Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36C1D14/F8EF4E44700F11EA8ABD1B33F8AEA228/B204817A701411EA9186DD37F8AEA228.roa
File:                     B204817A701411EA9186DD37F8AEA228.roa (raw, json)
Hash identifier:          b38zMFkFeCBU/0z8TlTB4ER+VwOCRC25dCO+ARVILcY=
Subject key identifier:   73:54:CA:A6:A7:48:B7:4C:88:3D:AB:F1:17:2D:4D:EA:E7:78:EE:8F
Certificate issuer:       /CN=F36C1D14AF/serialNumber=EDC56284AFEF3137FC69F9DA783FE9CC783A6DAC
Certificate serial:       02
Authority key identifier: ED:C5:62:84:AF:EF:31:37:FC:69:F9:DA:78:3F:E9:CC:78:3A:6D:AC
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/7cVihK_vMTf8afnaeD_pzHg6baw.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36C1D14/F8EF4E44700F11EA8ABD1B33F8AEA228/B204817A701411EA9186DD37F8AEA228.roa
Signing time:             Fri 27 Mar 2020 10:21:18 +0000
ROA not before:           Fri 27 Mar 2020 10:21:11 +0000
ROA not after:            Sun 27 Mar 2022 10:21:11 +0000
asID:                     328522
IP address blocks:        102.64.6.0/24 maxlen: 24
                          2001:43f8:13c0::/48 maxlen: 48

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2 (0x2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36C1D14AF/serialNumber=EDC56284AFEF3137FC69F9DA783FE9CC783A6DAC
        Validity
            Not Before: Mar 27 10:21:11 2020 GMT
            Not After : Mar 27 10:21:11 2022 GMT
        Subject: CN=5e7dd39e-7d45
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e3:a6:84:cb:c0:e0:28:56:14:af:0e:1b:ce:de:
                    f1:6f:27:bf:62:0a:02:93:a1:2c:51:22:92:cb:d5:
                    f8:20:d5:0e:fe:cc:eb:dd:7f:3e:48:84:24:a0:1e:
                    64:3a:9d:bf:38:f4:5f:6f:85:3e:4d:ce:fd:3c:4a:
                    06:2e:c8:0d:09:66:60:ad:68:06:be:fe:c0:28:ae:
                    d9:bf:58:cf:c5:26:07:d6:3a:6b:dc:87:e5:ab:a4:
                    62:aa:cd:a3:a4:4e:27:0a:af:ee:93:18:eb:c8:35:
                    49:da:4d:3f:d6:53:6f:b7:0e:1d:95:02:cc:47:b7:
                    b5:ae:cc:9a:89:c7:18:fb:2b:ec:04:bb:a8:19:99:
                    88:a6:68:1b:1c:bf:d2:44:ba:ad:3a:cf:9a:b7:fa:
                    b9:b2:b6:ae:16:42:f3:74:99:5c:8b:6f:d0:23:53:
                    70:07:31:ed:cc:47:55:b7:5b:8d:57:9d:0c:a1:d0:
                    d7:45:04:aa:1b:09:b6:39:b1:5c:02:98:f3:d7:91:
                    18:4c:01:1b:8d:29:f7:ad:4f:e7:4b:45:9b:30:5c:
                    24:17:b4:11:6b:34:28:68:c6:4b:89:40:7a:4e:51:
                    dc:50:92:04:a7:c6:15:52:09:cc:d0:9b:13:7f:25:
                    53:9e:d7:1d:84:3d:c6:6e:7d:95:b9:65:8a:1e:e7:
                    a7:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                73:54:CA:A6:A7:48:B7:4C:88:3D:AB:F1:17:2D:4D:EA:E7:78:EE:8F
            X509v3 Authority Key Identifier:
                keyid:ED:C5:62:84:AF:EF:31:37:FC:69:F9:DA:78:3F:E9:CC:78:3A:6D:AC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36C1D14/F8EF4E44700F11EA8ABD1B33F8AEA228/7cVihK_vMTf8afnaeD_pzHg6baw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/7cVihK_vMTf8afnaeD_pzHg6baw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36C1D14/F8EF4E44700F11EA8ABD1B33F8AEA228/B204817A701411EA9186DD37F8AEA228.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  102.64.6.0/24
                IPv6:
                  2001:43f8:13c0::/48

    Signature Algorithm: sha256WithRSAEncryption
         4e:ed:19:9a:bb:4e:4a:c4:c5:90:1e:1a:2b:62:ac:15:84:8d:
         1f:35:70:8e:7c:69:2d:61:31:27:a6:69:3b:6c:f5:cb:fa:d7:
         6f:37:6d:96:78:f4:32:4e:b0:9f:d4:d2:00:95:00:7c:97:70:
         6f:84:60:83:e3:06:70:7a:c2:11:b9:31:e6:ba:a0:ef:47:10:
         e8:7c:7c:0b:a6:c1:1f:72:4e:89:93:6d:ea:af:f3:fe:16:6d:
         03:a6:80:89:d2:9c:8c:e1:2d:1c:d7:4a:9c:dd:da:c8:e7:c2:
         2e:04:93:9e:11:22:a5:9e:89:0c:2f:05:23:cc:93:b1:94:87:
         31:f6:a3:b5:ae:13:5e:02:e6:84:1b:4a:d2:5b:a6:6b:af:c5:
         64:af:02:d1:3f:50:37:f5:7d:83:28:e5:ae:7f:08:9b:ee:b1:
         fe:19:a9:b5:1c:39:d3:7b:9f:0f:bb:fe:80:8e:87:7b:39:c3:
         64:ef:55:91:aa:64:f1:55:f0:33:ff:69:f6:13:c9:9c:3a:51:
         df:b1:a5:2a:0e:35:39:49:a6:ac:b3:45:02:29:c1:5f:3e:f6:
         d4:9e:f4:4e:4f:39:6a:33:0d:32:2d:92:2f:3f:c2:9d:47:eb:
         8d:e2:66:e6:28:3f:84:a3:c1:e9:e2:ce:fc:8e:c2:e5:d8:df:
         c2:3f:aa:0f
-----BEGIN CERTIFICATE-----
MIIFXDCCBESgAwIBAgIBAjANBgkqhkiG9w0BAQsFADBIMRMwEQYDVQQDEwpGMzZD
MUQxNEFGMTEwLwYDVQQFEyhFREM1NjI4NEFGRUYzMTM3RkM2OUY5REE3ODNGRTlD
Qzc4M0E2REFDMB4XDTIwMDMyNzEwMjExMVoXDTIyMDMyNzEwMjExMVowGDEWMBQG
A1UEAxMNNWU3ZGQzOWUtN2Q0NTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBAOOmhMvA4ChWFK8OG87e8W8nv2IKApOhLFEiksvV+CDVDv7M691/PkiEJKAe
ZDqdvzj0X2+FPk3O/TxKBi7IDQlmYK1oBr7+wCiu2b9Yz8UmB9Y6a9yH5aukYqrN
o6ROJwqv7pMY68g1SdpNP9ZTb7cOHZUCzEe3ta7MmonHGPsr7AS7qBmZiKZoGxy/
0kS6rTrPmrf6ubK2rhZC83SZXItv0CNTcAcx7cxHVbdbjVedDKHQ10UEqhsJtjmx
XAKY89eRGEwBG40p961P50tFmzBcJBe0EWs0KGjGS4lAek5R3FCSBKfGFVIJzNCb
E38lU57XHYQ9xm59lbllih7np/8CAwEAAaOCAn8wggJ7MB0GA1UdDgQWBBRzVMqm
p0i3TIg9q/EXLU3q53jujzAfBgNVHSMEGDAWgBTtxWKEr+8xN/xp+dp4P+nMeDpt
rDAOBgNVHQ8BAf8EBAMCB4AwgZUGA1UdHwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6
Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVyX3JlcG9zaXRvcnkv
RjM2QzFEMTQvRjhFRjRFNDQ3MDBGMTFFQThBQkQxQjMzRjhBRUEyMjgvN2NWaWhL
X3ZNVGY4YWZuYWVEX3B6SGc2YmF3LmNybDBnBggrBgEFBQcBAQRbMFkwVwYIKwYB
BQUHMAKGS3JzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L2Fmcmlu
aWMvN2NWaWhLX3ZNVGY4YWZuYWVEX3B6SGc2YmF3LmNlcjBPBgNVHSABAf8ERTBD
MEEGCCsGAQUFBw4CMDUwMwYIKwYBBQUHAgEWJ2h0dHBzOi8vcnBraS5hZnJpbmlj
Lm5ldC9wb2xpY3kvQ1BTLnBkZjCBpAYIKwYBBQUHAQsEgZcwgZQwgZEGCCsGAQUF
BzALhoGEcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVy
X3JlcG9zaXRvcnkvRjM2QzFEMTQvRjhFRjRFNDQ3MDBGMTFFQThBQkQxQjMzRjhB
RUEyMjgvQjIwNDgxN0E3MDE0MTFFQTkxODZERDM3RjhBRUEyMjgucm9hMDAGCCsG
AQUFBwEHAQH/BCEwHzAMBAIAATAGAwQAZkAGMA8EAgACMAkDBwAgAUP4E8AwDQYJ
KoZIhvcNAQELBQADggEBAE7tGZq7TkrExZAeGitirBWEjR81cI58aS1hMSemaTts
9cv61283bZZ49DJOsJ/U0gCVAHyXcG+EYIPjBnB6whG5Mea6oO9HEOh8fAumwR9y
TomTbeqv8/4WbQOmgInSnIzhLRzXSpzd2sjnwi4Ek54RIqWeiQwvBSPMk7GUhzH2
o7WuE14C5oQbStJbpmuvxWSvAtE/UDf1fYMo5a5/CJvusf4ZqbUcOdN7nw+7/oCO
h3s5w2TvVZGqZPFV8DP/afYTyZw6Ud+xpSoONTlJpqyzRQIpwV8+9tSe9E5POWoz
DTItki8/wp1H643iZuYoP4SjwenizvyOwuXY38I/qg8=
-----END CERTIFICATE-----