Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36FA15D/98166C5E623711EB931CB859F8AEA228/093C0EBE7DF511EC8597BEC45A40D577.roa
File:                     093C0EBE7DF511EC8597BEC45A40D577.roa (raw, json)
Hash identifier:          7dpQ6o57DZ1+eApFzbRJtcgDSNhvpxTKdB5OItjrPM4=
Subject key identifier:   BC:8E:7A:4D:D6:15:88:E9:70:B3:99:9D:7B:C7:95:73:18:6D:50:A1
Certificate issuer:       /CN=F36FA15DAR/serialNumber=44A9F69F4141DA76B7353EB0D581523AFE2B81E1
Certificate serial:       0500
Authority key identifier: 44:A9:F6:9F:41:41:DA:76:B7:35:3E:B0:D5:81:52:3A:FE:2B:81:E1
Authority info access:    rsync://rpki.afrinic.net/repository/arin/RKn2n0FB2na3NT6w1YFSOv4rgeE.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36FA15D/98166C5E623711EB931CB859F8AEA228/093C0EBE7DF511EC8597BEC45A40D577.roa
Signing time:             Tue 25 Jan 2022 15:39:52 +0000
ROA not before:           Tue 25 Jan 2022 15:39:48 +0000
ROA not after:            Wed 25 Jan 2023 15:39:48 +0000
asID:                     327790
IP address blocks:        161.123.72.0/22 maxlen: 22

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1280 (0x500)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36FA15DAR/serialNumber=44A9F69F4141DA76B7353EB0D581523AFE2B81E1
        Validity
            Not Before: Jan 25 15:39:48 2022 GMT
            Not After : Jan 25 15:39:48 2023 GMT
        Subject: CN=61f019c8-21be
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:c2:47:41:43:21:ce:da:92:1b:2d:0a:d9:30:
                    b3:ac:2e:dc:66:ed:9a:05:17:dd:d7:73:d8:0f:46:
                    b1:d1:54:9f:0f:57:89:f4:d5:cd:d3:05:36:11:d2:
                    19:6d:f8:d4:99:14:3b:58:1c:c2:e1:3a:c7:c9:f3:
                    f0:0e:3c:08:7c:d8:32:82:6d:41:06:8e:fa:b9:d9:
                    f9:72:78:67:0b:e9:de:ff:82:bb:cf:18:71:5d:fc:
                    44:06:e7:e1:37:d7:5b:4e:1f:a7:8e:a3:1d:7e:bc:
                    cb:19:77:9f:e0:4f:0e:25:c1:eb:29:1d:4a:fd:c2:
                    f9:02:a5:d1:f5:0a:d3:2d:60:b4:56:68:09:82:87:
                    22:c3:a6:4f:1e:50:f9:74:81:21:d3:68:1f:ca:aa:
                    21:03:fe:79:b1:3c:aa:30:b5:b3:e3:72:e5:e4:dd:
                    62:22:1c:3d:ee:ed:f1:59:32:ab:1e:cb:c0:12:4f:
                    cc:da:e3:4b:f7:2b:65:0a:ba:87:cc:f5:fd:f0:4e:
                    1e:32:37:ec:cd:79:d5:03:64:77:d6:a2:e1:f6:9b:
                    a9:a2:0f:fd:4f:fd:1e:b9:01:f7:93:43:69:5e:65:
                    57:05:0f:9e:5d:a4:b0:3e:c9:e1:3b:d4:d3:c9:8a:
                    2a:97:f4:9f:10:1b:fa:7e:bc:6a:88:c9:4b:04:87:
                    e3:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BC:8E:7A:4D:D6:15:88:E9:70:B3:99:9D:7B:C7:95:73:18:6D:50:A1
            X509v3 Authority Key Identifier:
                keyid:44:A9:F6:9F:41:41:DA:76:B7:35:3E:B0:D5:81:52:3A:FE:2B:81:E1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36FA15D/98166C5E623711EB931CB859F8AEA228/RKn2n0FB2na3NT6w1YFSOv4rgeE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/RKn2n0FB2na3NT6w1YFSOv4rgeE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36FA15D/98166C5E623711EB931CB859F8AEA228/093C0EBE7DF511EC8597BEC45A40D577.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  161.123.72.0/22

    Signature Algorithm: sha256WithRSAEncryption
         7b:ae:0e:bc:99:45:2e:dd:e8:ce:42:7a:c4:94:86:dc:28:22:
         6c:34:cb:c7:32:0c:fe:87:48:78:18:76:c9:64:1b:2b:b1:f9:
         bb:35:38:71:3f:ed:f5:a0:7a:e7:aa:4b:08:32:0a:32:03:e4:
         0c:11:51:f6:e5:6c:3c:07:ba:4b:07:92:e4:3e:74:bc:77:33:
         0d:91:29:ac:fd:7a:60:c6:50:66:a1:c3:ef:75:ab:cb:24:ba:
         70:f3:2a:dd:1a:41:94:47:5b:6e:1b:fc:d4:b5:e2:f9:ee:92:
         be:50:d6:75:47:33:9c:85:72:7f:2d:a0:bc:42:ba:59:94:70:
         73:18:a5:02:3b:1a:3a:9a:1e:8e:12:1a:6c:50:b0:b1:6a:eb:
         af:82:99:ac:8b:c3:ab:51:62:56:0c:d2:4b:69:d8:7d:2e:c8:
         72:56:51:a8:ed:e8:fd:6d:12:7d:88:9b:27:36:c7:7f:ab:10:
         87:eb:0c:5d:76:3a:6f:de:c4:73:37:84:38:1b:90:fe:1c:3f:
         e8:33:19:7a:04:90:72:aa:1d:df:a6:96:e1:ae:18:7b:b4:a0:
         d5:b3:3e:9c:23:b4:e6:7f:fd:9d:96:75:ac:8c:3e:31:a0:da:
         9a:51:70:87:09:3e:bf:a8:f6:e0:5e:0e:53:41:16:00:2d:e6:
         76:8d:9c:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----