Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36FA15D/98166C5E623711EB931CB859F8AEA228/5207850A7DEC11ECB1E010AC5A40D577.roa
File:                     5207850A7DEC11ECB1E010AC5A40D577.roa (raw, json)
Hash identifier:          RMPC3uAXcj1SPIJlesyn2M+o1DmI6uzOOnu0vvMYMe8=
Subject key identifier:   05:35:6C:6C:22:7D:57:46:75:C3:DA:53:7F:42:04:02:B2:2B:25:06
Certificate issuer:       /CN=F36FA15DAR/serialNumber=44A9F69F4141DA76B7353EB0D581523AFE2B81E1
Certificate serial:       04EA
Authority key identifier: 44:A9:F6:9F:41:41:DA:76:B7:35:3E:B0:D5:81:52:3A:FE:2B:81:E1
Authority info access:    rsync://rpki.afrinic.net/repository/arin/RKn2n0FB2na3NT6w1YFSOv4rgeE.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36FA15D/98166C5E623711EB931CB859F8AEA228/5207850A7DEC11ECB1E010AC5A40D577.roa
Signing time:             Tue 25 Jan 2022 14:37:28 +0000
ROA not before:           Tue 25 Jan 2022 14:37:25 +0000
ROA not after:            Wed 25 Jan 2023 14:37:25 +0000
asID:                     58202
IP address blocks:        161.123.13.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1258 (0x4ea)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36FA15DAR/serialNumber=44A9F69F4141DA76B7353EB0D581523AFE2B81E1
        Validity
            Not Before: Jan 25 14:37:25 2022 GMT
            Not After : Jan 25 14:37:25 2023 GMT
        Subject: CN=61f00b28-d83a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:84:0f:fc:d3:5e:c9:43:3b:9c:e0:71:dc:19:
                    1b:da:5d:68:29:8a:a2:9d:a9:61:fb:17:d5:e3:90:
                    6d:5f:42:ad:91:57:24:87:3f:54:bf:ce:d2:46:bb:
                    64:d5:69:03:91:f3:26:05:fb:68:94:73:b7:44:4e:
                    ca:87:dc:73:5b:28:d6:6a:69:69:ff:d7:23:03:6c:
                    61:e1:8c:4c:47:dc:d1:eb:45:6b:d9:da:42:30:c9:
                    a6:b5:6b:e2:ac:73:7b:c9:57:8b:e4:09:f4:32:18:
                    a6:80:22:f7:ab:17:80:cb:3b:62:87:4e:02:ee:53:
                    a1:3d:3d:c8:b0:93:0d:c7:97:ba:e9:b7:6b:a4:03:
                    fa:68:f9:94:24:16:e9:63:4c:67:25:58:f1:cb:50:
                    cd:b3:ee:d5:2d:51:c4:17:e1:f6:b7:1d:f2:b1:df:
                    f4:86:45:59:21:e6:f0:fa:4b:3b:51:45:42:a5:7c:
                    74:6e:04:e9:cc:91:45:2b:45:21:cd:09:64:84:87:
                    56:a7:44:0e:a3:a6:55:7f:ff:74:a9:0d:f1:38:a2:
                    e3:f2:96:cd:24:71:1c:05:ae:8c:3f:4c:fb:a6:46:
                    a0:9e:88:e8:c4:ca:e2:e1:e3:f7:0b:a5:d1:89:a5:
                    37:90:f2:01:bb:27:3f:2a:0a:58:6b:23:a9:58:ff:
                    f5:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                05:35:6C:6C:22:7D:57:46:75:C3:DA:53:7F:42:04:02:B2:2B:25:06
            X509v3 Authority Key Identifier:
                keyid:44:A9:F6:9F:41:41:DA:76:B7:35:3E:B0:D5:81:52:3A:FE:2B:81:E1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36FA15D/98166C5E623711EB931CB859F8AEA228/RKn2n0FB2na3NT6w1YFSOv4rgeE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/RKn2n0FB2na3NT6w1YFSOv4rgeE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36FA15D/98166C5E623711EB931CB859F8AEA228/5207850A7DEC11ECB1E010AC5A40D577.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  161.123.13.0/24

    Signature Algorithm: sha256WithRSAEncryption
         a0:99:e4:23:c5:4a:51:9b:bf:42:c9:70:bd:89:b9:db:de:48:
         d2:a9:b8:b5:c9:78:f2:6a:08:19:ba:6d:30:f0:ab:8c:40:40:
         bc:87:76:8c:6c:36:3e:78:9f:c3:81:f7:39:95:c3:36:22:5b:
         e6:c6:4d:87:3c:44:b4:0f:b0:7c:24:51:94:0e:eb:69:59:28:
         13:dc:ac:fe:f5:a6:d2:27:de:cd:0c:8e:3b:5a:a3:7c:d9:92:
         ed:eb:b3:6f:45:8f:12:94:51:e1:11:da:54:48:cc:c1:ea:a0:
         25:eb:1a:24:64:41:e7:d7:70:5d:2f:e2:3a:aa:b5:0d:a8:61:
         3b:43:d8:84:90:90:db:05:55:a4:16:06:71:52:0d:cc:49:ac:
         21:05:05:0d:e4:8d:62:a8:e4:cb:29:13:72:ca:8e:04:82:e4:
         51:97:89:89:5b:e2:6d:65:9d:be:f2:03:bc:57:98:60:29:4f:
         c8:88:21:96:a0:46:1d:31:23:d8:45:7a:3a:e4:7b:82:00:af:
         5a:f5:92:c3:94:3c:aa:73:58:cb:cb:eb:61:0d:7f:fb:8e:f2:
         17:e5:b2:d8:be:b7:83:ce:f9:64:08:3b:cd:1f:53:c3:6b:b4:
         21:e2:e5:fb:ca:21:03:7d:ce:43:b3:78:f3:94:a5:41:df:03:
         c4:c5:86:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----