Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36C8371/EC0AE8747AFA11E988A3C33CF8AEA228/21240358E06B11E9B9893673F8AEA228.roa
File:                     21240358E06B11E9B9893673F8AEA228.roa (raw, json)
Hash identifier:          GqxgOcBMKSqpP/Z+yCrjBk8lOk0k76R9qAdcc3a3UNY=
Subject key identifier:   BD:90:3B:9A:C1:3D:AD:5E:1A:C8:A8:E5:4B:18:93:74:6F:26:0C:5E
Certificate issuer:       /CN=F36C8371AF/serialNumber=7B965B64C3E724B93FC00B186E15E35CED535DC7
Certificate serial:       A4
Authority key identifier: 7B:96:5B:64:C3:E7:24:B9:3F:C0:0B:18:6E:15:E3:5C:ED:53:5D:C7
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/e5ZbZMPnJLk_wAsYbhXjXO1TXcc.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36C8371/EC0AE8747AFA11E988A3C33CF8AEA228/21240358E06B11E9B9893673F8AEA228.roa
Signing time:             Thu 26 Sep 2019 14:37:13 +0000
ROA not before:           Thu 26 Sep 2019 14:37:09 +0000
ROA not after:            Thu 26 Sep 2024 14:37:09 +0000
asID:                     327804
IP address blocks:        2c0f:f050:7000::/36 maxlen: 36

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 164 (0xa4)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36C8371AF/serialNumber=7B965B64C3E724B93FC00B186E15E35CED535DC7
        Validity
            Not Before: Sep 26 14:37:09 2019 GMT
            Not After : Sep 26 14:37:09 2024 GMT
        Subject: CN=5d8ccd19-2471
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:10:40:f7:25:79:43:e3:4b:12:a6:06:2a:85:
                    37:20:bd:b8:1f:6c:5e:08:2a:9a:4b:cc:df:fb:a9:
                    61:50:6f:a0:c4:f5:c7:0f:2b:b1:05:b2:b2:ea:fd:
                    e7:5d:b1:8a:d1:60:0c:3f:f1:28:03:d3:65:22:5a:
                    c2:ae:50:51:e6:4d:f8:4b:56:f1:10:46:c6:c0:59:
                    9a:96:48:8f:15:3a:ff:62:b0:b3:85:b4:d5:bd:e6:
                    79:53:a3:a6:fc:d4:2e:b2:bf:9e:93:17:6a:f6:53:
                    54:68:ef:8c:36:71:2d:ed:c4:0e:dd:0a:09:4e:6a:
                    70:ef:a6:91:79:ae:28:c1:a5:64:0b:0e:df:43:5c:
                    ac:bf:d0:9b:da:ef:3e:f2:fe:39:67:61:c2:6b:11:
                    f0:96:6c:13:25:fa:a3:c8:51:92:e7:6f:bf:be:a7:
                    32:79:37:bb:42:17:ce:91:7e:87:77:07:ed:24:2c:
                    89:c9:1f:29:b4:92:46:1e:17:28:8d:e9:03:5f:5c:
                    e0:a0:94:dc:72:82:0e:cf:e9:f4:d4:f3:c2:77:51:
                    78:78:d2:d2:f2:cf:c0:07:cf:15:39:64:dd:16:e6:
                    d3:ff:9d:d4:9c:a4:ce:84:a8:2d:67:bb:40:19:0e:
                    30:eb:9d:7e:d2:df:d8:7c:a9:1e:53:55:f0:db:c3:
                    ac:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BD:90:3B:9A:C1:3D:AD:5E:1A:C8:A8:E5:4B:18:93:74:6F:26:0C:5E
            X509v3 Authority Key Identifier:
                keyid:7B:96:5B:64:C3:E7:24:B9:3F:C0:0B:18:6E:15:E3:5C:ED:53:5D:C7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36C8371/EC0AE8747AFA11E988A3C33CF8AEA228/e5ZbZMPnJLk_wAsYbhXjXO1TXcc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/e5ZbZMPnJLk_wAsYbhXjXO1TXcc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36C8371/EC0AE8747AFA11E988A3C33CF8AEA228/21240358E06B11E9B9893673F8AEA228.roa

            sbgp-ipAddrBlock: critical
                IPv6:
                  2c0f:f050:7000::/36

    Signature Algorithm: sha256WithRSAEncryption
         26:2a:8a:da:87:ac:a3:ca:4a:0d:f6:17:41:bc:92:27:ad:3f:
         2a:19:7c:b1:96:c3:5f:8a:01:b0:e7:2e:03:4a:7c:f1:2b:d8:
         99:fd:c7:5b:f7:0c:32:16:df:bd:9b:94:47:79:da:e2:74:e5:
         91:4f:e4:c1:d8:ca:fa:71:17:18:dc:44:e6:1a:e9:87:ec:a1:
         cc:48:81:ee:f5:49:32:58:b0:ff:ad:38:9a:5b:e5:58:9c:a9:
         4d:47:c5:45:64:77:ba:01:50:c2:04:a6:f1:b5:73:c8:b5:0a:
         2a:8f:7c:70:12:dd:15:33:d4:20:ba:41:97:06:00:54:8d:8f:
         6c:fa:30:95:3c:33:70:bb:0b:2d:3b:25:ad:64:bf:0e:ae:04:
         2b:c4:a7:bb:92:98:e5:67:00:a3:8c:3f:2e:fd:00:1c:3e:5b:
         6d:5f:22:51:0e:ed:b0:10:2b:91:af:d6:aa:8b:34:5e:29:12:
         78:d5:15:6c:c8:f6:16:c5:63:33:fd:19:23:94:1d:25:13:15:
         f1:28:91:bc:eb:93:03:53:3c:4e:12:3f:77:bb:2e:d1:62:c2:
         24:df:8e:ab:44:61:64:d4:4d:54:60:60:25:be:9c:0d:7c:a9:
         77:00:bc:54:73:12:63:8f:48:76:bd:3c:39:9f:f8:9e:87:21:
         8d:9b:26:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----