Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3634D22/1D5F7C26047311E580C18A06F8AEA228/BA6B8560DA7111E7B4C12E1AF8AEA228.roa
File:                     BA6B8560DA7111E7B4C12E1AF8AEA228.roa (raw, json)
Hash identifier:          VU+iPWg0LC/y0sZBEmV4rooZ8rxqmagvOjfRq7LyvYk=
Subject key identifier:   9E:56:9B:68:35:0C:F3:11:17:AF:E7:DD:C7:41:23:EC:D8:6B:3A:E6
Certificate issuer:       /CN=F3634D22AF/serialNumber=8D01D808E89774543DE22D0DA844378ECEA8BB9B
Certificate serial:       0418
Authority key identifier: 8D:01:D8:08:E8:97:74:54:3D:E2:2D:0D:A8:44:37:8E:CE:A8:BB:9B
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/jQHYCOiXdFQ94i0NqEQ3js6ou5s.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3634D22/1D5F7C26047311E580C18A06F8AEA228/BA6B8560DA7111E7B4C12E1AF8AEA228.roa
Signing time:             Wed 06 Dec 2017 10:39:26 +0000
ROA not before:           Wed 06 Dec 2017 10:39:20 +0000
ROA not after:            Sat 31 Dec 2022 10:39:20 +0000
asID:                     33764
IP address blocks:        2001:43f8:d00::/48 maxlen: 48

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1048 (0x418)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3634D22AF/serialNumber=8D01D808E89774543DE22D0DA844378ECEA8BB9B
        Validity
            Not Before: Dec  6 10:39:20 2017 GMT
            Not After : Dec 31 10:39:20 2022 GMT
        Subject: CN=5a27c8dd-86f3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:83:00:2d:d6:7c:62:68:e1:52:6e:e6:d6:b4:
                    6f:c3:77:29:0c:67:ff:8a:0c:d7:29:83:4d:8d:20:
                    6c:21:20:a1:ab:81:4c:5c:f5:c8:ac:6c:07:36:75:
                    a7:5c:26:f7:c9:da:dd:2a:98:4f:53:34:94:85:a7:
                    b9:e0:5d:d7:7e:68:03:7d:7e:b8:6a:d3:53:66:c0:
                    0c:2b:68:1a:3b:a5:d9:85:24:06:b1:dd:91:45:b6:
                    b5:51:d7:ba:71:bd:fa:60:97:41:a8:94:cd:34:e6:
                    7e:64:17:59:8c:3c:1e:4f:fd:c1:ab:96:1f:f5:11:
                    6d:52:85:8c:66:b6:dc:77:f3:f2:2d:71:9d:06:72:
                    9d:8c:9e:c3:3c:c6:c2:a9:f1:5d:b8:8c:12:73:09:
                    5d:12:51:8f:16:b5:4b:3c:71:77:1d:d8:e5:3a:53:
                    e8:85:0c:c5:62:72:97:61:ce:b4:1e:6a:24:44:b2:
                    64:a0:c6:8a:17:9b:6a:9f:68:ef:bf:fd:fb:de:ff:
                    97:2e:f8:f5:e5:4c:ea:65:53:33:39:9f:1e:18:50:
                    8d:2e:24:93:57:9a:28:ea:f7:96:46:1b:74:8d:b3:
                    c8:d5:c0:53:a9:83:8e:63:2d:3f:3f:65:3e:84:5a:
                    86:f5:a3:f3:f9:12:bc:60:50:cb:e4:d8:5e:b2:62:
                    8f:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9E:56:9B:68:35:0C:F3:11:17:AF:E7:DD:C7:41:23:EC:D8:6B:3A:E6
            X509v3 Authority Key Identifier:
                keyid:8D:01:D8:08:E8:97:74:54:3D:E2:2D:0D:A8:44:37:8E:CE:A8:BB:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3634D22/1D5F7C26047311E580C18A06F8AEA228/jQHYCOiXdFQ94i0NqEQ3js6ou5s.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/jQHYCOiXdFQ94i0NqEQ3js6ou5s.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3634D22/1D5F7C26047311E580C18A06F8AEA228/BA6B8560DA7111E7B4C12E1AF8AEA228.roa

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:43f8:d00::/48

    Signature Algorithm: sha256WithRSAEncryption
         81:1c:3e:45:61:01:68:96:43:1a:5d:ab:d9:66:13:6c:29:00:
         ff:b6:66:68:b1:1e:81:5d:0a:5f:42:79:5f:8f:5d:c0:ca:38:
         0a:6e:73:8c:c2:f6:1c:be:32:47:5f:c0:be:4c:b3:1d:bd:4d:
         6c:bc:5b:b6:47:a0:62:17:eb:d8:79:b7:da:9b:5f:e3:78:ba:
         c1:22:ba:e6:4a:d3:85:30:f0:df:f5:67:b0:2c:53:f3:09:25:
         e3:5a:60:b0:7a:8a:bb:07:8d:c8:c2:09:11:e7:23:94:30:cd:
         ec:92:36:b8:4b:0f:63:0f:7b:90:2c:b5:1b:6b:9f:93:70:a8:
         ff:59:cd:01:80:b0:07:49:ac:80:51:54:16:68:ec:78:df:b1:
         72:f9:87:68:21:2f:f1:36:fc:79:88:f0:99:ad:3e:ba:cb:dc:
         78:a6:1c:38:1b:51:50:16:0a:c1:46:11:db:d1:f0:94:4d:b7:
         3c:c1:b0:a7:31:6d:d9:f6:13:cc:07:0c:08:3c:5a:19:50:7a:
         8f:ad:12:7b:9c:31:6e:65:ed:52:ac:4e:30:c8:8c:94:5c:23:
         5f:c5:59:69:1e:75:64:65:d1:2a:09:10:c3:d8:2c:12:f8:cf:
         ca:77:26:ef:09:89:8c:0e:62:34:df:42:6a:dc:95:94:0d:a9:
         1f:11:1e:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----