Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36FA15D/98166C5E623711EB931CB859F8AEA228/520313F6AAB211EC97643FAF5A40D577.roa
File:                     520313F6AAB211EC97643FAF5A40D577.roa (raw, json)
Hash identifier:          EQyGPYpBX3xsHJK5vts0zhWOGVeUqs4r3/Iq/czaPqA=
Subject key identifier:   08:57:C9:37:33:10:38:E6:9A:EE:4E:9D:F0:F6:BB:18:E4:54:CA:76
Certificate issuer:       /CN=F36FA15DAR/serialNumber=44A9F69F4141DA76B7353EB0D581523AFE2B81E1
Certificate serial:       0617
Authority key identifier: 44:A9:F6:9F:41:41:DA:76:B7:35:3E:B0:D5:81:52:3A:FE:2B:81:E1
Authority info access:    rsync://rpki.afrinic.net/repository/arin/RKn2n0FB2na3NT6w1YFSOv4rgeE.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36FA15D/98166C5E623711EB931CB859F8AEA228/520313F6AAB211EC97643FAF5A40D577.roa
Signing time:             Wed 23 Mar 2022 14:05:40 +0000
ROA not before:           Wed 23 Mar 2022 14:05:36 +0000
ROA not after:            Thu 23 Mar 2023 14:05:36 +0000
asID:                     58202
IP address blocks:        161.123.108.0/23 maxlen: 23

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1559 (0x617)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36FA15DAR/serialNumber=44A9F69F4141DA76B7353EB0D581523AFE2B81E1
        Validity
            Not Before: Mar 23 14:05:36 2022 GMT
            Not After : Mar 23 14:05:36 2023 GMT
        Subject: CN=623b2934-cf8b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:c8:be:68:31:f7:d1:c0:1e:41:6e:89:73:89:
                    d3:d2:43:08:fe:a7:64:91:21:a0:fa:30:89:f6:04:
                    8b:65:48:13:a7:83:16:9b:13:d7:37:1e:93:e6:5b:
                    e1:b8:94:71:c3:ac:a4:79:56:b4:64:65:4e:e6:75:
                    0b:42:dc:31:cd:d1:99:a9:af:46:29:45:eb:b7:7a:
                    74:9e:0c:f2:95:ef:90:3f:59:c0:03:a9:50:86:d9:
                    4d:49:47:8e:3e:c8:6e:5f:7e:39:79:86:dc:e8:6e:
                    67:da:41:e7:90:ca:48:84:5b:17:12:d7:a7:5a:44:
                    b5:3f:3e:d1:dd:9d:b3:db:d8:62:d3:1c:fd:8c:77:
                    c4:c9:2e:41:5b:aa:af:90:d1:a4:cd:b1:28:00:bd:
                    56:e7:8c:31:db:3d:99:f1:88:62:3b:13:1f:b2:50:
                    af:94:7c:60:98:ec:3f:2f:39:90:41:99:54:68:ce:
                    56:2a:57:62:ca:67:5b:ad:9c:f5:99:ed:51:95:dc:
                    a1:42:95:12:65:f0:a0:8a:10:d6:ad:2a:4b:a3:4e:
                    8b:a7:27:c1:4c:f8:18:de:81:cc:88:a7:35:3a:40:
                    70:fd:12:8e:1a:da:23:09:6b:a6:84:a5:94:3e:2e:
                    0f:8a:7a:67:7d:6e:ce:e5:be:cc:8b:fb:3d:5d:22:
                    c4:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                08:57:C9:37:33:10:38:E6:9A:EE:4E:9D:F0:F6:BB:18:E4:54:CA:76
            X509v3 Authority Key Identifier:
                keyid:44:A9:F6:9F:41:41:DA:76:B7:35:3E:B0:D5:81:52:3A:FE:2B:81:E1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36FA15D/98166C5E623711EB931CB859F8AEA228/RKn2n0FB2na3NT6w1YFSOv4rgeE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/RKn2n0FB2na3NT6w1YFSOv4rgeE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36FA15D/98166C5E623711EB931CB859F8AEA228/520313F6AAB211EC97643FAF5A40D577.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  161.123.108.0/23

    Signature Algorithm: sha256WithRSAEncryption
         6b:f2:64:95:7e:2e:9d:31:92:62:6a:9e:26:99:d6:c9:cd:00:
         4c:22:eb:41:a0:e9:df:0a:48:d0:f2:a9:4e:06:73:e9:66:2f:
         7d:6b:76:dc:f1:b4:fa:d7:69:b0:6e:f7:8d:df:1f:e0:c1:98:
         c7:52:bd:8b:3c:50:53:b4:51:29:5a:13:7d:5b:6d:f6:95:8a:
         9a:42:d8:8d:ca:25:9d:6f:e6:9f:b6:c4:4c:af:51:54:e9:4e:
         7d:33:3b:2d:8a:4f:8f:9d:32:50:c9:ec:91:7c:96:98:f2:f1:
         b4:eb:02:9b:00:ea:c1:13:26:c1:a6:83:4d:4f:66:61:a3:e6:
         6f:cc:46:94:32:64:06:76:f7:cd:35:d4:31:65:3e:f3:6d:e9:
         74:f5:f2:09:03:4b:fb:9e:f9:55:48:c8:cf:65:b1:28:f2:b5:
         20:bb:ad:d0:8d:b0:0a:e2:e3:13:b7:0e:ca:a4:5f:0b:e3:47:
         c6:3c:77:95:24:4d:10:7a:99:29:dd:72:07:6d:f6:42:93:ec:
         5d:2e:37:db:92:12:7e:3c:c0:a2:47:0d:ad:3b:c8:7d:38:dd:
         5f:cd:ad:8d:11:e3:fd:9c:bc:ae:43:ef:13:67:90:2d:9e:2a:
         02:5c:78:93:ce:9e:94:e2:3d:ae:a7:65:fd:4b:5c:bb:8c:a2:
         2d:72:86:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----