Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36C8371/EC0AE8747AFA11E988A3C33CF8AEA228/1475FE1CE06C11E9B7BDF673F8AEA228.roa
File:                     1475FE1CE06C11E9B7BDF673F8AEA228.roa (raw, json)
Hash identifier:          NuB9UT7YN9e6XgNANfrpCcgft2kYhxUZkt5NnA9kX+o=
Subject key identifier:   62:77:92:17:C2:B9:A6:00:03:5A:7D:14:18:DF:BD:69:23:43:CC:67
Certificate issuer:       /CN=F36C8371AF/serialNumber=7B965B64C3E724B93FC00B186E15E35CED535DC7
Certificate serial:       AE
Authority key identifier: 7B:96:5B:64:C3:E7:24:B9:3F:C0:0B:18:6E:15:E3:5C:ED:53:5D:C7
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/e5ZbZMPnJLk_wAsYbhXjXO1TXcc.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36C8371/EC0AE8747AFA11E988A3C33CF8AEA228/1475FE1CE06C11E9B7BDF673F8AEA228.roa
Signing time:             Thu 26 Sep 2019 14:44:02 +0000
ROA not before:           Thu 26 Sep 2019 14:43:57 +0000
ROA not after:            Thu 26 Sep 2024 14:43:57 +0000
asID:                     327804
IP address blocks:        2c0f:f050:c000::/36 maxlen: 36

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 174 (0xae)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36C8371AF/serialNumber=7B965B64C3E724B93FC00B186E15E35CED535DC7
        Validity
            Not Before: Sep 26 14:43:57 2019 GMT
            Not After : Sep 26 14:43:57 2024 GMT
        Subject: CN=5d8cceb2-84d3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:0f:8f:f8:19:92:47:93:13:91:0c:be:85:43:
                    ec:e3:2f:cd:a6:d4:e5:df:4a:42:91:b1:24:21:61:
                    1c:fb:48:0d:41:b5:36:ae:97:21:af:2f:87:62:71:
                    6c:0c:c0:7e:a6:98:5b:3f:5e:0b:6f:1e:7e:e5:5e:
                    1c:7d:f2:46:37:bd:c6:f7:ea:7b:66:9e:ed:36:b5:
                    87:1a:3c:a5:35:44:de:4b:fa:0e:69:5b:0d:fc:1e:
                    dc:21:70:5e:05:18:99:b2:70:98:4e:76:4c:93:eb:
                    e6:13:22:e5:b9:1a:02:c1:04:db:db:67:92:d9:be:
                    be:6e:00:98:2e:f6:d1:58:7d:cb:75:21:1c:91:24:
                    38:b8:61:00:36:d1:34:23:46:17:7a:00:1d:b6:fb:
                    a0:c2:05:ab:b5:d4:4a:87:92:3c:0c:75:93:b2:60:
                    97:46:5a:99:f9:b5:b9:5f:38:f1:91:47:82:d5:cf:
                    7f:fa:27:56:79:21:77:6e:b7:25:09:4e:5a:5d:d6:
                    d2:f3:d5:18:5b:a4:4f:14:3c:67:f3:34:a0:d7:f4:
                    1d:19:cc:ef:9b:2e:1c:8c:01:aa:2b:95:2d:3a:87:
                    93:e2:79:9a:78:a8:17:e9:94:37:90:26:37:81:81:
                    32:a4:7c:f2:54:a3:ef:a4:07:aa:d7:53:71:dc:8e:
                    c5:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                62:77:92:17:C2:B9:A6:00:03:5A:7D:14:18:DF:BD:69:23:43:CC:67
            X509v3 Authority Key Identifier:
                keyid:7B:96:5B:64:C3:E7:24:B9:3F:C0:0B:18:6E:15:E3:5C:ED:53:5D:C7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36C8371/EC0AE8747AFA11E988A3C33CF8AEA228/e5ZbZMPnJLk_wAsYbhXjXO1TXcc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/e5ZbZMPnJLk_wAsYbhXjXO1TXcc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36C8371/EC0AE8747AFA11E988A3C33CF8AEA228/1475FE1CE06C11E9B7BDF673F8AEA228.roa

            sbgp-ipAddrBlock: critical
                IPv6:
                  2c0f:f050:c000::/36

    Signature Algorithm: sha256WithRSAEncryption
         c6:83:ad:03:5d:92:32:c8:00:1c:ca:e2:a4:51:68:46:12:3a:
         cf:ea:8e:50:ae:97:34:92:6f:26:fd:ce:80:a9:ae:f3:90:a3:
         e3:c4:5e:5c:2e:ba:18:72:6c:9f:63:38:14:b7:5a:16:f0:43:
         1c:e7:82:c3:c9:c7:ee:6e:fb:f4:76:c1:4d:72:56:7a:3d:b8:
         a0:e7:c9:43:3f:b4:4f:c5:eb:c8:5e:91:9f:d3:39:b8:d5:b9:
         8b:b3:a3:07:b9:d0:d9:47:13:32:89:6b:9f:9a:92:39:84:99:
         1d:85:77:f7:d6:8e:2e:7d:c0:0d:31:e0:3e:cf:c3:ea:6d:9b:
         69:7d:03:69:ef:7c:f6:39:71:d8:c9:be:51:47:85:ea:02:89:
         c3:5f:64:58:e1:8d:90:15:11:b5:62:77:2a:00:d2:83:09:7a:
         2b:67:ad:89:9b:7f:18:46:50:96:e4:ad:d3:b7:27:06:f9:c7:
         3f:64:f3:8a:8b:5a:b8:6d:ea:5b:4b:20:dd:b0:a0:07:3b:1e:
         db:a1:07:de:04:6a:76:0b:24:56:b5:a2:86:5c:66:61:d6:ff:
         49:9e:b4:f6:87:c9:10:12:91:63:ee:15:4e:46:1f:f5:58:5e:
         5c:03:4b:fc:1e:8d:2b:b8:2a:5d:5d:a7:a4:9d:56:af:e7:dd:
         55:7c:b8:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----