Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/3009EEA201BE11EC82254667D8A014CE.roa
File:                     3009EEA201BE11EC82254667D8A014CE.roa (raw, json)
Hash identifier:          V+MxqMSwGOTJX8e2ukTrhPeNQ2xmMA/JxjSfC/arw2U=
Subject key identifier:   B0:3A:EA:8C:8A:30:7A:3D:CF:A8:45:F4:75:9F:97:71:00:C4:B0:E7
Certificate issuer:       /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial:       08C1
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access:    rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/3009EEA201BE11EC82254667D8A014CE.roa
Signing time:             Fri 20 Aug 2021 13:55:45 +0000
ROA not before:           Fri 20 Aug 2021 13:55:41 +0000
ROA not after:            Tue 20 Sep 2022 13:55:41 +0000
asID:                     135026
IP address blocks:        156.227.7.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2241 (0x8c1)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
        Validity
            Not Before: Aug 20 13:55:41 2021 GMT
            Not After : Sep 20 13:55:41 2022 GMT
        Subject: CN=611fb461-2fa6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:cd:dc:9b:59:8d:ec:62:1f:a4:29:0c:eb:d7:
                    45:cc:01:32:cb:39:00:13:ed:b2:cf:47:c7:37:b0:
                    b9:9f:8a:d8:e7:c5:82:a2:79:2b:25:f8:ad:2a:4a:
                    0a:4f:e0:49:dd:98:c0:09:b9:e9:03:56:05:b2:19:
                    69:49:f8:a1:ba:fc:82:bc:83:ec:97:b2:c8:1d:15:
                    65:29:ce:b7:71:33:cf:a3:54:5c:83:f5:08:db:70:
                    40:44:de:0b:e4:7b:08:3f:63:de:85:fa:33:fb:e1:
                    f0:8c:45:7e:cb:2d:05:72:00:8c:f7:5b:ae:bb:96:
                    b0:b8:29:53:52:f2:91:bc:fd:2a:ac:f6:05:ea:92:
                    3c:af:a1:87:9d:56:26:42:28:51:39:1b:e7:20:92:
                    91:6d:14:9c:cf:32:ea:33:17:d6:44:2c:6e:ef:05:
                    2a:5f:29:21:7f:69:0b:d2:0f:46:aa:67:0c:3a:6c:
                    06:98:c5:a1:43:7a:e7:40:89:73:b8:77:96:46:5b:
                    ed:fb:1d:6b:3e:91:08:b4:3d:9d:00:a2:db:5d:38:
                    70:df:d5:17:0e:4c:41:cb:4d:80:d5:f7:71:75:fe:
                    79:33:69:cf:cd:f5:7f:fb:81:e5:3e:43:32:59:56:
                    b8:1d:e0:83:7d:dc:38:15:6d:75:74:f4:d3:76:66:
                    2a:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B0:3A:EA:8C:8A:30:7A:3D:CF:A8:45:F4:75:9F:97:71:00:C4:B0:E7
            X509v3 Authority Key Identifier:
                keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/3009EEA201BE11EC82254667D8A014CE.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  156.227.7.0/24

    Signature Algorithm: sha256WithRSAEncryption
         0a:47:07:4a:bf:62:ca:c4:0c:15:a7:61:8b:20:0e:7f:bf:17:
         47:5b:9b:94:71:aa:1f:4a:ac:61:69:2f:e1:66:61:26:36:ce:
         a5:08:14:54:a7:e2:84:b2:72:9d:c3:a0:cb:f1:ca:1e:89:37:
         9a:87:de:39:a2:7a:e4:a0:4a:c5:db:9e:0d:f1:40:61:57:8e:
         53:ec:a9:42:32:fc:1e:b8:fd:4c:fd:2c:d0:8f:d5:58:52:d3:
         49:eb:36:e5:00:e2:5e:5c:cc:28:dc:17:73:2f:0f:10:4d:8c:
         b0:d4:14:c1:0d:da:6e:03:c6:a3:21:76:4a:ef:18:8c:d6:68:
         13:bb:0f:d8:02:9a:de:17:28:1d:55:67:09:40:2f:a4:fc:78:
         7c:ac:f1:ac:8d:2d:41:7e:12:b1:6e:12:06:ff:b8:9e:aa:73:
         ad:be:03:93:b7:62:7b:d9:21:c3:c5:28:13:24:63:8e:06:44:
         46:95:91:4d:e7:22:75:02:6a:ae:c5:4b:5b:b0:d9:f3:9a:c7:
         01:cd:45:80:31:7a:5b:14:bc:fe:6c:ac:ec:3c:31:93:ed:dd:
         05:79:f7:06:a1:60:ac:05:8c:a3:1e:b0:97:f8:9f:35:ef:32:
         c2:f8:94:c4:62:41:ac:fa:f4:94:8a:52:80:06:6e:1a:06:82:
         ec:b8:14:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----