Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36C8371/FD8CE0E87AFA11E9B7D8D33CF8AEA228/3F18B4E0E05B11E984349E67F8AEA228.roa
File:                     3F18B4E0E05B11E984349E67F8AEA228.roa (raw, json)
Hash identifier:          A3h1jvIiffMyyYM7oTFwOntQusq5M0Eo+s2FIvhhGVY=
Subject key identifier:   CA:27:7C:B3:51:A1:17:43:5C:B6:4D:D4:89:75:66:B1:A8:8E:28:8E
Certificate issuer:       /CN=F36C8371AR/serialNumber=158B6A2C254C57F47CE2AF511368D9B63CF8E0D2
Certificate serial:       8C
Authority key identifier: 15:8B:6A:2C:25:4C:57:F4:7C:E2:AF:51:13:68:D9:B6:3C:F8:E0:D2
Authority info access:    rsync://rpki.afrinic.net/repository/arin/FYtqLCVMV_R84q9RE2jZtjz44NI.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36C8371/FD8CE0E87AFA11E9B7D8D33CF8AEA228/3F18B4E0E05B11E984349E67F8AEA228.roa
Signing time:             Thu 26 Sep 2019 12:43:32 +0000
ROA not before:           Thu 26 Sep 2019 12:43:27 +0000
ROA not after:            Thu 26 Sep 2024 12:43:27 +0000
asID:                     327804
IP address blocks:        160.119.48.0/20 maxlen: 20

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 140 (0x8c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36C8371AR/serialNumber=158B6A2C254C57F47CE2AF511368D9B63CF8E0D2
        Validity
            Not Before: Sep 26 12:43:27 2019 GMT
            Not After : Sep 26 12:43:27 2024 GMT
        Subject: CN=5d8cb274-3efc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:a7:bb:2c:2e:6b:50:d4:6c:ae:f2:38:2e:7f:
                    91:22:f5:64:63:85:e5:a2:7b:ab:12:2f:1a:fc:46:
                    cd:72:a3:52:84:52:e5:d6:8e:73:ff:f0:57:5d:9e:
                    33:df:1e:0b:80:19:c3:0c:6f:96:51:07:00:58:2b:
                    53:7b:b4:a6:ef:a4:0b:58:4b:1b:2f:55:b9:29:5c:
                    e7:41:bc:37:36:93:61:ac:9b:4b:78:f2:e6:0e:50:
                    30:f2:e5:6e:c0:93:20:d6:9e:e3:c4:5a:ca:c9:eb:
                    3d:37:82:42:9e:d2:1c:04:37:1c:42:f9:58:f5:23:
                    08:7d:54:70:d3:0d:5b:82:5c:7c:11:54:ee:7b:1a:
                    52:de:71:51:5e:fa:75:82:50:97:5d:a3:e1:39:f6:
                    f7:d7:cf:5b:d5:6e:1b:c0:6f:b9:dd:8e:03:f8:37:
                    83:b9:be:09:a2:0a:93:fd:94:02:2f:15:88:a6:71:
                    e3:4b:fb:84:da:4a:b0:5b:44:ed:3f:95:8d:3d:1a:
                    57:43:d5:33:bd:58:cd:db:55:5e:0a:6a:0f:c2:45:
                    e1:d4:80:d6:62:8c:8b:96:6d:45:59:ac:fe:6f:a8:
                    66:bb:82:45:02:97:f6:5e:75:2c:de:f0:af:cf:30:
                    7d:93:01:11:6f:8c:fa:d1:eb:57:b8:86:b5:f8:e7:
                    41:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CA:27:7C:B3:51:A1:17:43:5C:B6:4D:D4:89:75:66:B1:A8:8E:28:8E
            X509v3 Authority Key Identifier:
                keyid:15:8B:6A:2C:25:4C:57:F4:7C:E2:AF:51:13:68:D9:B6:3C:F8:E0:D2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36C8371/FD8CE0E87AFA11E9B7D8D33CF8AEA228/FYtqLCVMV_R84q9RE2jZtjz44NI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/FYtqLCVMV_R84q9RE2jZtjz44NI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36C8371/FD8CE0E87AFA11E9B7D8D33CF8AEA228/3F18B4E0E05B11E984349E67F8AEA228.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  160.119.48.0/20

    Signature Algorithm: sha256WithRSAEncryption
         06:6f:d3:f9:dd:2c:65:0a:d3:6b:17:d5:2e:d1:7c:0d:26:68:
         a5:39:fc:35:08:ca:ca:1f:71:0e:9a:ae:8a:2f:9f:75:ba:7d:
         3c:9d:6a:62:14:73:e7:03:27:ac:fc:d3:f9:be:8f:06:73:a5:
         2a:20:71:05:ce:23:57:12:62:66:29:49:12:9b:9c:f6:13:7b:
         9e:d7:98:1b:1b:de:35:4a:c2:33:24:ac:a2:e2:2f:67:df:d0:
         27:59:d4:9f:24:3f:32:70:89:4f:86:9f:a8:71:1b:46:9f:07:
         37:ec:c9:06:4d:b7:71:97:57:2e:95:11:a9:02:33:b8:56:f6:
         04:1f:11:5d:74:d7:4b:d5:b8:82:f0:14:3d:9f:ab:bb:7a:75:
         9d:64:f6:fb:2d:29:31:c6:08:c0:a5:5b:d3:4a:d8:8a:eb:ef:
         32:62:f9:68:2c:5b:86:a4:02:79:58:d1:83:c6:4b:c8:d8:ce:
         a9:25:09:54:96:eb:96:c3:64:8a:23:81:be:9c:1d:79:61:3d:
         67:f0:5e:11:ba:3e:4a:2a:69:fb:9b:64:de:51:95:18:4c:c9:
         9b:44:b8:e2:9d:43:9c:2b:10:f5:f7:92:1f:c8:c0:85:01:ef:
         6e:3f:1f:16:af:e8:2e:7f:d6:5d:d4:ed:d8:75:90:f7:fd:9b:
         02:4f:53:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----