Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36FA15D/98166C5E623711EB931CB859F8AEA228/523B2A787DFA11EC8BF1DCD35A40D577.roa
File:                     523B2A787DFA11EC8BF1DCD35A40D577.roa (raw, json)
Hash identifier:          fLCpUWRvHRDXwYZkr5rXXE90dezuN0aTshiXURoIDXo=
Subject key identifier:   0D:F4:0D:E6:5A:77:FF:7D:C0:8C:C2:D0:E3:E4:F1:BC:75:18:90:D3
Certificate issuer:       /CN=F36FA15DAR/serialNumber=44A9F69F4141DA76B7353EB0D581523AFE2B81E1
Certificate serial:       051E
Authority key identifier: 44:A9:F6:9F:41:41:DA:76:B7:35:3E:B0:D5:81:52:3A:FE:2B:81:E1
Authority info access:    rsync://rpki.afrinic.net/repository/arin/RKn2n0FB2na3NT6w1YFSOv4rgeE.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36FA15D/98166C5E623711EB931CB859F8AEA228/523B2A787DFA11EC8BF1DCD35A40D577.roa
Signing time:             Tue 25 Jan 2022 16:17:42 +0000
ROA not before:           Tue 25 Jan 2022 16:17:38 +0000
ROA not after:            Wed 25 Jan 2023 16:17:38 +0000
asID:                     327790
IP address blocks:        161.123.232.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1310 (0x51e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36FA15DAR/serialNumber=44A9F69F4141DA76B7353EB0D581523AFE2B81E1
        Validity
            Not Before: Jan 25 16:17:38 2022 GMT
            Not After : Jan 25 16:17:38 2023 GMT
        Subject: CN=61f022a6-4f1c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:4c:fc:4d:8a:da:2e:fb:22:c8:7f:58:6e:2f:
                    d4:95:ba:b9:a3:c5:8d:b0:10:d6:03:54:2f:54:61:
                    68:6a:b2:93:9c:70:7c:18:07:78:ad:cd:e7:7f:da:
                    2f:cb:c9:43:39:85:24:26:56:a7:b9:04:b2:d1:d0:
                    9d:7f:44:06:0d:63:6a:e5:f0:52:e3:9d:76:b0:55:
                    03:bc:ce:f5:7d:8d:27:62:11:a8:8d:45:0f:9e:0f:
                    d0:27:4b:12:94:db:46:b9:25:c7:17:82:59:b8:df:
                    49:b9:1f:7a:22:b3:6a:52:e5:4f:9a:27:2f:4e:53:
                    02:73:ca:22:15:8c:fd:13:59:bd:85:22:70:0d:b8:
                    88:49:f6:89:87:78:9f:e8:c5:ef:2a:e9:40:64:fa:
                    9e:35:06:8a:39:8f:7c:39:fe:46:d9:5e:a5:2d:4b:
                    af:97:d6:d1:6c:e0:e9:4a:35:39:2e:f8:08:7a:7c:
                    85:bb:47:0f:ad:60:b6:e0:14:b8:3d:de:c9:00:d7:
                    0d:0f:62:67:9d:46:4e:b4:da:e0:a1:33:fc:0d:5d:
                    73:d7:df:81:93:5a:14:d8:3a:72:a3:de:0d:c5:f0:
                    7f:f6:15:ec:be:9b:8c:74:00:38:f9:dc:2c:9c:16:
                    7b:c5:26:18:22:99:ab:7d:5c:77:ff:4d:e9:2e:1a:
                    4e:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0D:F4:0D:E6:5A:77:FF:7D:C0:8C:C2:D0:E3:E4:F1:BC:75:18:90:D3
            X509v3 Authority Key Identifier:
                keyid:44:A9:F6:9F:41:41:DA:76:B7:35:3E:B0:D5:81:52:3A:FE:2B:81:E1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36FA15D/98166C5E623711EB931CB859F8AEA228/RKn2n0FB2na3NT6w1YFSOv4rgeE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/RKn2n0FB2na3NT6w1YFSOv4rgeE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36FA15D/98166C5E623711EB931CB859F8AEA228/523B2A787DFA11EC8BF1DCD35A40D577.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  161.123.232.0/24

    Signature Algorithm: sha256WithRSAEncryption
         4e:41:b3:d5:b0:84:cf:68:31:ad:60:c5:0d:8e:c9:34:2f:4d:
         56:08:9e:90:df:6c:b4:f1:3b:9a:37:8d:dd:a8:6e:a8:f0:1f:
         df:c5:4e:42:7a:24:59:3d:a6:f5:7f:d4:e4:57:68:20:f3:7c:
         b1:97:62:2c:5e:97:ea:88:ee:e5:fe:ee:33:96:2d:25:03:4d:
         29:4f:0f:8d:5b:72:9f:d9:f2:92:e7:7b:39:54:82:be:3b:c2:
         ba:a0:cc:f0:df:7c:a8:c1:e6:0d:05:e1:46:be:eb:ec:83:0b:
         b2:c2:04:67:ed:58:43:ac:1e:8f:4e:65:3e:78:04:8f:cb:a7:
         fe:8f:23:81:ca:bc:cb:b3:66:90:25:1b:67:91:13:a0:b9:04:
         ab:a6:52:96:87:bf:c5:d0:0b:30:da:fe:f7:57:b8:56:43:2f:
         9e:83:a3:41:c7:93:1c:bd:bf:5e:26:1a:d1:a1:cf:d4:bf:fb:
         9a:d3:18:52:48:8d:67:57:34:20:ec:12:ca:7b:6d:20:d0:70:
         93:f3:9e:ae:c9:e2:be:81:76:c6:76:4c:1c:3c:55:a2:0b:9c:
         ed:11:e8:d5:54:fd:f2:a9:4d:8f:eb:35:30:ff:70:95:93:67:
         8f:2b:ba:60:44:d5:9b:ee:ca:19:8f:c9:8c:62:b8:95:07:51:
         ac:44:2d:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----