Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36D0F50/5EAAA6B8258F11EBB70B7C19F8AEA228/9A7C018E325D11EBB80CDD25F8AEA228.roa
File:                     9A7C018E325D11EBB80CDD25F8AEA228.roa (raw, json)
Hash identifier:          n9ptWsE5LGgh5a40Dx6JsHuGbd0bJebR1BJnrVrUrGo=
Subject key identifier:   A4:3F:89:60:39:56:57:E7:E0:30:DB:23:D3:6F:98:7F:8E:FA:CC:9A
Certificate issuer:       /CN=F36D0F50AF/serialNumber=AE98A5FDAD2DC9F4FC1BE47F66857A8C47988102
Certificate serial:       87
Authority key identifier: AE:98:A5:FD:AD:2D:C9:F4:FC:1B:E4:7F:66:85:7A:8C:47:98:81:02
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/rpil_a0tyfT8G-R_ZoV6jEeYgQI.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36D0F50/5EAAA6B8258F11EBB70B7C19F8AEA228/9A7C018E325D11EBB80CDD25F8AEA228.roa
Signing time:             Sun 29 Nov 2020 16:11:57 +0000
ROA not before:           Sun 29 Nov 2020 16:11:52 +0000
ROA not after:            Sun 30 Jul 2023 16:11:52 +0000
asID:                     37119
IP address blocks:        2c0f:f888::/32 maxlen: 32

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 135 (0x87)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36D0F50AF/serialNumber=AE98A5FDAD2DC9F4FC1BE47F66857A8C47988102
        Validity
            Not Before: Nov 29 16:11:52 2020 GMT
            Not After : Jul 30 16:11:52 2023 GMT
        Subject: CN=5fc3c84d-a64f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:d3:17:6e:15:10:49:67:39:9c:10:e5:0a:ed:
                    79:a4:74:6a:8a:87:0e:c2:1c:b5:1e:21:be:7d:78:
                    63:ae:73:8c:9f:7b:07:7e:b8:c3:aa:f5:d8:87:38:
                    28:1b:c6:15:6c:7f:ca:b6:7f:dc:4e:99:ad:19:85:
                    68:8c:4c:31:14:d8:fa:05:34:e9:c6:0f:5d:8d:7b:
                    09:a0:6f:21:d9:dd:7c:ba:12:05:cd:3a:43:83:0f:
                    21:fd:00:bb:19:df:6c:e3:ff:93:67:2a:1b:f0:44:
                    15:76:dd:ab:54:85:64:8a:5b:56:0e:88:54:94:cf:
                    4c:24:3b:df:1f:13:ce:89:56:1b:7c:7e:84:59:1a:
                    cb:47:f3:2a:5a:58:cb:5f:c5:80:14:55:dc:bb:69:
                    f6:41:4e:05:b6:7b:68:20:05:05:ba:f0:99:f8:cc:
                    93:1f:d4:b7:28:f9:da:ed:9c:9f:62:5c:b6:30:ac:
                    4e:b5:08:dd:8f:07:df:28:dc:08:cd:30:c7:f1:7b:
                    d2:07:34:b4:c6:94:cd:87:6e:04:16:7e:cc:a0:5d:
                    08:3a:74:33:79:2e:5b:c1:46:84:ce:cd:c1:1a:93:
                    1f:42:5f:37:1f:0d:c5:ed:11:cb:f0:92:84:a3:22:
                    99:6e:6a:23:65:62:17:24:c9:80:05:45:17:c3:97:
                    fd:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A4:3F:89:60:39:56:57:E7:E0:30:DB:23:D3:6F:98:7F:8E:FA:CC:9A
            X509v3 Authority Key Identifier:
                keyid:AE:98:A5:FD:AD:2D:C9:F4:FC:1B:E4:7F:66:85:7A:8C:47:98:81:02

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36D0F50/5EAAA6B8258F11EBB70B7C19F8AEA228/rpil_a0tyfT8G-R_ZoV6jEeYgQI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/rpil_a0tyfT8G-R_ZoV6jEeYgQI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36D0F50/5EAAA6B8258F11EBB70B7C19F8AEA228/9A7C018E325D11EBB80CDD25F8AEA228.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  2c0f:f888::/32

    Signature Algorithm: sha256WithRSAEncryption
         47:28:b1:84:61:71:89:95:2d:7b:c0:51:17:92:12:3e:d8:b3:
         94:56:ab:db:c7:02:52:4b:45:2f:93:a2:93:40:64:38:3f:a1:
         b7:3b:6c:d0:f1:42:fc:aa:45:c3:a3:99:63:84:6b:3c:42:1e:
         ae:d9:cf:2d:f5:25:11:91:17:26:62:c2:76:1f:4a:5a:5e:45:
         9c:5d:60:a0:9c:c3:4b:d5:4c:16:03:e0:c4:3e:c4:ea:c2:e9:
         06:64:71:99:71:d5:4f:66:93:69:dc:c6:7e:e5:f3:1c:84:50:
         1c:2d:c0:64:da:cc:f1:49:87:5c:1d:3a:94:08:d1:db:64:23:
         87:3d:e8:a1:7b:08:31:2d:87:fa:93:7a:c8:b4:09:df:1a:70:
         20:b7:5f:a1:d5:cd:39:f5:8e:b5:1f:b8:e8:39:d6:44:05:e9:
         52:13:d4:db:43:bb:d3:30:49:82:9c:14:8d:00:c9:29:e8:f4:
         8b:08:18:40:bb:ff:82:dd:3c:2e:dc:42:2b:ab:a9:80:fb:9e:
         83:95:21:80:a2:37:84:06:10:e5:e0:a6:9f:a3:a1:d3:3a:6d:
         b8:d8:99:c6:36:9f:85:c7:91:7c:e8:fd:fd:54:f1:a4:ed:86:
         d9:f5:c7:08:98:59:89:30:0f:b2:d2:94:36:23:8c:02:70:de:
         84:46:cb:87
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICAIcwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
RDBGNTBBRjExMC8GA1UEBRMoQUU5OEE1RkRBRDJEQzlGNEZDMUJFNDdGNjY4NTdB
OEM0Nzk4ODEwMjAeFw0yMDExMjkxNjExNTJaFw0yMzA3MzAxNjExNTJaMBgxFjAU
BgNVBAMTDTVmYzNjODRkLWE2NGYwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQCp0xduFRBJZzmcEOUK7XmkdGqKhw7CHLUeIb59eGOuc4yfewd+uMOq9diH
OCgbxhVsf8q2f9xOma0ZhWiMTDEU2PoFNOnGD12NewmgbyHZ3Xy6EgXNOkODDyH9
ALsZ32zj/5NnKhvwRBV23atUhWSKW1YOiFSUz0wkO98fE86JVht8foRZGstH8ypa
WMtfxYAUVdy7afZBTgW2e2ggBQW68Jn4zJMf1Lco+drtnJ9iXLYwrE61CN2PB98o
3AjNMMfxe9IHNLTGlM2HbgQWfsygXQg6dDN5LlvBRoTOzcEakx9CXzcfDcXtEcvw
koSjIpluaiNlYhckyYAFRRfDl/2DAgMBAAGjggKmMIICojAdBgNVHQ4EFgQUpD+J
YDlWV+fgMNsj02+Yf476zJowHwYDVR0jBBgwFoAUrpil/a0tyfT8G+R/ZoV6jEeY
gQIwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNkQwRjUwLzVFQUFBNkI4MjU4RjExRUJCNzBCN0MxOUY4QUVBMjI4L3JwaWxf
YTB0eWZUOEctUl9ab1Y2akVlWWdRSS5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljL3JwaWxfYTB0eWZUOEctUl9ab1Y2akVlWWdRSS5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdsGCCsGAQUFBwELBIHOMIHLMIGRBggrBgEF
BQcwC4aBhHJzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJl
cl9yZXBvc2l0b3J5L0YzNkQwRjUwLzVFQUFBNkI4MjU4RjExRUJCNzBCN0MxOUY4
QUVBMjI4LzlBN0MwMThFMzI1RDExRUJCODBDREQyNUY4QUVBMjI4LnJvYTA1Bggr
BgEFBQcwDYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54
bWwwIAYIKwYBBQUHAQcBAf8EETAPMA0EAgACMAcDBQAsD/iIMA0GCSqGSIb3DQEB
CwUAA4IBAQBHKLGEYXGJlS17wFEXkhI+2LOUVqvbxwJSS0Uvk6KTQGQ4P6G3O2zQ
8UL8qkXDo5ljhGs8Qh6u2c8t9SURkRcmYsJ2H0paXkWcXWCgnMNL1UwWA+DEPsTq
wukGZHGZcdVPZpNp3MZ+5fMchFAcLcBk2szxSYdcHTqUCNHbZCOHPeihewgxLYf6
k3rItAnfGnAgt1+h1c059Y61H7joOdZEBelSE9TbQ7vTMEmCnBSNAMkp6PSLCBhA
u/+C3Twu3EIrq6mA+56DlSGAojeEBhDl4Kafo6HTOm242JnGNp+Fx5F86P39VPGk
7YbZ9ccImFmJMA+y0pQ2I4wCcN6ERsuH
-----END CERTIFICATE-----