Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36FA15D/98166C5E623711EB931CB859F8AEA228/5707450A95F611EC96924ACC5A40D577.roa
File:                     5707450A95F611EC96924ACC5A40D577.roa (raw, json)
Hash identifier:          Nu3GR4GFApbfbHWwmDJFvlvXjGxDKf4VRnKiO+U2XeQ=
Subject key identifier:   5C:EB:26:50:DE:BC:B5:54:30:77:96:8E:D1:1A:12:99:F5:E2:E1:30
Certificate issuer:       /CN=F36FA15DAR/serialNumber=44A9F69F4141DA76B7353EB0D581523AFE2B81E1
Certificate serial:       05E1
Authority key identifier: 44:A9:F6:9F:41:41:DA:76:B7:35:3E:B0:D5:81:52:3A:FE:2B:81:E1
Authority info access:    rsync://rpki.afrinic.net/repository/arin/RKn2n0FB2na3NT6w1YFSOv4rgeE.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36FA15D/98166C5E623711EB931CB859F8AEA228/5707450A95F611EC96924ACC5A40D577.roa
Signing time:             Fri 25 Feb 2022 04:49:40 +0000
ROA not before:           Fri 25 Feb 2022 04:49:36 +0000
ROA not after:            Sat 25 Feb 2023 04:49:36 +0000
asID:                     327790
IP address blocks:        161.123.235.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1505 (0x5e1)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36FA15DAR/serialNumber=44A9F69F4141DA76B7353EB0D581523AFE2B81E1
        Validity
            Not Before: Feb 25 04:49:36 2022 GMT
            Not After : Feb 25 04:49:36 2023 GMT
        Subject: CN=62185fe4-31e8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:b2:64:08:9b:e3:d7:58:32:1c:83:4d:13:97:
                    34:ee:7e:05:74:de:0d:cc:f2:0e:b6:12:c7:3f:7c:
                    aa:f6:c3:3d:b8:fb:57:42:b1:6d:0b:89:c8:e1:ec:
                    aa:a2:04:09:9c:35:4f:3c:08:db:f1:ff:60:e6:94:
                    8f:68:87:4d:f2:46:4e:0a:f7:18:31:75:9d:2e:dc:
                    e0:91:27:31:fd:3a:0e:5d:80:b9:43:5f:09:44:7c:
                    20:fc:86:87:6e:63:79:ea:49:10:aa:f3:23:34:25:
                    65:38:78:d5:7e:14:97:19:a1:4c:d2:59:34:25:78:
                    05:69:34:a7:fa:06:55:6b:ea:f4:0b:d0:32:40:2d:
                    51:34:ec:08:2a:a0:04:be:a4:95:ab:d1:ff:e4:22:
                    4f:39:5c:36:09:b1:de:e6:2b:0b:cd:56:74:0d:f3:
                    4b:71:e3:da:b7:fe:ef:73:03:32:3d:cc:57:37:9d:
                    ad:af:d2:62:57:99:92:64:34:af:50:76:4c:15:27:
                    5a:48:90:3e:d8:2e:7a:0e:03:46:c5:d7:00:33:ce:
                    41:35:c0:27:b7:ef:7c:c5:ee:55:51:d5:58:09:7f:
                    c0:bd:29:9a:a7:b6:e5:0c:bb:90:79:39:e8:b3:ce:
                    66:44:31:f6:75:89:d7:db:a8:07:7e:39:58:04:3c:
                    19:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5C:EB:26:50:DE:BC:B5:54:30:77:96:8E:D1:1A:12:99:F5:E2:E1:30
            X509v3 Authority Key Identifier:
                keyid:44:A9:F6:9F:41:41:DA:76:B7:35:3E:B0:D5:81:52:3A:FE:2B:81:E1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36FA15D/98166C5E623711EB931CB859F8AEA228/RKn2n0FB2na3NT6w1YFSOv4rgeE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/RKn2n0FB2na3NT6w1YFSOv4rgeE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36FA15D/98166C5E623711EB931CB859F8AEA228/5707450A95F611EC96924ACC5A40D577.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  161.123.235.0/24

    Signature Algorithm: sha256WithRSAEncryption
         03:12:8c:85:da:dc:05:c9:68:47:4c:80:1e:74:30:48:28:58:
         02:11:f9:71:2c:1e:2b:87:9c:37:a7:a0:16:7d:31:96:7c:28:
         b3:44:30:8c:49:fd:91:ba:21:be:4e:5f:ca:83:e5:22:90:5f:
         25:ef:2c:25:bb:9d:64:ba:74:d2:e3:06:db:65:5d:e7:cd:ba:
         96:99:c3:73:14:52:91:c5:fa:77:5e:1b:8b:8f:72:61:e8:24:
         bc:78:44:b0:df:a8:da:e4:ed:80:c3:f0:9b:b4:f5:30:1c:6d:
         bd:64:81:d5:cb:7c:34:96:80:27:07:c5:b6:23:d3:ec:01:60:
         b6:8e:6e:02:30:5f:11:cb:15:83:76:d4:72:35:e8:a4:50:94:
         34:e5:6d:e9:1c:51:fa:57:eb:a1:d4:b2:a4:51:0e:f7:7c:d7:
         98:da:9d:f6:8c:1a:a6:90:e0:97:d8:7e:1b:58:50:54:2e:29:
         21:06:39:69:9a:af:3b:b9:59:ee:16:7a:4d:98:44:5e:ce:b1:
         8b:f5:65:3f:db:da:c7:ef:f7:bd:7d:97:3b:9d:76:65:c4:8e:
         ab:88:42:79:0a:3a:ce:32:72:d6:16:ae:f7:fc:77:67:22:64:
         88:3a:fc:1f:e5:ab:4e:6b:0c:cf:ac:4e:e1:37:3e:63:6a:a9:
         d4:22:2a:5e
-----BEGIN CERTIFICATE-----
MIIFgDCCBGigAwIBAgICBeEwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAwwKRjM2
RkExNURBUjExMC8GA1UEBRMoNDRBOUY2OUY0MTQxREE3NkI3MzUzRUIwRDU4MTUy
M0FGRTJCODFFMTAeFw0yMjAyMjUwNDQ5MzZaFw0yMzAyMjUwNDQ5MzZaMBgxFjAU
BgNVBAMMDTYyMTg1ZmU0LTMxZTgwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQDdsmQIm+PXWDIcg00TlzTufgV03g3M8g62Esc/fKr2wz24+1dCsW0Licjh
7KqiBAmcNU88CNvx/2DmlI9oh03yRk4K9xgxdZ0u3OCRJzH9Og5dgLlDXwlEfCD8
hoduY3nqSRCq8yM0JWU4eNV+FJcZoUzSWTQleAVpNKf6BlVr6vQL0DJALVE07Agq
oAS+pJWr0f/kIk85XDYJsd7mKwvNVnQN80tx49q3/u9zAzI9zFc3na2v0mJXmZJk
NK9QdkwVJ1pIkD7YLnoOA0bF1wAzzkE1wCe373zF7lVR1VgJf8C9KZqntuUMu5B5
OeizzmZEMfZ1idfbqAd+OVgEPBnBAgMBAAGjggKiMIICnjAdBgNVHQ4EFgQUXOsm
UN68tVQwd5aO0RoSmfXi4TAwHwYDVR0jBBgwFoAURKn2n0FB2na3NT6w1YFSOv4r
geEwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNkZBMTVELzk4MTY2QzVFNjIzNzExRUI5MzFDQjg1OUY4QUVBMjI4L1JLbjJu
MEZCMm5hM05UNncxWUZTT3Y0cmdlRS5jcmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hcmlu
L1JLbjJuMEZCMm5hM05UNncxWUZTT3Y0cmdlRS5jZXIwTwYDVR0gAQH/BEUwQzBB
BggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5pYy5u
ZXQvcG9saWN5L0NQUy5wZGYwgdsGCCsGAQUFBwELBIHOMIHLMIGRBggrBgEFBQcw
C4aBhHJzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9y
ZXBvc2l0b3J5L0YzNkZBMTVELzk4MTY2QzVFNjIzNzExRUI5MzFDQjg1OUY4QUVB
MjI4LzU3MDc0NTBBOTVGNjExRUM5NjkyNEFDQzVBNDBENTc3LnJvYTA1BggrBgEF
BQcwDYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54bWww
HwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAChe+swDQYJKoZIhvcNAQELBQAD
ggEBAAMSjIXa3AXJaEdMgB50MEgoWAIR+XEsHiuHnDenoBZ9MZZ8KLNEMIxJ/ZG6
Ib5OX8qD5SKQXyXvLCW7nWS6dNLjBttlXefNupaZw3MUUpHF+ndeG4uPcmHoJLx4
RLDfqNrk7YDD8Ju09TAcbb1kgdXLfDSWgCcHxbYj0+wBYLaObgIwXxHLFYN21HI1
6KRQlDTlbekcUfpX66HUsqRRDvd815janfaMGqaQ4JfYfhtYUFQuKSEGOWmarzu5
We4Wek2YRF7OsYv1ZT/b2sfv9719lzuddmXEjquIQnkKOs4yctYWrvf8d2ciZIg6
/B/lq05rDM+sTuE3PmNqqdQiKl4=
-----END CERTIFICATE-----