Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36FA15D/98166C5E623711EB931CB859F8AEA228/3818ADDE82AD11ECBB4234A15A40D577.roa
File:                     3818ADDE82AD11ECBB4234A15A40D577.roa (raw, json)
Hash identifier:          hW09kyXd1X7z6V9v0omAiWYuIWkRSSVpki2kuxasPpw=
Subject key identifier:   8A:2D:17:43:22:33:22:7E:5F:6C:FF:E5:03:80:72:5D:D9:C4:95:3A
Certificate issuer:       /CN=F36FA15DAR/serialNumber=44A9F69F4141DA76B7353EB0D581523AFE2B81E1
Certificate serial:       0562
Authority key identifier: 44:A9:F6:9F:41:41:DA:76:B7:35:3E:B0:D5:81:52:3A:FE:2B:81:E1
Authority info access:    rsync://rpki.afrinic.net/repository/arin/RKn2n0FB2na3NT6w1YFSOv4rgeE.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36FA15D/98166C5E623711EB931CB859F8AEA228/3818ADDE82AD11ECBB4234A15A40D577.roa
Signing time:             Mon 31 Jan 2022 15:48:22 +0000
ROA not before:           Mon 31 Jan 2022 15:48:18 +0000
ROA not after:            Tue 31 Jan 2023 15:48:18 +0000
asID:                     327790
IP address blocks:        161.123.120.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1378 (0x562)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36FA15DAR/serialNumber=44A9F69F4141DA76B7353EB0D581523AFE2B81E1
        Validity
            Not Before: Jan 31 15:48:18 2022 GMT
            Not After : Jan 31 15:48:18 2023 GMT
        Subject: CN=61f804c6-8028
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e3:ad:65:0b:81:c2:9d:cd:4e:47:3d:29:70:0d:
                    d0:cf:d0:fb:46:84:5a:9c:c3:c4:78:bd:40:bd:b1:
                    bb:9f:3d:d2:7a:73:d1:09:95:0c:45:e1:26:75:16:
                    4d:2a:dd:3a:5c:18:21:b1:d1:ea:4c:60:db:38:b2:
                    85:62:79:89:b5:aa:a2:31:7a:6d:a4:b0:0c:75:e5:
                    8d:ed:c7:29:90:28:84:e8:70:a2:ba:e7:0d:c1:85:
                    e9:53:3a:64:ab:94:08:f0:19:cd:db:67:07:4d:25:
                    34:ba:f9:d8:81:41:b4:3a:4e:bb:52:00:ee:ec:53:
                    1c:d8:49:b6:69:4f:50:b5:ef:11:c1:1f:7d:7d:7f:
                    db:96:b1:0e:87:61:97:12:f2:5e:d3:ad:0d:9b:b1:
                    b1:00:66:fd:5e:cf:1e:83:1c:3f:79:26:6d:c7:c0:
                    81:d4:8f:91:4b:1a:4b:d3:79:0d:84:2b:b7:b8:be:
                    4a:44:17:e4:e8:3d:4c:ea:81:d3:77:aa:20:5c:fa:
                    cd:9e:6c:94:52:51:9e:61:7f:45:d1:82:1c:27:0a:
                    c0:63:40:3a:56:93:e5:4c:0a:d0:68:60:a2:9e:ff:
                    72:ad:1a:8c:f4:73:46:7a:68:57:3c:d6:2f:c4:2b:
                    86:ce:02:b7:b3:bc:2c:59:36:4b:88:a6:90:e2:67:
                    e6:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8A:2D:17:43:22:33:22:7E:5F:6C:FF:E5:03:80:72:5D:D9:C4:95:3A
            X509v3 Authority Key Identifier:
                keyid:44:A9:F6:9F:41:41:DA:76:B7:35:3E:B0:D5:81:52:3A:FE:2B:81:E1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36FA15D/98166C5E623711EB931CB859F8AEA228/RKn2n0FB2na3NT6w1YFSOv4rgeE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/RKn2n0FB2na3NT6w1YFSOv4rgeE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36FA15D/98166C5E623711EB931CB859F8AEA228/3818ADDE82AD11ECBB4234A15A40D577.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  161.123.120.0/24

    Signature Algorithm: sha256WithRSAEncryption
         96:79:13:11:0b:d5:2a:0d:1e:8e:41:37:a4:8b:b8:fd:2b:95:
         41:0f:5a:fd:9a:16:aa:c6:5b:bb:de:a9:9b:4c:be:e9:28:a7:
         a8:0b:d7:db:4c:60:a6:9d:1e:b1:fc:6e:4e:a4:47:ec:20:39:
         0c:68:0a:36:e9:53:10:e8:15:b5:e5:32:e7:b8:8f:e1:a8:51:
         1b:2e:bc:64:97:95:76:83:4e:be:af:91:fe:82:df:e7:63:cb:
         a0:35:e9:8a:ff:a9:83:9d:2a:64:c8:37:48:e3:62:72:67:e3:
         8a:04:4a:66:b1:c5:45:05:20:8c:99:0e:7d:d1:72:e3:e6:cd:
         d6:5d:d7:9d:b3:b1:ab:fb:44:d3:f3:b0:61:14:7d:c0:09:77:
         88:96:30:23:a3:03:14:a3:e3:20:11:25:df:97:6f:58:b4:35:
         90:d1:76:88:88:0a:c8:a4:d3:f5:cb:75:93:c0:e7:37:14:4a:
         52:1e:0f:80:11:0d:d4:07:ec:67:b7:ec:2e:55:59:b2:72:c9:
         10:5f:8e:0b:40:d2:16:88:69:f9:7e:94:9d:6d:de:17:22:08:
         49:db:fa:0c:ae:94:dc:da:de:23:c8:34:f5:64:6b:6f:84:f7:
         62:13:4b:b6:a0:b2:48:fc:ca:4c:67:13:86:03:06:5d:d5:6f:
         22:a7:59:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----