Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F369BF27/451248DA91EA11E9BA92847AF8AEA228/4D6670E091EC11E99860247CF8AEA228.roa
File:                     4D6670E091EC11E99860247CF8AEA228.roa (raw, json)
Hash identifier:          OicJuQNBfsVocuLumy371BpLm3ovld7BC8oNqdYu+fQ=
Subject key identifier:   19:17:59:41:38:80:46:5E:BC:D6:0D:5A:43:95:68:31:FB:B3:B1:29
Certificate issuer:       /CN=F369BF27AF/serialNumber=6057F489F5ADC4E9269C260D702C81AAB6AA2E6D
Certificate serial:       06
Authority key identifier: 60:57:F4:89:F5:AD:C4:E9:26:9C:26:0D:70:2C:81:AA:B6:AA:2E:6D
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/YFf0ifWtxOkmnCYNcCyBqraqLm0.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F369BF27/451248DA91EA11E9BA92847AF8AEA228/4D6670E091EC11E99860247CF8AEA228.roa
Signing time:             Tue 18 Jun 2019 17:12:51 +0000
ROA not before:           Tue 18 Jun 2019 17:12:47 +0000
ROA not after:            Tue 18 Jun 2024 17:12:47 +0000
asID:                     37049
IP address blocks:        2c0f:fdc8::/32 maxlen: 32

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 6 (0x6)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F369BF27AF/serialNumber=6057F489F5ADC4E9269C260D702C81AAB6AA2E6D
        Validity
            Not Before: Jun 18 17:12:47 2019 GMT
            Not After : Jun 18 17:12:47 2024 GMT
        Subject: CN=5d091b93-1081
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:b4:f1:26:40:89:56:b4:d3:3d:38:b5:32:fc:
                    d3:64:83:80:f6:cc:ba:1f:1b:39:83:bb:7d:c3:08:
                    30:58:06:97:01:c4:58:c3:83:ce:57:90:3d:15:1e:
                    7f:8e:99:32:f8:1a:05:95:cc:4a:ab:e7:cf:ea:c9:
                    20:bf:f7:dd:97:d1:68:73:0a:06:c7:70:26:ed:ce:
                    1b:c6:86:c0:c4:15:d8:d4:30:2b:71:86:1d:18:18:
                    40:97:9d:4c:ad:12:29:8a:72:2b:77:d3:99:4d:e3:
                    a3:ae:3a:f5:b4:01:5a:2e:7c:2c:76:a2:fa:fc:23:
                    20:8b:a5:29:67:8c:66:22:9b:ac:ae:42:81:00:d4:
                    bc:40:7b:7a:eb:7d:7d:3b:a4:f8:16:29:7f:7c:2b:
                    18:22:54:22:28:d2:50:74:52:90:5d:6e:32:82:52:
                    42:b6:59:92:7e:fc:b1:d2:6f:92:a1:a4:90:ea:27:
                    6c:27:bb:f4:e7:cb:de:c0:b2:37:3a:7e:ea:92:ac:
                    58:aa:9e:73:ce:89:7e:00:fd:63:fb:b8:3f:65:40:
                    cb:43:58:3a:2f:92:8c:26:2e:94:ca:d8:60:47:20:
                    11:4b:ac:bd:8c:36:f0:a2:70:eb:97:a2:ea:ba:4f:
                    58:f3:12:6e:68:d4:ed:d5:6c:00:30:3c:33:55:a5:
                    7a:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                19:17:59:41:38:80:46:5E:BC:D6:0D:5A:43:95:68:31:FB:B3:B1:29
            X509v3 Authority Key Identifier:
                keyid:60:57:F4:89:F5:AD:C4:E9:26:9C:26:0D:70:2C:81:AA:B6:AA:2E:6D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F369BF27/451248DA91EA11E9BA92847AF8AEA228/YFf0ifWtxOkmnCYNcCyBqraqLm0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/YFf0ifWtxOkmnCYNcCyBqraqLm0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F369BF27/451248DA91EA11E9BA92847AF8AEA228/4D6670E091EC11E99860247CF8AEA228.roa

            sbgp-ipAddrBlock: critical
                IPv6:
                  2c0f:fdc8::/32

    Signature Algorithm: sha256WithRSAEncryption
         0e:eb:b6:ad:12:fd:82:cd:1d:b1:6e:e2:d2:2e:b5:9e:f9:ca:
         9e:8f:cc:c4:f8:a8:66:04:e0:80:cc:a7:c5:72:ae:b8:b0:ba:
         16:c8:2d:0a:70:8d:7f:84:9e:87:b4:a2:be:b2:5f:c9:47:9c:
         46:be:24:ab:c8:39:ab:84:46:cc:cb:9b:b5:3a:fc:d8:cc:db:
         51:20:0b:57:17:df:6b:c4:68:3a:ce:9f:68:7d:25:e9:e3:3f:
         d5:ec:d9:9a:2e:f3:dd:1e:c4:02:16:d2:5a:1e:f6:ee:6a:2a:
         99:92:e3:50:bf:bb:a9:26:81:78:26:36:0f:5b:03:c3:73:87:
         65:b6:fd:4c:1f:d6:68:5b:6b:68:ff:b1:fa:9c:e3:f9:9f:c6:
         9a:4d:11:47:a0:c9:19:7b:ba:26:e7:07:aa:3d:55:75:d2:28:
         68:cf:76:40:58:3f:64:8b:50:39:02:3a:c5:d3:e1:22:16:55:
         7c:d0:ce:2c:7e:e7:8f:5b:b7:ac:66:09:73:eb:b0:48:82:72:
         8b:17:53:c3:26:ce:02:63:1e:1d:96:48:a7:3f:28:96:0d:50:
         36:d1:71:0a:49:d4:d7:d4:5d:42:4e:b3:9c:37:20:7f:aa:15:
         3a:72:33:ae:fe:70:76:28:da:a6:a9:84:07:b0:68:25:bc:dc:
         f6:4d:6b:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----