Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36A2CA0/DFAEDC70AC9F11EA8B649748F8AEA228/A0E842F8ACAC11EABDCF9555F8AEA228.roa
File:                     A0E842F8ACAC11EABDCF9555F8AEA228.roa (raw, json)
Hash identifier:          D1kbunMlJFWsNiNcrwQRA9KbrJzCkbay9EbnO33/7Fk=
Subject key identifier:   25:C6:C9:65:D9:61:DF:A2:AA:A7:DC:87:F4:80:11:6B:4D:73:94:28
Certificate issuer:       /CN=F36A2CA0AF/serialNumber=A93C93A03846A868C1651C83FD59A89DB480544E
Certificate serial:       02
Authority key identifier: A9:3C:93:A0:38:46:A8:68:C1:65:1C:83:FD:59:A8:9D:B4:80:54:4E
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/qTyToDhGqGjBZRyD_VmonbSAVE4.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36A2CA0/DFAEDC70AC9F11EA8B649748F8AEA228/A0E842F8ACAC11EABDCF9555F8AEA228.roa
Signing time:             Fri 12 Jun 2020 13:00:02 +0000
ROA not before:           Fri 12 Jun 2020 12:59:58 +0000
ROA not after:            Thu 01 Jun 2023 12:59:58 +0000
asID:                     37211
IP address blocks:        2c0f:ffb8::/32 maxlen: 32

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2 (0x2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36A2CA0AF/serialNumber=A93C93A03846A868C1651C83FD59A89DB480544E
        Validity
            Not Before: Jun 12 12:59:58 2020 GMT
            Not After : Jun  1 12:59:58 2023 GMT
        Subject: CN=5ee37c52-a93c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:83:86:9a:2b:3a:3c:d5:27:af:e6:0f:9d:71:
                    79:22:10:d5:50:9e:b2:22:2f:3e:31:36:4f:4e:8a:
                    40:b5:b3:e4:51:e4:cf:fd:62:19:86:f1:0d:69:cf:
                    f6:b7:36:aa:22:d6:20:c0:16:5a:d0:39:3a:f7:cc:
                    16:d4:f1:2c:0b:8d:55:3d:49:eb:05:cf:85:ad:60:
                    6e:d3:06:46:e5:a6:7f:e6:77:60:ea:66:a7:29:56:
                    12:af:98:4d:e1:2a:55:e6:a5:d5:36:a4:42:f4:dd:
                    6c:45:49:5b:43:6c:f1:b5:68:04:9f:36:45:88:49:
                    64:e9:82:83:a8:c3:a9:6a:9c:0c:3c:7c:4b:7c:5d:
                    19:5e:bb:f5:a6:66:20:e3:37:e7:b7:69:ed:81:c4:
                    b0:74:65:4a:4d:1f:44:9c:a8:a1:0b:8f:1d:4c:b3:
                    d1:fb:74:1e:94:98:0e:0d:36:cb:fc:63:28:b4:27:
                    ae:6d:ff:3c:4b:df:53:53:e8:29:41:f6:65:66:9b:
                    c9:47:a4:3e:40:94:03:53:d6:02:0c:48:57:8a:34:
                    fb:8f:38:9f:93:31:92:b5:fc:db:b6:7f:e9:cc:92:
                    e0:7f:97:e5:f8:b9:f3:c1:b2:53:b2:86:02:ed:da:
                    69:f2:2a:05:a6:c1:b3:f4:4a:cc:b5:e3:19:99:fe:
                    3a:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                25:C6:C9:65:D9:61:DF:A2:AA:A7:DC:87:F4:80:11:6B:4D:73:94:28
            X509v3 Authority Key Identifier:
                keyid:A9:3C:93:A0:38:46:A8:68:C1:65:1C:83:FD:59:A8:9D:B4:80:54:4E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36A2CA0/DFAEDC70AC9F11EA8B649748F8AEA228/qTyToDhGqGjBZRyD_VmonbSAVE4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/qTyToDhGqGjBZRyD_VmonbSAVE4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36A2CA0/DFAEDC70AC9F11EA8B649748F8AEA228/A0E842F8ACAC11EABDCF9555F8AEA228.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  2c0f:ffb8::/32

    Signature Algorithm: sha256WithRSAEncryption
         ae:5b:a1:11:31:5a:9a:26:05:ba:8e:45:80:26:a1:aa:98:8e:
         56:f9:7c:ff:99:c4:a5:3d:66:f2:93:e0:2c:71:c3:43:97:49:
         81:52:0c:cc:ec:c7:30:05:0d:3f:68:2b:f7:e4:45:20:9d:0c:
         8f:01:59:6f:08:e9:c7:fb:e1:3b:fa:63:da:f4:1c:25:08:fd:
         4b:92:2f:fc:c0:fa:49:c5:16:f8:78:88:ae:05:11:70:c8:9f:
         14:cb:1a:ba:73:75:5a:52:d8:85:9e:08:67:09:70:dc:fd:2d:
         48:22:90:80:bf:8e:4c:95:be:a0:a8:8f:64:4c:8c:10:17:e3:
         b9:aa:8f:4b:54:81:dd:3e:cd:e9:ed:3b:c4:dc:12:c3:c1:31:
         03:96:fc:e4:ee:50:d5:ce:5f:bb:d5:d2:fe:d1:ef:87:8e:97:
         4f:49:ae:8d:67:6f:d2:25:7c:85:2c:0d:58:cb:f7:e2:8b:37:
         d0:0b:56:fe:08:ee:78:7c:e3:ed:0f:bc:6b:76:a1:b4:5d:1b:
         b5:88:e9:09:c5:b6:dc:3a:f7:65:f6:42:d8:ba:fb:2d:be:d1:
         1f:3a:bd:8b:67:3d:0e:d8:e2:34:be:4c:b1:82:09:83:7d:37:
         5c:cb:17:5a:35:8e:27:71:20:ec:0c:e3:dd:0f:e2:bb:25:08:
         b0:c5:a7:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----