Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/E1A0FA1A251811EDA0867394F1222468.roa
File:                     E1A0FA1A251811EDA0867394F1222468.roa (raw, json)
Hash identifier:          oJB3wi0Cfs+6IyAqcos8hsHvMRxQb9rPW3G6UrtmOgI=
Subject key identifier:   AC:0C:AE:5B:47:DE:7F:AD:DA:9D:10:FC:36:0A:26:6F:49:22:4F:EC
Certificate issuer:       /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial:       1871
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/E1A0FA1A251811EDA0867394F1222468.roa
Signing time:             Fri 26 Aug 2022 08:27:11 +0000
ROA not before:           Tue 30 Aug 2022 08:27:08 +0000
ROA not after:            Fri 30 Dec 2022 08:27:08 +0000
asID:                     35916
IP address blocks:        154.81.224.0/19 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 6257 (0x1871)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
        Validity
            Not Before: Aug 30 08:27:08 2022 GMT
            Not After : Dec 30 08:27:08 2022 GMT
        Subject: CN=630883df-a33f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:bb:14:e5:a4:1c:09:bd:82:f4:79:9f:eb:95:
                    3e:d0:29:62:73:b3:cf:a8:6b:eb:a1:a2:43:4d:2e:
                    98:a3:dc:d7:37:8a:27:52:1b:c4:5e:b0:0f:35:0a:
                    01:f4:28:a6:f6:ba:a7:ed:bc:16:84:23:69:3f:e7:
                    42:b6:09:93:3c:65:ec:85:01:f8:9a:37:8f:de:d8:
                    8a:90:b3:b5:ae:bd:8e:90:e6:59:cf:73:28:38:19:
                    c5:e8:09:0b:92:2f:6c:b8:17:16:e7:7f:da:76:24:
                    ac:d0:a0:4a:80:90:28:1d:2d:b8:f8:b4:7e:64:7a:
                    b4:b7:0b:b6:c8:f3:45:56:1d:87:82:b2:b2:76:5b:
                    a9:14:e5:1f:54:3a:37:ac:51:bc:7e:67:f9:f8:fb:
                    7d:f6:93:2b:92:e4:93:0e:7e:50:0e:9e:fb:79:f7:
                    7d:90:a8:f8:4b:d6:25:a9:2a:c8:6a:2b:c1:d9:76:
                    79:4b:2c:9a:3e:91:6c:f9:fc:4d:82:ef:d5:ee:b3:
                    02:14:e0:4f:8a:04:28:cc:4f:f9:5e:76:9b:81:e3:
                    ca:ab:01:56:98:ea:17:ee:58:b1:d3:83:43:6a:d4:
                    f3:01:36:ec:25:70:8f:4f:47:b5:19:18:34:d4:35:
                    11:18:f9:76:80:55:9f:07:4d:1e:c2:1c:41:f9:83:
                    b6:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AC:0C:AE:5B:47:DE:7F:AD:DA:9D:10:FC:36:0A:26:6F:49:22:4F:EC
            X509v3 Authority Key Identifier:
                keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/E1A0FA1A251811EDA0867394F1222468.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  154.81.224.0/19

    Signature Algorithm: sha256WithRSAEncryption
         29:9a:e5:c7:ea:25:8a:47:54:a8:5a:71:6a:1e:14:b8:9c:4a:
         89:c0:1c:4d:ee:e3:b4:04:a8:37:cc:a3:56:e1:89:0e:33:0d:
         72:42:15:bd:0e:2b:b7:c9:50:f0:be:a2:56:5b:e8:ab:6a:4b:
         38:8f:e7:92:0b:f9:87:da:d0:c2:cd:1f:37:c4:3b:f1:2c:d2:
         38:71:80:22:f9:8e:71:09:76:9b:7d:96:82:9d:a7:d7:94:d8:
         cf:8a:92:9c:81:b9:78:0f:7e:bf:fb:18:d4:73:e9:02:63:8c:
         41:0b:19:89:a8:22:01:ae:da:98:c8:15:db:60:bd:27:83:c8:
         63:6f:77:58:db:ec:d6:e2:d2:bd:7b:8e:4f:0b:76:9a:d6:88:
         05:c0:b5:dc:64:9f:ed:87:72:3f:c3:43:5f:cb:de:6a:56:db:
         5c:1f:1d:9f:89:4a:fd:f9:ff:99:38:91:f4:d1:47:fe:f7:2c:
         bc:0e:78:da:fd:02:9b:0e:d4:b7:79:52:d0:94:be:ed:03:f5:
         27:cc:64:c5:47:29:27:7b:b1:ba:76:cf:5c:f2:cf:fa:2c:fe:
         94:51:84:d5:cc:fe:17:6d:a0:79:4d:1e:a4:b7:c8:65:c2:a5:
         56:89:52:66:25:3c:91:53:99:bd:25:64:83:37:67:c9:98:c4:
         ee:4a:2e:b6
-----BEGIN CERTIFICATE-----
MIIFgzCCBGugAwIBAgICGHEwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAwwKRjM2
OEYyRDBBRjExMC8GA1UEBRMoMjVENjNFMDhFQUJFN0NGQTY3ODVENEMxRDZEMzQx
MTZERTE1QjNEQzAeFw0yMjA4MzAwODI3MDhaFw0yMjEyMzAwODI3MDhaMBgxFjAU
BgNVBAMMDTYzMDg4M2RmLWEzM2YwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQDAuxTlpBwJvYL0eZ/rlT7QKWJzs8+oa+uhokNNLpij3Nc3iidSG8ResA81
CgH0KKb2uqftvBaEI2k/50K2CZM8ZeyFAfiaN4/e2IqQs7WuvY6Q5lnPcyg4GcXo
CQuSL2y4Fxbnf9p2JKzQoEqAkCgdLbj4tH5kerS3C7bI80VWHYeCsrJ2W6kU5R9U
OjesUbx+Z/n4+332kyuS5JMOflAOnvt5932QqPhL1iWpKshqK8HZdnlLLJo+kWz5
/E2C79XuswIU4E+KBCjMT/ledpuB48qrAVaY6hfuWLHTg0Nq1PMBNuwlcI9PR7UZ
GDTUNREY+XaAVZ8HTR7CHEH5g7YbAgMBAAGjggKlMIICoTAdBgNVHQ4EFgQUrAyu
W0fef63anRD8Ngomb0kiT+wwHwYDVR0jBBgwFoAUJdY+COq+fPpnhdTB1tNBFt4V
s9wwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNjhGMkQwLzdGNEE5OEVBNkUwNTExRTg5QzBENkU0QkY4QUVBMjI4L0pkWS1D
T3EtZlBwbmhkVEIxdE5CRnQ0VnM5dy5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljL0pkWS1DT3EtZlBwbmhkVEIxdE5CRnQ0VnM5dy5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdsGCCsGAQUFBwELBIHOMIHLMIGRBggrBgEF
BQcwC4aBhHJzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJl
cl9yZXBvc2l0b3J5L0YzNjhGMkQwLzdGNEE5OEVBNkUwNTExRTg5QzBENkU0QkY4
QUVBMjI4L0UxQTBGQTFBMjUxODExRURBMDg2NzM5NEYxMjIyNDY4LnJvYTA1Bggr
BgEFBQcwDYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54
bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAWaUeAwDQYJKoZIhvcNAQEL
BQADggEBACma5cfqJYpHVKhacWoeFLicSonAHE3u47QEqDfMo1bhiQ4zDXJCFb0O
K7fJUPC+olZb6KtqSziP55IL+Yfa0MLNHzfEO/Es0jhxgCL5jnEJdpt9loKdp9eU
2M+KkpyBuXgPfr/7GNRz6QJjjEELGYmoIgGu2pjIFdtgvSeDyGNvd1jb7Nbi0r17
jk8LdprWiAXAtdxkn+2Hcj/DQ1/L3mpW21wfHZ+JSv35/5k4kfTRR/73LLwOeNr9
ApsO1Ld5UtCUvu0D9SfMZMVHKSd7sbp2z1zyz/os/pRRhNXM/hdtoHlNHqS3yGXC
pVaJUmYlPJFTmb0lZIM3Z8mYxO5KLrY=
-----END CERTIFICATE-----