Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36FA15D/98166C5E623711EB931CB859F8AEA228/241BA4B47DFB11EC82924CD65A40D577.roa
File:                     241BA4B47DFB11EC82924CD65A40D577.roa (raw, json)
Hash identifier:          90hSs+6ibSCTyrCvPZUHILdfv/X0nEELUtdg6E7glgY=
Subject key identifier:   9F:75:06:4D:42:1A:75:F2:D8:B8:D3:5A:D8:1C:60:3A:D3:79:2A:BA
Certificate issuer:       /CN=F36FA15DAR/serialNumber=44A9F69F4141DA76B7353EB0D581523AFE2B81E1
Certificate serial:       052C
Authority key identifier: 44:A9:F6:9F:41:41:DA:76:B7:35:3E:B0:D5:81:52:3A:FE:2B:81:E1
Authority info access:    rsync://rpki.afrinic.net/repository/arin/RKn2n0FB2na3NT6w1YFSOv4rgeE.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36FA15D/98166C5E623711EB931CB859F8AEA228/241BA4B47DFB11EC82924CD65A40D577.roa
Signing time:             Tue 25 Jan 2022 16:23:34 +0000
ROA not before:           Tue 25 Jan 2022 16:23:30 +0000
ROA not after:            Wed 25 Jan 2023 16:23:30 +0000
asID:                     327790
IP address blocks:        161.123.114.0/23 maxlen: 23

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1324 (0x52c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36FA15DAR/serialNumber=44A9F69F4141DA76B7353EB0D581523AFE2B81E1
        Validity
            Not Before: Jan 25 16:23:30 2022 GMT
            Not After : Jan 25 16:23:30 2023 GMT
        Subject: CN=61f02406-ef20
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:88:8c:ca:e1:f4:32:81:e9:c7:01:e5:42:cb:
                    de:ea:b9:b2:9e:a6:8e:12:45:f3:ca:a0:df:7d:2e:
                    71:58:88:2f:0f:25:38:ad:ed:4c:26:5f:dd:74:cd:
                    17:39:57:ca:f2:85:3b:2a:de:bf:c2:7a:42:a2:fb:
                    44:de:c4:f0:57:82:d1:95:8a:09:23:ae:a4:eb:1b:
                    f3:40:8e:df:9b:3d:d7:45:88:e2:cd:03:35:b7:5c:
                    95:01:08:4d:75:23:c1:56:62:e6:f5:e0:f0:10:62:
                    5a:1b:2d:3b:17:72:bc:fb:5d:96:9b:92:dc:5b:9a:
                    35:87:e7:28:c3:8a:94:10:35:92:6f:53:be:c4:80:
                    05:39:29:7d:ea:89:78:e2:6e:ad:0f:b7:47:c1:9e:
                    af:33:90:6e:3f:6e:b3:37:ff:cf:52:dc:ab:48:bc:
                    a3:95:3e:1c:fe:93:1e:9a:1a:b4:50:2f:30:6a:73:
                    17:48:bf:1c:12:7d:1f:cd:0a:77:f1:5b:b4:9c:56:
                    43:43:38:46:2e:cf:13:76:ab:a2:be:49:b8:2f:2b:
                    ed:d9:b4:ae:48:9b:62:41:08:69:a0:23:15:e1:74:
                    a0:3d:4c:a4:ff:eb:2d:0d:38:6d:ba:06:cb:9d:c0:
                    cd:a6:27:89:a4:b7:c2:53:07:a7:6f:59:12:5a:74:
                    e5:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9F:75:06:4D:42:1A:75:F2:D8:B8:D3:5A:D8:1C:60:3A:D3:79:2A:BA
            X509v3 Authority Key Identifier:
                keyid:44:A9:F6:9F:41:41:DA:76:B7:35:3E:B0:D5:81:52:3A:FE:2B:81:E1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36FA15D/98166C5E623711EB931CB859F8AEA228/RKn2n0FB2na3NT6w1YFSOv4rgeE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/RKn2n0FB2na3NT6w1YFSOv4rgeE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36FA15D/98166C5E623711EB931CB859F8AEA228/241BA4B47DFB11EC82924CD65A40D577.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  161.123.114.0/23

    Signature Algorithm: sha256WithRSAEncryption
         88:58:86:58:d4:40:27:d8:c8:cd:e3:26:73:43:e2:d8:30:01:
         f3:32:37:64:f5:c5:da:16:05:0f:10:0b:0b:c9:95:f4:0b:96:
         13:e0:67:86:09:28:17:95:89:cb:fa:c8:f0:f2:3a:7c:bb:8c:
         b7:97:c4:23:1c:8f:2f:64:ce:85:ee:49:eb:ad:9e:a1:6e:9f:
         d5:f3:66:74:9f:a7:10:9e:16:7e:3a:26:d1:c8:ad:f5:1b:05:
         c6:bb:f4:8b:ba:a5:68:10:f9:bb:58:09:5b:38:a2:d0:29:74:
         65:d3:be:66:bb:87:06:f7:fa:31:44:39:a5:74:a2:35:09:51:
         3c:87:78:f8:5c:9a:ca:4b:02:51:81:e7:fd:92:06:52:83:63:
         6f:c5:b6:e2:a1:1a:8d:57:19:e9:24:84:73:ac:0d:82:3d:48:
         dd:ca:47:4c:99:3f:e8:45:45:92:25:e2:1f:cf:1a:e8:d3:ab:
         6d:d6:80:e4:13:36:30:a9:f9:20:7f:50:27:67:34:da:7c:fe:
         52:03:1a:4b:40:57:97:6e:a4:40:bc:52:fb:62:60:1d:21:44:
         e2:4b:e8:18:c5:17:7a:9d:c0:6c:bb:e4:02:a4:55:f6:ed:2d:
         d4:81:96:4a:4e:cc:05:dc:dd:0f:1b:da:6f:de:83:83:4f:1a:
         96:63:92:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----