Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36FA15D/98166C5E623711EB931CB859F8AEA228/6EC6D1BA95F611EC904F99CC5A40D577.roa
File:                     6EC6D1BA95F611EC904F99CC5A40D577.roa (raw, json)
Hash identifier:          0sYxRkQAE8l64yx3tlOvwt7OEvQ3adb2fp69g3Aflv4=
Subject key identifier:   49:2F:7F:C3:3A:7E:8C:3B:A5:7B:DD:BE:FF:44:DD:7D:5E:1C:36:92
Certificate issuer:       /CN=F36FA15DAR/serialNumber=44A9F69F4141DA76B7353EB0D581523AFE2B81E1
Certificate serial:       05E3
Authority key identifier: 44:A9:F6:9F:41:41:DA:76:B7:35:3E:B0:D5:81:52:3A:FE:2B:81:E1
Authority info access:    rsync://rpki.afrinic.net/repository/arin/RKn2n0FB2na3NT6w1YFSOv4rgeE.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36FA15D/98166C5E623711EB931CB859F8AEA228/6EC6D1BA95F611EC904F99CC5A40D577.roa
Signing time:             Fri 25 Feb 2022 04:50:20 +0000
ROA not before:           Fri 25 Feb 2022 04:50:16 +0000
ROA not after:            Sat 25 Feb 2023 04:50:16 +0000
asID:                     327790
IP address blocks:        161.123.132.0/22 maxlen: 22

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1507 (0x5e3)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36FA15DAR/serialNumber=44A9F69F4141DA76B7353EB0D581523AFE2B81E1
        Validity
            Not Before: Feb 25 04:50:16 2022 GMT
            Not After : Feb 25 04:50:16 2023 GMT
        Subject: CN=6218600b-6bee
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:de:6c:a6:f5:03:6d:b2:57:96:a4:49:f4:d8:
                    ab:6f:d2:d8:1a:68:33:8d:a8:3b:fe:27:d8:d4:c6:
                    a5:ce:6f:37:02:2a:52:f5:be:d2:8e:dc:f6:c4:15:
                    90:ce:a7:0f:46:20:72:5d:ae:88:2b:32:29:c0:b5:
                    88:4a:a0:f5:d4:34:c8:ff:92:de:5e:ef:1c:ba:8c:
                    d1:e8:46:f6:b1:39:35:04:56:f2:56:e4:9e:79:0c:
                    d7:a0:75:f3:1e:20:45:28:49:e2:95:ec:57:36:c4:
                    32:18:5e:0b:64:54:ec:0a:79:b6:a0:a7:dc:ca:7c:
                    50:03:ec:32:8b:11:6f:02:5e:a4:2a:9e:e9:1a:78:
                    eb:91:6f:5d:c3:51:8d:e3:ee:c0:7b:70:f4:c9:f8:
                    9c:fc:d1:be:24:f7:2a:ef:5c:55:d7:96:61:5d:79:
                    32:0e:c8:df:e8:0c:67:6b:1f:d3:b7:81:7a:55:c9:
                    e4:ff:ad:1b:e2:33:d5:88:6c:8b:79:70:7f:68:92:
                    f9:28:26:17:13:eb:4b:e2:27:9a:57:a8:16:dc:cb:
                    8b:bb:b0:7a:78:60:d6:cb:dd:db:f2:94:ba:47:25:
                    ee:e9:01:8e:ac:01:43:cf:f9:4c:a7:64:8f:10:99:
                    ac:5a:74:a4:cf:4c:be:f5:9b:8c:a2:b5:1b:e3:95:
                    ba:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                49:2F:7F:C3:3A:7E:8C:3B:A5:7B:DD:BE:FF:44:DD:7D:5E:1C:36:92
            X509v3 Authority Key Identifier:
                keyid:44:A9:F6:9F:41:41:DA:76:B7:35:3E:B0:D5:81:52:3A:FE:2B:81:E1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36FA15D/98166C5E623711EB931CB859F8AEA228/RKn2n0FB2na3NT6w1YFSOv4rgeE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/RKn2n0FB2na3NT6w1YFSOv4rgeE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36FA15D/98166C5E623711EB931CB859F8AEA228/6EC6D1BA95F611EC904F99CC5A40D577.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  161.123.132.0/22

    Signature Algorithm: sha256WithRSAEncryption
         76:eb:2e:ea:c3:83:67:eb:c1:c1:58:ec:a4:22:a4:ef:ff:7e:
         7f:d6:b3:4a:36:4b:ad:63:35:48:93:74:07:d6:6a:7e:7c:dd:
         f6:08:65:37:2d:ea:9e:87:bf:5c:45:b2:6d:55:82:11:10:95:
         11:c0:cd:35:21:a4:11:71:70:d4:06:07:41:8b:36:46:0d:b2:
         66:06:de:c2:b7:9e:28:5a:d9:01:c0:f8:eb:1b:54:fe:0d:bc:
         aa:99:e7:78:b6:b3:da:38:f5:a7:78:44:39:c4:34:07:09:06:
         cc:ff:3a:27:d9:4a:e5:6d:0f:7e:54:47:c4:53:0b:af:f2:98:
         79:a2:c6:a0:f3:35:bc:26:6c:61:22:9f:5b:64:83:dd:8d:bc:
         24:ab:e5:30:81:29:95:4d:28:01:d3:39:5e:c1:6d:a3:0d:88:
         0a:c3:eb:a4:86:59:70:e8:52:24:22:30:0e:37:b9:87:13:59:
         05:89:6a:39:b0:e7:29:57:73:77:78:ef:8b:22:08:61:43:3a:
         c7:23:b9:35:b8:d2:f5:ca:18:67:c4:3f:03:de:16:81:73:fd:
         b9:3e:3a:49:14:81:07:88:5f:ed:f9:ad:54:e8:f2:b2:b1:a4:
         de:c8:26:d7:59:09:3c:10:8e:ae:14:6a:5d:31:29:67:7f:06:
         11:c2:98:f9
-----BEGIN CERTIFICATE-----
MIIFgDCCBGigAwIBAgICBeMwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAwwKRjM2
RkExNURBUjExMC8GA1UEBRMoNDRBOUY2OUY0MTQxREE3NkI3MzUzRUIwRDU4MTUy
M0FGRTJCODFFMTAeFw0yMjAyMjUwNDUwMTZaFw0yMzAyMjUwNDUwMTZaMBgxFjAU
BgNVBAMMDTYyMTg2MDBiLTZiZWUwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQCw3mym9QNtsleWpEn02Ktv0tgaaDONqDv+J9jUxqXObzcCKlL1vtKO3PbE
FZDOpw9GIHJdrogrMinAtYhKoPXUNMj/kt5e7xy6jNHoRvaxOTUEVvJW5J55DNeg
dfMeIEUoSeKV7Fc2xDIYXgtkVOwKebagp9zKfFAD7DKLEW8CXqQqnukaeOuRb13D
UY3j7sB7cPTJ+Jz80b4k9yrvXFXXlmFdeTIOyN/oDGdrH9O3gXpVyeT/rRviM9WI
bIt5cH9okvkoJhcT60viJ5pXqBbcy4u7sHp4YNbL3dvylLpHJe7pAY6sAUPP+Uyn
ZI8QmaxadKTPTL71m4yitRvjlbpDAgMBAAGjggKiMIICnjAdBgNVHQ4EFgQUSS9/
wzp+jDule92+/0TdfV4cNpIwHwYDVR0jBBgwFoAURKn2n0FB2na3NT6w1YFSOv4r
geEwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNkZBMTVELzk4MTY2QzVFNjIzNzExRUI5MzFDQjg1OUY4QUVBMjI4L1JLbjJu
MEZCMm5hM05UNncxWUZTT3Y0cmdlRS5jcmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hcmlu
L1JLbjJuMEZCMm5hM05UNncxWUZTT3Y0cmdlRS5jZXIwTwYDVR0gAQH/BEUwQzBB
BggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5pYy5u
ZXQvcG9saWN5L0NQUy5wZGYwgdsGCCsGAQUFBwELBIHOMIHLMIGRBggrBgEFBQcw
C4aBhHJzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9y
ZXBvc2l0b3J5L0YzNkZBMTVELzk4MTY2QzVFNjIzNzExRUI5MzFDQjg1OUY4QUVB
MjI4LzZFQzZEMUJBOTVGNjExRUM5MDRGOTlDQzVBNDBENTc3LnJvYTA1BggrBgEF
BQcwDYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54bWww
HwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAKhe4QwDQYJKoZIhvcNAQELBQAD
ggEBAHbrLurDg2frwcFY7KQipO//fn/Ws0o2S61jNUiTdAfWan583fYIZTct6p6H
v1xFsm1VghEQlRHAzTUhpBFxcNQGB0GLNkYNsmYG3sK3niha2QHA+OsbVP4NvKqZ
53i2s9o49ad4RDnENAcJBsz/OifZSuVtD35UR8RTC6/ymHmixqDzNbwmbGEin1tk
g92NvCSr5TCBKZVNKAHTOV7BbaMNiArD66SGWXDoUiQiMA43uYcTWQWJajmw5ylX
c3d474siCGFDOscjuTW40vXKGGfEPwPeFoFz/bk+OkkUgQeIX+35rVTo8rKxpN7I
JtdZCTwQjq4Ual0xKWd/BhHCmPk=
-----END CERTIFICATE-----