Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/15079ADC708711EBB18F9581F8AEA228.roa
File:                     15079ADC708711EBB18F9581F8AEA228.roa (raw, json)
Hash identifier:          JuEsr1bcscjUseKGFqd98Lw2A3hodOuv3lpwi4rhg/A=
Subject key identifier:   FD:88:5A:C5:DC:AA:83:6B:5E:F2:F1:33:B0:E8:C1:1F:F6:88:B2:46
Certificate issuer:       /CN=F36C58D6AF/serialNumber=48A2F2C4AA4AEA39BE46BFE5F99C92629BBED8FC
Certificate serial:       0360
Authority key identifier: 48:A2:F2:C4:AA:4A:EA:39:BE:46:BF:E5:F9:9C:92:62:9B:BE:D8:FC
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/15079ADC708711EBB18F9581F8AEA228.roa
Signing time:             Tue 16 Feb 2021 18:45:05 +0000
ROA not before:           Tue 16 Feb 2021 18:44:59 +0000
ROA not after:            Wed 16 Feb 2022 18:44:59 +0000
asID:                     213035
IP address blocks:        102.129.145.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 864 (0x360)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36C58D6AF/serialNumber=48A2F2C4AA4AEA39BE46BFE5F99C92629BBED8FC
        Validity
            Not Before: Feb 16 18:44:59 2021 GMT
            Not After : Feb 16 18:44:59 2022 GMT
        Subject: CN=602c12b0-341f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:ed:f7:66:9f:44:61:06:52:48:9c:a4:29:24:
                    cf:7f:11:06:c5:ef:5c:f6:b4:27:f9:03:46:64:09:
                    84:77:d7:82:e7:b3:88:d8:ea:f8:46:cd:1f:1e:06:
                    df:f3:12:38:5a:eb:df:fc:7d:6c:48:56:e2:93:40:
                    54:47:3a:0f:cc:55:1d:b5:7d:4e:94:b5:2b:0e:5b:
                    fa:d8:8c:c9:55:f7:43:f4:71:24:81:11:b1:0a:43:
                    ca:2e:c0:56:8f:a7:c2:5e:21:b1:4e:62:28:f2:c9:
                    6e:f8:fc:f8:4e:f8:26:51:f9:a6:3b:22:e1:a2:61:
                    92:c9:23:1a:33:71:2f:2d:f4:7e:d2:12:76:3a:f6:
                    ae:78:9f:46:32:87:9c:b5:59:e4:e4:fd:31:36:40:
                    02:44:2d:f1:4a:79:7c:2b:f8:39:70:51:3d:f4:80:
                    73:6c:d4:d2:11:ab:b3:3d:37:b5:21:d1:e7:54:a6:
                    b1:f0:5c:4d:6c:0c:ba:ca:5f:04:24:77:a5:48:e1:
                    5b:59:c3:0c:ca:e2:02:c1:35:68:bb:87:5d:b2:41:
                    f8:2e:1e:2c:26:84:7a:0c:c1:50:4b:71:d0:07:c7:
                    45:6f:4e:d1:87:06:fd:34:e2:5e:6a:6d:41:d0:c3:
                    01:87:a9:cc:e7:b1:f9:9f:44:23:ee:c3:0d:6d:0f:
                    51:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FD:88:5A:C5:DC:AA:83:6B:5E:F2:F1:33:B0:E8:C1:1F:F6:88:B2:46
            X509v3 Authority Key Identifier:
                keyid:48:A2:F2:C4:AA:4A:EA:39:BE:46:BF:E5:F9:9C:92:62:9B:BE:D8:FC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/15079ADC708711EBB18F9581F8AEA228.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  102.129.145.0/24

    Signature Algorithm: sha256WithRSAEncryption
         7e:f3:8d:70:99:05:82:50:8a:b2:5b:4e:09:cf:6e:ed:41:88:
         2b:a2:f7:23:ba:e0:35:0d:e5:bd:85:09:b8:32:f6:e8:03:5d:
         fb:db:74:5f:c7:7b:4e:84:d3:71:fa:61:2f:31:52:c3:2c:9b:
         dd:63:8b:48:82:2d:00:ea:5f:d4:a2:be:37:ec:c9:cd:72:d3:
         0d:11:de:f4:6b:a9:61:6e:cf:cc:aa:bb:87:32:4e:6c:a9:f2:
         7b:61:9f:cb:3a:39:c8:7f:7c:42:02:80:f0:5c:f4:11:39:e2:
         2e:a8:7d:fe:e8:04:e4:21:48:ca:3a:18:8c:b3:77:f2:b0:3b:
         8e:f9:67:06:99:d5:26:25:97:14:f8:9b:24:20:6d:02:b2:bd:
         2b:c6:a1:af:c9:01:22:50:67:f0:7b:21:5c:ef:38:04:74:b4:
         a3:75:5a:71:c6:b5:04:0c:3c:7f:8e:d2:af:0a:3b:07:87:c1:
         b8:73:3e:60:ab:4e:91:a3:66:54:0a:a5:ca:06:d3:18:f4:5f:
         87:24:69:6b:84:4c:8f:63:19:29:87:a3:c1:17:02:83:f3:44:
         9b:34:d8:c2:15:1b:5d:ef:6d:fe:b2:d5:8d:20:18:0b:30:67:
         e3:8a:ba:b4:f7:dd:d6:d1:7e:1d:3d:f5:4c:58:63:e7:3e:b0:
         16:6e:43:27
-----BEGIN CERTIFICATE-----
MIIFgzCCBGugAwIBAgICA2AwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
QzU4RDZBRjExMC8GA1UEBRMoNDhBMkYyQzRBQTRBRUEzOUJFNDZCRkU1Rjk5Qzky
NjI5QkJFRDhGQzAeFw0yMTAyMTYxODQ0NTlaFw0yMjAyMTYxODQ0NTlaMBgxFjAU
BgNVBAMTDTYwMmMxMmIwLTM0MWYwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQCs7fdmn0RhBlJInKQpJM9/EQbF71z2tCf5A0ZkCYR314Lns4jY6vhGzR8e
Bt/zEjha69/8fWxIVuKTQFRHOg/MVR21fU6UtSsOW/rYjMlV90P0cSSBEbEKQ8ou
wFaPp8JeIbFOYijyyW74/PhO+CZR+aY7IuGiYZLJIxozcS8t9H7SEnY69q54n0Yy
h5y1WeTk/TE2QAJELfFKeXwr+DlwUT30gHNs1NIRq7M9N7Uh0edUprHwXE1sDLrK
XwQkd6VI4VtZwwzK4gLBNWi7h12yQfguHiwmhHoMwVBLcdAHx0VvTtGHBv004l5q
bUHQwwGHqcznsfmfRCPuww1tD1HTAgMBAAGjggKlMIICoTAdBgNVHQ4EFgQU/Yha
xdyqg2te8vEzsOjBH/aIskYwHwYDVR0jBBgwFoAUSKLyxKpK6jm+Rr/l+ZySYpu+
2PwwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNkM1OEQ2L0Q2OUE0REZFNzMxNjExRTk5MTMzMDM3Q0Y4QUVBMjI4L1NLTHl4
S3BLNmptLVJyX2wtWnlTWXB1LTJQdy5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljL1NLTHl4S3BLNmptLVJyX2wtWnlTWXB1LTJQdy5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdsGCCsGAQUFBwELBIHOMIHLMIGRBggrBgEF
BQcwC4aBhHJzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJl
cl9yZXBvc2l0b3J5L0YzNkM1OEQ2L0Q2OUE0REZFNzMxNjExRTk5MTMzMDM3Q0Y4
QUVBMjI4LzE1MDc5QURDNzA4NzExRUJCMThGOTU4MUY4QUVBMjI4LnJvYTA1Bggr
BgEFBQcwDYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54
bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBABmgZEwDQYJKoZIhvcNAQEL
BQADggEBAH7zjXCZBYJQirJbTgnPbu1BiCui9yO64DUN5b2FCbgy9ugDXfvbdF/H
e06E03H6YS8xUsMsm91ji0iCLQDqX9Sivjfsyc1y0w0R3vRrqWFuz8yqu4cyTmyp
8nthn8s6Och/fEICgPBc9BE54i6off7oBOQhSMo6GIyzd/KwO475ZwaZ1SYllxT4
myQgbQKyvSvGoa/JASJQZ/B7IVzvOAR0tKN1WnHGtQQMPH+O0q8KOweHwbhzPmCr
TpGjZlQKpcoG0xj0X4ckaWuETI9jGSmHo8EXAoPzRJs02MIVG13vbf6y1Y0gGAsw
Z+OKurT33dbRfh099UxYY+c+sBZuQyc=
-----END CERTIFICATE-----