Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36162E8/785C504AFB4311EB8A8ABF3CD8A014CE/282C5F6AFB4411EBAD5FD43DD8A014CE.roa
File:                     282C5F6AFB4411EBAD5FD43DD8A014CE.roa (raw, json)
Hash identifier:          U697+A8R2jbuI4tCp7Ip7s+7/Tv7VpmenljswT/LaRg=
Subject key identifier:   EC:2E:98:B6:0C:91:C6:D7:91:A4:5F:22:89:C6:B7:EB:2A:50:60:75
Certificate issuer:       /CN=F36162E8AF/serialNumber=DD83C8C005CD7104B826E6DAA24BC95179089AA3
Certificate serial:       04
Authority key identifier: DD:83:C8:C0:05:CD:71:04:B8:26:E6:DA:A2:4B:C9:51:79:08:9A:A3
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/3YPIwAXNcQS4JubaokvJUXkImqM.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36162E8/785C504AFB4311EB8A8ABF3CD8A014CE/282C5F6AFB4411EBAD5FD43DD8A014CE.roa
Signing time:             Thu 12 Aug 2021 08:06:53 +0000
ROA not before:           Thu 12 Aug 2021 08:06:45 +0000
ROA not after:            Thu 31 Aug 2023 08:06:45 +0000
asID:                     328403
IP address blocks:        2001:43f8:13e0::/48 maxlen: 48

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4 (0x4)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36162E8AF/serialNumber=DD83C8C005CD7104B826E6DAA24BC95179089AA3
        Validity
            Not Before: Aug 12 08:06:45 2021 GMT
            Not After : Aug 31 08:06:45 2023 GMT
        Subject: CN=6114d69d-dce3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:9c:04:af:ba:b0:96:7f:c7:47:eb:6f:d5:4a:
                    71:ae:2d:ec:67:a5:f4:cd:d9:a4:99:f5:d1:ac:3b:
                    dd:41:e9:0d:e8:69:c7:6d:79:a7:6d:8c:ac:4e:eb:
                    57:c8:7a:5d:c7:52:52:eb:07:a0:7e:7e:b1:16:28:
                    a9:87:ad:d3:a3:c3:6b:5b:64:92:c0:e2:1b:a7:1e:
                    b7:72:72:b4:40:75:9a:c2:5b:5a:02:66:28:40:03:
                    c6:8b:7e:e6:3f:ef:d0:75:59:76:45:fa:4d:d0:b0:
                    f3:38:58:d5:8e:bc:f4:53:42:17:c4:b2:78:60:27:
                    dc:dc:5e:3a:f2:b3:a3:3a:7f:ee:a6:76:d9:ce:ab:
                    e6:eb:fb:f5:28:ff:e2:54:9d:de:57:6f:3f:a7:7e:
                    2f:f3:c1:29:44:32:d5:48:2e:ff:c2:18:dc:e3:32:
                    68:91:9b:4b:e6:76:24:91:c1:04:d3:75:2e:4c:39:
                    b5:43:2b:a6:52:76:61:61:4e:c4:14:63:8c:f5:d9:
                    a5:4b:cb:d3:ca:95:ac:b0:a7:32:fa:d1:da:86:8d:
                    04:96:cd:66:71:e0:70:a0:05:33:20:66:01:81:4f:
                    7b:6b:0d:0a:f0:6d:00:b9:b6:c1:52:ef:6a:1e:ec:
                    a7:89:72:67:c5:09:40:aa:ad:ba:95:ef:c6:3a:63:
                    de:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EC:2E:98:B6:0C:91:C6:D7:91:A4:5F:22:89:C6:B7:EB:2A:50:60:75
            X509v3 Authority Key Identifier:
                keyid:DD:83:C8:C0:05:CD:71:04:B8:26:E6:DA:A2:4B:C9:51:79:08:9A:A3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36162E8/785C504AFB4311EB8A8ABF3CD8A014CE/3YPIwAXNcQS4JubaokvJUXkImqM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/3YPIwAXNcQS4JubaokvJUXkImqM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36162E8/785C504AFB4311EB8A8ABF3CD8A014CE/282C5F6AFB4411EBAD5FD43DD8A014CE.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:43f8:13e0::/48

    Signature Algorithm: sha256WithRSAEncryption
         7b:d7:46:9c:68:e5:b7:c5:92:15:c2:f6:cc:7a:bb:09:c2:a5:
         0a:7a:4d:f0:9e:a5:cb:77:c0:11:c0:8d:07:48:cf:eb:65:12:
         9d:20:8b:6b:f6:35:8b:3f:bf:ca:c6:76:c1:71:c3:f6:ff:8d:
         c4:f8:42:00:c4:58:60:e2:5a:05:4f:9d:63:3e:21:72:08:e2:
         e8:af:09:f4:67:79:99:a4:fe:ae:cc:b9:d2:d6:32:05:42:83:
         fb:f9:a0:49:a9:f2:bf:47:04:b3:79:dc:85:20:3c:28:e9:70:
         0f:81:ac:74:a3:23:8e:74:eb:03:d0:e7:a1:0b:57:07:b7:03:
         ef:ec:be:2b:14:89:af:2b:d7:58:c4:1f:7b:9a:13:3d:b4:0d:
         8d:e9:51:e7:1a:32:7a:89:2a:39:ae:28:78:aa:ae:c6:4f:b7:
         f9:81:ac:2a:14:e9:8e:87:2f:28:2c:f4:91:24:2b:1e:fe:13:
         50:72:bb:3a:b5:49:b0:4f:4b:9b:28:be:d4:bb:73:82:4c:26:
         e9:51:01:ae:8f:ee:21:34:67:74:42:3c:94:7d:0a:81:8b:2c:
         16:6a:b4:06:a6:35:00:e0:ed:8b:26:d0:56:49:17:6b:e2:28:
         bb:aa:b7:9f:b8:13:e3:01:6f:0f:a2:29:42:00:67:b2:20:07:
         e6:48:27:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----