Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36FA15D/98166C5E623711EB931CB859F8AEA228/475C1D547DFC11ECA6B7ACD95A40D577.roa
File:                     475C1D547DFC11ECA6B7ACD95A40D577.roa (raw, json)
Hash identifier:          2NH+usbLlLXmZkVdgHJG2bA8XH22uUrLMFbjkEBZqfM=
Subject key identifier:   7D:EB:9E:24:F8:8E:B1:F2:65:7A:8C:28:4F:50:46:AE:53:E0:34:F5
Certificate issuer:       /CN=F36FA15DAR/serialNumber=44A9F69F4141DA76B7353EB0D581523AFE2B81E1
Certificate serial:       053E
Authority key identifier: 44:A9:F6:9F:41:41:DA:76:B7:35:3E:B0:D5:81:52:3A:FE:2B:81:E1
Authority info access:    rsync://rpki.afrinic.net/repository/arin/RKn2n0FB2na3NT6w1YFSOv4rgeE.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36FA15D/98166C5E623711EB931CB859F8AEA228/475C1D547DFC11ECA6B7ACD95A40D577.roa
Signing time:             Tue 25 Jan 2022 16:31:42 +0000
ROA not before:           Tue 25 Jan 2022 16:31:39 +0000
ROA not after:            Wed 25 Jan 2023 16:31:39 +0000
asID:                     327790
IP address blocks:        161.123.233.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1342 (0x53e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36FA15DAR/serialNumber=44A9F69F4141DA76B7353EB0D581523AFE2B81E1
        Validity
            Not Before: Jan 25 16:31:39 2022 GMT
            Not After : Jan 25 16:31:39 2023 GMT
        Subject: CN=61f025ee-10bd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:41:18:7e:8e:bd:0d:e7:e2:6e:95:fa:12:d9:
                    fe:13:dd:5b:7f:92:46:2f:6e:a9:97:1f:aa:a2:50:
                    c3:67:fc:86:c2:c8:ca:51:15:d8:e3:2f:06:ed:11:
                    fa:e0:5f:c3:d5:57:2b:71:6d:c2:a2:08:26:3f:d8:
                    fa:47:24:19:af:ea:1b:34:8a:d3:20:38:ef:e1:ab:
                    4a:e1:be:04:ef:4b:cb:ba:a1:06:c9:35:cb:9e:f6:
                    b0:ed:f5:67:f2:12:f5:c2:fd:57:cf:51:fd:eb:75:
                    7f:e4:34:85:92:49:fe:3b:ef:11:c3:cc:06:b5:96:
                    30:c1:37:b6:b7:ff:35:a3:8f:fd:1b:1e:11:66:2e:
                    31:d6:8f:86:3f:66:ef:eb:fc:77:9b:b8:42:00:43:
                    ea:ce:f3:9f:ba:ff:ed:8f:fd:97:08:ad:d2:21:29:
                    6a:61:40:db:4c:74:ac:18:48:e1:39:01:7e:a4:15:
                    e0:09:cd:33:e3:eb:77:2a:34:ee:21:a8:83:08:33:
                    03:33:1f:1f:02:d0:0b:61:9e:d8:ec:c1:fd:0a:50:
                    03:6c:f7:e4:7f:4c:6a:c1:f7:c6:de:d9:d3:41:63:
                    7f:2c:3c:01:9f:12:94:df:f1:23:77:3a:b7:4e:8d:
                    a3:d0:b9:dc:73:af:b0:3b:fa:a7:8c:db:ae:bc:69:
                    6b:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7D:EB:9E:24:F8:8E:B1:F2:65:7A:8C:28:4F:50:46:AE:53:E0:34:F5
            X509v3 Authority Key Identifier:
                keyid:44:A9:F6:9F:41:41:DA:76:B7:35:3E:B0:D5:81:52:3A:FE:2B:81:E1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36FA15D/98166C5E623711EB931CB859F8AEA228/RKn2n0FB2na3NT6w1YFSOv4rgeE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/RKn2n0FB2na3NT6w1YFSOv4rgeE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36FA15D/98166C5E623711EB931CB859F8AEA228/475C1D547DFC11ECA6B7ACD95A40D577.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  161.123.233.0/24

    Signature Algorithm: sha256WithRSAEncryption
         bf:52:6e:7c:87:0f:37:3a:5a:73:0f:2d:21:62:75:22:1b:e9:
         ff:d6:37:11:0d:ba:ef:a7:2c:0d:70:fe:f5:6c:4e:93:f9:bc:
         e9:17:8a:83:1d:4d:9a:07:40:c7:91:62:d1:62:06:07:f9:e8:
         bd:c3:b7:08:60:59:30:52:9f:6b:a1:91:11:79:9e:10:30:35:
         cb:c2:9d:7f:96:73:37:00:f5:6b:ca:14:4f:03:96:56:c8:0a:
         f6:a1:46:b0:cd:3b:e6:09:26:5e:bb:08:ca:58:2b:32:fa:68:
         52:74:31:24:8f:e3:63:4b:05:d3:e2:cb:3b:91:ae:7c:97:92:
         6a:39:e3:26:44:c1:28:db:35:12:2d:22:3d:cf:ed:d8:c4:06:
         e0:86:2b:44:df:17:8f:44:f2:de:67:fb:be:8e:12:69:a9:d2:
         4c:04:db:26:cd:2b:48:72:63:d0:b9:19:74:36:15:86:b9:52:
         21:90:ac:21:78:b3:72:03:78:90:78:dc:77:91:38:c4:c9:15:
         ad:1a:f3:43:74:ac:1f:56:04:40:b8:24:3c:30:f6:ad:05:c9:
         8d:1c:b0:03:56:d6:2f:ca:90:f5:47:f0:bd:50:40:f5:1d:2a:
         89:89:e2:3d:79:21:ce:21:a5:4f:0f:7a:58:70:29:39:20:98:
         f1:de:8d:53
-----BEGIN CERTIFICATE-----
MIIFgDCCBGigAwIBAgICBT4wDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAwwKRjM2
RkExNURBUjExMC8GA1UEBRMoNDRBOUY2OUY0MTQxREE3NkI3MzUzRUIwRDU4MTUy
M0FGRTJCODFFMTAeFw0yMjAxMjUxNjMxMzlaFw0yMzAxMjUxNjMxMzlaMBgxFjAU
BgNVBAMMDTYxZjAyNWVlLTEwYmQwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQDUQRh+jr0N5+JulfoS2f4T3Vt/kkYvbqmXH6qiUMNn/IbCyMpRFdjjLwbt
EfrgX8PVVytxbcKiCCY/2PpHJBmv6hs0itMgOO/hq0rhvgTvS8u6oQbJNcue9rDt
9WfyEvXC/VfPUf3rdX/kNIWSSf477xHDzAa1ljDBN7a3/zWjj/0bHhFmLjHWj4Y/
Zu/r/HebuEIAQ+rO85+6/+2P/ZcIrdIhKWphQNtMdKwYSOE5AX6kFeAJzTPj63cq
NO4hqIMIMwMzHx8C0Athntjswf0KUANs9+R/TGrB98be2dNBY38sPAGfEpTf8SN3
OrdOjaPQudxzr7A7+qeM2668aWurAgMBAAGjggKiMIICnjAdBgNVHQ4EFgQUfeue
JPiOsfJleowoT1BGrlPgNPUwHwYDVR0jBBgwFoAURKn2n0FB2na3NT6w1YFSOv4r
geEwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNkZBMTVELzk4MTY2QzVFNjIzNzExRUI5MzFDQjg1OUY4QUVBMjI4L1JLbjJu
MEZCMm5hM05UNncxWUZTT3Y0cmdlRS5jcmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hcmlu
L1JLbjJuMEZCMm5hM05UNncxWUZTT3Y0cmdlRS5jZXIwTwYDVR0gAQH/BEUwQzBB
BggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5pYy5u
ZXQvcG9saWN5L0NQUy5wZGYwgdsGCCsGAQUFBwELBIHOMIHLMIGRBggrBgEFBQcw
C4aBhHJzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9y
ZXBvc2l0b3J5L0YzNkZBMTVELzk4MTY2QzVFNjIzNzExRUI5MzFDQjg1OUY4QUVB
MjI4LzQ3NUMxRDU0N0RGQzExRUNBNkI3QUNEOTVBNDBENTc3LnJvYTA1BggrBgEF
BQcwDYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54bWww
HwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAChe+kwDQYJKoZIhvcNAQELBQAD
ggEBAL9SbnyHDzc6WnMPLSFidSIb6f/WNxENuu+nLA1w/vVsTpP5vOkXioMdTZoH
QMeRYtFiBgf56L3DtwhgWTBSn2uhkRF5nhAwNcvCnX+WczcA9WvKFE8DllbICvah
RrDNO+YJJl67CMpYKzL6aFJ0MSSP42NLBdPiyzuRrnyXkmo54yZEwSjbNRItIj3P
7djEBuCGK0TfF49E8t5n+76OEmmp0kwE2ybNK0hyY9C5GXQ2FYa5UiGQrCF4s3ID
eJB43HeROMTJFa0a80N0rB9WBEC4JDww9q0FyY0csANW1i/KkPVH8L1QQPUdKomJ
4j15Ic4hpU8PelhwKTkgmPHejVM=
-----END CERTIFICATE-----