Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36FA15D/98166C5E623711EB931CB859F8AEA228/3ED5019C3D8111EDBC62B4B1F1222468.roa
File:                     3ED5019C3D8111EDBC62B4B1F1222468.roa (raw, json)
Hash identifier:          Z7Kr0Pd0YS7vYxoDHKBnTrK5ZcV2JbU5CxHjja23EfE=
Subject key identifier:   F1:06:FE:3A:53:E6:3D:6B:63:EC:6A:6E:31:93:2F:82:5C:30:A2:59
Certificate issuer:       /CN=F36FA15DAR/serialNumber=44A9F69F4141DA76B7353EB0D581523AFE2B81E1
Certificate serial:       0873
Authority key identifier: 44:A9:F6:9F:41:41:DA:76:B7:35:3E:B0:D5:81:52:3A:FE:2B:81:E1
Authority info access:    rsync://rpki.afrinic.net/repository/arin/RKn2n0FB2na3NT6w1YFSOv4rgeE.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36FA15D/98166C5E623711EB931CB859F8AEA228/3ED5019C3D8111EDBC62B4B1F1222468.roa
Signing time:             Mon 26 Sep 2022 09:54:43 +0000
ROA not before:           Mon 26 Sep 2022 09:54:40 +0000
ROA not after:            Tue 26 Sep 2023 09:54:40 +0000
asID:                     203999
IP address blocks:        161.123.136.0/21 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2163 (0x873)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36FA15DAR/serialNumber=44A9F69F4141DA76B7353EB0D581523AFE2B81E1
        Validity
            Not Before: Sep 26 09:54:40 2022 GMT
            Not After : Sep 26 09:54:40 2023 GMT
        Subject: CN=633176e3-5368
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:61:d0:f4:2e:e1:87:a1:bc:04:89:f9:28:e4:
                    73:aa:60:f8:a0:d2:62:a6:24:df:59:98:ec:6c:9e:
                    aa:16:1c:ac:75:6a:49:e6:16:cd:62:79:7f:37:45:
                    36:81:a4:98:04:3a:ac:43:70:04:20:bc:77:cf:d4:
                    38:08:a1:a3:8c:6e:48:7d:27:f7:d2:51:34:ef:34:
                    1d:f1:4f:17:a1:52:63:fc:4f:bd:7c:bd:bd:77:ab:
                    27:d1:f9:3c:1b:9f:95:e1:5b:05:0f:a3:f4:79:4c:
                    9d:09:93:9b:b3:4a:3d:0e:4f:af:60:a4:15:04:49:
                    e2:03:b7:74:d8:8b:04:dd:88:07:ef:30:c9:c2:cb:
                    48:0d:2f:d5:7c:cd:b1:e5:3d:cb:ed:f1:46:4d:c2:
                    38:32:56:d9:83:98:55:0b:dd:16:dd:b1:b7:48:d8:
                    1e:2a:f6:18:5e:b3:91:5d:0f:55:6d:72:79:db:10:
                    1d:07:39:c4:69:bb:96:4a:a1:63:02:c5:da:f6:f6:
                    f0:9c:b6:4d:d6:0c:8e:2c:ec:08:7a:26:93:e3:37:
                    ff:ec:c6:52:59:5f:05:46:48:e3:16:aa:4f:29:d8:
                    2d:52:7b:c3:08:ad:5f:6d:b3:39:13:86:d5:0b:ba:
                    cd:9e:b6:bf:ea:bc:21:0a:2c:ed:df:c6:a8:3f:3a:
                    9d:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F1:06:FE:3A:53:E6:3D:6B:63:EC:6A:6E:31:93:2F:82:5C:30:A2:59
            X509v3 Authority Key Identifier:
                keyid:44:A9:F6:9F:41:41:DA:76:B7:35:3E:B0:D5:81:52:3A:FE:2B:81:E1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36FA15D/98166C5E623711EB931CB859F8AEA228/RKn2n0FB2na3NT6w1YFSOv4rgeE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/RKn2n0FB2na3NT6w1YFSOv4rgeE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36FA15D/98166C5E623711EB931CB859F8AEA228/3ED5019C3D8111EDBC62B4B1F1222468.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  161.123.136.0/21

    Signature Algorithm: sha256WithRSAEncryption
         25:d2:eb:f5:80:10:02:1d:db:1f:1b:d3:e9:90:cd:0c:8f:df:
         6b:b2:19:1b:3f:91:56:13:e7:d6:79:c3:12:a8:cf:ff:fe:9e:
         4e:fe:6e:2f:f9:eb:7c:16:96:04:64:fb:23:ba:9c:42:05:bb:
         f2:5c:d9:4d:79:5c:2c:74:a1:cd:e4:92:21:67:f1:f1:33:18:
         01:55:53:29:df:8b:0d:35:d9:82:55:f2:34:ed:6a:59:0e:34:
         6d:6b:91:82:67:cb:6f:ee:7c:df:bb:8d:44:ca:df:46:cf:f9:
         c1:96:c3:9b:ab:8c:f3:5d:48:35:64:b4:b3:b8:9f:27:52:0a:
         3f:d7:ab:03:f9:75:36:d4:9b:0d:e8:1a:92:3f:03:26:d9:b2:
         1c:ed:49:0b:b9:af:52:b4:83:ae:10:29:42:a1:e2:f1:a6:12:
         04:fe:14:61:29:56:f5:78:8f:f5:f0:96:e9:ab:33:8f:7c:b1:
         fb:2f:a7:bd:d8:6f:a4:3d:f6:23:aa:0a:c3:b5:18:8f:5e:a9:
         f9:44:2b:77:97:ab:ad:5a:da:2b:fd:b2:df:9b:c5:c1:b5:17:
         6c:e4:25:c1:5f:91:93:d3:70:93:b2:a0:32:8c:1f:8b:ed:89:
         33:f5:28:f6:36:b0:16:63:e0:da:e5:cf:77:28:ac:07:11:02:
         11:a6:bc:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----