Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36FA15D/98166C5E623711EB931CB859F8AEA228/5B73A3DEDDFB11EC96EFBFB5F1222468.roa
File:                     5B73A3DEDDFB11EC96EFBFB5F1222468.roa (raw, json)
Hash identifier:          iMhCarUStS0cWTTTKZ/jmkP+XQYYrsD0/LU2HxJTh7M=
Subject key identifier:   16:E3:42:B7:6F:26:C4:73:81:B9:F9:37:EB:A6:4A:69:24:43:10:61
Certificate issuer:       /CN=F36FA15DAR/serialNumber=44A9F69F4141DA76B7353EB0D581523AFE2B81E1
Certificate serial:       06E0
Authority key identifier: 44:A9:F6:9F:41:41:DA:76:B7:35:3E:B0:D5:81:52:3A:FE:2B:81:E1
Authority info access:    rsync://rpki.afrinic.net/repository/arin/RKn2n0FB2na3NT6w1YFSOv4rgeE.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36FA15D/98166C5E623711EB931CB859F8AEA228/5B73A3DEDDFB11EC96EFBFB5F1222468.roa
Signing time:             Fri 27 May 2022 20:26:58 +0000
ROA not before:           Fri 27 May 2022 20:26:55 +0000
ROA not after:            Sat 27 May 2023 20:26:55 +0000
asID:                     58202
IP address blocks:        161.123.42.0/23 maxlen: 23

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1760 (0x6e0)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36FA15DAR/serialNumber=44A9F69F4141DA76B7353EB0D581523AFE2B81E1
        Validity
            Not Before: May 27 20:26:55 2022 GMT
            Not After : May 27 20:26:55 2023 GMT
        Subject: CN=62913412-1702
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:36:ef:9f:b9:00:3a:17:12:14:ff:87:b9:35:
                    fa:ee:e0:f1:d4:81:7c:d0:06:f1:d2:1a:56:4a:e8:
                    a9:34:df:ab:1a:e9:62:b9:45:d7:ce:63:02:be:92:
                    36:25:7d:17:4b:61:79:bc:07:fb:bb:c6:8f:cb:7c:
                    c1:64:ec:9a:12:e6:02:7f:6b:ee:89:44:f0:09:ff:
                    f5:46:3c:67:0d:57:ff:39:3c:ca:05:cd:8e:c6:67:
                    60:a8:ad:ea:5f:1e:ee:b4:0f:0f:a8:ce:6f:d4:90:
                    72:8f:e8:bd:a2:ce:46:45:85:7c:4b:31:cb:8d:70:
                    97:e3:c2:00:30:ee:4d:9d:c2:50:76:34:63:3d:a7:
                    7f:38:88:39:c5:14:98:00:da:21:e0:a8:0b:ef:1d:
                    32:c7:57:6a:5a:57:aa:34:bf:66:15:0a:92:40:df:
                    1b:d7:46:bd:a1:60:34:07:5f:6e:1a:d5:38:b8:59:
                    61:21:d9:79:d9:3c:d1:c0:9f:e7:1f:d1:a6:00:60:
                    b9:66:76:82:62:15:c1:99:73:f5:23:4c:a5:07:3b:
                    6e:90:76:a9:13:99:b0:46:b1:eb:88:df:53:50:69:
                    00:59:24:42:b9:9f:cb:23:c3:cc:90:7b:c9:01:04:
                    53:fe:29:55:66:c1:41:d4:f7:44:e0:56:8d:89:ae:
                    14:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                16:E3:42:B7:6F:26:C4:73:81:B9:F9:37:EB:A6:4A:69:24:43:10:61
            X509v3 Authority Key Identifier:
                keyid:44:A9:F6:9F:41:41:DA:76:B7:35:3E:B0:D5:81:52:3A:FE:2B:81:E1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36FA15D/98166C5E623711EB931CB859F8AEA228/RKn2n0FB2na3NT6w1YFSOv4rgeE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/RKn2n0FB2na3NT6w1YFSOv4rgeE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36FA15D/98166C5E623711EB931CB859F8AEA228/5B73A3DEDDFB11EC96EFBFB5F1222468.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  161.123.42.0/23

    Signature Algorithm: sha256WithRSAEncryption
         0d:aa:51:bd:e9:cb:fe:ee:85:89:ef:9c:7a:b5:8f:ed:e9:1e:
         69:cd:ba:f8:41:21:2b:4e:d0:d7:ae:37:d2:df:91:87:be:56:
         2e:3d:d0:1d:c3:1d:72:79:66:37:94:e1:6e:88:b6:11:cf:a5:
         b2:b1:f1:44:7a:21:f2:88:9d:f9:dc:cf:b2:7a:30:1d:79:f0:
         2a:42:4f:2b:94:8c:fd:0e:fe:ba:d2:1d:a7:76:65:68:3a:e2:
         d2:b2:e9:7d:ca:95:91:b8:7c:c2:e9:8a:18:19:89:7d:86:ad:
         1f:f7:4c:e4:4b:72:ba:14:15:23:96:78:9d:94:31:70:a5:2c:
         df:01:06:d5:32:27:1e:23:77:95:c1:38:cd:d7:33:52:4a:07:
         04:65:ab:e8:97:b0:27:3c:9d:76:d1:83:e0:aa:52:aa:85:ab:
         f8:6d:e9:aa:95:2f:6d:d1:d5:54:6e:96:9a:dd:eb:c4:53:95:
         8f:bc:bf:8e:a1:e0:d0:4c:20:9b:8a:c0:f1:45:e3:cf:a9:fc:
         c3:6c:0b:b5:bf:31:91:12:ae:e9:37:7c:11:d3:1f:83:12:3d:
         0a:d2:9f:df:f8:f4:14:22:1c:61:a4:1b:a7:e8:78:4e:cb:ba:
         76:51:1f:03:f8:86:e1:67:6a:35:3b:d4:1c:fc:06:c8:68:4e:
         46:7d:74:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----