Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36FA15D/98166C5E623711EB931CB859F8AEA228/20412BFAAB5211ECA078F6875A40D577.roa
File:                     20412BFAAB5211ECA078F6875A40D577.roa (raw, json)
Hash identifier:          fj3OabBhfYwbOpUezM0yfNrlGlvi3FuercGLuvNjjW4=
Subject key identifier:   CB:C5:98:2C:04:FB:50:51:0B:C4:A4:70:9C:4B:68:46:B8:70:5F:10
Certificate issuer:       /CN=F36FA15DAR/serialNumber=44A9F69F4141DA76B7353EB0D581523AFE2B81E1
Certificate serial:       061C
Authority key identifier: 44:A9:F6:9F:41:41:DA:76:B7:35:3E:B0:D5:81:52:3A:FE:2B:81:E1
Authority info access:    rsync://rpki.afrinic.net/repository/arin/RKn2n0FB2na3NT6w1YFSOv4rgeE.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36FA15D/98166C5E623711EB931CB859F8AEA228/20412BFAAB5211ECA078F6875A40D577.roa
Signing time:             Thu 24 Mar 2022 09:09:36 +0000
ROA not before:           Thu 24 Mar 2022 09:09:32 +0000
ROA not after:            Fri 24 Mar 2023 09:09:32 +0000
asID:                     400377
IP address blocks:        161.123.31.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1564 (0x61c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36FA15DAR/serialNumber=44A9F69F4141DA76B7353EB0D581523AFE2B81E1
        Validity
            Not Before: Mar 24 09:09:32 2022 GMT
            Not After : Mar 24 09:09:32 2023 GMT
        Subject: CN=623c3550-6c64
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:20:53:0d:77:6e:07:cb:6e:3c:6e:0d:56:13:
                    30:35:4e:ba:4d:71:a8:db:77:17:a6:fa:89:3b:f7:
                    8b:e3:7c:7a:c4:50:f5:2b:7f:a2:4f:f8:2b:0e:fe:
                    98:fb:6d:b6:23:92:f7:61:8e:0f:80:1d:9a:c3:37:
                    b4:69:3c:76:af:6a:e8:dd:92:c3:2b:02:5c:c0:76:
                    55:97:89:c5:8e:b3:b2:a2:e0:67:78:5e:15:32:13:
                    60:1e:38:6e:1b:ad:19:52:74:85:c8:21:4a:19:95:
                    06:f3:49:38:ca:1f:6a:96:b7:85:9c:07:7d:45:bc:
                    1b:d1:dd:75:4c:41:8b:95:a3:01:89:61:2f:00:20:
                    5a:db:ca:b7:67:ae:dc:00:05:b6:b3:b0:43:8f:23:
                    a5:9a:f1:fe:f2:a9:b4:8b:2b:3b:21:5e:04:0c:28:
                    89:6e:8e:5b:bc:5c:28:ff:e8:a4:79:d4:2d:eb:14:
                    1f:a6:b8:b4:a5:15:6e:9a:d8:d5:ef:ba:75:8d:62:
                    4b:0d:dd:7e:ef:c9:63:8d:30:ff:cc:32:9d:32:d6:
                    60:36:1d:ae:48:65:d7:49:87:ec:bf:af:c2:b8:72:
                    69:3d:66:4e:5e:d3:49:04:a5:e7:42:f9:62:85:c2:
                    d9:32:f3:31:78:25:e6:3e:45:9e:57:5a:29:2b:37:
                    ac:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CB:C5:98:2C:04:FB:50:51:0B:C4:A4:70:9C:4B:68:46:B8:70:5F:10
            X509v3 Authority Key Identifier:
                keyid:44:A9:F6:9F:41:41:DA:76:B7:35:3E:B0:D5:81:52:3A:FE:2B:81:E1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36FA15D/98166C5E623711EB931CB859F8AEA228/RKn2n0FB2na3NT6w1YFSOv4rgeE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/RKn2n0FB2na3NT6w1YFSOv4rgeE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36FA15D/98166C5E623711EB931CB859F8AEA228/20412BFAAB5211ECA078F6875A40D577.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  161.123.31.0/24

    Signature Algorithm: sha256WithRSAEncryption
         78:73:bc:ed:65:65:05:39:70:f3:ee:f9:06:c0:f0:29:0c:59:
         be:b4:05:52:c5:6a:07:6e:d1:db:7b:67:ff:69:21:f8:91:c2:
         cd:bc:42:da:e3:97:35:cb:ef:05:90:eb:e8:f3:6d:af:2d:ed:
         93:12:4c:5e:aa:e3:08:d5:bb:9c:43:63:ed:66:f6:cc:8a:e2:
         4c:b1:83:7c:56:7f:fe:5a:46:ba:db:33:74:95:60:54:ba:b0:
         88:6b:85:62:d5:6a:e7:d5:dc:33:c0:28:65:c7:03:1c:62:ca:
         7a:37:c7:a6:16:51:b1:32:f4:57:92:94:60:09:b3:ed:85:e4:
         f8:32:b4:5c:ea:fc:1c:29:c4:d9:81:ab:8b:90:f1:f1:fd:3f:
         2a:63:ff:ae:28:40:73:9e:b1:e3:41:0e:6b:0e:0c:e6:b9:f6:
         62:22:51:c2:61:d9:f4:95:37:94:48:87:64:bc:08:2f:f8:ee:
         5a:cb:42:9e:ca:b6:38:a8:f3:66:37:1f:76:ea:c3:fa:4c:c4:
         f6:da:de:b6:2c:db:80:cd:04:be:b4:7f:b6:d1:12:e3:3c:41:
         31:56:5b:94:34:29:e8:62:bf:35:ec:48:91:9c:36:6b:14:96:
         8f:74:5d:68:0f:d2:79:1d:f5:12:23:fb:0b:62:11:6f:e7:67:
         3b:3b:25:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----