Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36FA15D/98166C5E623711EB931CB859F8AEA228/2DDAB71E7DFC11EC833559D95A40D577.roa
File:                     2DDAB71E7DFC11EC833559D95A40D577.roa (raw, json)
Hash identifier:          Xpds+xlqzaL0pWkOC4UYbmEsfZXvwNODBfQM63nnQjs=
Subject key identifier:   DE:01:B5:C0:8C:79:B1:1F:1D:D5:DC:B7:07:06:E7:CD:22:D5:0B:35
Certificate issuer:       /CN=F36FA15DAR/serialNumber=44A9F69F4141DA76B7353EB0D581523AFE2B81E1
Certificate serial:       053C
Authority key identifier: 44:A9:F6:9F:41:41:DA:76:B7:35:3E:B0:D5:81:52:3A:FE:2B:81:E1
Authority info access:    rsync://rpki.afrinic.net/repository/arin/RKn2n0FB2na3NT6w1YFSOv4rgeE.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36FA15D/98166C5E623711EB931CB859F8AEA228/2DDAB71E7DFC11EC833559D95A40D577.roa
Signing time:             Tue 25 Jan 2022 16:31:00 +0000
ROA not before:           Tue 25 Jan 2022 16:30:56 +0000
ROA not after:            Wed 25 Jan 2023 16:30:56 +0000
asID:                     327790
IP address blocks:        161.123.156.0/22 maxlen: 22

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1340 (0x53c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36FA15DAR/serialNumber=44A9F69F4141DA76B7353EB0D581523AFE2B81E1
        Validity
            Not Before: Jan 25 16:30:56 2022 GMT
            Not After : Jan 25 16:30:56 2023 GMT
        Subject: CN=61f025c4-cc7b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:dc:5c:78:e7:ab:9d:64:06:b1:f9:5c:ce:12:
                    1a:e5:0b:3a:70:12:be:a3:02:54:be:1b:2d:4f:6d:
                    23:1b:5f:1c:01:e8:f4:c7:a8:7d:99:a5:10:4f:7e:
                    9d:01:99:80:cf:8d:8e:d0:14:39:01:59:ac:c5:a5:
                    7d:ee:c7:64:63:79:8d:0a:b0:f1:cc:0e:25:38:63:
                    6e:72:7f:6d:41:5c:a1:19:19:80:3d:bb:4c:fa:1a:
                    da:5a:b3:42:fd:3b:7f:bf:b9:87:63:0a:f8:90:8b:
                    e1:10:97:a4:bc:8b:e8:c9:cb:ab:d5:37:7f:0e:f8:
                    ed:0a:f9:77:10:81:21:30:79:e9:a3:03:29:07:20:
                    5b:61:a5:ea:08:18:2e:44:7c:67:bd:5a:6d:5f:26:
                    28:ae:f5:c1:33:be:83:01:b4:b9:65:92:e8:e8:62:
                    7c:45:ae:10:8b:7c:81:ce:b3:03:3a:42:10:ca:ff:
                    21:cd:1a:7c:f9:78:52:0b:7f:fd:1c:e8:02:e7:e6:
                    90:42:7b:0f:c3:65:cc:47:d4:c6:cf:a0:cf:16:a9:
                    7f:6c:4b:73:b0:c4:7e:0c:60:ae:cc:82:98:5e:66:
                    15:0c:a9:c1:bf:7c:ff:ac:4d:e5:c1:fb:ca:6c:6c:
                    ef:ae:fb:1c:32:52:0f:56:55:64:4c:d9:d0:0a:2a:
                    d7:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DE:01:B5:C0:8C:79:B1:1F:1D:D5:DC:B7:07:06:E7:CD:22:D5:0B:35
            X509v3 Authority Key Identifier:
                keyid:44:A9:F6:9F:41:41:DA:76:B7:35:3E:B0:D5:81:52:3A:FE:2B:81:E1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36FA15D/98166C5E623711EB931CB859F8AEA228/RKn2n0FB2na3NT6w1YFSOv4rgeE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/RKn2n0FB2na3NT6w1YFSOv4rgeE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36FA15D/98166C5E623711EB931CB859F8AEA228/2DDAB71E7DFC11EC833559D95A40D577.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  161.123.156.0/22

    Signature Algorithm: sha256WithRSAEncryption
         3b:2d:2c:0a:16:0f:8a:4b:e1:05:6e:f4:9a:a0:de:00:f9:13:
         d6:92:43:9f:a7:75:d0:6a:70:26:c0:82:08:e5:ce:e1:bb:13:
         02:72:18:6d:a8:2a:22:16:4f:e3:09:29:bf:b0:c7:7c:34:4b:
         cd:b6:b5:40:f4:9e:64:dc:63:11:1d:b3:a6:8b:a8:d7:51:de:
         fa:b9:0f:9a:15:7b:d4:75:36:b1:b8:b8:f6:6e:48:5d:70:f9:
         ab:93:62:9a:0b:57:88:b2:ef:f1:a6:57:56:5b:ec:3e:77:77:
         11:3b:6f:a6:da:6c:33:3e:75:91:ff:32:5c:f7:47:92:df:63:
         32:2f:cc:84:ba:08:d6:db:ec:87:6d:cd:ed:7e:f8:6b:44:f5:
         89:95:17:c6:38:b2:4f:fb:97:1c:de:5d:00:ca:5b:15:36:6e:
         47:30:09:aa:1a:c8:ed:04:3f:b7:5d:a3:07:73:51:d2:25:71:
         92:9f:8c:2f:2e:34:75:10:42:f6:90:19:0e:c4:c2:0d:01:a4:
         94:c0:73:45:19:38:c4:b4:fc:d5:11:f4:cc:7d:fb:4d:b1:0f:
         7e:a0:45:42:60:6b:c1:dc:cb:34:b1:2b:e6:f3:5f:e9:d1:a9:
         6d:81:08:0c:fa:74:4a:d3:ab:d6:1a:8d:eb:39:3b:47:9e:3e:
         75:71:c5:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----