Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36D0F50/5EAAA6B8258F11EBB70B7C19F8AEA228/5F528C5631CA11EBBE7C8A4CF8AEA228.roa
File:                     5F528C5631CA11EBBE7C8A4CF8AEA228.roa (raw, json)
Hash identifier:          9lsbu4EoBFKPt/gpCdgH+0uPtOEgVcFm5pQhE0Vr+So=
Subject key identifier:   4E:FC:A2:7A:3A:3E:55:FE:D5:B2:B1:5B:AF:59:79:10:F1:9F:E4:7A
Certificate issuer:       /CN=F36D0F50AF/serialNumber=AE98A5FDAD2DC9F4FC1BE47F66857A8C47988102
Certificate serial:       5B
Authority key identifier: AE:98:A5:FD:AD:2D:C9:F4:FC:1B:E4:7F:66:85:7A:8C:47:98:81:02
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/rpil_a0tyfT8G-R_ZoV6jEeYgQI.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36D0F50/5EAAA6B8258F11EBB70B7C19F8AEA228/5F528C5631CA11EBBE7C8A4CF8AEA228.roa
Signing time:             Sat 28 Nov 2020 22:38:02 +0000
ROA not before:           Sat 28 Nov 2020 22:37:56 +0000
ROA not after:            Sun 30 Jul 2023 22:37:56 +0000
asID:                     37119
IP address blocks:        105.172.192.0/19 maxlen: 19

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 91 (0x5b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36D0F50AF/serialNumber=AE98A5FDAD2DC9F4FC1BE47F66857A8C47988102
        Validity
            Not Before: Nov 28 22:37:56 2020 GMT
            Not After : Jul 30 22:37:56 2023 GMT
        Subject: CN=5fc2d14a-50d8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:36:5f:54:4a:9b:a2:e6:ee:f3:22:ae:c6:7d:
                    ec:5a:1d:30:b8:98:b4:ed:a0:d7:b4:e6:32:94:13:
                    d6:19:84:04:60:0d:13:f8:37:d2:6b:79:5f:75:5e:
                    74:7a:51:2b:b8:c6:13:dc:84:3b:ad:c3:47:ea:d9:
                    13:1f:62:0c:26:d0:9c:e1:70:f7:f4:77:66:38:d5:
                    8b:30:a5:16:30:f2:67:af:37:12:39:23:c8:bf:99:
                    db:e9:b2:18:2b:9d:cc:72:94:04:a6:19:05:71:28:
                    52:29:cd:ff:19:ee:3a:68:70:d1:1f:28:e8:53:8d:
                    db:76:81:98:f3:f0:c4:9a:6f:93:4a:12:6e:3c:08:
                    f0:f5:9f:e2:0d:86:7b:41:e3:97:cf:04:7b:4a:1c:
                    ad:b9:44:af:52:d5:51:1e:6e:e6:0e:b7:ce:cc:8c:
                    ed:30:1b:98:53:05:ba:b8:6a:ce:8a:ea:ad:5f:dd:
                    83:cf:e9:a5:0c:1f:76:be:a2:63:cd:25:2e:de:c6:
                    6d:d9:6d:69:0b:31:5c:eb:ac:ec:91:d5:71:4c:87:
                    6f:8e:b2:15:92:ea:35:f7:8d:70:54:7e:d2:f1:88:
                    64:da:6f:c4:56:d1:3d:e2:41:f6:fe:e8:8e:93:1e:
                    a3:ca:d6:0f:3b:ab:b5:06:d5:d4:5f:2b:88:27:11:
                    19:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4E:FC:A2:7A:3A:3E:55:FE:D5:B2:B1:5B:AF:59:79:10:F1:9F:E4:7A
            X509v3 Authority Key Identifier:
                keyid:AE:98:A5:FD:AD:2D:C9:F4:FC:1B:E4:7F:66:85:7A:8C:47:98:81:02

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36D0F50/5EAAA6B8258F11EBB70B7C19F8AEA228/rpil_a0tyfT8G-R_ZoV6jEeYgQI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/rpil_a0tyfT8G-R_ZoV6jEeYgQI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36D0F50/5EAAA6B8258F11EBB70B7C19F8AEA228/5F528C5631CA11EBBE7C8A4CF8AEA228.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  105.172.192.0/19

    Signature Algorithm: sha256WithRSAEncryption
         8e:f3:a5:ca:ab:ec:a7:85:e6:2d:6b:f6:e8:8a:41:da:7e:b3:
         40:d2:23:f9:e3:ec:89:a1:14:a5:39:7e:bc:f5:fe:fd:d0:22:
         e4:7f:a8:04:8a:3a:4b:ab:ef:a6:12:8e:70:2c:f7:43:a3:65:
         fb:c8:56:75:8a:71:b1:c9:09:b9:52:64:02:5c:de:c9:1a:79:
         66:7a:8d:df:2b:d9:88:9e:ed:80:76:4e:ca:7f:fa:4d:e4:91:
         3c:e6:52:18:da:03:d9:fc:df:b8:84:00:4a:24:cf:fa:bb:46:
         bf:1f:27:55:d7:58:90:14:5f:c0:58:12:f5:d5:39:e5:42:2a:
         3e:63:07:1d:08:58:ea:3d:a0:c2:ef:08:47:4f:60:7e:e1:d5:
         69:ff:1c:9a:08:16:72:fa:63:dd:79:af:5b:88:3a:a4:9e:7c:
         ab:07:d2:78:88:f1:5f:a3:a7:df:ac:43:f1:8c:6e:8c:c7:b7:
         8d:a6:03:dc:57:6c:7d:fc:c4:b1:71:18:44:4e:a4:f2:48:19:
         bf:5a:c7:a8:88:1f:7d:9a:aa:70:e5:ff:0b:70:01:fa:18:10:
         3d:ae:e8:b2:39:e4:b2:89:e7:7f:43:0a:41:44:4b:af:e7:90:
         c9:49:df:2c:02:51:70:2a:8a:11:8f:17:de:2c:2b:e8:19:dc:
         7d:96:6d:77
-----BEGIN CERTIFICATE-----
MIIFgjCCBGqgAwIBAgIBWzANBgkqhkiG9w0BAQsFADBIMRMwEQYDVQQDEwpGMzZE
MEY1MEFGMTEwLwYDVQQFEyhBRTk4QTVGREFEMkRDOUY0RkMxQkU0N0Y2Njg1N0E4
QzQ3OTg4MTAyMB4XDTIwMTEyODIyMzc1NloXDTIzMDczMDIyMzc1NlowGDEWMBQG
A1UEAxMNNWZjMmQxNGEtNTBkODCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBANQ2X1RKm6Lm7vMirsZ97FodMLiYtO2g17TmMpQT1hmEBGANE/g30mt5X3Ve
dHpRK7jGE9yEO63DR+rZEx9iDCbQnOFw9/R3ZjjVizClFjDyZ683EjkjyL+Z2+my
GCudzHKUBKYZBXEoUinN/xnuOmhw0R8o6FON23aBmPPwxJpvk0oSbjwI8PWf4g2G
e0Hjl88Ee0ocrblEr1LVUR5u5g63zsyM7TAbmFMFurhqzorqrV/dg8/ppQwfdr6i
Y80lLt7GbdltaQsxXOus7JHVcUyHb46yFZLqNfeNcFR+0vGIZNpvxFbRPeJB9v7o
jpMeo8rWDzurtQbV1F8riCcRGcMCAwEAAaOCAqUwggKhMB0GA1UdDgQWBBRO/KJ6
Oj5V/tWysVuvWXkQ8Z/kejAfBgNVHSMEGDAWgBSumKX9rS3J9Pwb5H9mhXqMR5iB
AjAOBgNVHQ8BAf8EBAMCB4AwgZUGA1UdHwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6
Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVyX3JlcG9zaXRvcnkv
RjM2RDBGNTAvNUVBQUE2QjgyNThGMTFFQkI3MEI3QzE5RjhBRUEyMjgvcnBpbF9h
MHR5ZlQ4Ry1SX1pvVjZqRWVZZ1FJLmNybDBnBggrBgEFBQcBAQRbMFkwVwYIKwYB
BQUHMAKGS3JzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L2Fmcmlu
aWMvcnBpbF9hMHR5ZlQ4Ry1SX1pvVjZqRWVZZ1FJLmNlcjBPBgNVHSABAf8ERTBD
MEEGCCsGAQUFBw4CMDUwMwYIKwYBBQUHAgEWJ2h0dHBzOi8vcnBraS5hZnJpbmlj
Lm5ldC9wb2xpY3kvQ1BTLnBkZjCB2wYIKwYBBQUHAQsEgc4wgcswgZEGCCsGAQUF
BzALhoGEcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVy
X3JlcG9zaXRvcnkvRjM2RDBGNTAvNUVBQUE2QjgyNThGMTFFQkI3MEI3QzE5RjhB
RUEyMjgvNUY1MjhDNTYzMUNBMTFFQkJFN0M4QTRDRjhBRUEyMjgucm9hMDUGCCsG
AQUFBzANhilodHRwczovL3JyZHAuYWZyaW5pYy5uZXQvbm90aWZpY2F0aW9uLnht
bDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEBWmswDANBgkqhkiG9w0BAQsF
AAOCAQEAjvOlyqvsp4XmLWv26IpB2n6zQNIj+ePsiaEUpTl+vPX+/dAi5H+oBIo6
S6vvphKOcCz3Q6Nl+8hWdYpxsckJuVJkAlzeyRp5ZnqN3yvZiJ7tgHZOyn/6TeSR
POZSGNoD2fzfuIQASiTP+rtGvx8nVddYkBRfwFgS9dU55UIqPmMHHQhY6j2gwu8I
R09gfuHVaf8cmggWcvpj3XmvW4g6pJ58qwfSeIjxX6On36xD8YxujMe3jaYD3Fds
ffzEsXEYRE6k8kgZv1rHqIgffZqqcOX/C3AB+hgQPa7osjnksonnf0MKQURLr+eQ
yUnfLAJRcCqKEY8X3iwr6BncfZZtdw==
-----END CERTIFICATE-----