Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3644DAE/F71E7654970411EBB9363730F8AEA228/01AC2746970611EBA5D1A331F8AEA228.roa
File:                     01AC2746970611EBA5D1A331F8AEA228.roa (raw, json)
Hash identifier:          iKZXXizOrioj+y8+XXjvrUFv5cETslWhF/ySBd3peT8=
Subject key identifier:   D8:40:23:E9:33:AC:4B:DE:F7:B1:A4:B3:F7:63:94:AB:E2:CC:47:FB
Certificate issuer:       /CN=F3644DAEAF/serialNumber=707A1F286AE2986DF64910C3034E5189A7C216DD
Certificate serial:       02
Authority key identifier: 70:7A:1F:28:6A:E2:98:6D:F6:49:10:C3:03:4E:51:89:A7:C2:16:DD
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/cHofKGrimG32SRDDA05RiafCFt0.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3644DAE/F71E7654970411EBB9363730F8AEA228/01AC2746970611EBA5D1A331F8AEA228.roa
Signing time:             Tue 06 Apr 2021 18:29:22 +0000
ROA not before:           Tue 06 Apr 2021 18:29:18 +0000
ROA not after:            Wed 05 Apr 2023 18:29:18 +0000
asID:                     328137
IP address blocks:        2c0f:f030::/32 maxlen: 39

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2 (0x2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3644DAEAF/serialNumber=707A1F286AE2986DF64910C3034E5189A7C216DD
        Validity
            Not Before: Apr  6 18:29:18 2021 GMT
            Not After : Apr  5 18:29:18 2023 GMT
        Subject: CN=606ca882-bda9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:7e:76:5b:64:39:4c:53:38:a5:69:da:1e:b3:
                    70:14:5d:22:e4:63:c6:b5:6e:80:16:8d:1b:87:43:
                    18:35:0f:ac:4f:11:06:70:dd:8a:64:17:5f:b0:8c:
                    ab:67:6f:77:9e:76:0d:95:a8:cd:54:6c:c4:7e:96:
                    2b:2a:46:b6:4f:91:74:e3:5e:c4:ee:bd:75:cc:49:
                    01:1e:c7:c2:28:56:1c:cf:cd:e7:26:2d:59:e8:5a:
                    5b:94:4c:98:6f:7c:c2:35:ba:37:da:92:6c:34:46:
                    0c:c8:bb:d6:78:fb:7e:de:ed:79:9a:f5:76:f4:37:
                    28:a4:87:0d:aa:b2:17:ba:44:61:34:59:b0:7b:68:
                    cd:75:09:72:61:2e:e3:0d:05:50:24:51:81:df:f1:
                    30:d8:85:7c:63:03:87:31:a7:3f:1b:ae:e5:9e:aa:
                    e8:fb:8e:88:03:73:a1:79:58:b0:c8:95:ba:e7:54:
                    3b:53:e1:df:ef:ff:c7:27:a3:76:a3:f0:90:0a:95:
                    76:08:81:4b:58:2e:16:79:f8:e3:20:4b:a9:3b:b1:
                    f5:92:a2:5e:12:15:91:da:e8:fb:b1:74:0a:ac:1e:
                    b2:63:da:e4:08:b9:45:f6:7b:1c:ed:58:a2:17:68:
                    61:15:0c:3c:2a:37:4b:1f:f4:05:04:bd:f2:fb:b3:
                    b0:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D8:40:23:E9:33:AC:4B:DE:F7:B1:A4:B3:F7:63:94:AB:E2:CC:47:FB
            X509v3 Authority Key Identifier:
                keyid:70:7A:1F:28:6A:E2:98:6D:F6:49:10:C3:03:4E:51:89:A7:C2:16:DD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3644DAE/F71E7654970411EBB9363730F8AEA228/cHofKGrimG32SRDDA05RiafCFt0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/cHofKGrimG32SRDDA05RiafCFt0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3644DAE/F71E7654970411EBB9363730F8AEA228/01AC2746970611EBA5D1A331F8AEA228.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  2c0f:f030::/32

    Signature Algorithm: sha256WithRSAEncryption
         26:32:bb:6b:61:f4:6c:ee:75:5c:2c:39:f7:e1:fa:3d:74:0a:
         c2:47:6e:65:38:6e:1f:ad:52:02:2d:b3:d7:98:7a:a1:38:77:
         fe:e7:ed:ac:b6:f3:0b:a5:9d:3e:55:ec:21:d8:b9:b5:84:9b:
         d7:8f:92:92:c9:a0:44:55:3e:ca:4e:00:1d:49:05:ef:4c:94:
         e7:6b:46:30:f3:d4:dd:27:4a:d0:77:ed:d1:1c:be:a2:18:4a:
         90:59:81:45:7b:86:cc:3e:26:67:e6:44:9b:be:12:38:74:1a:
         0b:23:80:a7:ed:30:36:6f:7f:62:95:8b:d1:df:e5:f3:62:15:
         5c:75:5d:91:c4:6a:70:cc:39:11:26:f4:8f:87:00:26:89:16:
         8d:cf:19:88:2e:69:48:f8:a7:09:f4:15:19:d9:5f:e7:c5:fa:
         bb:8b:88:79:a0:c6:b2:39:1d:7b:80:a6:f8:03:b2:c3:fb:df:
         b7:6e:71:73:07:56:a9:68:9c:2f:a4:cd:fc:05:bd:a1:bc:bf:
         c4:76:de:da:f3:63:ac:7a:1c:80:36:c9:c8:06:58:03:22:f3:
         93:ad:d6:f7:51:45:f0:57:19:f0:ed:7d:8e:28:db:a2:c6:0a:
         3e:61:71:28:06:b7:a6:2e:dc:20:e6:e4:7b:b1:aa:d4:d1:4d:
         e6:f6:74:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----