Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36FA15D/98166C5E623711EB931CB859F8AEA228/7530BE0C3D8111ED844A52B2F1222468.roa
File:                     7530BE0C3D8111ED844A52B2F1222468.roa (raw, json)
Hash identifier:          vsanx/SsKE3+2pveLZCYb/hWJbn51ResULAHkJ1XpuE=
Subject key identifier:   57:ED:A6:33:51:16:17:38:CD:49:F8:71:D5:D2:1F:D5:69:37:42:63
Certificate issuer:       /CN=F36FA15DAR/serialNumber=44A9F69F4141DA76B7353EB0D581523AFE2B81E1
Certificate serial:       0877
Authority key identifier: 44:A9:F6:9F:41:41:DA:76:B7:35:3E:B0:D5:81:52:3A:FE:2B:81:E1
Authority info access:    rsync://rpki.afrinic.net/repository/arin/RKn2n0FB2na3NT6w1YFSOv4rgeE.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36FA15D/98166C5E623711EB931CB859F8AEA228/7530BE0C3D8111ED844A52B2F1222468.roa
Signing time:             Mon 26 Sep 2022 09:56:14 +0000
ROA not before:           Mon 26 Sep 2022 09:56:11 +0000
ROA not after:            Tue 26 Sep 2023 09:56:11 +0000
asID:                     203999
IP address blocks:        161.123.148.0/23 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2167 (0x877)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36FA15DAR/serialNumber=44A9F69F4141DA76B7353EB0D581523AFE2B81E1
        Validity
            Not Before: Sep 26 09:56:11 2022 GMT
            Not After : Sep 26 09:56:11 2023 GMT
        Subject: CN=6331773e-3bf9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:9f:47:bf:99:11:e0:94:e9:c0:b1:e7:e7:22:
                    fc:57:eb:68:97:25:ba:b7:90:e8:fc:5e:f4:67:f0:
                    60:37:3f:dc:2a:32:8e:91:c5:0b:1f:23:04:c8:28:
                    4e:00:64:78:b2:25:59:42:ff:09:7a:d3:5a:68:5a:
                    74:fb:ee:19:2b:fc:52:5e:45:79:b9:cc:67:bc:b4:
                    8e:51:bf:74:91:16:23:f8:e6:cb:41:8c:6d:bf:17:
                    76:9e:7d:67:81:b1:73:fe:11:36:5e:de:53:bc:f7:
                    d3:fe:c9:3e:66:43:1d:66:65:c7:bc:75:b9:9c:52:
                    f4:92:90:88:89:4f:c3:d4:0d:97:58:8f:94:2c:88:
                    0f:15:87:0c:8d:20:f7:2a:84:7a:e5:f8:c7:2f:a4:
                    1c:5f:18:e8:b9:e6:b2:9a:d9:4d:5c:93:1c:8b:98:
                    6b:f1:db:e3:6c:4b:34:b3:a1:9f:f7:53:55:13:fb:
                    ab:8c:65:50:61:ca:bb:7a:e3:e3:60:95:e6:e8:cc:
                    dc:26:cf:ad:91:9d:7d:d0:82:a1:68:62:cc:c3:65:
                    a1:9c:32:1f:75:e9:4c:a4:5c:78:78:06:07:8f:b4:
                    36:25:60:6d:33:07:f6:ae:a8:81:a9:55:be:d3:26:
                    4b:f4:97:79:83:97:2a:69:77:0b:5b:7b:ae:10:ec:
                    3b:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                57:ED:A6:33:51:16:17:38:CD:49:F8:71:D5:D2:1F:D5:69:37:42:63
            X509v3 Authority Key Identifier:
                keyid:44:A9:F6:9F:41:41:DA:76:B7:35:3E:B0:D5:81:52:3A:FE:2B:81:E1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36FA15D/98166C5E623711EB931CB859F8AEA228/RKn2n0FB2na3NT6w1YFSOv4rgeE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/RKn2n0FB2na3NT6w1YFSOv4rgeE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36FA15D/98166C5E623711EB931CB859F8AEA228/7530BE0C3D8111ED844A52B2F1222468.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  161.123.148.0/23

    Signature Algorithm: sha256WithRSAEncryption
         1c:de:4c:82:10:dc:0a:4a:b7:ee:28:c1:a3:21:39:63:14:5b:
         f0:1a:09:bc:16:5a:ba:6f:22:87:c4:f1:69:fb:1e:ab:61:c7:
         10:c1:4d:ba:86:53:f1:ae:ea:c6:51:2f:23:06:c9:e8:2e:b9:
         b2:07:5b:f7:f0:36:6e:87:28:70:36:7f:22:f6:7d:ad:bd:31:
         31:ff:2e:dc:9d:56:34:1d:7c:cf:83:49:f3:87:90:88:8a:55:
         7d:63:db:88:e2:6e:c2:12:08:28:64:c4:07:07:89:c1:2b:71:
         32:b1:3d:e9:fe:ea:53:46:97:7f:32:b2:27:d6:de:54:c0:f3:
         16:da:73:fc:2b:5b:cc:6c:69:25:e3:7b:81:3b:e0:31:07:8a:
         4d:17:91:00:71:42:88:2a:d5:e7:19:95:58:8a:7e:2f:47:83:
         10:7c:d2:8b:6f:93:1f:be:ee:84:bd:8c:39:2e:d7:7c:af:44:
         e7:00:98:64:52:63:b8:a3:f5:12:f5:a9:85:a6:29:81:47:a2:
         63:b8:4c:2d:16:9b:4e:a8:58:8f:dd:45:dc:78:a4:8d:94:62:
         cb:0d:e5:41:9a:18:2a:66:4d:a3:ec:f6:f0:ec:85:55:fb:6e:
         16:db:d9:d3:5f:79:86:dd:ec:78:47:d0:56:de:f6:48:6f:ad:
         35:18:f5:a4
-----BEGIN CERTIFICATE-----
MIIFgDCCBGigAwIBAgICCHcwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAwwKRjM2
RkExNURBUjExMC8GA1UEBRMoNDRBOUY2OUY0MTQxREE3NkI3MzUzRUIwRDU4MTUy
M0FGRTJCODFFMTAeFw0yMjA5MjYwOTU2MTFaFw0yMzA5MjYwOTU2MTFaMBgxFjAU
BgNVBAMMDTYzMzE3NzNlLTNiZjkwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQCrn0e/mRHglOnAsefnIvxX62iXJbq3kOj8XvRn8GA3P9wqMo6RxQsfIwTI
KE4AZHiyJVlC/wl601poWnT77hkr/FJeRXm5zGe8tI5Rv3SRFiP45stBjG2/F3ae
fWeBsXP+ETZe3lO899P+yT5mQx1mZce8dbmcUvSSkIiJT8PUDZdYj5QsiA8VhwyN
IPcqhHrl+McvpBxfGOi55rKa2U1ckxyLmGvx2+NsSzSzoZ/3U1UT+6uMZVBhyrt6
4+NglebozNwmz62RnX3QgqFoYszDZaGcMh916UykXHh4BgePtDYlYG0zB/auqIGp
Vb7TJkv0l3mDlyppdwtbe64Q7Du5AgMBAAGjggKiMIICnjAdBgNVHQ4EFgQUV+2m
M1EWFzjNSfhx1dIf1Wk3QmMwHwYDVR0jBBgwFoAURKn2n0FB2na3NT6w1YFSOv4r
geEwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNkZBMTVELzk4MTY2QzVFNjIzNzExRUI5MzFDQjg1OUY4QUVBMjI4L1JLbjJu
MEZCMm5hM05UNncxWUZTT3Y0cmdlRS5jcmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hcmlu
L1JLbjJuMEZCMm5hM05UNncxWUZTT3Y0cmdlRS5jZXIwTwYDVR0gAQH/BEUwQzBB
BggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5pYy5u
ZXQvcG9saWN5L0NQUy5wZGYwgdsGCCsGAQUFBwELBIHOMIHLMIGRBggrBgEFBQcw
C4aBhHJzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9y
ZXBvc2l0b3J5L0YzNkZBMTVELzk4MTY2QzVFNjIzNzExRUI5MzFDQjg1OUY4QUVB
MjI4Lzc1MzBCRTBDM0Q4MTExRUQ4NDRBNTJCMkYxMjIyNDY4LnJvYTA1BggrBgEF
BQcwDYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54bWww
HwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAGhe5QwDQYJKoZIhvcNAQELBQAD
ggEBABzeTIIQ3ApKt+4owaMhOWMUW/AaCbwWWrpvIofE8Wn7HqthxxDBTbqGU/Gu
6sZRLyMGyeguubIHW/fwNm6HKHA2fyL2fa29MTH/LtydVjQdfM+DSfOHkIiKVX1j
24jibsISCChkxAcHicErcTKxPen+6lNGl38ysifW3lTA8xbac/wrW8xsaSXje4E7
4DEHik0XkQBxQogq1ecZlViKfi9HgxB80otvkx++7oS9jDku13yvROcAmGRSY7ij
9RL1qYWmKYFHomO4TC0Wm06oWI/dRdx4pI2UYssN5UGaGCpmTaPs9vDshVX7bhbb
2dNfeYbd7HhH0Fbe9khvrTUY9aQ=
-----END CERTIFICATE-----