Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36E70F4/69568416F05911EBAF56F43BD8A014CE/7E6CE570F06311EB8C31F74AD8A014CE.roa
File:                     7E6CE570F06311EB8C31F74AD8A014CE.roa (raw, json)
Hash identifier:          HAZprPi/UvVLLZ9SnjBSBbpCVdVX7bu6vzohwezlVMk=
Subject key identifier:   44:BB:3E:06:89:F0:45:78:13:DE:94:B3:AC:60:DC:78:16:F9:0F:0F
Certificate issuer:       /CN=F36E70F4AF/serialNumber=A9423FA4C0026D2E4DA8212D128D9D2707E81DC9
Certificate serial:       04
Authority key identifier: A9:42:3F:A4:C0:02:6D:2E:4D:A8:21:2D:12:8D:9D:27:07:E8:1D:C9
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/qUI_pMACbS5NqCEtEo2dJwfoHck.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36E70F4/69568416F05911EBAF56F43BD8A014CE/7E6CE570F06311EB8C31F74AD8A014CE.roa
Signing time:             Thu 29 Jul 2021 11:53:09 +0000
ROA not before:           Fri 30 Jul 2021 11:53:05 +0000
ROA not after:            Mon 31 Jul 2023 11:53:05 +0000
asID:                     37219
IP address blocks:        2c0f:7200::/32 maxlen: 32

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4 (0x4)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36E70F4AF/serialNumber=A9423FA4C0026D2E4DA8212D128D9D2707E81DC9
        Validity
            Not Before: Jul 30 11:53:05 2021 GMT
            Not After : Jul 31 11:53:05 2023 GMT
        Subject: CN=610296a5-7fe3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e2:77:4b:8e:d9:b8:1b:c1:85:2e:3f:98:1d:80:
                    b5:ff:2e:a9:13:47:94:5d:f8:b6:86:00:a0:7a:dc:
                    31:79:97:8a:b6:4c:20:05:49:93:71:7f:1b:40:a3:
                    c8:cd:e8:ae:58:11:2a:76:94:87:09:b5:c8:05:f5:
                    d0:7b:97:3f:7a:b5:72:ac:a1:16:1f:45:17:b7:de:
                    f1:11:df:f1:74:91:44:76:af:fa:a4:f8:9a:55:1b:
                    fb:e7:c0:e0:6f:44:0a:d4:fd:0e:bb:24:27:ae:22:
                    b7:53:c2:fe:ad:79:dd:9c:21:36:4c:60:3f:57:6e:
                    ac:31:54:f6:94:52:99:9d:89:2d:72:1c:45:cb:af:
                    91:4b:40:d9:70:42:78:7a:55:a6:bd:e7:54:a7:e4:
                    e4:60:60:26:fb:e3:7f:a4:3e:49:ea:26:7d:a6:77:
                    f1:b3:9d:c6:75:f0:15:23:c3:5c:2d:c4:d7:43:bc:
                    ca:4f:e7:08:3d:3a:4e:0d:b4:eb:86:0e:63:03:b9:
                    8a:8a:78:a5:28:d6:8c:61:eb:80:f7:f5:9f:4e:d2:
                    c9:7c:24:e3:9d:ea:04:95:e1:b6:0e:81:9c:86:f2:
                    69:3d:ba:44:64:32:4e:8e:6a:59:dd:58:82:83:e3:
                    b5:9d:b2:4c:bb:9f:e0:a8:13:ee:4c:70:a3:f4:00:
                    86:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                44:BB:3E:06:89:F0:45:78:13:DE:94:B3:AC:60:DC:78:16:F9:0F:0F
            X509v3 Authority Key Identifier:
                keyid:A9:42:3F:A4:C0:02:6D:2E:4D:A8:21:2D:12:8D:9D:27:07:E8:1D:C9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36E70F4/69568416F05911EBAF56F43BD8A014CE/qUI_pMACbS5NqCEtEo2dJwfoHck.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/qUI_pMACbS5NqCEtEo2dJwfoHck.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36E70F4/69568416F05911EBAF56F43BD8A014CE/7E6CE570F06311EB8C31F74AD8A014CE.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  2c0f:7200::/32

    Signature Algorithm: sha256WithRSAEncryption
         87:be:cc:c8:dd:00:d2:36:58:0e:6c:02:a1:1a:b2:18:22:f0:
         a0:c3:b9:35:19:46:f4:9d:ec:24:3d:df:ee:59:0f:25:77:37:
         2f:00:73:de:f3:b4:c1:1b:f8:f6:0f:9b:e3:c5:e9:29:c1:f3:
         9d:8a:51:b5:fb:47:f4:b8:fc:30:30:80:e9:ef:5b:60:09:1c:
         60:a2:9c:d5:af:eb:e5:60:f5:d8:3e:e7:72:5f:9d:96:50:dd:
         fb:34:97:6f:8b:90:fa:81:92:48:63:30:81:03:33:61:df:10:
         b2:52:97:e1:bd:30:5a:0e:5b:12:a6:55:26:14:5a:5d:67:db:
         e2:7a:fc:d0:c2:11:2e:8e:f5:94:44:b7:36:f4:b4:a1:2d:7d:
         1b:73:7a:88:e3:a9:a6:b7:19:14:ce:10:71:3b:aa:5c:66:68:
         41:3f:fc:ee:6f:10:95:75:16:d3:e0:53:7e:7e:1c:b0:6d:37:
         2a:29:2e:18:64:c5:8a:99:ca:fe:3c:7d:e2:80:b8:d7:7c:25:
         26:9c:4b:7b:b5:d2:8a:f6:8e:8b:be:f5:a5:65:0b:87:b6:b8:
         4d:75:ed:43:b0:e9:3e:b2:7f:6c:18:31:a2:ed:b5:df:26:85:
         6b:5d:e2:96:96:02:20:4b:38:00:d7:c8:e8:a3:3a:f3:23:1c:
         80:d3:51:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----