Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/810BE8DEEF6F11EBB0A42854D8A014CE.roa
File:                     810BE8DEEF6F11EBB0A42854D8A014CE.roa (raw, json)
Hash identifier:          I+pmpUBxL8oUU8pBEgrMJTFqFj/EKCoIRX8Msw/YME0=
Subject key identifier:   39:2F:B9:24:C7:01:46:BB:99:4C:6F:84:3F:78:41:2E:C7:2F:94:E4
Certificate issuer:       /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial:       084B
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/810BE8DEEF6F11EBB0A42854D8A014CE.roa
Signing time:             Wed 28 Jul 2021 06:46:34 +0000
ROA not before:           Wed 28 Jul 2021 06:46:30 +0000
ROA not after:            Wed 28 Sep 2022 06:46:30 +0000
asID:                     7018
IP address blocks:        154.205.48.0/20 maxlen: 20

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2123 (0x84b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
        Validity
            Not Before: Jul 28 06:46:30 2021 GMT
            Not After : Sep 28 06:46:30 2022 GMT
        Subject: CN=6100fd4a-1270
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:d2:52:c1:df:02:4c:00:51:9f:92:5b:c1:9e:
                    47:b5:c9:e6:cf:4f:42:34:ff:4f:8f:54:91:dc:3c:
                    ad:50:42:98:7e:6e:75:58:9b:60:e8:cc:40:3c:b8:
                    56:de:e9:ac:ca:da:13:17:15:72:7c:20:b7:15:3e:
                    c7:6b:68:21:13:83:de:c2:68:c0:ca:b6:36:ac:e7:
                    78:02:50:41:1f:3e:ba:92:fc:4e:55:67:be:40:98:
                    96:86:01:e3:86:ea:09:ad:1a:df:f4:1f:65:7b:6d:
                    18:ea:86:bc:18:d8:a6:f7:75:8f:e1:2f:b8:28:f2:
                    a2:a6:7b:19:bf:a4:fa:62:9d:ef:63:4a:5f:7c:ce:
                    c5:6d:be:0a:07:1c:18:38:e9:ed:6d:20:ee:34:52:
                    32:be:2c:af:bf:41:e3:bd:dd:8a:3c:48:86:c9:22:
                    6e:d1:76:f8:de:e9:6b:5f:e9:95:f1:df:ce:7e:47:
                    72:aa:86:6f:f3:aa:26:80:af:c5:07:e3:dc:8c:e5:
                    97:1c:f1:94:6a:5d:ab:8a:57:6f:72:29:a9:97:17:
                    7d:c1:8e:79:d7:ee:ed:ef:95:63:0e:63:e4:d3:09:
                    0d:7f:62:f4:27:db:72:69:cf:51:91:4a:3b:76:f7:
                    25:39:e2:84:f1:7b:a3:8e:d4:81:ce:e3:50:d4:2a:
                    82:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                39:2F:B9:24:C7:01:46:BB:99:4C:6F:84:3F:78:41:2E:C7:2F:94:E4
            X509v3 Authority Key Identifier:
                keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/810BE8DEEF6F11EBB0A42854D8A014CE.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  154.205.48.0/20

    Signature Algorithm: sha256WithRSAEncryption
         bc:3f:34:a2:f7:6e:d9:4a:63:54:47:8a:73:6b:53:c3:4f:11:
         77:14:24:ad:d5:7e:85:98:58:7e:cd:0a:c6:d8:b4:61:0b:96:
         07:d5:5d:91:2a:bd:86:b0:94:6a:66:02:51:fe:15:6b:4d:23:
         75:6e:69:f5:bc:33:11:36:25:9c:ab:47:b5:01:ba:17:e2:85:
         3c:3e:16:4a:3c:87:39:89:5c:f1:f0:76:8d:12:fe:20:57:db:
         00:a1:37:f2:69:64:75:08:8e:0e:09:3d:4a:a8:15:7b:b7:89:
         a1:95:8a:de:10:33:a4:d4:bd:c8:75:6e:89:ba:3c:c2:56:15:
         7a:86:5c:29:28:35:61:d5:44:85:03:ef:aa:9a:b3:41:47:df:
         ab:6a:b6:69:df:0c:c0:b3:0e:bc:23:d7:67:c1:2f:60:b4:fd:
         84:43:54:7f:c7:7c:d4:1f:82:24:44:94:15:b4:6a:12:c2:8f:
         91:bf:ca:31:2f:2e:13:f4:17:84:17:b9:72:77:4d:d2:a8:3c:
         86:d2:fd:3a:f7:d3:55:a3:be:64:1a:2d:fc:72:7b:e6:6c:95:
         97:0e:5c:6b:5c:76:f3:36:16:cf:58:7c:ee:96:2c:3d:fc:d7:
         23:4b:c2:f2:fb:38:8d:11:18:c5:44:4a:dd:e8:85:64:b3:c8:
         02:47:c7:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----