Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36F8F4F/70CC1DFE2A7511ECAEB63359D8A014CE/33660CAC2EBE11EC8FB79415D8A014CE.roa
File:                     33660CAC2EBE11EC8FB79415D8A014CE.roa (raw, json)
Hash identifier:          RMcF1XkfbZHe+VUAFsrOSD3+o/pQRVvtwJfg3sIvEgo=
Subject key identifier:   E8:24:1F:EE:9D:C2:1E:2C:78:16:22:C2:FB:31:E0:BD:99:AE:6B:6B
Certificate issuer:       /CN=F36F8F4FRI/serialNumber=5BC54F284822A717B1AD4C37CF69D096CE7F6773
Certificate serial:       09
Authority key identifier: 5B:C5:4F:28:48:22:A7:17:B1:AD:4C:37:CF:69:D0:96:CE:7F:67:73
Authority info access:    rsync://rpki.afrinic.net/repository/ripe/W8VPKEgipxexrUw3z2nQls5_Z3M.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36F8F4F/70CC1DFE2A7511ECAEB63359D8A014CE/33660CAC2EBE11EC8FB79415D8A014CE.roa
Signing time:             Sat 16 Oct 2021 20:18:18 +0000
ROA not before:           Sat 16 Oct 2021 20:18:15 +0000
ROA not after:            Sun 16 Oct 2022 20:18:15 +0000
asID:                     21003
IP address blocks:        62.240.32.0/19 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 9 (0x9)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36F8F4FRI/serialNumber=5BC54F284822A717B1AD4C37CF69D096CE7F6773
        Validity
            Not Before: Oct 16 20:18:15 2021 GMT
            Not After : Oct 16 20:18:15 2022 GMT
        Subject: CN=616b338a-cfa4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f9:9b:77:8d:8f:81:45:cf:f1:c8:4a:98:f3:4d:
                    f6:21:14:0b:71:e8:eb:5c:15:55:46:18:ba:d0:76:
                    51:96:46:13:91:23:5c:df:84:1d:9e:49:86:45:2a:
                    ac:fb:8e:9b:cb:15:f2:0b:0b:ca:38:1d:d5:e1:60:
                    b2:9e:8c:fb:44:4f:b5:39:cc:74:31:aa:f4:2b:dc:
                    2b:87:31:2e:aa:87:13:66:d9:1e:3d:43:fb:6c:e9:
                    5e:b1:b2:c1:ad:59:b5:03:07:77:b2:15:e4:c1:d9:
                    14:f9:89:58:fc:99:32:12:18:da:a2:1b:26:1e:23:
                    df:95:d4:c7:dd:ee:19:36:11:1a:c2:a7:a1:64:51:
                    d5:14:a4:be:72:89:06:e0:d0:da:55:17:7a:e5:e3:
                    f3:d3:fc:54:81:9f:5f:8f:14:e4:7d:58:67:79:aa:
                    64:dd:4f:c4:7d:24:be:f5:66:db:9a:b4:9c:01:59:
                    d5:2c:65:59:be:35:b5:37:46:18:46:74:3b:46:61:
                    98:b0:85:89:45:02:26:5c:02:51:86:68:45:ba:f6:
                    a0:05:7d:e2:1f:22:ec:61:92:15:05:d5:ec:b9:17:
                    75:d5:c5:b5:b6:f9:26:e7:8e:61:7a:c0:ee:f7:b3:
                    d8:d1:e0:d4:00:ba:15:84:fe:37:01:e8:01:75:49:
                    14:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E8:24:1F:EE:9D:C2:1E:2C:78:16:22:C2:FB:31:E0:BD:99:AE:6B:6B
            X509v3 Authority Key Identifier:
                keyid:5B:C5:4F:28:48:22:A7:17:B1:AD:4C:37:CF:69:D0:96:CE:7F:67:73

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36F8F4F/70CC1DFE2A7511ECAEB63359D8A014CE/W8VPKEgipxexrUw3z2nQls5_Z3M.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/ripe/W8VPKEgipxexrUw3z2nQls5_Z3M.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36F8F4F/70CC1DFE2A7511ECAEB63359D8A014CE/33660CAC2EBE11EC8FB79415D8A014CE.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  62.240.32.0/19

    Signature Algorithm: sha256WithRSAEncryption
         01:d3:82:51:ac:6c:d0:d3:f1:c9:f9:d2:57:97:03:25:0f:dc:
         0b:df:87:70:b9:bf:1d:4e:28:6b:46:a3:0b:ba:92:c8:d3:87:
         b7:2d:77:57:ad:a6:05:a7:e9:55:19:1f:ec:ad:c5:2a:c9:2c:
         07:8d:5f:31:43:55:0f:5f:77:20:14:1e:18:ce:2c:45:14:4a:
         9c:79:0c:7f:7c:45:b2:00:a4:b8:72:bd:51:1d:81:e7:82:1a:
         ed:b2:44:a9:8c:a9:d7:ba:6a:d1:b3:6e:f5:55:d2:8a:fc:8d:
         1b:6a:f3:2e:52:61:d1:91:3f:44:be:b5:2a:bd:d1:60:75:84:
         09:aa:89:2e:e8:c6:4f:83:27:ed:5a:4d:04:f0:5a:df:62:00:
         8b:58:e0:8f:63:2f:33:2d:bc:1d:64:34:af:7a:93:72:38:67:
         d3:cf:42:c7:92:22:1e:0d:ec:81:6f:28:7f:e6:67:86:e4:36:
         92:01:c6:a9:67:d0:26:94:9d:ad:69:8f:f9:25:42:63:0d:f7:
         97:2e:9d:27:62:78:47:79:7b:6c:ac:de:2b:9d:68:47:f0:57:
         63:b8:d5:ff:b9:72:a5:d6:7b:a6:20:36:9e:b9:42:ec:17:bb:
         fa:78:e9:f6:96:bf:d1:30:e6:81:30:62:f6:f7:b9:03:a6:22:
         30:d9:d1:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----