Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3691764/E60A9D42EF9811EBA4137114D8A014CE/16065094F04E11EBA478622BD8A014CE.roa
File:                     16065094F04E11EBA478622BD8A014CE.roa (raw, json)
Hash identifier:          88ExgIY+S/UAWAoMUCLir9t7bb0eXzCQgaClRQv2X2k=
Subject key identifier:   F0:66:FF:3F:32:B4:1D:CD:50:73:D1:26:FF:53:56:BD:C0:BD:81:01
Certificate issuer:       /CN=F3691764AF/serialNumber=BFB4DE18AFD8D3F86F346ABFBD2E323781996687
Certificate serial:       03
Authority key identifier: BF:B4:DE:18:AF:D8:D3:F8:6F:34:6A:BF:BD:2E:32:37:81:99:66:87
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/v7TeGK_Y0_hvNGq_vS4yN4GZZoc.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3691764/E60A9D42EF9811EBA4137114D8A014CE/16065094F04E11EBA478622BD8A014CE.roa
Signing time:             Thu 29 Jul 2021 09:19:54 +0000
ROA not before:           Thu 29 Jul 2021 09:19:48 +0000
ROA not after:            Mon 29 Jul 2024 09:19:48 +0000
asID:                     37603
IP address blocks:        154.66.80.0/22 maxlen: 22
                          2c0f:1a00::/32 maxlen: 32

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3 (0x3)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3691764AF/serialNumber=BFB4DE18AFD8D3F86F346ABFBD2E323781996687
        Validity
            Not Before: Jul 29 09:19:48 2021 GMT
            Not After : Jul 29 09:19:48 2024 GMT
        Subject: CN=610272ba-276f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:37:cf:af:18:8a:05:04:6f:6e:5a:27:e6:2f:
                    c6:46:90:df:0d:a3:98:27:e5:f2:57:c1:a4:19:73:
                    c3:57:d7:e7:55:0a:e1:ed:b5:06:9c:18:ce:f1:0a:
                    1b:47:d4:b9:8e:40:26:98:8b:30:af:cd:42:cc:74:
                    5f:37:39:5b:9c:10:35:62:df:3a:45:5b:b1:96:dd:
                    1b:0c:e1:ef:8a:04:e9:c3:34:e6:d8:83:53:be:a6:
                    4b:6e:2e:c5:2c:f1:46:3c:80:d8:7c:3a:c0:7f:ef:
                    b4:6d:b3:c7:0f:4f:1c:98:79:c6:a2:85:f7:23:fa:
                    80:e5:59:e4:20:6f:3c:e2:40:70:f8:86:8f:f7:a6:
                    cb:fe:0e:7b:d8:aa:60:99:fc:65:2b:eb:2f:04:9b:
                    8b:08:4f:c6:f2:49:da:39:ca:93:cd:71:a9:f4:60:
                    28:fd:08:a0:e8:b6:14:ad:b1:61:f6:89:78:e0:4e:
                    69:dc:26:47:2b:f8:4f:b7:de:35:c2:9c:9e:b1:ea:
                    6f:a1:7f:5b:15:46:0b:32:b7:08:c4:79:8a:dd:3e:
                    57:d5:e2:b5:22:d1:8d:e5:31:b0:20:f7:92:21:9b:
                    b8:a3:d7:30:b6:4b:4d:37:df:39:1d:ff:d4:bc:97:
                    31:b3:a0:3b:34:58:36:0f:ec:8f:1d:70:12:e8:01:
                    6e:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F0:66:FF:3F:32:B4:1D:CD:50:73:D1:26:FF:53:56:BD:C0:BD:81:01
            X509v3 Authority Key Identifier:
                keyid:BF:B4:DE:18:AF:D8:D3:F8:6F:34:6A:BF:BD:2E:32:37:81:99:66:87

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3691764/E60A9D42EF9811EBA4137114D8A014CE/v7TeGK_Y0_hvNGq_vS4yN4GZZoc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/v7TeGK_Y0_hvNGq_vS4yN4GZZoc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3691764/E60A9D42EF9811EBA4137114D8A014CE/16065094F04E11EBA478622BD8A014CE.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  154.66.80.0/22
                IPv6:
                  2c0f:1a00::/32

    Signature Algorithm: sha256WithRSAEncryption
         a3:ec:80:36:76:ee:02:cc:9f:e4:b9:89:95:22:b1:19:cc:28:
         b0:aa:68:b2:dd:d4:6d:08:22:03:a2:1c:e8:df:af:e1:b4:77:
         0d:89:16:e9:80:28:39:93:df:eb:e7:25:e6:b5:f6:20:22:80:
         42:b8:29:31:21:63:a8:b2:f8:4b:f2:7f:b2:47:3c:6e:5f:c7:
         4a:df:8f:d6:69:63:f1:03:76:93:d5:a5:e3:df:00:c4:74:cb:
         ac:19:5a:b8:fe:3f:4d:00:90:d7:d3:25:f6:1d:23:9b:27:2b:
         39:7a:ea:16:cc:7b:22:d2:ed:40:a2:54:fe:eb:b6:66:a4:6e:
         09:02:fa:78:41:41:91:73:72:ad:b2:39:39:44:cb:1e:39:37:
         9b:fd:a9:d2:c1:90:20:48:86:7f:6b:ca:d9:1c:37:b4:14:6b:
         c0:ca:e0:57:66:fd:00:39:f9:72:2f:45:ce:75:c7:cd:3b:8d:
         bf:cf:79:25:b4:6e:6e:bc:5f:3f:41:6f:02:c3:41:a6:97:a0:
         10:02:7b:5a:65:60:24:d2:19:96:dc:ca:f1:f2:b8:27:7e:4a:
         d4:d9:48:d9:52:f1:96:e0:4b:f9:79:2e:fd:52:95:f1:a5:75:
         0d:d6:19:42:77:4e:43:9a:74:2c:0e:ce:cb:c3:3e:e9:0f:c5:
         30:ec:25:e2
-----BEGIN CERTIFICATE-----
MIIFkTCCBHmgAwIBAgIBAzANBgkqhkiG9w0BAQsFADBIMRMwEQYDVQQDDApGMzY5
MTc2NEFGMTEwLwYDVQQFEyhCRkI0REUxOEFGRDhEM0Y4NkYzNDZBQkZCRDJFMzIz
NzgxOTk2Njg3MB4XDTIxMDcyOTA5MTk0OFoXDTI0MDcyOTA5MTk0OFowGDEWMBQG
A1UEAwwNNjEwMjcyYmEtMjc2ZjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBAMY3z68YigUEb25aJ+YvxkaQ3w2jmCfl8lfBpBlzw1fX51UK4e21BpwYzvEK
G0fUuY5AJpiLMK/NQsx0Xzc5W5wQNWLfOkVbsZbdGwzh74oE6cM05tiDU76mS24u
xSzxRjyA2Hw6wH/vtG2zxw9PHJh5xqKF9yP6gOVZ5CBvPOJAcPiGj/emy/4Oe9iq
YJn8ZSvrLwSbiwhPxvJJ2jnKk81xqfRgKP0IoOi2FK2xYfaJeOBOadwmRyv4T7fe
NcKcnrHqb6F/WxVGCzK3CMR5it0+V9XitSLRjeUxsCD3kiGbuKPXMLZLTTffOR3/
1LyXMbOgOzRYNg/sjx1wEugBbokCAwEAAaOCArQwggKwMB0GA1UdDgQWBBTwZv8/
MrQdzVBz0Sb/U1a9wL2BATAfBgNVHSMEGDAWgBS/tN4Yr9jT+G80ar+9LjI3gZlm
hzAOBgNVHQ8BAf8EBAMCB4AwgZUGA1UdHwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6
Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVyX3JlcG9zaXRvcnkv
RjM2OTE3NjQvRTYwQTlENDJFRjk4MTFFQkE0MTM3MTE0RDhBMDE0Q0UvdjdUZUdL
X1kwX2h2TkdxX3ZTNHlONEdaWm9jLmNybDBnBggrBgEFBQcBAQRbMFkwVwYIKwYB
BQUHMAKGS3JzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L2Fmcmlu
aWMvdjdUZUdLX1kwX2h2TkdxX3ZTNHlONEdaWm9jLmNlcjBPBgNVHSABAf8ERTBD
MEEGCCsGAQUFBw4CMDUwMwYIKwYBBQUHAgEWJ2h0dHBzOi8vcnBraS5hZnJpbmlj
Lm5ldC9wb2xpY3kvQ1BTLnBkZjCB2wYIKwYBBQUHAQsEgc4wgcswgZEGCCsGAQUF
BzALhoGEcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVy
X3JlcG9zaXRvcnkvRjM2OTE3NjQvRTYwQTlENDJFRjk4MTFFQkE0MTM3MTE0RDhB
MDE0Q0UvMTYwNjUwOTRGMDRFMTFFQkE0Nzg2MjJCRDhBMDE0Q0Uucm9hMDUGCCsG
AQUFBzANhilodHRwczovL3JyZHAuYWZyaW5pYy5uZXQvbm90aWZpY2F0aW9uLnht
bDAuBggrBgEFBQcBBwEB/wQfMB0wDAQCAAEwBgMEAppCUDANBAIAAjAHAwUALA8a
ADANBgkqhkiG9w0BAQsFAAOCAQEAo+yANnbuAsyf5LmJlSKxGcwosKpost3UbQgi
A6Ic6N+v4bR3DYkW6YAoOZPf6+cl5rX2ICKAQrgpMSFjqLL4S/J/skc8bl/HSt+P
1mlj8QN2k9Wl498AxHTLrBlauP4/TQCQ19Ml9h0jmycrOXrqFsx7ItLtQKJU/uu2
ZqRuCQL6eEFBkXNyrbI5OUTLHjk3m/2p0sGQIEiGf2vK2Rw3tBRrwMrgV2b9ADn5
ci9FznXHzTuNv895JbRubrxfP0FvAsNBppegEAJ7WmVgJNIZltzK8fK4J35K1NlI
2VLxluBL+Xku/VKV8aV1DdYZQndOQ5p0LA7Oy8M+6Q/FMOwl4g==
-----END CERTIFICATE-----