Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36E2B8C/C8F9DF1E0B6211EE862D868A4AD9E6FC/2422232E101811EE9C0896534AD9E6FC.roa
File:                     2422232E101811EE9C0896534AD9E6FC.roa (raw, json)
Hash identifier:          sbxq1ffwvzAo6X/h3z+AGAdN9GQRZTnwW8wFxAoW1rU=
Subject key identifier:   2E:B6:0A:CD:E3:D4:D9:34:11:79:34:B6:21:D7:D6:23:21:61:02:6B
Certificate issuer:       /CN=F36E2B8CAF/serialNumber=872130E69B3FB8035B1B25D3F6FB974A2A078ECC
Certificate serial:       18
Authority key identifier: 87:21:30:E6:9B:3F:B8:03:5B:1B:25:D3:F6:FB:97:4A:2A:07:8E:CC
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/hyEw5ps_uANbGyXT9vuXSioHjsw.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36E2B8C/C8F9DF1E0B6211EE862D868A4AD9E6FC/2422232E101811EE9C0896534AD9E6FC.roa
Signing time:             Wed 21 Jun 2023 09:43:57 +0000
ROA not before:           Wed 21 Jun 2023 09:43:53 +0000
ROA not after:            Fri 21 Jun 2024 09:43:53 +0000
asID:                     37684
IP address blocks:        2c0f:f408:1::/48 maxlen: 48

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 24 (0x18)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36E2B8CAF/serialNumber=872130E69B3FB8035B1B25D3F6FB974A2A078ECC
        Validity
            Not Before: Jun 21 09:43:53 2023 GMT
            Not After : Jun 21 09:43:53 2024 GMT
        Subject: CN=6492c65d-2dc5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:43:84:e0:41:4b:69:c5:07:65:20:20:fe:5a:
                    2b:16:e6:9d:71:a6:6d:aa:47:12:03:9e:b1:a7:a0:
                    eb:a4:7c:8b:4b:c8:96:aa:f9:a2:ef:26:f1:72:bb:
                    2f:db:3a:49:da:d2:be:f7:f3:6a:e8:c6:e7:2c:c3:
                    51:30:3c:a7:0e:c8:60:9f:d3:6d:67:1c:80:c7:0f:
                    d1:78:09:0a:be:4b:63:cf:d0:7b:33:ca:26:e5:c3:
                    59:ad:ac:ae:6c:1a:20:d3:77:7d:a4:6b:61:2d:73:
                    3e:50:4a:c3:a9:5f:29:00:ad:b8:76:1b:27:c5:58:
                    81:99:48:e9:0e:d8:b2:26:3c:bb:b1:b9:02:ea:67:
                    8a:2c:d9:5e:a0:f7:eb:02:eb:97:4e:42:46:bc:ad:
                    6a:6a:43:8f:6f:55:0b:45:78:87:61:45:cf:aa:c7:
                    89:26:ad:99:bb:d3:25:d3:a5:ea:8c:2e:fc:1b:e8:
                    0f:5c:ca:85:7f:9c:33:04:76:af:10:40:6f:3d:be:
                    fd:fd:71:fc:09:de:7f:02:a5:33:0d:1a:7b:87:b8:
                    c4:94:9a:ef:23:7c:a6:cb:f8:3a:e2:39:90:de:95:
                    3b:af:b5:9c:df:f5:df:81:e1:b3:e7:89:24:1f:06:
                    6b:69:6e:aa:f4:0d:c9:d1:4e:2d:f5:b6:ba:8c:fe:
                    f2:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2E:B6:0A:CD:E3:D4:D9:34:11:79:34:B6:21:D7:D6:23:21:61:02:6B
            X509v3 Authority Key Identifier:
                keyid:87:21:30:E6:9B:3F:B8:03:5B:1B:25:D3:F6:FB:97:4A:2A:07:8E:CC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36E2B8C/C8F9DF1E0B6211EE862D868A4AD9E6FC/hyEw5ps_uANbGyXT9vuXSioHjsw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/hyEw5ps_uANbGyXT9vuXSioHjsw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36E2B8C/C8F9DF1E0B6211EE862D868A4AD9E6FC/2422232E101811EE9C0896534AD9E6FC.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  2c0f:f408:1::/48

    Signature Algorithm: sha256WithRSAEncryption
         04:08:bb:1b:71:0b:69:b2:a9:7c:cc:1f:32:a0:44:c3:86:d0:
         56:90:d2:e0:12:c4:66:6b:4c:eb:37:78:72:d5:2b:6d:88:b6:
         30:7b:c8:d1:52:bc:ca:c7:1d:62:a2:39:92:19:49:d1:cf:b0:
         ac:d3:4e:ca:bf:ca:0b:d3:78:ad:31:97:fe:7f:b1:41:1c:eb:
         3a:31:e2:7b:27:fe:3f:6e:ee:1e:2b:c9:74:69:f5:06:93:32:
         2a:14:4f:40:25:67:19:29:64:0f:61:c9:cb:8e:15:66:93:55:
         b7:eb:2e:eb:5b:29:a8:dc:5b:e7:41:93:03:6f:3d:39:e5:d2:
         24:cd:f6:56:f1:28:d9:c8:40:54:2a:86:9f:28:36:f8:88:2e:
         8f:7a:64:37:55:f9:07:11:3c:f3:17:83:49:e5:31:15:7e:05:
         eb:b4:81:d5:c7:1c:ca:86:55:d7:ac:97:52:da:74:94:a6:3f:
         6d:08:09:3b:db:e5:da:ae:ac:3f:df:86:20:68:e8:3e:a3:bb:
         30:58:14:c5:43:aa:58:2d:99:be:c9:7e:48:96:8c:bf:ab:1c:
         1f:2f:fa:f0:50:54:fe:e2:2a:ef:dc:fc:02:b6:2a:43:c1:b3:
         92:64:31:69:2b:62:50:65:e3:9e:59:a9:61:1f:25:dc:5b:6c:
         09:67:e6:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----