Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/5A20424E467111EB9CF7913CF8AEA228.roa
File:                     5A20424E467111EB9CF7913CF8AEA228.roa (raw, json)
Hash identifier:          XZNVW3BOq4tzpL1ulFPlU87tNDxdmXwfKhDAcU7X7ZM=
Subject key identifier:   2A:84:72:DC:DA:7A:9F:EF:8C:82:E1:2C:2E:A2:D0:E0:F9:20:6E:88
Certificate issuer:       /CN=F36C58D6AF/serialNumber=48A2F2C4AA4AEA39BE46BFE5F99C92629BBED8FC
Certificate serial:       02FD
Authority key identifier: 48:A2:F2:C4:AA:4A:EA:39:BE:46:BF:E5:F9:9C:92:62:9B:BE:D8:FC
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/5A20424E467111EB9CF7913CF8AEA228.roa
Signing time:             Fri 25 Dec 2020 05:23:43 +0000
ROA not before:           Fri 25 Dec 2020 05:23:37 +0000
ROA not after:            Fri 02 Sep 2022 05:23:37 +0000
asID:                     61317
IP address blocks:        102.129.152.0/23 maxlen: 23

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 765 (0x2fd)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36C58D6AF/serialNumber=48A2F2C4AA4AEA39BE46BFE5F99C92629BBED8FC
        Validity
            Not Before: Dec 25 05:23:37 2020 GMT
            Not After : Sep  2 05:23:37 2022 GMT
        Subject: CN=5fe5775e-7516
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:c3:9e:0b:04:93:09:2a:f1:72:a7:d2:8f:f3:
                    ca:21:97:63:a8:96:04:02:12:92:95:a7:21:c9:fd:
                    8f:ba:e5:89:db:fc:5c:cd:44:9a:74:3a:91:4f:1b:
                    e3:07:64:e4:06:33:4a:c4:b2:7d:22:9f:d8:ac:86:
                    15:3e:e6:2f:74:ed:f3:ef:ca:c4:8e:d4:d3:43:bf:
                    38:59:fe:42:da:98:1b:7e:c0:13:dd:11:86:ff:3d:
                    ce:c2:72:0c:2c:8c:f8:2b:c5:ef:0d:7c:f8:e0:54:
                    35:94:a1:dd:a7:8a:db:f3:c9:f9:7a:15:f7:18:75:
                    ba:45:2c:d7:dd:1a:25:66:af:a5:32:92:bc:73:94:
                    31:44:32:9a:ed:4e:32:46:c5:45:35:01:cc:12:10:
                    36:65:39:8c:2f:02:a0:3c:64:85:cd:75:b0:66:d7:
                    e4:b0:79:c4:0a:db:f0:e0:42:4f:89:cd:eb:68:e7:
                    58:8e:90:77:37:0f:52:fa:61:08:8b:d5:66:24:2a:
                    6a:9f:aa:d8:6d:e9:46:ec:dd:42:ce:61:48:b1:c9:
                    08:90:bf:9f:4e:30:3a:c1:1c:9b:d9:f1:78:7a:7a:
                    11:52:c2:76:33:6b:d1:70:1a:03:83:51:af:9c:46:
                    10:db:d5:18:d6:bc:51:38:57:d5:99:f8:78:15:38:
                    19:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2A:84:72:DC:DA:7A:9F:EF:8C:82:E1:2C:2E:A2:D0:E0:F9:20:6E:88
            X509v3 Authority Key Identifier:
                keyid:48:A2:F2:C4:AA:4A:EA:39:BE:46:BF:E5:F9:9C:92:62:9B:BE:D8:FC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/5A20424E467111EB9CF7913CF8AEA228.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  102.129.152.0/23

    Signature Algorithm: sha256WithRSAEncryption
         c4:30:94:64:49:b6:b1:5a:81:70:0d:a4:de:bd:e9:94:2f:9b:
         7f:b2:ec:54:11:b8:f1:75:d2:56:69:fd:9e:a3:49:a9:57:5d:
         8e:4d:70:92:75:41:aa:dd:0e:60:e1:49:de:af:a9:4c:ed:0d:
         ef:32:bb:5a:55:08:68:bf:0e:b4:89:e6:14:95:9e:04:55:06:
         2b:2f:54:e9:6e:51:34:8e:80:ed:bb:0a:ea:40:21:c5:51:d5:
         d0:21:a4:5e:76:09:62:b5:e8:b8:99:19:76:9b:6e:3c:5f:e1:
         e7:e9:e9:e1:21:9a:d6:20:b6:c2:c7:9d:88:d6:18:39:86:b5:
         fa:42:2c:01:5b:ad:7c:f6:8b:db:6a:32:50:56:e6:e3:00:af:
         87:49:5e:5a:6d:cf:e0:57:85:b2:9b:d6:b3:39:ea:d7:68:21:
         61:9b:ad:52:85:09:10:6c:7a:d6:f3:37:f7:4b:65:4b:cb:42:
         98:91:64:2a:4d:12:cb:53:2e:6c:86:c6:b3:fa:0f:b7:59:37:
         93:a0:02:04:49:c4:83:f4:84:6f:be:98:74:be:bc:06:57:d7:
         a1:91:75:30:57:0f:31:86:bd:bc:d8:81:2a:a0:96:54:f7:e3:
         37:90:51:cd:36:d8:8e:b7:87:e7:73:fd:48:18:1d:34:6c:59:
         1c:bd:6b:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----