Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3669D6B/BEFB44EE879A11E99F393351F8AEA228/3A6AAF92AED411E9BD206841F8AEA228.roa
File:                     3A6AAF92AED411E9BD206841F8AEA228.roa (raw, json)
Hash identifier:          0v/23gOHqoBoTyMg+RaMF2d5u2e2LpL50hy9rfj9Cn0=
Subject key identifier:   7A:0B:0A:BC:3F:A9:B9:B8:96:0B:F0:3C:98:09:60:7F:B7:8D:23:79
Certificate issuer:       /CN=F3669D6BAF/serialNumber=959733DF59E86EA7C23B2FB37A6E846DBB18827B
Certificate serial:       38
Authority key identifier: 95:97:33:DF:59:E8:6E:A7:C2:3B:2F:B3:7A:6E:84:6D:BB:18:82:7B
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/lZcz31nobqfCOy-zem6EbbsYgns.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3669D6B/BEFB44EE879A11E99F393351F8AEA228/3A6AAF92AED411E9BD206841F8AEA228.roa
Signing time:             Thu 25 Jul 2019 12:03:35 +0000
ROA not before:           Thu 25 Jul 2019 12:03:29 +0000
ROA not after:            Wed 27 Jul 2022 12:03:29 +0000
asID:                     36916
IP address blocks:        2c0f:fcb0:3000::/36 maxlen: 48

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 56 (0x38)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3669D6BAF/serialNumber=959733DF59E86EA7C23B2FB37A6E846DBB18827B
        Validity
            Not Before: Jul 25 12:03:29 2019 GMT
            Not After : Jul 27 12:03:29 2022 GMT
        Subject: CN=5d399a97-adaf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e2:19:02:d4:28:c7:9b:b2:b3:96:b5:da:e4:ec:
                    92:ad:ca:12:49:c4:4b:af:4e:63:2f:41:c8:bd:c9:
                    c9:88:c0:ca:49:bb:37:d1:b0:8a:17:24:db:9e:4b:
                    6d:f3:4a:e4:40:4f:aa:64:01:30:81:c3:5a:09:c8:
                    6d:b4:8c:5c:96:cf:94:66:13:3c:6b:08:ef:60:2f:
                    95:a8:41:7e:c8:6f:87:30:8b:2d:ad:3b:88:f6:52:
                    91:97:4b:84:fc:21:1a:f1:c2:fc:b8:80:ef:8f:d4:
                    fc:a5:53:ca:9b:7d:ff:bc:d4:14:93:0e:7a:02:ed:
                    51:1a:27:53:50:23:88:04:e9:f4:e1:64:fb:a5:2c:
                    13:40:c1:57:34:ca:87:42:88:9c:09:c4:f8:9b:e6:
                    1c:bb:17:91:9e:e9:17:7c:51:e6:92:11:cf:2d:7f:
                    d3:95:cc:d8:f9:8e:5d:42:c7:83:0b:48:aa:eb:05:
                    b8:c3:ca:bf:38:da:28:64:1e:1e:f4:d0:0e:d5:18:
                    fb:ed:d6:e7:ed:74:a0:a9:06:35:f8:0a:e5:00:dc:
                    a4:bd:ad:86:2e:b0:38:0c:64:58:98:99:30:a7:94:
                    78:7b:71:36:a5:74:7c:1d:de:c3:6f:f8:6f:78:8e:
                    ca:06:8b:4d:90:5f:fe:60:a5:f4:bc:00:bc:7b:22:
                    c7:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7A:0B:0A:BC:3F:A9:B9:B8:96:0B:F0:3C:98:09:60:7F:B7:8D:23:79
            X509v3 Authority Key Identifier:
                keyid:95:97:33:DF:59:E8:6E:A7:C2:3B:2F:B3:7A:6E:84:6D:BB:18:82:7B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3669D6B/BEFB44EE879A11E99F393351F8AEA228/lZcz31nobqfCOy-zem6EbbsYgns.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/lZcz31nobqfCOy-zem6EbbsYgns.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3669D6B/BEFB44EE879A11E99F393351F8AEA228/3A6AAF92AED411E9BD206841F8AEA228.roa

            sbgp-ipAddrBlock: critical
                IPv6:
                  2c0f:fcb0:3000::/36

    Signature Algorithm: sha256WithRSAEncryption
         6f:f4:21:5c:9e:20:3a:21:38:a6:54:72:b4:2e:3e:36:82:45:
         18:8e:cd:ff:f9:98:ce:62:4f:1d:cb:7d:7d:bf:54:53:eb:6a:
         f3:9e:d2:e7:a1:19:60:e9:e2:c4:e3:50:5a:4d:62:5c:68:54:
         18:c7:19:e8:fa:43:b9:49:99:67:e4:ad:8d:68:6d:0e:62:ed:
         1f:62:82:f2:18:46:be:17:29:1e:75:e3:71:ba:12:dd:72:ee:
         da:15:e9:1e:fe:93:20:93:e2:03:bc:dd:a5:a2:45:0e:3d:27:
         0e:16:b8:ab:12:35:7c:25:ed:5f:28:34:bb:05:aa:1e:0c:4e:
         ec:71:f5:12:7e:08:e2:d2:a1:65:9b:66:19:1f:8a:e1:fd:ef:
         c3:5d:1f:05:dd:cc:f3:05:b4:cd:70:75:af:0b:b4:ca:fc:b6:
         eb:f1:19:43:f1:2a:d4:0a:54:6e:d6:c2:6c:ac:61:ce:de:20:
         b5:4d:22:e3:82:6b:90:06:26:1b:b7:10:58:71:60:09:33:a1:
         db:98:27:a4:d3:63:de:2b:40:ee:e0:3d:b4:dd:47:39:48:f9:
         07:e7:8b:ad:f4:27:2b:76:36:4b:0b:84:b5:c5:43:fc:29:9d:
         e0:52:a0:87:11:d7:ee:90:22:14:a0:9c:db:66:09:55:cf:47:
         bd:1b:e1:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----