Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36FA15D/98166C5E623711EB931CB859F8AEA228/30CDD0E67DED11ECA6799DAE5A40D577.roa
File:                     30CDD0E67DED11ECA6799DAE5A40D577.roa (raw, json)
Hash identifier:          gKKreRwym6XFZzykjPel7feKxjNvofzeM1BKYy5L7rI=
Subject key identifier:   4D:58:6A:41:76:24:83:DC:7C:3D:33:95:BB:5D:8D:B8:C0:B8:65:C2
Certificate issuer:       /CN=F36FA15DAR/serialNumber=44A9F69F4141DA76B7353EB0D581523AFE2B81E1
Certificate serial:       04F2
Authority key identifier: 44:A9:F6:9F:41:41:DA:76:B7:35:3E:B0:D5:81:52:3A:FE:2B:81:E1
Authority info access:    rsync://rpki.afrinic.net/repository/arin/RKn2n0FB2na3NT6w1YFSOv4rgeE.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36FA15D/98166C5E623711EB931CB859F8AEA228/30CDD0E67DED11ECA6799DAE5A40D577.roa
Signing time:             Tue 25 Jan 2022 14:43:42 +0000
ROA not before:           Tue 25 Jan 2022 14:43:38 +0000
ROA not after:            Wed 25 Jan 2023 14:43:38 +0000
asID:                     58202
IP address blocks:        161.123.64.0/22 maxlen: 22

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1266 (0x4f2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36FA15DAR/serialNumber=44A9F69F4141DA76B7353EB0D581523AFE2B81E1
        Validity
            Not Before: Jan 25 14:43:38 2022 GMT
            Not After : Jan 25 14:43:38 2023 GMT
        Subject: CN=61f00c9e-5b1e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:6b:79:5f:6a:4f:29:74:c1:c1:e0:a7:5c:28:
                    87:c1:d4:ba:18:43:c8:5e:14:8f:39:0e:c4:59:d8:
                    f6:03:15:17:9d:20:48:ea:bf:2f:8c:f6:d8:32:e7:
                    4a:dd:94:7e:a8:9e:78:7d:06:19:c7:c1:5f:44:5e:
                    c4:54:2a:ba:04:b5:94:bb:1d:b5:0b:8d:5d:54:10:
                    7e:d2:64:06:c7:5c:5e:87:3b:47:98:64:75:ce:3b:
                    1c:25:7c:78:c3:c0:40:a9:fb:49:c0:00:88:af:7d:
                    24:7b:44:ab:75:c6:8b:8b:92:fd:ae:7c:2d:1c:51:
                    4e:e8:4f:12:bf:ea:b2:3a:8a:46:e7:b4:a3:e8:3d:
                    3a:4c:bb:91:0b:0b:2d:8b:24:9b:38:2f:3d:06:f8:
                    57:93:98:fa:fa:49:af:3a:b8:57:1b:bd:09:8b:d4:
                    04:53:1b:6e:f4:0e:1a:80:8e:b2:b8:e4:ad:73:32:
                    39:ae:bd:d8:3f:4f:d9:c2:9f:c3:85:30:08:83:d7:
                    1a:d2:3a:2f:ea:d9:29:b3:d6:60:04:12:ef:9f:38:
                    01:af:3d:c8:9f:18:d0:82:03:32:f7:43:cb:36:f6:
                    0c:0b:f7:b5:0e:d9:06:da:f2:c5:2b:4e:f4:13:da:
                    c9:6e:fb:0c:ef:c0:b0:1a:54:b5:7d:5d:3c:22:91:
                    cd:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4D:58:6A:41:76:24:83:DC:7C:3D:33:95:BB:5D:8D:B8:C0:B8:65:C2
            X509v3 Authority Key Identifier:
                keyid:44:A9:F6:9F:41:41:DA:76:B7:35:3E:B0:D5:81:52:3A:FE:2B:81:E1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36FA15D/98166C5E623711EB931CB859F8AEA228/RKn2n0FB2na3NT6w1YFSOv4rgeE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/RKn2n0FB2na3NT6w1YFSOv4rgeE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36FA15D/98166C5E623711EB931CB859F8AEA228/30CDD0E67DED11ECA6799DAE5A40D577.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  161.123.64.0/22

    Signature Algorithm: sha256WithRSAEncryption
         15:68:39:a1:d7:4b:42:be:18:38:36:f5:f2:5c:56:a4:f9:80:
         0a:a9:86:7f:65:f1:40:e8:2a:d0:ef:07:be:4a:ed:07:b8:76:
         f9:8e:2f:d3:a8:79:2b:2d:0f:bd:b5:5e:10:e9:54:a7:6a:05:
         64:16:20:a6:90:38:af:2c:b3:1a:61:ca:6f:c6:01:83:0a:54:
         6d:b8:91:54:99:91:c0:8a:b0:d5:f9:01:dd:11:8d:98:18:06:
         57:09:98:04:60:04:3a:39:79:50:40:44:ed:a0:28:63:47:d5:
         a8:6f:7f:f5:8c:27:d2:17:31:61:ee:fe:c5:71:2e:f3:06:12:
         8d:ed:1e:30:12:04:a4:a4:1d:aa:a2:4a:f0:10:93:37:93:d6:
         d8:ee:a6:c1:0d:89:73:7e:15:39:07:2e:b7:f9:de:75:cd:61:
         c9:73:06:32:84:20:57:e8:59:f5:24:ca:86:75:b6:57:f4:82:
         02:72:f8:c5:c2:f6:43:1b:44:68:66:eb:3f:27:91:29:03:b7:
         8b:75:e5:bb:f6:38:1e:ca:b9:a7:7f:1a:65:f6:39:e5:65:e7:
         ff:00:2d:8e:ad:de:a1:84:d2:e3:a9:3a:59:1b:ab:7a:39:5c:
         a7:ae:55:40:1d:8c:3c:05:38:4f:4b:94:68:f6:d1:0c:a6:65:
         18:f6:11:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----