Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/2621C38E391C11ECBB78386AD8A014CE.roa
File:                     2621C38E391C11ECBB78386AD8A014CE.roa (raw, json)
Hash identifier:          BOuIM2iRrhh8oRT7zqwXx+QKl/E4WBbCPNEvvpB112Y=
Subject key identifier:   EB:06:0E:F1:DE:BA:F7:BF:20:8A:A2:FE:CA:50:15:40:63:A4:74:6D
Certificate issuer:       /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial:       0C67
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access:    rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/2621C38E391C11ECBB78386AD8A014CE.roa
Signing time:             Sat 30 Oct 2021 00:56:00 +0000
ROA not before:           Sat 30 Oct 2021 00:00:57 +0000
ROA not after:            Sun 30 Oct 2022 00:00:57 +0000
asID:                     139879
IP address blocks:        156.247.128.0/17 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3175 (0xc67)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
        Validity
            Not Before: Oct 30 00:00:57 2021 GMT
            Not After : Oct 30 00:00:57 2022 GMT
        Subject: CN=617c9820-b8d6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:fa:84:cb:05:70:42:48:21:10:4b:02:a3:1b:6a:
                    ee:b9:33:70:54:ae:0c:43:63:b5:41:f8:2b:83:84:
                    0c:e9:a2:e0:2b:cc:7e:ec:55:7c:68:e3:31:6d:a8:
                    0b:f7:69:7c:e7:44:e7:db:bd:cd:e1:29:c3:5b:84:
                    e7:01:3a:7d:61:9a:68:72:af:da:d8:e8:b6:23:eb:
                    17:2e:76:c8:9d:e1:1d:8e:da:d4:99:78:17:73:1b:
                    4b:87:31:c0:f4:58:02:f6:c2:94:79:d5:dd:35:bc:
                    70:9c:63:f2:45:cf:d6:c9:2d:f8:55:10:ba:64:23:
                    57:66:bf:4d:f9:09:99:98:65:eb:28:9f:4b:51:be:
                    90:3c:c7:7b:20:fc:42:59:b9:ba:35:b1:ad:72:a5:
                    57:08:40:e0:2a:bb:31:38:73:e0:b3:41:96:42:34:
                    be:eb:af:d8:d8:07:fc:89:40:38:97:1a:a1:85:4d:
                    31:33:ee:f2:87:1d:7f:7e:61:b7:f2:96:e5:e8:f9:
                    b9:d8:d1:ab:e8:af:44:8b:70:b1:39:1d:d1:33:ab:
                    f1:64:08:69:77:94:a3:14:6e:ae:a9:b2:b7:c2:83:
                    b3:0f:19:f7:87:8f:93:25:7b:d9:2a:3a:22:79:67:
                    a0:46:9b:f5:f1:76:06:c4:88:bf:89:d4:80:d6:35:
                    5a:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EB:06:0E:F1:DE:BA:F7:BF:20:8A:A2:FE:CA:50:15:40:63:A4:74:6D
            X509v3 Authority Key Identifier:
                keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/2621C38E391C11ECBB78386AD8A014CE.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  156.247.128.0/17

    Signature Algorithm: sha256WithRSAEncryption
         17:2b:da:a7:d8:46:0a:a7:88:09:76:db:6a:a4:f5:89:d0:bf:
         14:9d:c4:b4:00:ca:1d:83:3a:35:20:d8:dd:f2:b3:a5:d0:9c:
         d1:1f:1d:25:92:3c:22:70:56:cc:2d:38:03:5f:21:cc:a1:0f:
         83:41:94:ec:e5:68:9e:cd:24:a2:44:1a:de:c5:43:0e:04:41:
         8b:da:9a:2c:a8:8d:65:05:01:dd:16:46:73:61:11:ec:df:f1:
         3c:42:11:e6:90:3d:b8:3a:27:74:65:d6:53:fc:4d:84:0e:b3:
         26:2e:5c:ee:09:d2:84:24:3e:82:60:c4:c8:d0:24:32:90:4c:
         24:05:29:1b:d2:af:1a:21:f5:97:1a:eb:f7:1f:bd:d7:cb:35:
         9a:bb:b1:b2:38:03:4e:0c:17:2e:b3:16:e2:dd:33:94:f4:ce:
         67:c3:5e:96:7f:b3:ad:63:23:f8:62:c1:b4:5f:07:1b:89:de:
         fc:2a:54:e4:bb:f7:6e:98:bf:a4:66:c1:67:2b:2f:ee:ec:db:
         20:73:99:bc:da:9b:df:e2:dd:69:6c:b3:6c:ae:d9:ee:a7:39:
         ce:91:ab:dd:00:28:76:b3:06:fa:14:10:e6:47:8c:e1:79:d1:
         e4:07:88:99:e1:40:a7:0b:94:8f:dd:ca:e8:dd:a2:e3:ea:67:
         10:62:1d:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----