Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36D0F50/5EAAA6B8258F11EBB70B7C19F8AEA228/F205AEEAEFDC11EBADE8C974D8A014CE.roa
File:                     F205AEEAEFDC11EBADE8C974D8A014CE.roa (raw, json)
Hash identifier:          pcJv7h7bH/dezsHVrmESKQQWa+G/l6vSHiMWWtWh54w=
Subject key identifier:   26:55:29:79:3E:21:DB:A6:32:4B:63:52:8B:40:5F:C9:2E:52:31:A9
Certificate issuer:       /CN=F36D0F50AF/serialNumber=AE98A5FDAD2DC9F4FC1BE47F66857A8C47988102
Certificate serial:       019A
Authority key identifier: AE:98:A5:FD:AD:2D:C9:F4:FC:1B:E4:7F:66:85:7A:8C:47:98:81:02
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/rpil_a0tyfT8G-R_ZoV6jEeYgQI.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36D0F50/5EAAA6B8258F11EBB70B7C19F8AEA228/F205AEEAEFDC11EBADE8C974D8A014CE.roa
Signing time:             Wed 28 Jul 2021 19:50:00 +0000
ROA not before:           Thu 29 Jul 2021 19:49:56 +0000
ROA not after:            Sun 30 Jul 2023 19:49:56 +0000
asID:                     37119
IP address blocks:        105.174.12.0/22 maxlen: 22

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 410 (0x19a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36D0F50AF/serialNumber=AE98A5FDAD2DC9F4FC1BE47F66857A8C47988102
        Validity
            Not Before: Jul 29 19:49:56 2021 GMT
            Not After : Jul 30 19:49:56 2023 GMT
        Subject: CN=6101b4e8-b6bd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:64:b2:da:95:18:92:87:30:35:82:cc:a7:ad:
                    89:78:7c:f2:b8:ce:8e:3b:74:45:c1:50:d6:8a:92:
                    34:ea:36:91:59:8c:06:f0:02:19:81:a9:a8:d0:df:
                    56:37:a4:dc:54:8d:c2:98:1c:93:21:02:44:bc:5f:
                    51:c2:4e:7d:1c:d0:c4:8c:da:47:47:e9:92:06:80:
                    e9:2a:35:34:60:92:06:c7:67:03:a2:7a:b3:a0:09:
                    fc:2d:7e:d9:25:77:d4:f1:79:c9:27:40:e3:97:35:
                    44:53:a3:38:27:ad:76:ae:9f:34:28:bd:16:0e:b5:
                    44:bc:e2:41:d6:4b:ad:2d:6e:42:97:cf:b0:36:ed:
                    b5:16:a1:20:74:01:7f:16:66:f8:0a:e7:4d:21:9e:
                    8e:bf:88:c1:d9:14:df:c2:8b:69:e1:43:2a:17:56:
                    df:a2:1e:44:ec:c1:03:40:37:1e:72:72:97:88:66:
                    ad:15:8e:ad:8f:02:16:92:cc:73:3c:28:36:14:7c:
                    5e:77:3e:90:7b:64:b0:9b:8b:ca:58:7c:cd:92:fd:
                    70:47:75:77:e8:3d:7e:f3:34:5c:4b:d4:51:81:3d:
                    c9:1a:7f:6b:ba:1f:55:1c:d5:61:0d:5d:3b:88:b2:
                    c1:1e:47:4a:3e:3e:41:07:7f:3c:14:a2:a7:1d:72:
                    62:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                26:55:29:79:3E:21:DB:A6:32:4B:63:52:8B:40:5F:C9:2E:52:31:A9
            X509v3 Authority Key Identifier:
                keyid:AE:98:A5:FD:AD:2D:C9:F4:FC:1B:E4:7F:66:85:7A:8C:47:98:81:02

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36D0F50/5EAAA6B8258F11EBB70B7C19F8AEA228/rpil_a0tyfT8G-R_ZoV6jEeYgQI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/rpil_a0tyfT8G-R_ZoV6jEeYgQI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36D0F50/5EAAA6B8258F11EBB70B7C19F8AEA228/F205AEEAEFDC11EBADE8C974D8A014CE.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  105.174.12.0/22

    Signature Algorithm: sha256WithRSAEncryption
         bc:ff:e7:a5:87:de:49:9e:62:b4:82:75:5a:3f:50:dc:88:1a:
         9c:25:8d:b7:47:78:af:64:eb:40:2b:fa:3e:e8:96:15:1b:ad:
         34:a8:2a:b5:d1:6b:b4:49:b8:88:45:56:25:18:f3:d4:80:07:
         1a:f9:80:f9:12:6c:5d:69:c9:f6:f3:9a:2f:3a:3c:14:e5:52:
         94:18:cd:97:06:cb:29:e4:39:4a:53:a9:e9:59:0d:3e:9a:07:
         5e:95:ee:25:a5:58:14:63:04:83:73:5a:f7:6a:03:e5:2d:25:
         ae:a9:92:63:46:cf:42:40:ee:29:cb:61:44:00:09:7d:31:15:
         ee:bf:14:31:96:86:77:f6:11:f8:58:e3:0f:e5:aa:89:d3:44:
         ba:22:05:91:a4:43:83:f5:d8:c4:10:a7:51:af:c5:2e:69:a7:
         c2:82:0f:44:4d:e7:46:47:0d:42:bf:de:f1:fb:86:18:ab:8b:
         10:22:d5:39:8f:f6:a1:1a:db:10:f0:a1:0c:40:48:c4:07:bc:
         01:57:4d:33:e2:82:05:8c:7d:26:f3:94:d9:2b:a2:1f:e7:c0:
         59:ce:61:15:3d:4f:c0:b2:38:a9:bc:9e:90:4e:79:1c:7b:d3:
         f1:a1:a7:02:0d:9f:69:44:cc:9e:0a:ac:e5:37:ad:4e:8b:45:
         5b:4b:c8:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----