Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36FA15D/98166C5E623711EB931CB859F8AEA228/15B68882845711ECBAF223835A40D577.roa
File:                     15B68882845711ECBAF223835A40D577.roa (raw, json)
Hash identifier:          QfAzpMZEtF8asmMdLOWG+tAkfXyPK+cZo2c5R6wJLj8=
Subject key identifier:   DB:4D:57:6F:CE:DF:21:09:7D:C1:5B:08:D0:ED:A0:0A:BC:E3:D0:7B
Certificate issuer:       /CN=F36FA15DAR/serialNumber=44A9F69F4141DA76B7353EB0D581523AFE2B81E1
Certificate serial:       056F
Authority key identifier: 44:A9:F6:9F:41:41:DA:76:B7:35:3E:B0:D5:81:52:3A:FE:2B:81:E1
Authority info access:    rsync://rpki.afrinic.net/repository/arin/RKn2n0FB2na3NT6w1YFSOv4rgeE.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36FA15D/98166C5E623711EB931CB859F8AEA228/15B68882845711ECBAF223835A40D577.roa
Signing time:             Wed 02 Feb 2022 18:36:50 +0000
ROA not before:           Wed 02 Feb 2022 18:36:47 +0000
ROA not after:            Thu 02 Feb 2023 18:36:47 +0000
asID:                     3561
IP address blocks:        161.123.104.0/22 maxlen: 22

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1391 (0x56f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36FA15DAR/serialNumber=44A9F69F4141DA76B7353EB0D581523AFE2B81E1
        Validity
            Not Before: Feb  2 18:36:47 2022 GMT
            Not After : Feb  2 18:36:47 2023 GMT
        Subject: CN=61facf42-7799
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:08:9c:ee:7e:b4:34:a6:f3:3a:dd:d2:c0:10:
                    42:1e:f9:d3:0b:65:95:4f:7b:df:53:81:38:92:a2:
                    74:15:de:93:b0:92:35:1f:01:cf:79:34:29:f9:0c:
                    88:68:36:41:89:71:d0:38:10:2e:b3:ab:c5:be:e3:
                    53:f6:9a:16:a1:26:25:15:55:fc:f9:6c:63:11:01:
                    7c:fc:e0:eb:30:65:72:16:f4:4e:4b:1e:2b:5c:f4:
                    4a:f0:ca:76:ee:de:92:9b:e5:b0:98:fb:cc:eb:03:
                    08:e0:69:23:ab:e8:1b:7e:0b:7a:ed:bb:8e:5e:9a:
                    60:0f:87:95:62:da:8c:d7:67:61:38:da:71:98:58:
                    34:1b:ef:24:af:27:32:b0:dc:6f:a5:a6:00:03:2c:
                    87:5e:ce:75:3c:63:13:17:b7:2a:cb:53:8b:11:20:
                    17:bf:9c:e3:cf:54:01:48:3e:42:da:da:03:32:c6:
                    91:5b:d0:03:f1:fc:11:08:4c:d8:48:5a:9b:f2:5a:
                    10:f2:6a:50:cf:8b:9d:8a:39:35:16:6a:e7:cd:96:
                    72:12:0f:91:ed:c9:46:07:c2:1c:20:a5:d6:b6:d2:
                    1e:aa:cc:10:08:75:dc:78:df:1e:c7:06:6b:aa:22:
                    cf:1e:80:ca:96:8a:01:74:c0:47:f6:12:f9:31:4c:
                    9a:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DB:4D:57:6F:CE:DF:21:09:7D:C1:5B:08:D0:ED:A0:0A:BC:E3:D0:7B
            X509v3 Authority Key Identifier:
                keyid:44:A9:F6:9F:41:41:DA:76:B7:35:3E:B0:D5:81:52:3A:FE:2B:81:E1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36FA15D/98166C5E623711EB931CB859F8AEA228/RKn2n0FB2na3NT6w1YFSOv4rgeE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/RKn2n0FB2na3NT6w1YFSOv4rgeE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36FA15D/98166C5E623711EB931CB859F8AEA228/15B68882845711ECBAF223835A40D577.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  161.123.104.0/22

    Signature Algorithm: sha256WithRSAEncryption
         7c:fc:b4:2d:1d:39:bc:18:6b:39:9f:51:5d:55:c6:fc:42:cb:
         a3:5b:96:3e:da:4c:5a:6a:3d:b7:76:e6:a6:8c:e4:ec:4d:77:
         99:20:d7:e8:13:17:e8:1f:93:84:e3:2e:2b:3e:c9:54:a5:49:
         83:0b:3e:9a:ff:32:f1:0f:a7:75:1b:07:ac:6c:57:26:29:c2:
         4b:93:af:5f:71:e4:50:4e:7d:fb:61:7b:db:53:d0:3d:12:73:
         44:13:0e:88:62:a7:77:c5:5c:7e:e2:c9:f8:71:36:ec:f1:f5:
         2f:50:5a:43:ff:f8:5f:b7:46:d6:38:b7:85:b2:42:82:5d:19:
         3a:c8:a4:4b:cb:88:01:6a:81:b2:ef:47:02:92:81:a8:c6:50:
         44:e4:1a:f4:8b:61:c4:01:a4:25:2d:fc:07:7d:76:d5:0a:ed:
         53:6f:1b:6d:9c:8d:67:bf:51:1f:9a:16:64:24:f0:a5:32:db:
         a2:94:11:2d:2b:03:d6:e8:d4:49:bd:cd:94:b1:8e:10:e1:14:
         37:65:ea:4f:9f:25:88:e4:a3:70:90:22:4c:5f:99:db:22:9d:
         12:b9:8d:8e:1f:7d:be:94:8d:70:e6:4b:2c:6c:58:ba:e1:96:
         ce:a9:11:49:96:44:b6:b8:94:9e:e5:3d:c2:4b:3e:67:51:dc:
         a3:9b:64:84
-----BEGIN CERTIFICATE-----
MIIFgDCCBGigAwIBAgICBW8wDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAwwKRjM2
RkExNURBUjExMC8GA1UEBRMoNDRBOUY2OUY0MTQxREE3NkI3MzUzRUIwRDU4MTUy
M0FGRTJCODFFMTAeFw0yMjAyMDIxODM2NDdaFw0yMzAyMDIxODM2NDdaMBgxFjAU
BgNVBAMMDTYxZmFjZjQyLTc3OTkwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQDPCJzufrQ0pvM63dLAEEIe+dMLZZVPe99TgTiSonQV3pOwkjUfAc95NCn5
DIhoNkGJcdA4EC6zq8W+41P2mhahJiUVVfz5bGMRAXz84OswZXIW9E5LHitc9Erw
ynbu3pKb5bCY+8zrAwjgaSOr6Bt+C3rtu45emmAPh5Vi2ozXZ2E42nGYWDQb7ySv
JzKw3G+lpgADLIdeznU8YxMXtyrLU4sRIBe/nOPPVAFIPkLa2gMyxpFb0APx/BEI
TNhIWpvyWhDyalDPi52KOTUWaufNlnISD5HtyUYHwhwgpda20h6qzBAIddx43x7H
BmuqIs8egMqWigF0wEf2EvkxTJq7AgMBAAGjggKiMIICnjAdBgNVHQ4EFgQU201X
b87fIQl9wVsI0O2gCrzj0HswHwYDVR0jBBgwFoAURKn2n0FB2na3NT6w1YFSOv4r
geEwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNkZBMTVELzk4MTY2QzVFNjIzNzExRUI5MzFDQjg1OUY4QUVBMjI4L1JLbjJu
MEZCMm5hM05UNncxWUZTT3Y0cmdlRS5jcmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hcmlu
L1JLbjJuMEZCMm5hM05UNncxWUZTT3Y0cmdlRS5jZXIwTwYDVR0gAQH/BEUwQzBB
BggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5pYy5u
ZXQvcG9saWN5L0NQUy5wZGYwgdsGCCsGAQUFBwELBIHOMIHLMIGRBggrBgEFBQcw
C4aBhHJzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9y
ZXBvc2l0b3J5L0YzNkZBMTVELzk4MTY2QzVFNjIzNzExRUI5MzFDQjg1OUY4QUVB
MjI4LzE1QjY4ODgyODQ1NzExRUNCQUYyMjM4MzVBNDBENTc3LnJvYTA1BggrBgEF
BQcwDYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54bWww
HwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAKhe2gwDQYJKoZIhvcNAQELBQAD
ggEBAHz8tC0dObwYazmfUV1VxvxCy6Nblj7aTFpqPbd25qaM5OxNd5kg1+gTF+gf
k4TjLis+yVSlSYMLPpr/MvEPp3UbB6xsVyYpwkuTr19x5FBOffthe9tT0D0Sc0QT
Dohip3fFXH7iyfhxNuzx9S9QWkP/+F+3RtY4t4WyQoJdGTrIpEvLiAFqgbLvRwKS
gajGUETkGvSLYcQBpCUt/Ad9dtUK7VNvG22cjWe/UR+aFmQk8KUy26KUES0rA9bo
1Em9zZSxjhDhFDdl6k+fJYjko3CQIkxfmdsinRK5jY4ffb6UjXDmSyxsWLrhls6p
EUmWRLa4lJ7lPcJLPmdR3KObZIQ=
-----END CERTIFICATE-----