Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36FA15D/98166C5E623711EB931CB859F8AEA228/37285E743D8311EDAD691EB7F1222468.roa
File:                     37285E743D8311EDAD691EB7F1222468.roa (raw, json)
Hash identifier:          CY+Z9ho+OmDK5eXz/tRLk49XMHIHOJJ0i5XqylP1ruE=
Subject key identifier:   A6:A3:0E:9E:55:C0:0E:FD:C5:07:1A:DA:E1:0C:1D:7F:6A:D3:FF:DA
Certificate issuer:       /CN=F36FA15DAR/serialNumber=44A9F69F4141DA76B7353EB0D581523AFE2B81E1
Certificate serial:       0899
Authority key identifier: 44:A9:F6:9F:41:41:DA:76:B7:35:3E:B0:D5:81:52:3A:FE:2B:81:E1
Authority info access:    rsync://rpki.afrinic.net/repository/arin/RKn2n0FB2na3NT6w1YFSOv4rgeE.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36FA15D/98166C5E623711EB931CB859F8AEA228/37285E743D8311EDAD691EB7F1222468.roa
Signing time:             Mon 26 Sep 2022 10:08:49 +0000
ROA not before:           Mon 26 Sep 2022 10:08:46 +0000
ROA not after:            Tue 26 Sep 2023 10:08:46 +0000
asID:                     203999
IP address blocks:        161.123.221.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2201 (0x899)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36FA15DAR/serialNumber=44A9F69F4141DA76B7353EB0D581523AFE2B81E1
        Validity
            Not Before: Sep 26 10:08:46 2022 GMT
            Not After : Sep 26 10:08:46 2023 GMT
        Subject: CN=63317a31-38ee
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:5d:42:ef:0b:a8:06:45:62:7d:13:ce:04:4d:
                    55:74:b1:de:42:5c:d8:39:97:5d:da:e9:e5:7f:ff:
                    f0:4a:ec:40:cc:96:56:95:ca:74:5a:cd:25:7c:14:
                    f5:0d:32:87:69:e5:b6:f6:3e:a0:b5:e3:ca:b7:0b:
                    60:de:ef:88:70:27:3d:d7:ec:a9:b8:b2:e3:97:01:
                    b8:0a:0d:0a:11:41:98:f7:92:09:2c:43:c8:8f:c2:
                    0b:5c:de:27:e5:e2:f7:fe:36:a2:a6:84:24:62:3a:
                    70:c9:f6:d3:6c:d3:63:58:bf:26:95:a5:1a:7a:a7:
                    f9:85:3b:0e:01:73:38:03:c0:74:79:d4:ec:7f:2c:
                    3d:e3:2d:f8:7b:19:d7:45:fc:cf:57:2f:af:b5:2e:
                    3a:36:83:9c:f2:63:98:cb:74:f2:24:a1:f3:c1:f1:
                    d3:98:12:ae:d2:ec:fb:f7:45:80:26:d8:ba:6f:f9:
                    74:d4:f7:96:0a:13:ce:6b:b9:1e:fc:00:7f:cc:e0:
                    a1:a5:77:96:f0:23:95:05:f1:75:d9:41:6f:da:84:
                    dd:c7:76:08:90:94:d2:12:5f:5d:98:d0:6a:e9:c7:
                    20:0f:fa:2a:6e:6c:a3:c9:56:c3:5d:7e:3f:5d:19:
                    ce:e0:77:d5:59:f8:69:65:99:e7:a9:c2:6d:42:34:
                    e9:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A6:A3:0E:9E:55:C0:0E:FD:C5:07:1A:DA:E1:0C:1D:7F:6A:D3:FF:DA
            X509v3 Authority Key Identifier:
                keyid:44:A9:F6:9F:41:41:DA:76:B7:35:3E:B0:D5:81:52:3A:FE:2B:81:E1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36FA15D/98166C5E623711EB931CB859F8AEA228/RKn2n0FB2na3NT6w1YFSOv4rgeE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/RKn2n0FB2na3NT6w1YFSOv4rgeE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36FA15D/98166C5E623711EB931CB859F8AEA228/37285E743D8311EDAD691EB7F1222468.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  161.123.221.0/24

    Signature Algorithm: sha256WithRSAEncryption
         2a:8e:47:13:05:5b:1f:c7:9a:03:0b:cc:64:65:28:48:34:f6:
         43:76:27:b8:9b:fc:52:8d:de:20:72:de:39:e1:fb:27:2d:d9:
         24:d6:c6:af:88:5f:82:7a:6e:7c:56:ab:ed:e5:e6:84:3b:eb:
         5e:08:7c:d4:bc:88:f1:39:69:68:d2:df:bb:57:36:de:18:78:
         d1:c4:b2:d9:2c:e5:89:b3:df:2c:8b:b2:c0:7a:87:a3:6b:27:
         e4:11:ad:75:79:a4:94:09:94:03:5c:1a:95:27:7f:5c:76:80:
         28:4f:81:b6:77:17:96:61:8c:fa:d9:f0:fb:97:08:94:f8:78:
         30:24:8b:35:1a:cb:07:11:ae:5a:93:2d:82:e5:9b:30:86:78:
         5a:d6:57:82:e2:f4:30:b0:26:18:62:c1:49:30:e4:b1:3d:a5:
         1b:32:70:4d:27:04:00:45:fe:ee:30:04:fe:7a:fb:7a:2d:0e:
         84:a6:a9:ba:cd:fe:17:1d:34:70:1d:32:d9:e4:3b:88:2d:44:
         52:8c:b5:b7:d5:44:95:ff:83:c6:af:61:d4:50:5a:21:d2:21:
         0e:2f:20:49:e4:02:37:da:6d:f7:69:cf:aa:39:07:d8:f2:a3:
         f6:96:36:23:ee:ce:5a:cc:18:11:a3:64:a4:ff:87:3c:4f:d7:
         89:6a:b2:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----