Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3669D6B/BEFB44EE879A11E99F393351F8AEA228/327A0E84AED611E9ABDFDF42F8AEA228.roa
File:                     327A0E84AED611E9ABDFDF42F8AEA228.roa (raw, json)
Hash identifier:          LZyEPu8/0eAPaP8DAT2boeyVZ9DVOmt7mcnq1iEV7l0=
Subject key identifier:   C0:C3:0D:89:A6:0B:C3:03:B4:06:18:ED:65:24:7D:9F:76:A5:C8:32
Certificate issuer:       /CN=F3669D6BAF/serialNumber=959733DF59E86EA7C23B2FB37A6E846DBB18827B
Certificate serial:       3C
Authority key identifier: 95:97:33:DF:59:E8:6E:A7:C2:3B:2F:B3:7A:6E:84:6D:BB:18:82:7B
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/lZcz31nobqfCOy-zem6EbbsYgns.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3669D6B/BEFB44EE879A11E99F393351F8AEA228/327A0E84AED611E9ABDFDF42F8AEA228.roa
Signing time:             Thu 25 Jul 2019 12:17:41 +0000
ROA not before:           Thu 25 Jul 2019 12:17:33 +0000
ROA not after:            Wed 27 Jul 2022 12:17:33 +0000
asID:                     36916
IP address blocks:        2c0f:fcb0:5000::/36 maxlen: 48

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 60 (0x3c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3669D6BAF/serialNumber=959733DF59E86EA7C23B2FB37A6E846DBB18827B
        Validity
            Not Before: Jul 25 12:17:33 2019 GMT
            Not After : Jul 27 12:17:33 2022 GMT
        Subject: CN=5d399de5-29bb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:84:a3:e9:eb:12:f1:6b:28:fe:eb:2b:ac:83:
                    c7:28:a4:39:b6:e9:7c:2c:ec:41:45:69:1d:ea:3a:
                    64:fe:ec:a7:a4:12:8c:64:ea:3b:3a:62:b4:cb:f6:
                    76:5a:2e:ad:7d:89:5a:ba:8b:a3:a0:d4:76:e6:a7:
                    0d:f9:57:36:1c:7f:10:fb:16:d8:6c:64:ac:28:92:
                    dd:fa:97:b9:7a:3c:a1:ed:b5:56:7a:84:14:e1:54:
                    e7:a8:ca:d1:63:a0:91:1a:e8:9b:26:f3:0d:09:06:
                    9e:3c:21:27:7c:0c:96:e1:80:ed:c3:f6:92:14:98:
                    10:f5:e8:f3:50:01:db:3d:ec:39:00:73:42:3b:82:
                    9e:7e:74:92:d4:83:5c:f7:da:26:54:81:d0:7b:0f:
                    0d:f4:04:df:b5:2e:1e:31:d8:2b:70:67:95:94:73:
                    5c:ec:0b:a0:32:74:c1:7a:2c:90:a0:77:b8:4c:02:
                    5a:a0:be:23:10:23:b3:ab:dd:0a:58:63:72:a9:ab:
                    c3:f2:10:fa:ae:b8:16:d1:da:0b:9b:ae:b1:6a:7d:
                    70:55:a4:69:69:89:08:6a:da:ca:85:c7:59:f0:98:
                    69:ce:61:c0:ce:8d:c8:57:15:31:e6:8c:69:c3:6f:
                    42:70:0a:e7:66:06:e0:98:c0:24:c5:d6:e1:d3:46:
                    76:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C0:C3:0D:89:A6:0B:C3:03:B4:06:18:ED:65:24:7D:9F:76:A5:C8:32
            X509v3 Authority Key Identifier:
                keyid:95:97:33:DF:59:E8:6E:A7:C2:3B:2F:B3:7A:6E:84:6D:BB:18:82:7B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3669D6B/BEFB44EE879A11E99F393351F8AEA228/lZcz31nobqfCOy-zem6EbbsYgns.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/lZcz31nobqfCOy-zem6EbbsYgns.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3669D6B/BEFB44EE879A11E99F393351F8AEA228/327A0E84AED611E9ABDFDF42F8AEA228.roa

            sbgp-ipAddrBlock: critical
                IPv6:
                  2c0f:fcb0:5000::/36

    Signature Algorithm: sha256WithRSAEncryption
         84:e1:cd:7f:7d:eb:37:f3:c0:ce:da:c5:9b:dd:f7:d2:45:bf:
         ce:17:70:a4:47:6e:93:45:ce:d4:96:33:d8:23:9f:3f:8b:5d:
         1f:ae:e0:a9:cd:c3:0f:6f:f2:8b:b3:3b:bf:7a:8a:e1:54:56:
         63:0c:87:d3:33:0f:43:de:67:f6:da:b6:b0:26:2d:dc:73:5c:
         81:66:18:da:8a:0d:a4:ee:57:0b:d0:a0:a4:1e:fb:5b:84:00:
         74:42:ac:97:c7:ba:ac:a6:f6:d8:58:14:9d:de:2b:49:32:4c:
         75:5a:78:00:77:f0:59:26:fe:8e:b9:6d:9c:fa:ac:33:23:d1:
         9b:4a:c4:df:3b:30:80:32:1d:5e:c3:5f:50:0b:f4:79:6d:35:
         63:31:1e:36:31:17:67:d2:ea:c8:b1:16:9e:ef:94:bb:dd:82:
         a4:d8:17:ca:23:b0:c4:65:8a:3b:98:cf:12:a2:a1:b8:4b:cb:
         73:c2:04:f3:99:7c:c9:eb:0e:8a:ce:89:8c:81:2e:b7:97:1d:
         db:be:d6:46:06:50:ab:43:6d:46:59:e6:90:d8:e5:b3:3b:98:
         34:67:25:0b:3e:1c:c4:a8:a3:84:a5:0f:ab:91:36:64:18:2f:
         10:1d:3b:da:ce:ca:48:d6:e4:8a:21:e5:6c:51:f9:11:a9:65:
         ab:74:0b:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----