Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36C8371/EC0AE8747AFA11E988A3C33CF8AEA228/4FC9F624E05F11E9A4A5BD6AF8AEA228.roa
File:                     4FC9F624E05F11E9A4A5BD6AF8AEA228.roa (raw, json)
Hash identifier:          5K80g8qBS3KeyI9n8h1n7/TEyEZJh3BuIdSifecGcUY=
Subject key identifier:   AC:BA:69:1D:6C:33:B0:99:11:AC:F7:7D:38:5B:CD:DD:29:86:E4:B2
Certificate issuer:       /CN=F36C8371AF/serialNumber=7B965B64C3E724B93FC00B186E15E35CED535DC7
Certificate serial:       A0
Authority key identifier: 7B:96:5B:64:C3:E7:24:B9:3F:C0:0B:18:6E:15:E3:5C:ED:53:5D:C7
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/e5ZbZMPnJLk_wAsYbhXjXO1TXcc.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36C8371/EC0AE8747AFA11E988A3C33CF8AEA228/4FC9F624E05F11E9A4A5BD6AF8AEA228.roa
Signing time:             Thu 26 Sep 2019 13:12:38 +0000
ROA not before:           Thu 26 Sep 2019 13:12:33 +0000
ROA not after:            Thu 26 Sep 2024 13:12:33 +0000
asID:                     327804
IP address blocks:        2c0f:f050:5000::/36 maxlen: 36

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 160 (0xa0)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36C8371AF/serialNumber=7B965B64C3E724B93FC00B186E15E35CED535DC7
        Validity
            Not Before: Sep 26 13:12:33 2019 GMT
            Not After : Sep 26 13:12:33 2024 GMT
        Subject: CN=5d8cb946-fa2b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:9c:82:e4:02:84:cd:3e:32:f1:46:3f:32:2e:
                    69:69:0d:a2:81:d4:68:fa:7f:63:87:b1:91:8f:0f:
                    99:3e:3c:60:74:b2:e0:d5:65:b1:88:8f:bc:2f:48:
                    ad:f3:3d:7a:7f:c2:fc:8f:73:d2:a1:88:2c:34:cb:
                    cb:b3:db:5b:f7:78:47:5b:cc:88:e4:1f:25:af:b7:
                    78:14:e1:04:98:16:48:3a:e0:60:05:59:cd:de:f2:
                    f0:15:54:59:a1:9f:0a:cd:19:ae:21:26:5c:c2:cd:
                    c0:7a:30:77:44:ef:24:6f:dc:02:fd:fc:61:df:c3:
                    fd:4e:ce:de:93:6d:a3:a5:37:f0:b5:b6:ed:13:b5:
                    f0:b2:c8:e5:70:95:99:b2:fe:73:aa:bf:c6:00:a4:
                    fa:c4:7f:48:7a:8c:72:03:e5:86:49:11:63:20:9e:
                    75:f8:65:cc:ab:7f:49:4b:d6:f2:94:cd:56:c4:fc:
                    e3:ef:d5:57:eb:6c:f7:18:e7:75:32:9a:e8:42:7f:
                    b6:21:10:d6:81:f2:12:c8:e1:02:e0:9c:3b:f5:8e:
                    09:f3:6e:73:41:d1:e0:41:e4:ea:b5:78:08:f1:8a:
                    ad:cd:4e:0e:82:7d:98:51:17:7f:04:4c:e0:81:17:
                    a3:de:43:e0:9e:d7:f5:0b:41:57:82:8d:39:bf:5c:
                    bb:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AC:BA:69:1D:6C:33:B0:99:11:AC:F7:7D:38:5B:CD:DD:29:86:E4:B2
            X509v3 Authority Key Identifier:
                keyid:7B:96:5B:64:C3:E7:24:B9:3F:C0:0B:18:6E:15:E3:5C:ED:53:5D:C7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36C8371/EC0AE8747AFA11E988A3C33CF8AEA228/e5ZbZMPnJLk_wAsYbhXjXO1TXcc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/e5ZbZMPnJLk_wAsYbhXjXO1TXcc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36C8371/EC0AE8747AFA11E988A3C33CF8AEA228/4FC9F624E05F11E9A4A5BD6AF8AEA228.roa

            sbgp-ipAddrBlock: critical
                IPv6:
                  2c0f:f050:5000::/36

    Signature Algorithm: sha256WithRSAEncryption
         55:eb:92:c7:30:42:74:29:8a:62:86:4f:19:26:40:b5:c8:e4:
         7d:c0:21:12:97:6d:7a:78:88:63:26:c2:be:c1:02:79:05:71:
         91:51:f3:f2:3d:de:fc:90:ec:5b:c1:6f:13:bc:13:c5:34:70:
         50:e6:74:7d:10:10:49:57:99:f1:5b:d4:26:eb:96:98:44:9d:
         4b:1b:ce:5b:cb:cc:40:16:97:86:8a:f7:4b:c7:a7:df:36:8d:
         aa:41:34:86:0c:a5:ec:a6:f6:22:40:08:00:95:52:4d:5a:82:
         86:00:32:5b:d6:2b:df:ab:9a:88:95:03:a5:e6:d0:71:c5:de:
         bb:da:1e:fa:41:6a:8e:20:0a:b8:02:7f:80:85:87:fd:8d:1a:
         c1:ad:5c:1c:f2:a8:88:69:24:77:0e:09:e3:75:a7:b8:bc:29:
         ca:e2:e1:bf:1e:b6:5a:f9:ce:5b:d0:78:4d:c4:cb:57:f5:e0:
         e8:fb:66:99:e8:95:f1:7a:62:29:85:bc:48:7d:f6:85:de:ea:
         fd:23:59:27:62:85:37:34:47:a3:cf:d3:21:db:d5:23:94:02:
         bd:2a:5c:3e:f8:ed:2f:28:aa:ee:09:66:d8:8e:ab:8f:01:b3:
         c7:30:cb:d3:42:36:33:bf:36:56:08:f3:a6:39:7f:7a:c4:67:
         4c:3f:72:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----