Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36FA15D/98166C5E623711EB931CB859F8AEA228/185EBEEE1EAC11ECA795A658D8A014CE.roa
File:                     185EBEEE1EAC11ECA795A658D8A014CE.roa (raw, json)
Hash identifier:          NzcJs2lLIOeoeLVej8REz5V63ggUqDRlmM3+UbQYE3w=
Subject key identifier:   A8:11:29:DD:06:CB:C9:FC:57:D2:54:07:D1:1B:DD:29:24:D5:8F:95
Certificate issuer:       /CN=F36FA15DAR/serialNumber=44A9F69F4141DA76B7353EB0D581523AFE2B81E1
Certificate serial:       019C
Authority key identifier: 44:A9:F6:9F:41:41:DA:76:B7:35:3E:B0:D5:81:52:3A:FE:2B:81:E1
Authority info access:    rsync://rpki.afrinic.net/repository/arin/RKn2n0FB2na3NT6w1YFSOv4rgeE.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36FA15D/98166C5E623711EB931CB859F8AEA228/185EBEEE1EAC11ECA795A658D8A014CE.roa
Signing time:             Sun 26 Sep 2021 09:28:23 +0000
ROA not before:           Sun 26 Sep 2021 09:28:20 +0000
ROA not after:            Mon 26 Sep 2022 09:28:20 +0000
asID:                     327790
IP address blocks:        161.123.168.0/22 maxlen: 22

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 412 (0x19c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36FA15DAR/serialNumber=44A9F69F4141DA76B7353EB0D581523AFE2B81E1
        Validity
            Not Before: Sep 26 09:28:20 2021 GMT
            Not After : Sep 26 09:28:20 2022 GMT
        Subject: CN=61503d37-7c55
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:be:4b:b3:81:d2:02:8e:36:78:fd:09:0a:6d:
                    86:01:48:21:cf:0f:93:99:4d:14:8b:c6:fc:54:f4:
                    e1:d7:c8:f3:73:75:93:1b:2d:09:7a:cf:d2:d6:98:
                    b9:07:4c:2f:96:7e:c9:ca:00:65:61:fb:14:4b:dd:
                    03:4b:3e:a2:17:ce:d2:3f:86:a8:51:78:62:81:65:
                    6c:3a:8c:91:19:9f:e8:02:75:a9:79:d5:70:2d:16:
                    a2:d7:d5:4c:ab:28:0f:a9:40:13:04:b5:b9:c8:64:
                    b3:c9:0e:15:b1:51:29:c0:2d:9c:0f:8c:00:e9:81:
                    41:4e:9e:40:2f:be:ed:69:6e:64:b9:e3:c2:f5:92:
                    60:b8:21:eb:5d:fb:24:f4:51:32:61:ed:df:7a:5a:
                    90:e0:0d:b2:3b:c2:15:5a:e1:95:ec:72:44:2e:85:
                    57:b8:c3:11:a2:6d:6a:c9:97:f4:99:73:b2:74:a5:
                    2d:07:3f:da:64:9b:38:14:36:42:f2:1d:8e:5a:71:
                    85:51:49:b0:0f:a7:9a:7a:0c:f5:2b:4d:b2:11:b1:
                    39:c6:6e:a8:bc:30:9e:75:39:0a:a9:af:c3:38:c2:
                    04:84:98:87:c7:e1:71:c6:ac:7f:5f:4f:d6:83:7d:
                    91:10:b0:0d:4f:e0:2c:0f:1a:ab:6a:41:02:14:e5:
                    23:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A8:11:29:DD:06:CB:C9:FC:57:D2:54:07:D1:1B:DD:29:24:D5:8F:95
            X509v3 Authority Key Identifier:
                keyid:44:A9:F6:9F:41:41:DA:76:B7:35:3E:B0:D5:81:52:3A:FE:2B:81:E1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36FA15D/98166C5E623711EB931CB859F8AEA228/RKn2n0FB2na3NT6w1YFSOv4rgeE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/RKn2n0FB2na3NT6w1YFSOv4rgeE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36FA15D/98166C5E623711EB931CB859F8AEA228/185EBEEE1EAC11ECA795A658D8A014CE.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  161.123.168.0/22

    Signature Algorithm: sha256WithRSAEncryption
         05:0c:d1:00:76:9e:dd:a1:ae:d8:91:74:e8:bc:62:af:a7:bf:
         69:75:3c:1b:3f:e3:7e:5f:3b:2a:63:f2:ba:69:f8:35:52:94:
         c7:4b:7f:89:43:b0:29:13:c6:aa:6d:04:3e:61:17:b4:26:d1:
         6b:9e:15:b1:0a:36:1e:92:7b:2c:ef:46:c5:ed:fa:16:eb:89:
         b1:42:f2:fa:4b:27:e8:8b:f6:bb:9e:64:b5:11:fb:5e:d8:94:
         2d:9b:1d:8b:a1:29:41:40:aa:60:6e:d8:17:f3:33:d9:1e:8b:
         33:54:12:6c:a2:b5:d1:15:3b:77:1e:c9:0a:63:ba:75:4e:57:
         d8:e9:bf:63:df:e8:d4:3a:98:5c:c8:8e:ea:c6:c8:f1:d0:15:
         be:25:1f:0d:d9:92:53:5d:e1:13:b1:d3:59:8f:11:30:a2:b8:
         a9:0b:17:c4:c6:06:cf:3a:aa:6f:68:72:1e:51:c7:71:bb:e5:
         dd:98:53:24:5b:db:41:f8:f2:5d:3b:c3:ef:d0:d8:ea:24:31:
         8c:58:57:aa:68:41:60:b1:33:d7:37:a8:62:1b:6c:8b:50:58:
         84:59:18:af:37:e1:88:8b:0d:66:21:82:e4:d2:73:08:8a:fc:
         f3:0e:e0:a8:d8:c6:5b:df:c0:7f:6f:99:c0:d7:f5:75:22:e8:
         42:7d:8c:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----