Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F367F26D/2D5854E870B911E9B7123D3FF8AEA228/DC882C24529611EC95946D58D8A014CE.roa
File:                     DC882C24529611EC95946D58D8A014CE.roa (raw, json)
Hash identifier:          GcP0tIidOaYaP3chKxpQnPcBkQqv5MN/4KL6LLSa5Dg=
Subject key identifier:   E1:56:07:2A:13:F7:88:1A:09:E3:AB:C7:26:8A:E1:30:A2:1C:75:D0
Certificate issuer:       /CN=F367F26DAF/serialNumber=AB19964619FF85343CC091180673A8AC528610F4
Certificate serial:       03E4
Authority key identifier: AB:19:96:46:19:FF:85:34:3C:C0:91:18:06:73:A8:AC:52:86:10:F4
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/qxmWRhn_hTQ8wJEYBnOorFKGEPQ.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F367F26D/2D5854E870B911E9B7123D3FF8AEA228/DC882C24529611EC95946D58D8A014CE.roa
Signing time:             Wed 01 Dec 2021 11:07:24 +0000
ROA not before:           Wed 01 Dec 2021 11:07:20 +0000
ROA not after:            Fri 01 Dec 2023 11:07:20 +0000
asID:                     328366
IP address blocks:        2c0f:efe0::/32 maxlen: 128

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 996 (0x3e4)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F367F26DAF/serialNumber=AB19964619FF85343CC091180673A8AC528610F4
        Validity
            Not Before: Dec  1 11:07:20 2021 GMT
            Not After : Dec  1 11:07:20 2023 GMT
        Subject: CN=61a7576c-dc43
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:c3:56:d4:7e:92:1d:5a:84:80:f1:15:f8:43:
                    75:6e:b0:b1:46:52:50:24:15:4f:f6:4e:85:b6:28:
                    0c:9a:b9:05:97:9d:57:9c:de:1c:9d:26:d2:89:08:
                    28:ce:cb:76:6f:07:f9:6c:31:39:4c:f4:72:9a:e5:
                    16:52:f3:da:d0:8c:64:46:ed:c6:2b:d0:b8:77:a7:
                    24:0d:ad:cd:c8:54:e4:8f:c5:12:33:19:33:90:a6:
                    a8:2b:2a:07:9b:83:12:52:e5:95:ca:42:32:5a:4b:
                    c3:e6:54:ec:ba:cd:96:2b:f8:1d:64:4f:9b:12:96:
                    26:78:c4:75:11:01:f5:42:a7:98:5a:39:a3:ae:d9:
                    9b:53:05:42:c3:c0:f6:63:ee:47:97:3e:72:0c:b4:
                    d8:45:7f:d7:d4:22:ea:b9:5b:92:d2:13:5e:f7:8e:
                    64:5a:ef:c3:80:9c:71:2b:b0:09:25:d0:4c:2f:f7:
                    9d:a9:bd:52:8c:69:b0:da:b1:c6:de:f7:d0:3a:70:
                    32:f8:f0:54:c5:c1:c6:39:5b:74:bd:de:fb:7d:d0:
                    18:10:7a:17:f9:c7:11:c1:5e:f9:b9:70:ac:13:c8:
                    32:26:ce:40:b4:eb:e3:5f:fa:61:d1:e8:b9:82:b0:
                    d0:30:be:62:f6:53:24:b7:9a:3e:f5:5a:0f:8c:6a:
                    a3:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E1:56:07:2A:13:F7:88:1A:09:E3:AB:C7:26:8A:E1:30:A2:1C:75:D0
            X509v3 Authority Key Identifier:
                keyid:AB:19:96:46:19:FF:85:34:3C:C0:91:18:06:73:A8:AC:52:86:10:F4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F367F26D/2D5854E870B911E9B7123D3FF8AEA228/qxmWRhn_hTQ8wJEYBnOorFKGEPQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/qxmWRhn_hTQ8wJEYBnOorFKGEPQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F367F26D/2D5854E870B911E9B7123D3FF8AEA228/DC882C24529611EC95946D58D8A014CE.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  2c0f:efe0::/32

    Signature Algorithm: sha256WithRSAEncryption
         04:8a:f9:6d:c9:93:5c:1a:82:4d:8c:60:a5:d7:e4:02:94:77:
         48:0f:fc:d5:9a:f9:f9:96:cf:0b:16:6b:55:e1:7f:6d:13:cf:
         48:31:d2:04:96:4e:d9:ba:58:89:bd:28:ba:08:33:60:e6:46:
         04:8a:c3:58:5a:41:29:1f:58:aa:c5:3f:14:40:b6:9f:00:33:
         a8:bb:27:00:b6:de:d4:30:cf:0c:32:e4:94:70:bf:de:ae:fa:
         e5:61:c2:64:1f:d7:70:97:1e:75:c9:96:a9:02:22:a7:38:47:
         82:c7:a0:83:0a:bc:c0:01:49:1f:ab:ff:fa:1b:de:f2:be:f5:
         14:c6:f1:75:48:40:fc:b8:30:50:38:25:20:19:40:a4:df:a0:
         26:d0:29:43:e3:a1:2e:91:32:9b:4e:c5:19:2e:97:1b:54:f0:
         e8:89:7e:af:f5:1b:f0:00:63:30:da:22:a7:4b:ad:62:81:af:
         8f:c4:a4:cc:2f:2d:d6:18:46:9e:38:f0:50:bd:b7:32:72:b9:
         a7:f2:6f:77:c7:65:30:3b:a6:32:c7:d6:63:bb:8a:01:09:d0:
         b8:c2:2e:1f:85:01:f7:f1:d5:40:dd:a1:ea:fe:66:5d:1f:2a:
         ae:55:a9:2e:b3:70:85:e8:74:e2:2c:57:6d:28:0a:fd:78:ca:
         81:01:e9:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----