Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36FA15D/98166C5E623711EB931CB859F8AEA228/5880A8B63D8211EDA9AED4B4F1222468.roa
File:                     5880A8B63D8211EDA9AED4B4F1222468.roa (raw, json)
Hash identifier:          mKAYN7yqzZtfZL013i25ZqUcA1EOF6StTLZEnJwIgwc=
Subject key identifier:   21:D0:C5:2A:BC:7C:6E:A1:21:BF:B9:DD:B3:DE:73:87:B3:63:14:55
Certificate issuer:       /CN=F36FA15DAR/serialNumber=44A9F69F4141DA76B7353EB0D581523AFE2B81E1
Certificate serial:       0887
Authority key identifier: 44:A9:F6:9F:41:41:DA:76:B7:35:3E:B0:D5:81:52:3A:FE:2B:81:E1
Authority info access:    rsync://rpki.afrinic.net/repository/arin/RKn2n0FB2na3NT6w1YFSOv4rgeE.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36FA15D/98166C5E623711EB931CB859F8AEA228/5880A8B63D8211EDA9AED4B4F1222468.roa
Signing time:             Mon 26 Sep 2022 10:02:36 +0000
ROA not before:           Mon 26 Sep 2022 10:02:32 +0000
ROA not after:            Tue 26 Sep 2023 10:02:32 +0000
asID:                     203999
IP address blocks:        161.123.196.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2183 (0x887)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36FA15DAR/serialNumber=44A9F69F4141DA76B7353EB0D581523AFE2B81E1
        Validity
            Not Before: Sep 26 10:02:32 2022 GMT
            Not After : Sep 26 10:02:32 2023 GMT
        Subject: CN=633178bc-2861
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:ad:fd:4d:f4:84:6b:4c:9d:1c:f9:14:69:5b:
                    67:08:5e:6e:45:10:f3:1c:f1:64:13:ff:81:84:a7:
                    c0:61:28:7f:80:23:18:0d:32:6b:bd:93:83:1f:e1:
                    28:a1:d5:f7:40:d4:79:61:fb:0b:ec:77:e2:05:51:
                    7a:63:27:ac:f7:3d:7b:1f:d8:50:ad:c3:70:22:75:
                    02:3a:82:ef:ba:37:6b:3f:05:f2:d3:73:6e:5c:9c:
                    44:bc:2f:5a:fd:c0:96:00:62:01:24:92:c1:ee:dc:
                    6c:be:b1:e1:82:79:9d:72:48:e7:78:10:89:41:ed:
                    41:ce:cc:70:25:97:4c:39:a8:00:cb:16:07:97:2a:
                    96:8d:98:0e:4d:43:c8:7e:a3:05:fe:d1:52:66:7e:
                    49:e9:15:a3:7a:b6:b7:14:5c:11:32:e1:4d:3d:38:
                    da:40:53:0f:46:5c:c6:19:5c:4d:14:19:b6:bc:82:
                    99:92:67:4b:a2:77:88:c1:3d:c5:92:99:13:83:69:
                    e3:4c:5d:b0:1c:c7:4c:78:8f:01:1a:55:17:b2:4a:
                    09:f3:cf:97:4e:21:74:c8:6b:d7:f1:4e:e5:f7:8d:
                    5e:b8:db:eb:8b:bd:d4:41:2f:71:8f:da:fe:d7:94:
                    03:b4:ce:5f:a7:b3:88:e5:df:8b:41:be:4a:fe:cd:
                    82:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                21:D0:C5:2A:BC:7C:6E:A1:21:BF:B9:DD:B3:DE:73:87:B3:63:14:55
            X509v3 Authority Key Identifier:
                keyid:44:A9:F6:9F:41:41:DA:76:B7:35:3E:B0:D5:81:52:3A:FE:2B:81:E1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36FA15D/98166C5E623711EB931CB859F8AEA228/RKn2n0FB2na3NT6w1YFSOv4rgeE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/RKn2n0FB2na3NT6w1YFSOv4rgeE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36FA15D/98166C5E623711EB931CB859F8AEA228/5880A8B63D8211EDA9AED4B4F1222468.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  161.123.196.0/24

    Signature Algorithm: sha256WithRSAEncryption
         ba:2e:c5:b3:3b:f0:db:c2:8d:47:01:6a:bc:b4:f5:59:13:52:
         a5:5a:c0:96:12:ff:52:f8:59:93:03:40:76:4c:f0:70:68:80:
         dc:3e:a3:e7:a8:d4:21:e7:a4:2f:f2:3c:27:e1:a0:47:0e:0e:
         06:3b:e9:17:4f:c7:e7:8a:8f:76:36:54:3f:d0:8e:a0:83:e4:
         c7:7f:32:32:ac:ac:4e:b6:c5:e5:82:86:ad:d9:b4:33:aa:b3:
         60:6c:e2:85:c8:7a:7c:8e:f6:18:db:aa:e2:61:f7:00:61:8c:
         26:30:b7:d7:e9:09:b2:a5:fd:52:fd:4a:42:3f:74:9d:ca:7a:
         23:1c:32:51:d7:de:3d:17:64:e6:48:5a:5a:29:af:52:a5:4c:
         57:16:bd:54:59:d2:96:a1:8d:5d:12:5c:93:f7:2b:82:b7:fb:
         99:d3:4f:c9:ab:0e:27:22:a2:1f:d1:76:b1:05:87:14:16:2e:
         c2:e0:81:71:04:0e:92:70:c2:79:28:04:e3:d5:24:0d:61:e3:
         e6:b8:61:b9:bc:6e:45:dd:20:5d:7a:c6:6e:2d:13:ad:43:ac:
         10:e7:f3:be:e3:f4:dc:bd:99:5b:f8:68:5e:c9:36:6e:8d:6f:
         d9:2a:81:89:c1:32:d2:4e:7d:c8:8c:73:26:0e:7a:11:3f:12:
         f4:ff:2a:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----