Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36C8371/EC0AE8747AFA11E988A3C33CF8AEA228/4721AF46E06C11E9AF0A2274F8AEA228.roa
File:                     4721AF46E06C11E9AF0A2274F8AEA228.roa (raw, json)
Hash identifier:          A9I4qDGzmvVvT/9CS0MOMbwSD//VHbR6I3OhQOu7s5k=
Subject key identifier:   08:C0:84:81:0A:0A:9B:98:60:84:4B:DB:26:96:D0:76:C6:C0:46:F8
Certificate issuer:       /CN=F36C8371AF/serialNumber=7B965B64C3E724B93FC00B186E15E35CED535DC7
Certificate serial:       B0
Authority key identifier: 7B:96:5B:64:C3:E7:24:B9:3F:C0:0B:18:6E:15:E3:5C:ED:53:5D:C7
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/e5ZbZMPnJLk_wAsYbhXjXO1TXcc.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36C8371/EC0AE8747AFA11E988A3C33CF8AEA228/4721AF46E06C11E9AF0A2274F8AEA228.roa
Signing time:             Thu 26 Sep 2019 14:45:27 +0000
ROA not before:           Thu 26 Sep 2019 14:45:21 +0000
ROA not after:            Thu 26 Sep 2024 14:45:21 +0000
asID:                     327804
IP address blocks:        2c0f:f050:d000::/36 maxlen: 36

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 176 (0xb0)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36C8371AF/serialNumber=7B965B64C3E724B93FC00B186E15E35CED535DC7
        Validity
            Not Before: Sep 26 14:45:21 2019 GMT
            Not After : Sep 26 14:45:21 2024 GMT
        Subject: CN=5d8ccf07-3caa
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:75:bd:f9:d0:2d:53:19:8a:1d:99:71:e7:66:
                    1a:ec:3b:cb:56:d4:48:d9:4c:bd:d3:80:dd:c7:1f:
                    3d:91:5f:40:78:05:de:5e:3b:ed:81:de:78:2d:24:
                    04:18:6c:b8:55:09:ed:55:c6:f6:33:fd:30:db:01:
                    c7:08:3b:c1:c8:c5:9e:68:81:67:e9:d8:4a:a4:e6:
                    14:83:ce:8d:64:dd:48:ba:9c:ab:77:ec:4c:8b:f3:
                    0c:dd:b3:44:46:7e:78:0c:22:63:19:7c:ea:1c:de:
                    e6:88:b9:fe:e1:a9:c0:99:94:01:6a:ae:04:d4:ae:
                    de:53:7c:2a:b2:44:96:62:2d:d6:ab:5f:89:b8:70:
                    c6:70:c4:f2:38:67:1b:46:d0:49:8f:4d:86:f5:13:
                    58:95:50:65:0f:29:cc:82:26:90:88:f0:30:ca:02:
                    76:5f:b9:8e:99:38:1d:97:4f:86:16:80:64:88:8e:
                    1f:59:57:68:82:b8:c8:31:ec:3a:00:ca:a7:ad:5b:
                    5b:c9:0a:69:63:99:08:a3:7d:6a:91:49:69:24:e6:
                    5c:5b:7e:f1:ee:14:2f:dd:a8:c0:c4:8c:4f:4a:5b:
                    ce:0c:f9:58:7b:03:f6:a8:73:98:5c:38:f3:ab:1c:
                    12:aa:4b:9f:86:97:d4:22:63:ab:c0:0f:44:b4:4f:
                    ca:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                08:C0:84:81:0A:0A:9B:98:60:84:4B:DB:26:96:D0:76:C6:C0:46:F8
            X509v3 Authority Key Identifier:
                keyid:7B:96:5B:64:C3:E7:24:B9:3F:C0:0B:18:6E:15:E3:5C:ED:53:5D:C7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36C8371/EC0AE8747AFA11E988A3C33CF8AEA228/e5ZbZMPnJLk_wAsYbhXjXO1TXcc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/e5ZbZMPnJLk_wAsYbhXjXO1TXcc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36C8371/EC0AE8747AFA11E988A3C33CF8AEA228/4721AF46E06C11E9AF0A2274F8AEA228.roa

            sbgp-ipAddrBlock: critical
                IPv6:
                  2c0f:f050:d000::/36

    Signature Algorithm: sha256WithRSAEncryption
         61:21:07:51:bb:f6:3e:25:80:ab:ce:1f:9d:18:60:19:4a:67:
         8e:92:4d:83:8e:1f:2b:9e:b7:8e:a2:b9:ed:ef:b5:07:01:a7:
         5c:a2:40:89:cc:dd:03:d7:34:aa:68:23:cd:22:6e:1e:98:9b:
         0f:ae:f9:a3:8f:b0:7f:44:09:0c:50:a3:20:0a:1e:6d:a4:0c:
         df:ab:19:94:41:bd:6e:0f:4b:e5:47:90:b3:22:e0:fc:6a:e6:
         e2:e5:24:b9:0f:29:5e:56:5b:8e:53:7b:6b:46:51:63:a7:0a:
         be:d7:c7:64:0a:f6:54:be:60:06:91:aa:06:1b:d6:76:5d:cd:
         9e:1e:ce:62:d6:7c:e6:04:97:69:8b:a9:f4:7f:60:97:63:c9:
         69:b7:a6:ec:9c:05:c0:c1:1b:c7:24:16:e4:9f:b1:5f:26:a3:
         cb:cf:b1:87:33:2c:8c:24:e8:05:10:f7:c7:c2:ad:c0:ea:22:
         d6:7c:fe:7b:dc:88:a7:51:d0:00:12:2c:48:0b:c0:ad:47:88:
         77:c4:6c:0c:65:b4:7d:44:b4:f8:f8:13:bd:06:2b:e7:a3:c3:
         21:b4:26:dc:8a:d2:00:38:15:7b:e6:36:a6:32:1e:3a:8f:6b:
         0e:0d:15:96:15:da:91:01:38:79:28:2f:bd:ab:92:94:f7:19:
         62:44:8f:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----