Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36D0F50/5EAAA6B8258F11EBB70B7C19F8AEA228/CB3A075E31C611EBA5D1AD48F8AEA228.roa
File:                     CB3A075E31C611EBA5D1AD48F8AEA228.roa (raw, json)
Hash identifier:          3sINDSQduyMh5oS+4b5K88TbI4vQrbyAVAOfmQfLAkI=
Subject key identifier:   5A:A2:01:71:6B:DC:28:BA:C2:85:36:BD:3A:FE:AE:0D:9A:E7:6B:07
Certificate issuer:       /CN=F36D0F50AF/serialNumber=AE98A5FDAD2DC9F4FC1BE47F66857A8C47988102
Certificate serial:       44
Authority key identifier: AE:98:A5:FD:AD:2D:C9:F4:FC:1B:E4:7F:66:85:7A:8C:47:98:81:02
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/rpil_a0tyfT8G-R_ZoV6jEeYgQI.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36D0F50/5EAAA6B8258F11EBB70B7C19F8AEA228/CB3A075E31C611EBA5D1AD48F8AEA228.roa
Signing time:             Sat 28 Nov 2020 22:12:26 +0000
ROA not before:           Sat 28 Nov 2020 22:12:20 +0000
ROA not after:            Sun 30 Jul 2023 22:12:20 +0000
asID:                     37119
IP address blocks:        105.172.0.0/16 maxlen: 16

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 68 (0x44)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36D0F50AF/serialNumber=AE98A5FDAD2DC9F4FC1BE47F66857A8C47988102
        Validity
            Not Before: Nov 28 22:12:20 2020 GMT
            Not After : Jul 30 22:12:20 2023 GMT
        Subject: CN=5fc2cb4a-21e7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:11:c3:0a:e5:52:68:d6:f3:a2:78:68:61:ad:
                    ae:30:4b:e9:cb:7c:9b:06:86:f5:8c:e7:00:44:db:
                    8c:60:32:d6:c2:7f:b6:62:94:61:87:25:e5:70:f0:
                    26:24:ae:62:2c:64:4a:08:db:8d:ad:43:9e:02:65:
                    a5:48:8d:2c:57:5c:d3:bf:eb:c0:cb:a1:f4:db:f5:
                    a7:75:48:31:02:72:13:1c:32:76:df:51:ad:56:08:
                    49:cd:52:25:9e:c7:da:f2:51:d8:59:5a:6a:82:8e:
                    d2:21:37:32:8d:02:e9:54:b5:3a:76:9c:50:99:96:
                    36:f7:1e:b9:de:77:87:63:e9:08:10:02:e6:3b:3e:
                    e0:7c:06:19:52:d0:d1:93:cf:b3:b1:2f:e3:59:ea:
                    af:68:3d:2d:ba:b9:19:2b:34:54:be:0e:00:38:02:
                    fa:cc:a8:16:a8:5a:ed:06:7c:16:8e:44:bb:e4:de:
                    2d:2c:54:5c:fc:88:98:4d:78:56:22:7f:15:74:95:
                    db:da:08:7d:02:23:04:db:9a:4c:11:dc:d3:d6:6c:
                    ee:ab:c9:7e:ce:87:44:eb:ad:a6:0a:89:fb:43:76:
                    7d:9c:42:5c:58:87:ee:2a:b6:d5:fd:69:66:5c:67:
                    2d:57:69:5a:c4:bd:05:75:b6:41:a4:cf:0e:08:08:
                    d1:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5A:A2:01:71:6B:DC:28:BA:C2:85:36:BD:3A:FE:AE:0D:9A:E7:6B:07
            X509v3 Authority Key Identifier:
                keyid:AE:98:A5:FD:AD:2D:C9:F4:FC:1B:E4:7F:66:85:7A:8C:47:98:81:02

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36D0F50/5EAAA6B8258F11EBB70B7C19F8AEA228/rpil_a0tyfT8G-R_ZoV6jEeYgQI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/rpil_a0tyfT8G-R_ZoV6jEeYgQI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36D0F50/5EAAA6B8258F11EBB70B7C19F8AEA228/CB3A075E31C611EBA5D1AD48F8AEA228.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  105.172.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         22:f1:3f:b2:12:52:aa:1f:b0:67:8e:e9:bf:1d:b3:07:74:e3:
         a4:89:12:52:0b:05:6b:bb:56:73:ea:41:8e:d8:d0:78:65:4e:
         6b:e6:0d:e2:31:63:27:0f:29:3d:25:9e:5b:37:6c:af:b0:3f:
         02:8c:5a:cb:b4:51:b8:90:ce:4b:8e:0d:6c:19:42:3c:39:27:
         96:d9:a4:85:b7:99:2a:98:0a:28:dd:7d:fd:17:d5:af:f8:b4:
         60:3f:c7:45:4b:9e:99:29:7f:12:c9:80:f5:31:86:00:01:7f:
         b1:7f:37:cd:89:11:4e:77:6c:c4:37:f2:76:cd:73:81:4b:88:
         e9:8d:01:82:7a:d2:fe:63:93:3f:d2:03:aa:83:5d:90:3e:2c:
         eb:5f:4c:df:01:60:91:8a:18:63:e0:02:46:f2:c1:bb:5f:37:
         a2:6c:a4:35:ac:a7:0d:4d:75:b9:e3:04:74:0f:fe:6e:33:ac:
         7c:95:04:91:13:34:03:45:76:67:26:89:84:66:1d:c8:b5:c8:
         1e:02:f5:49:b3:96:84:a1:17:02:60:96:22:d3:4d:18:08:69:
         4e:b2:bd:21:26:d4:6d:63:eb:33:9c:ec:3a:e1:ab:ed:e0:4e:
         0c:5d:e1:ef:a4:8c:dd:90:b2:b7:08:6e:35:b6:d0:25:25:71:
         e4:60:5e:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----