Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F364AE44/22270EFEAF4411EB8C257686F8AEA228/C9A54E0EB19A11EBAFB68D75F8AEA228.roa
File:                     C9A54E0EB19A11EBAFB68D75F8AEA228.roa (raw, json)
Hash identifier:          gn7qRlcDrffMv4Qmz5LMlBB0d73Lmjxdgcc054Pkz0c=
Subject key identifier:   CB:C5:59:FF:C6:DB:9B:01:6B:F2:31:D8:6E:48:1D:A0:C5:CB:ED:D8
Certificate issuer:       /CN=F364AE44AF/serialNumber=8F503BD573CE113517CD6B4CFA374A62F15E12C1
Certificate serial:       07
Authority key identifier: 8F:50:3B:D5:73:CE:11:35:17:CD:6B:4C:FA:37:4A:62:F1:5E:12:C1
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/j1A71XPOETUXzWtM-jdKYvFeEsE.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F364AE44/22270EFEAF4411EB8C257686F8AEA228/C9A54E0EB19A11EBAFB68D75F8AEA228.roa
Signing time:             Mon 10 May 2021 14:19:53 +0000
ROA not before:           Mon 10 May 2021 14:19:48 +0000
ROA not after:            Wed 10 May 2023 14:19:48 +0000
asID:                     36925
IP address blocks:        2c0f:fb20::/32 maxlen: 36

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 7 (0x7)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F364AE44AF/serialNumber=8F503BD573CE113517CD6B4CFA374A62F15E12C1
        Validity
            Not Before: May 10 14:19:48 2021 GMT
            Not After : May 10 14:19:48 2023 GMT
        Subject: CN=60994109-fede
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e9:d5:23:ea:a2:c9:a8:9b:40:ae:9e:16:41:f8:
                    87:18:8a:0d:e2:a5:f8:bf:b9:f3:3b:08:1b:0a:d3:
                    54:af:2e:ff:b8:b2:97:55:5a:35:5e:0c:ea:fd:53:
                    6a:2d:3f:00:3f:c9:81:b2:32:cd:9a:34:54:ac:0c:
                    a3:d2:ea:f7:c1:77:27:71:de:7c:2b:77:9e:4b:75:
                    a8:a4:cd:2f:10:bf:ad:ec:bf:c0:4a:e4:84:47:d6:
                    f7:9c:38:eb:80:4a:dd:1f:c6:68:8e:cb:94:17:f4:
                    16:41:13:06:6f:4f:77:d1:c2:f0:4d:c5:4b:51:6d:
                    e3:37:06:4b:96:9d:86:1f:7b:65:e4:31:cb:c5:cd:
                    be:0c:32:2f:b8:1d:20:69:39:f5:a4:6d:5d:00:7c:
                    f4:69:28:44:53:fc:29:f2:0c:6b:97:71:a7:43:85:
                    40:b3:07:0e:4a:ba:a7:7e:18:58:0b:ff:a4:61:b9:
                    2a:fc:a6:72:79:ee:83:82:1c:f7:94:13:cf:56:d4:
                    29:94:8a:df:1b:3a:e1:3c:62:d5:b5:e4:eb:e2:53:
                    cb:14:d1:fe:c8:b4:9c:97:66:12:22:2c:6c:a5:9a:
                    f2:1b:db:7e:64:2a:d0:cc:da:c6:b6:22:cf:5f:07:
                    e8:a5:fc:cc:e0:7f:99:58:b1:99:ec:b4:8f:13:db:
                    a5:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CB:C5:59:FF:C6:DB:9B:01:6B:F2:31:D8:6E:48:1D:A0:C5:CB:ED:D8
            X509v3 Authority Key Identifier:
                keyid:8F:50:3B:D5:73:CE:11:35:17:CD:6B:4C:FA:37:4A:62:F1:5E:12:C1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F364AE44/22270EFEAF4411EB8C257686F8AEA228/j1A71XPOETUXzWtM-jdKYvFeEsE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/j1A71XPOETUXzWtM-jdKYvFeEsE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F364AE44/22270EFEAF4411EB8C257686F8AEA228/C9A54E0EB19A11EBAFB68D75F8AEA228.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  2c0f:fb20::/32

    Signature Algorithm: sha256WithRSAEncryption
         62:0d:71:57:d9:fc:98:7c:07:e8:10:95:af:52:3e:cf:a9:ef:
         4b:d4:24:d7:4a:e1:5d:39:ea:c6:88:af:77:ae:6e:9e:89:02:
         c3:37:04:cd:cc:13:54:0d:7c:8c:5d:a6:94:43:46:23:97:98:
         ae:66:82:53:1a:43:bf:ef:ce:1c:34:3a:a7:7f:79:3d:93:dd:
         d5:5b:bb:85:4f:fc:b2:3c:15:9c:c4:cf:5d:7b:29:78:06:1f:
         f7:9e:a7:e9:47:9d:36:6d:5d:ac:66:7d:d8:29:1d:27:13:0f:
         d4:40:af:76:a2:67:1e:00:4c:58:fb:61:2c:48:62:4d:d7:19:
         3f:fe:b4:27:58:33:8a:3a:62:89:02:de:57:ac:35:1e:59:f7:
         5a:90:a9:8e:1a:14:2c:38:67:3d:be:35:8b:12:32:3c:46:08:
         c2:d3:f8:ea:bc:6a:db:7c:69:cf:60:d3:c3:4f:99:4b:5c:60:
         23:5a:64:e1:2d:03:0a:2e:4e:29:fd:a6:ce:a9:3b:2c:93:76:
         0c:d6:48:96:c8:8d:88:30:9e:ac:1c:e0:9b:ff:35:ed:b5:ad:
         11:dd:50:50:47:91:58:59:05:6e:9b:b2:b4:56:34:8e:57:21:
         9b:88:fc:2e:d9:51:03:3f:eb:b5:ad:81:d5:ac:8f:c9:06:03:
         f1:30:e4:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----