Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36C8371/EC0AE8747AFA11E988A3C33CF8AEA228/2D7DF4EEE05F11E9B216966AF8AEA228.roa
File:                     2D7DF4EEE05F11E9B216966AF8AEA228.roa (raw, json)
Hash identifier:          YRSZgDEA430x9Kw5YNQo0pyfu3jYzvimkksLgpH4epE=
Subject key identifier:   AB:B0:D0:C1:31:66:55:41:CF:C3:CE:A3:2D:BD:71:41:BC:04:90:52
Certificate issuer:       /CN=F36C8371AF/serialNumber=7B965B64C3E724B93FC00B186E15E35CED535DC7
Certificate serial:       9E
Authority key identifier: 7B:96:5B:64:C3:E7:24:B9:3F:C0:0B:18:6E:15:E3:5C:ED:53:5D:C7
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/e5ZbZMPnJLk_wAsYbhXjXO1TXcc.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36C8371/EC0AE8747AFA11E988A3C33CF8AEA228/2D7DF4EEE05F11E9B216966AF8AEA228.roa
Signing time:             Thu 26 Sep 2019 13:11:40 +0000
ROA not before:           Thu 26 Sep 2019 13:11:34 +0000
ROA not after:            Thu 26 Sep 2024 13:11:34 +0000
asID:                     327804
IP address blocks:        2c0f:f050:4000::/36 maxlen: 36

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 158 (0x9e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36C8371AF/serialNumber=7B965B64C3E724B93FC00B186E15E35CED535DC7
        Validity
            Not Before: Sep 26 13:11:34 2019 GMT
            Not After : Sep 26 13:11:34 2024 GMT
        Subject: CN=5d8cb90c-03d1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:23:2b:1c:ce:d2:5b:70:20:3f:de:77:f1:0f:
                    26:76:af:92:4b:1d:11:46:a3:0d:0e:26:e4:92:ac:
                    b6:e1:01:65:fa:ea:77:4c:92:e9:cb:97:3a:c3:e7:
                    e8:12:57:48:be:44:83:b5:32:db:1a:84:29:63:26:
                    87:0a:bf:41:3e:c7:18:f1:a6:43:83:e5:97:7c:05:
                    4b:ad:f6:83:8e:76:ca:84:7d:1a:1f:1c:bd:2f:b2:
                    3d:f6:40:0a:69:7a:75:f1:b1:6b:8f:f5:4e:c5:51:
                    4f:14:d3:2d:07:6c:2f:64:34:d0:99:b1:8a:12:d5:
                    aa:89:93:4e:0c:23:83:76:83:1f:3a:a3:d9:95:c2:
                    07:9a:86:b6:85:3a:51:5a:0e:cd:e6:7e:40:95:fb:
                    42:e1:5a:28:b3:3b:29:1d:82:ee:d5:2f:b7:41:78:
                    75:3e:85:95:0d:75:7f:ba:a0:1b:ee:49:f2:e8:7d:
                    5c:46:18:ab:40:e0:8c:a7:e0:1d:5b:e5:08:e9:1d:
                    68:70:bf:33:22:34:9d:4a:25:88:bf:41:39:a8:ee:
                    dd:40:34:a0:48:9d:36:3d:d3:98:f7:5d:34:f8:6a:
                    87:06:20:62:1f:ce:b5:89:fc:53:87:b2:a7:52:47:
                    14:72:21:c3:78:d9:b4:c8:6d:1f:b1:2c:45:0e:c1:
                    01:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AB:B0:D0:C1:31:66:55:41:CF:C3:CE:A3:2D:BD:71:41:BC:04:90:52
            X509v3 Authority Key Identifier:
                keyid:7B:96:5B:64:C3:E7:24:B9:3F:C0:0B:18:6E:15:E3:5C:ED:53:5D:C7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36C8371/EC0AE8747AFA11E988A3C33CF8AEA228/e5ZbZMPnJLk_wAsYbhXjXO1TXcc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/e5ZbZMPnJLk_wAsYbhXjXO1TXcc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36C8371/EC0AE8747AFA11E988A3C33CF8AEA228/2D7DF4EEE05F11E9B216966AF8AEA228.roa

            sbgp-ipAddrBlock: critical
                IPv6:
                  2c0f:f050:4000::/36

    Signature Algorithm: sha256WithRSAEncryption
         0e:e0:92:25:bb:d2:19:2e:da:95:fe:ae:fc:fe:7e:f9:0e:a8:
         00:98:0d:50:2c:38:91:8b:2e:64:c8:60:5e:98:7c:54:30:32:
         67:aa:37:c0:b5:c1:93:7f:0a:b4:8f:f1:34:e0:e9:32:bc:5c:
         18:14:7d:b8:61:dc:6c:96:5d:91:f2:51:bf:d3:25:39:c6:06:
         58:79:53:11:8e:75:0e:f9:99:fb:a4:c9:64:ed:51:34:34:ab:
         69:af:7c:32:67:8e:69:d7:22:4c:2f:4d:b5:ea:8c:eb:2c:6d:
         57:11:cc:4b:45:71:68:22:a9:b9:f2:9a:74:ec:b5:9a:00:15:
         33:14:42:5c:03:bf:6c:53:2f:b4:d7:c9:dc:c1:43:d4:a1:e1:
         ea:79:69:2d:9c:64:ea:84:e0:20:21:4c:ca:b9:17:42:1a:09:
         fe:07:37:64:b4:d2:f0:65:0e:98:b7:da:00:c1:26:6c:d7:af:
         f0:a2:58:12:4b:18:bb:72:6b:70:dd:e2:11:df:eb:c8:a2:f3:
         3e:41:95:f7:a1:8e:71:a7:77:ca:33:3c:2f:33:fa:7f:69:5e:
         27:e1:e6:f0:46:c1:78:bc:c8:03:fe:7e:db:ac:7e:ba:59:68:
         d6:11:6d:10:e8:81:9c:fd:c4:a4:97:d1:39:68:47:96:35:78:
         a1:a4:0b:9d
-----BEGIN CERTIFICATE-----
MIIFTjCCBDagAwIBAgICAJ4wDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
QzgzNzFBRjExMC8GA1UEBRMoN0I5NjVCNjRDM0U3MjRCOTNGQzAwQjE4NkUxNUUz
NUNFRDUzNURDNzAeFw0xOTA5MjYxMzExMzRaFw0yNDA5MjYxMzExMzRaMBgxFjAU
BgNVBAMTDTVkOGNiOTBjLTAzZDEwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQDVIyscztJbcCA/3nfxDyZ2r5JLHRFGow0OJuSSrLbhAWX66ndMkunLlzrD
5+gSV0i+RIO1MtsahCljJocKv0E+xxjxpkOD5Zd8BUut9oOOdsqEfRofHL0vsj32
QAppenXxsWuP9U7FUU8U0y0HbC9kNNCZsYoS1aqJk04MI4N2gx86o9mVwgeahraF
OlFaDs3mfkCV+0LhWiizOykdgu7VL7dBeHU+hZUNdX+6oBvuSfLofVxGGKtA4Iyn
4B1b5QjpHWhwvzMiNJ1KJYi/QTmo7t1ANKBInTY905j3XTT4aocGIGIfzrWJ/FOH
sqdSRxRyIcN42bTIbR+xLEUOwQF9AgMBAAGjggJwMIICbDAdBgNVHQ4EFgQUq7DQ
wTFmVUHPw86jLb1xQbwEkFIwHwYDVR0jBBgwFoAUe5ZbZMPnJLk/wAsYbhXjXO1T
XccwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNkM4MzcxL0VDMEFFODc0N0FGQTExRTk4OEEzQzMzQ0Y4QUVBMjI4L2U1WmJa
TVBuSkxrX3dBc1liaFhqWE8xVFhjYy5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljL2U1WmJaTVBuSkxrX3dBc1liaFhqWE8xVFhjYy5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgaQGCCsGAQUFBwELBIGXMIGUMIGRBggrBgEF
BQcwC4aBhHJzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJl
cl9yZXBvc2l0b3J5L0YzNkM4MzcxL0VDMEFFODc0N0FGQTExRTk4OEEzQzMzQ0Y4
QUVBMjI4LzJEN0RGNEVFRTA1RjExRTlCMjE2OTY2QUY4QUVBMjI4LnJvYTAhBggr
BgEFBQcBBwEB/wQSMBAwDgQCAAIwCAMGBCwP8FBAMA0GCSqGSIb3DQEBCwUAA4IB
AQAO4JIlu9IZLtqV/q78/n75DqgAmA1QLDiRiy5kyGBemHxUMDJnqjfAtcGTfwq0
j/E04OkyvFwYFH24Ydxsll2R8lG/0yU5xgZYeVMRjnUO+Zn7pMlk7VE0NKtpr3wy
Z45p1yJML0216ozrLG1XEcxLRXFoIqm58pp07LWaABUzFEJcA79sUy+018ncwUPU
oeHqeWktnGTqhOAgIUzKuRdCGgn+BzdktNLwZQ6Yt9oAwSZs16/wolgSSxi7cmtw
3eIR3+vIovM+QZX3oY5xp3fKMzwvM/p/aV4n4ebwRsF4vMgD/n7brH66WWjWEW0Q
6IGc/cSkl9E5aEeWNXihpAud
-----END CERTIFICATE-----