Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3636185/6EFD78B6270911ECAF80DC7BD8A014CE/67B8915635CA11ECB7B4FB2DD8A014CE.roa
File:                     67B8915635CA11ECB7B4FB2DD8A014CE.roa (raw, json)
Hash identifier:          eosicFG2NSuviO16TG3RiesF12izD2SmmWiOAbZni+Y=
Subject key identifier:   98:6C:4C:DC:09:BA:20:12:1D:49:0F:B0:76:9F:18:39:78:2F:C2:10
Certificate issuer:       /CN=F3636185AF/serialNumber=EF8798989E4B8FB35946574F7BC7F08E2CF7FE4B
Certificate serial:       24
Authority key identifier: EF:87:98:98:9E:4B:8F:B3:59:46:57:4F:7B:C7:F0:8E:2C:F7:FE:4B
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/74eYmJ5Lj7NZRldPe8fwjiz3_ks.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3636185/6EFD78B6270911ECAF80DC7BD8A014CE/67B8915635CA11ECB7B4FB2DD8A014CE.roa
Signing time:             Mon 25 Oct 2021 19:33:18 +0000
ROA not before:           Mon 25 Oct 2021 19:33:15 +0000
ROA not after:            Wed 24 Jan 2024 19:33:15 +0000
asID:                     22822
IP address blocks:        2c0f:fed8::/32 maxlen: 48

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 36 (0x24)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3636185AF/serialNumber=EF8798989E4B8FB35946574F7BC7F08E2CF7FE4B
        Validity
            Not Before: Oct 25 19:33:15 2021 GMT
            Not After : Jan 24 19:33:15 2024 GMT
        Subject: CN=6177067e-955a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:77:4d:f2:9f:ce:90:36:a8:09:9d:c5:d0:08:
                    cb:31:eb:76:33:d4:0c:47:b6:55:7d:c1:47:ab:cb:
                    83:9c:20:5e:4a:ef:fb:51:c2:f4:85:96:e3:cb:fb:
                    54:cd:89:f2:cb:33:b5:88:e2:47:fa:65:0c:26:5f:
                    a7:be:c1:91:f5:79:c7:5f:25:12:1a:bd:04:d8:d4:
                    e9:e8:d4:04:30:5d:d7:c7:3f:aa:46:97:62:11:cf:
                    42:99:bb:a3:84:c1:e0:e2:a0:37:7d:e1:da:be:e2:
                    bf:a5:9b:52:f9:56:60:99:e8:3e:6e:a8:69:ba:f1:
                    43:46:e8:45:de:66:05:d5:c3:0f:66:90:73:dd:6e:
                    ae:c6:e4:4e:c1:2e:0b:c6:ec:7f:c2:84:65:34:f3:
                    71:46:40:e5:df:ea:fe:e8:e6:6a:15:0a:10:cf:02:
                    e4:77:f0:c0:2f:e1:99:5b:c2:a2:28:5b:3c:26:21:
                    03:c1:e8:80:bb:ba:24:86:2d:4a:a6:7b:f7:b7:b2:
                    a1:e6:d1:70:b4:1d:79:ab:d4:98:cf:14:a5:70:3c:
                    31:1d:ff:22:24:cc:41:4e:9f:b9:44:cb:de:8f:38:
                    b1:6a:7d:c8:45:34:08:d4:7f:d1:fe:8d:a0:47:66:
                    f3:28:9e:73:cb:fd:fb:3b:bc:9d:8e:ce:ea:63:48:
                    e0:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                98:6C:4C:DC:09:BA:20:12:1D:49:0F:B0:76:9F:18:39:78:2F:C2:10
            X509v3 Authority Key Identifier:
                keyid:EF:87:98:98:9E:4B:8F:B3:59:46:57:4F:7B:C7:F0:8E:2C:F7:FE:4B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3636185/6EFD78B6270911ECAF80DC7BD8A014CE/74eYmJ5Lj7NZRldPe8fwjiz3_ks.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/74eYmJ5Lj7NZRldPe8fwjiz3_ks.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3636185/6EFD78B6270911ECAF80DC7BD8A014CE/67B8915635CA11ECB7B4FB2DD8A014CE.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  2c0f:fed8::/32

    Signature Algorithm: sha256WithRSAEncryption
         b2:71:cc:60:aa:79:a6:ef:86:d1:bd:c4:46:82:68:c7:6f:46:
         20:a9:5f:6b:a9:c6:da:b3:5e:b9:98:fe:b2:21:40:5b:ea:ab:
         6b:a0:87:e8:d9:53:32:b6:b1:86:84:92:b9:81:0d:16:d4:28:
         c3:a5:87:f6:e6:dc:c4:9f:c3:9c:88:e3:a8:f1:00:99:16:7c:
         c1:04:e0:e5:4e:52:89:86:c5:d5:f8:b8:a2:4c:62:d3:31:db:
         a0:39:68:0e:9b:ac:b0:c9:e1:03:b8:2f:06:1e:cc:c2:a5:b0:
         59:f1:df:28:1f:db:27:ae:08:80:d8:57:41:bc:b8:71:ba:32:
         aa:5f:b2:cc:8d:9b:b3:d3:6c:6f:52:72:ea:eb:e5:c7:c9:0f:
         9a:62:97:3d:f2:d1:9c:da:88:bf:ff:28:da:3e:a6:d6:19:b6:
         61:ce:f8:fa:b8:ed:e6:a6:2a:af:21:c6:4c:27:df:f4:d9:d6:
         f4:51:e6:31:3d:ce:11:a9:33:c5:db:72:c4:20:63:80:8f:9c:
         8d:07:e3:f0:fe:16:01:65:ec:84:71:23:65:b4:30:0b:18:13:
         10:ea:6a:8a:96:b8:67:b5:e2:c7:ae:dd:60:b2:6a:cc:c4:08:
         c6:f8:08:06:b6:3c:4e:65:02:b2:fe:63:95:70:82:69:11:bb:
         2a:5a:04:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----