Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F363CC54/6F78F9A4C59111E9B6C62E2FF8AEA228/BC991438C59311E98D7FEA30F8AEA228.roa
File:                     BC991438C59311E98D7FEA30F8AEA228.roa (raw, json)
Hash identifier:          3nV2rxk/c31CIUVpo2uzfPkClqTMzq/dpPPesbzT77U=
Subject key identifier:   45:1C:69:91:55:AB:8A:7E:BB:BD:BD:6F:44:E1:62:3D:7A:43:17:E1
Certificate issuer:       /CN=F363CC54AF/serialNumber=44AF2366B6314C5177AECD1521877D7C5AB1EC6F
Certificate serial:       04
Authority key identifier: 44:AF:23:66:B6:31:4C:51:77:AE:CD:15:21:87:7D:7C:5A:B1:EC:6F
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/RK8jZrYxTFF3rs0VIYd9fFqx7G8.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F363CC54/6F78F9A4C59111E9B6C62E2FF8AEA228/BC991438C59311E98D7FEA30F8AEA228.roa
Signing time:             Fri 23 Aug 2019 10:49:53 +0000
ROA not before:           Fri 23 Aug 2019 10:49:48 +0000
ROA not after:            Thu 31 Aug 2023 10:49:48 +0000
asID:                     327942
IP address blocks:        2001:43f8:b10::/48 maxlen: 48

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4 (0x4)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F363CC54AF/serialNumber=44AF2366B6314C5177AECD1521877D7C5AB1EC6F
        Validity
            Not Before: Aug 23 10:49:48 2019 GMT
            Not After : Aug 31 10:49:48 2023 GMT
        Subject: CN=5d5fc4d1-b2d7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:41:1a:09:10:07:7c:64:94:f7:f8:19:33:a0:
                    b5:21:07:12:1e:5f:d6:ef:58:d5:88:6c:4d:d0:5c:
                    83:c5:ab:a8:e1:89:41:c6:56:fc:3a:ab:fe:e3:ac:
                    91:d5:27:75:f8:3a:47:be:73:8e:77:8d:5e:6d:0f:
                    75:9a:8b:bc:3f:d0:33:64:12:83:cb:96:a0:ad:22:
                    c7:b4:8d:ed:b6:29:a8:27:fe:c2:89:35:90:f2:24:
                    e7:5c:69:9b:4d:49:d3:77:a3:c6:76:3a:77:97:d4:
                    d4:7d:ba:75:33:0f:71:53:7a:cd:69:63:60:e7:dd:
                    1e:a0:03:bb:cf:e8:2f:6e:ad:96:ec:01:ab:b9:b1:
                    13:96:b9:07:bf:94:81:e6:2e:fc:1c:58:a9:7d:df:
                    e8:96:32:e8:cb:1d:93:87:4c:1a:07:f7:a2:51:18:
                    52:61:c2:85:70:53:21:95:8c:35:91:02:4a:46:06:
                    c6:6c:8e:91:e4:3b:41:1f:8f:9a:56:c0:b2:ea:9f:
                    e2:32:02:94:60:12:46:d0:c4:e2:15:ae:bb:61:b4:
                    36:f5:15:30:8c:c2:3c:97:02:e4:ed:0c:d4:25:29:
                    06:f7:bb:7c:69:d2:6e:a9:50:3d:d7:e7:09:c7:b1:
                    1b:6b:b6:77:ab:57:76:a7:e1:75:5c:41:59:2a:12:
                    e8:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                45:1C:69:91:55:AB:8A:7E:BB:BD:BD:6F:44:E1:62:3D:7A:43:17:E1
            X509v3 Authority Key Identifier:
                keyid:44:AF:23:66:B6:31:4C:51:77:AE:CD:15:21:87:7D:7C:5A:B1:EC:6F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F363CC54/6F78F9A4C59111E9B6C62E2FF8AEA228/RK8jZrYxTFF3rs0VIYd9fFqx7G8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/RK8jZrYxTFF3rs0VIYd9fFqx7G8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F363CC54/6F78F9A4C59111E9B6C62E2FF8AEA228/BC991438C59311E98D7FEA30F8AEA228.roa

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:43f8:b10::/48

    Signature Algorithm: sha256WithRSAEncryption
         8a:78:1c:8f:81:ec:f9:da:d7:61:64:50:cc:13:9a:d2:67:8e:
         d7:f2:d4:8c:0e:e8:94:02:e6:b8:1d:37:7e:96:6f:b3:90:19:
         17:b3:e3:1d:2c:e4:20:f5:e0:84:af:11:d9:4a:2a:34:af:b7:
         5c:c6:a1:c6:fb:e1:75:e8:4b:70:87:52:1b:10:17:9c:9a:bf:
         cb:94:e7:01:69:09:58:af:82:4f:b9:05:5e:2e:ee:8f:fb:09:
         51:c0:88:af:ae:34:4f:4e:b5:7f:62:e8:24:29:61:36:bc:73:
         0d:2f:0f:88:22:46:4e:fd:d5:5b:28:90:cf:b5:1f:0a:0f:6b:
         35:14:76:30:38:bf:07:6e:d5:f2:66:f6:02:c2:04:0e:50:e2:
         98:b8:d2:aa:b7:53:33:e6:b0:45:2c:d2:e8:71:ee:6e:82:ab:
         71:bc:60:ec:c2:db:15:d9:f5:a3:cc:e0:7a:e0:15:7d:ed:76:
         81:4c:32:25:bf:20:d3:a9:f1:84:c5:99:09:d6:18:40:b8:54:
         f8:6b:0e:a3:b3:33:15:4e:6b:d4:0d:e0:0e:e9:34:f9:c9:70:
         1a:91:10:68:7d:3a:a0:7a:8b:a7:47:0c:69:19:8a:a6:17:df:
         38:bf:c6:c4:36:e1:f1:23:0d:32:e8:e2:a6:4b:9b:d5:8b:97:
         8c:0f:5f:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----