Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36FA15D/98166C5E623711EB931CB859F8AEA228/6F6876DC7DFA11ECAAF235D45A40D577.roa
File:                     6F6876DC7DFA11ECAAF235D45A40D577.roa (raw, json)
Hash identifier:          T2FNCCQGszsGkiCeRE+Vt8KBRbIVECHBZ1lI9D3DmAw=
Subject key identifier:   4D:C9:C9:08:9D:17:9D:DC:05:16:23:7B:54:75:38:FD:C6:FF:C7:EC
Certificate issuer:       /CN=F36FA15DAR/serialNumber=44A9F69F4141DA76B7353EB0D581523AFE2B81E1
Certificate serial:       0520
Authority key identifier: 44:A9:F6:9F:41:41:DA:76:B7:35:3E:B0:D5:81:52:3A:FE:2B:81:E1
Authority info access:    rsync://rpki.afrinic.net/repository/arin/RKn2n0FB2na3NT6w1YFSOv4rgeE.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36FA15D/98166C5E623711EB931CB859F8AEA228/6F6876DC7DFA11ECAAF235D45A40D577.roa
Signing time:             Tue 25 Jan 2022 16:18:31 +0000
ROA not before:           Tue 25 Jan 2022 16:18:27 +0000
ROA not after:            Wed 25 Jan 2023 16:18:27 +0000
asID:                     327790
IP address blocks:        161.123.68.0/23 maxlen: 23

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1312 (0x520)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36FA15DAR/serialNumber=44A9F69F4141DA76B7353EB0D581523AFE2B81E1
        Validity
            Not Before: Jan 25 16:18:27 2022 GMT
            Not After : Jan 25 16:18:27 2023 GMT
        Subject: CN=61f022d7-3676
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:51:52:63:dd:d8:37:e4:51:aa:fa:eb:b8:fe:
                    8f:58:a8:5c:2f:39:7b:ad:aa:8d:5c:a4:e6:19:20:
                    63:69:fc:25:d8:3b:14:1c:67:d6:38:bf:fa:f4:aa:
                    b3:f3:45:9a:d0:fa:18:42:ce:5a:c1:15:1d:fa:9e:
                    bf:31:74:30:a8:ad:bf:2c:1a:fe:95:b2:05:30:0f:
                    61:40:bd:ed:a1:71:97:41:6d:98:07:8b:1f:73:79:
                    8d:da:1c:32:f3:1b:8e:d6:a1:b4:98:1f:c7:27:fe:
                    01:80:34:ab:c1:a9:45:07:1d:ec:e7:8b:a4:78:d8:
                    f5:97:09:17:fa:ad:55:73:61:97:ca:eb:8b:67:7a:
                    7b:c0:33:08:64:70:da:08:02:57:50:e8:b4:3d:53:
                    69:43:e7:1b:6f:b6:87:3f:b7:8c:49:2d:8f:a8:e0:
                    0f:d9:92:3c:8b:60:76:36:f2:fe:91:de:b9:0d:5e:
                    0b:f4:74:ba:14:30:e6:ce:07:b7:cf:59:6c:71:92:
                    1f:24:f1:2c:c3:90:4c:8a:ac:bb:8c:e5:2e:de:f2:
                    6e:8f:7d:68:a6:80:03:97:d8:25:ce:b4:ca:94:ff:
                    14:4d:85:45:c2:a4:0a:c1:cb:48:1a:1e:82:35:9a:
                    a5:f3:ee:30:c8:bc:44:61:5f:2a:5e:7e:3a:84:3e:
                    5c:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4D:C9:C9:08:9D:17:9D:DC:05:16:23:7B:54:75:38:FD:C6:FF:C7:EC
            X509v3 Authority Key Identifier:
                keyid:44:A9:F6:9F:41:41:DA:76:B7:35:3E:B0:D5:81:52:3A:FE:2B:81:E1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36FA15D/98166C5E623711EB931CB859F8AEA228/RKn2n0FB2na3NT6w1YFSOv4rgeE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/RKn2n0FB2na3NT6w1YFSOv4rgeE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36FA15D/98166C5E623711EB931CB859F8AEA228/6F6876DC7DFA11ECAAF235D45A40D577.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  161.123.68.0/23

    Signature Algorithm: sha256WithRSAEncryption
         25:b2:bb:1a:af:dd:ca:b9:49:f0:50:49:11:1f:54:58:6a:30:
         fd:52:eb:5f:41:15:f1:b9:90:4b:5b:43:46:82:4c:cb:0c:cc:
         4c:b8:4e:4a:e9:f8:6e:61:fa:86:8d:89:87:fa:02:fb:0a:59:
         64:8a:8b:15:72:ce:e7:92:54:6d:58:12:57:5b:ca:5b:6f:09:
         73:63:ad:bd:44:c6:86:9c:80:b6:65:b2:70:2c:62:25:3d:3d:
         13:15:ce:61:81:bd:51:49:f2:6c:68:fb:a6:35:87:06:9b:d4:
         1f:d4:1b:10:46:03:44:d4:d3:a4:2f:8e:d8:0a:25:11:90:a3:
         ab:41:82:6b:05:cc:b7:88:2b:76:ad:bd:ee:89:1c:3e:d7:4c:
         72:12:a1:2f:0c:fe:c7:24:5f:04:81:71:27:2b:0e:f0:86:d6:
         d9:8a:15:95:99:cb:ed:5e:45:5d:bf:70:fe:30:bc:29:92:d9:
         d2:ac:92:95:55:d4:fa:80:de:33:8c:82:3a:62:47:70:e6:64:
         a0:35:2b:12:a4:5e:af:08:11:f8:6c:fd:48:e4:d0:cd:47:7e:
         03:19:a2:9e:28:fe:47:7a:cc:13:dd:f1:64:1d:a1:d9:2a:f4:
         fe:97:6a:3a:1a:69:9e:1c:68:33:45:00:fa:42:bb:a7:d9:ce:
         72:69:e0:36
-----BEGIN CERTIFICATE-----
MIIFgDCCBGigAwIBAgICBSAwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAwwKRjM2
RkExNURBUjExMC8GA1UEBRMoNDRBOUY2OUY0MTQxREE3NkI3MzUzRUIwRDU4MTUy
M0FGRTJCODFFMTAeFw0yMjAxMjUxNjE4MjdaFw0yMzAxMjUxNjE4MjdaMBgxFjAU
BgNVBAMMDTYxZjAyMmQ3LTM2NzYwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQDRUVJj3dg35FGq+uu4/o9YqFwvOXutqo1cpOYZIGNp/CXYOxQcZ9Y4v/r0
qrPzRZrQ+hhCzlrBFR36nr8xdDCorb8sGv6VsgUwD2FAve2hcZdBbZgHix9zeY3a
HDLzG47WobSYH8cn/gGANKvBqUUHHezni6R42PWXCRf6rVVzYZfK64tnenvAMwhk
cNoIAldQ6LQ9U2lD5xtvtoc/t4xJLY+o4A/ZkjyLYHY28v6R3rkNXgv0dLoUMObO
B7fPWWxxkh8k8SzDkEyKrLuM5S7e8m6PfWimgAOX2CXOtMqU/xRNhUXCpArBy0ga
HoI1mqXz7jDIvERhXypefjqEPlzRAgMBAAGjggKiMIICnjAdBgNVHQ4EFgQUTcnJ
CJ0XndwFFiN7VHU4/cb/x+wwHwYDVR0jBBgwFoAURKn2n0FB2na3NT6w1YFSOv4r
geEwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNkZBMTVELzk4MTY2QzVFNjIzNzExRUI5MzFDQjg1OUY4QUVBMjI4L1JLbjJu
MEZCMm5hM05UNncxWUZTT3Y0cmdlRS5jcmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hcmlu
L1JLbjJuMEZCMm5hM05UNncxWUZTT3Y0cmdlRS5jZXIwTwYDVR0gAQH/BEUwQzBB
BggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5pYy5u
ZXQvcG9saWN5L0NQUy5wZGYwgdsGCCsGAQUFBwELBIHOMIHLMIGRBggrBgEFBQcw
C4aBhHJzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9y
ZXBvc2l0b3J5L0YzNkZBMTVELzk4MTY2QzVFNjIzNzExRUI5MzFDQjg1OUY4QUVB
MjI4LzZGNjg3NkRDN0RGQTExRUNBQUYyMzVENDVBNDBENTc3LnJvYTA1BggrBgEF
BQcwDYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54bWww
HwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAGhe0QwDQYJKoZIhvcNAQELBQAD
ggEBACWyuxqv3cq5SfBQSREfVFhqMP1S619BFfG5kEtbQ0aCTMsMzEy4Tkrp+G5h
+oaNiYf6AvsKWWSKixVyzueSVG1YEldbyltvCXNjrb1ExoacgLZlsnAsYiU9PRMV
zmGBvVFJ8mxo+6Y1hwab1B/UGxBGA0TU06QvjtgKJRGQo6tBgmsFzLeIK3atve6J
HD7XTHISoS8M/sckXwSBcScrDvCG1tmKFZWZy+1eRV2/cP4wvCmS2dKskpVV1PqA
3jOMgjpiR3DmZKA1KxKkXq8IEfhs/Ujk0M1HfgMZop4o/kd6zBPd8WQdodkq9P6X
ajoaaZ4caDNFAPpCu6fZznJp4DY=
-----END CERTIFICATE-----