e:bd:09:51:ee:98:9b:
         be:3f:71:fd:bf:36:82:4c:f9:02:f8:54:75:7a:a6:5d:9a:e5:
         76:1a:46:22:cb:78:3f:2a:6a:cd:32:a2:d9:51:56:84:3a:a5:
         67:2d:ce:33
-----BEGIN CERTIFICATE-----
MIIFgzCCBGugAwIBAgICBb8wDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
ODJCNjVBRjExMC8GA1UEBRMoMDk0MEU2MzgyODMzMzZERTVDOEM1QTQwQTRDMjNC
MzRGM0Y5Q0E1MzAeFw0yMTA2MjQwODIzNDNaFw0yMjA2MjQwODIzNDNaMBgxFjAU
BgNVBAMTDTYwZDQ0MTE1LTUyOWQwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQDhXmAqAUZ83A3xsPcEu8GY6itD7bbZQEvcDSAx0eyIkqp2lhKmZA8jjQ1t
VFeQe/zfQY88ezRE/yWv1IWZBqjdG5qwbJahX7ielfuUlxrj8hHEDPcG8jTRoZPW
hf58Zy74IlEyGMg0VS/8rpNMkO98NZaHpG4Ayj+J3Aj/COQMMa+loW06VWymcReg
PMqzjBdjbbf65CXebZJNBYYIt2bbPl2KrcZTEZS3NH2Y8jxPS/i5LSlpUxKxceYD
ycZgyMVd8VGKjsEgr4kMAbA8LQiXnS9SvAl1LQxxCeX+ZcoWu3bCoiHC3FscOfJZ
ciIf9j+P8PdNH1pfY94l+L6d4bRdAgMBAAGjggKlMIICoTAdBgNVHQ4EFgQUUZtr
JqmmgpniZbRPdOTMlq1u1wwwHwYDVR0jBBgwFoAUCUDmOCgzNt5cjFpApMI7NPP5
ylMwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNjgyQjY1LzRFODUxRTM0REI1NTExRTg4NUIyOTk1MUY4QUVBMjI4L0NVRG1P
Q2d6TnQ1Y2pGcEFwTUk3TlBQNXlsTS5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljL0NVRG1PQ2d6TnQ1Y2pGcEFwTUk3TlBQNXlsTS5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdsGCCsGAQUFBwELBIHOMIHLMIGRBggrBgEF
BQcwC4aBhHJzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJl
cl9yZXBvc2l0b3J5L0YzNjgyQjY1LzRFODUxRTM0REI1NTExRTg4NUIyOTk1MUY4
QUVBMjI4LzgwMDY3Q0Q0RDRDNTExRUI5ODdDNTAyNEY4QUVBMjI4LnJvYTA1Bggr
BgEFBQcwDYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54
bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBACaENQwDQYJKoZIhvcNAQEL
BQADggEBADQNozqaaj9uicUwYp9Iy0XyesoKNV53zezG7ahxVWKXIycwxVW/46jq
KGN4iarvrxxxPQqTMgsGj5jxOMovid7U12ruMAo7QKL8AGjH6h/dMClzwip5ufb6
lisrwxx2UUZCLhL4EPq5Ruweu8BXJen38WAjMV+PQFSN2nBIhnteRzcNhTrfnagF
cQLSEAHtdtR6fElPxdjUJF58EkO7IN2yKvRA+WKqMyGduKkxdKVmnRP13Jg+KIwF
cKm8JbPyJlW6FBrgcIHaZw3vtJGTmESBLr0JUe6Ym74/cf2/NoJM+QL4VHV6pl2a
5XYaRiLLeD8qas0yotlRVoQ6pWctzjM=
-----END CERTIFICATE-----