Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/157CC4A0D5B411EBB9FD4C70F8AEA228.roa
File:                     157CC4A0D5B411EBB9FD4C70F8AEA228.roa (raw, json)
Hash identifier:          IGJgTnDjHYAZP/LwPBHLTBIV59sZRDneBjqg1uTkzOY=
Subject key identifier:   09:5C:39:03:BD:7F:51:4A:FE:E1:F8:03:00:DD:A0:E7:D8:D7:81:56
Certificate issuer:       /CN=F36C58D6AF/serialNumber=48A2F2C4AA4AEA39BE46BFE5F99C92629BBED8FC
Certificate serial:       042F
Authority key identifier: 48:A2:F2:C4:AA:4A:EA:39:BE:46:BF:E5:F9:9C:92:62:9B:BE:D8:FC
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/157CC4A0D5B411EBB9FD4C70F8AEA228.roa
Signing time:             Fri 25 Jun 2021 12:51:40 +0000
ROA not before:           Fri 25 Jun 2021 12:51:34 +0000
ROA not after:            Sun 25 Jun 2023 12:51:34 +0000
asID:                     61317
IP address blocks:        2c0f:ee78:8002::/48 maxlen: 48

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1071 (0x42f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36C58D6AF/serialNumber=48A2F2C4AA4AEA39BE46BFE5F99C92629BBED8FC
        Validity
            Not Before: Jun 25 12:51:34 2021 GMT
            Not After : Jun 25 12:51:34 2023 GMT
        Subject: CN=60d5d15c-9fba
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:76:ab:a6:05:35:62:b5:6e:77:da:7c:43:f8:
                    9e:65:ed:0e:74:09:e5:3b:b1:d5:c6:a2:e1:34:0d:
                    6d:db:8d:36:3a:52:5b:7a:aa:9e:48:98:69:2a:5a:
                    02:e2:38:0d:6e:7e:56:48:28:c6:3c:d4:e2:9a:56:
                    69:64:6a:f2:27:5b:d2:84:36:ff:c7:33:1a:db:02:
                    d1:8f:7b:72:d6:0a:49:24:0a:8a:d7:f6:3d:42:29:
                    06:db:77:71:a1:ca:00:2b:eb:f9:5c:1d:f7:e7:a0:
                    4f:33:dc:30:a1:3b:98:35:90:03:d7:09:e1:9b:69:
                    87:9f:1e:7f:e0:2f:3f:ed:d4:bc:9c:06:2b:d3:a6:
                    5f:78:f0:b3:2f:80:fc:55:23:0c:88:fd:60:eb:e0:
                    f4:cd:12:86:3b:23:e9:9d:ca:40:00:0e:7d:ce:ec:
                    60:57:6d:6c:fd:10:fe:a5:a7:fa:f3:ad:d6:ba:4b:
                    01:e3:85:e2:3b:a6:7d:13:6a:ee:18:e3:a3:42:2f:
                    de:23:15:76:cd:cd:97:9c:a1:9d:f9:6f:92:f8:e1:
                    8f:03:d3:68:f8:cb:03:7b:8b:9c:0e:e6:9e:76:19:
                    43:76:db:c5:50:a6:97:44:28:ce:1e:40:d1:58:ad:
                    32:2a:c8:d1:42:45:c9:7f:fa:a1:84:29:02:a6:ec:
                    46:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                09:5C:39:03:BD:7F:51:4A:FE:E1:F8:03:00:DD:A0:E7:D8:D7:81:56
            X509v3 Authority Key Identifier:
                keyid:48:A2:F2:C4:AA:4A:EA:39:BE:46:BF:E5:F9:9C:92:62:9B:BE:D8:FC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/157CC4A0D5B411EBB9FD4C70F8AEA228.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  2c0f:ee78:8002::/48

    Signature Algorithm: sha256WithRSAEncryption
         c3:52:e9:5f:34:18:1a:d1:4c:37:d7:97:0b:04:aa:87:60:e0:
         b1:7f:ee:c3:9d:3a:a3:cc:0a:7a:4e:3c:47:1c:c9:91:9c:15:
         e0:95:d8:86:33:3b:6b:3c:24:5e:b0:3a:c3:f7:7c:2e:18:3b:
         4c:2d:0d:17:36:98:11:82:5a:79:8c:2b:e6:ef:2d:04:e8:46:
         db:a0:ca:b3:ca:03:b2:0f:98:c1:69:7a:68:a2:2b:84:6d:89:
         04:28:c4:de:38:ab:24:13:e0:9c:d5:0f:5d:74:c2:cb:f6:b2:
         0b:f9:db:8a:5d:c1:df:8c:5d:0a:9a:35:9a:b3:b1:8d:18:fb:
         5e:5d:43:fe:3b:ad:8a:30:a8:12:78:c3:a7:42:3d:21:db:87:
         7f:c5:d9:8a:93:7c:f2:20:5d:4a:85:67:c4:9c:03:30:11:e4:
         c4:ad:49:98:a6:03:34:b9:f8:d8:82:e6:fb:fb:20:95:b0:a1:
         d0:30:92:ad:63:81:5f:b7:4d:de:51:68:62:24:dc:bb:04:86:
         7f:7e:2a:0c:e1:0b:e6:fc:c9:9d:46:0d:42:c1:6d:a1:5b:37:
         94:b9:32:c1:ff:2a:d4:7b:de:99:e8:08:b9:a9:3f:d4:5a:e4:
         6b:db:d0:eb:41:5f:69:30:6c:57:6e:e0:03:6f:94:1f:26:5d:
         b7:fe:25:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----