Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36FA15D/98166C5E623711EB931CB859F8AEA228/7881D330327311ECBA86286CD8A014CE.roa
File:                     7881D330327311ECBA86286CD8A014CE.roa (raw, json)
Hash identifier:          Lu6G21ro2nDskIiPJh6CAsuIb+CtNgwzA0Cj/D1eerk=
Subject key identifier:   08:55:3C:F5:21:C6:A0:47:B3:89:21:73:0C:5B:C0:2E:DF:1A:49:FF
Certificate issuer:       /CN=F36FA15DAR/serialNumber=44A9F69F4141DA76B7353EB0D581523AFE2B81E1
Certificate serial:       01F2
Authority key identifier: 44:A9:F6:9F:41:41:DA:76:B7:35:3E:B0:D5:81:52:3A:FE:2B:81:E1
Authority info access:    rsync://rpki.afrinic.net/repository/arin/RKn2n0FB2na3NT6w1YFSOv4rgeE.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36FA15D/98166C5E623711EB931CB859F8AEA228/7881D330327311ECBA86286CD8A014CE.roa
Signing time:             Thu 21 Oct 2021 13:33:27 +0000
ROA not before:           Thu 21 Oct 2021 13:33:23 +0000
ROA not after:            Fri 21 Oct 2022 13:33:23 +0000
asID:                     60458
IP address blocks:        161.123.182.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 498 (0x1f2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36FA15DAR/serialNumber=44A9F69F4141DA76B7353EB0D581523AFE2B81E1
        Validity
            Not Before: Oct 21 13:33:23 2021 GMT
            Not After : Oct 21 13:33:23 2022 GMT
        Subject: CN=61716c27-e968
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:87:2c:3d:7e:3e:ec:8f:e7:c8:d6:d9:a3:55:
                    db:7c:0e:c2:e8:3e:de:6c:76:3c:82:64:7c:c1:c2:
                    40:bd:c1:47:e1:87:01:70:2c:18:7e:c7:bb:c7:8e:
                    6a:ab:aa:7f:0b:d7:f6:06:a6:2a:10:8b:3e:76:3b:
                    9e:cc:29:a3:56:2c:51:03:af:1c:7b:d0:de:72:11:
                    5f:06:61:f8:31:85:b2:5c:a1:21:fc:aa:0b:e2:21:
                    8e:53:49:26:b7:e5:56:f7:d0:90:06:f4:f5:9d:8b:
                    f7:39:c9:1f:44:67:2c:95:c4:01:25:45:17:09:58:
                    42:2e:d5:2a:c2:44:2a:94:49:df:83:74:10:94:fc:
                    53:a4:e3:3a:e8:b2:87:73:c6:06:c4:44:02:fd:3e:
                    83:d3:08:2b:c9:dd:f2:b8:c2:25:4a:36:78:40:ef:
                    a8:b0:fa:f0:8d:c7:ac:7e:3b:7a:24:d4:65:d2:37:
                    02:df:3c:32:a7:a4:db:51:4d:35:e9:05:af:34:47:
                    f9:72:e2:84:82:9a:fa:16:c7:4e:02:68:47:83:fd:
                    af:3d:70:6e:6c:ec:13:b1:e2:6c:81:cb:95:fa:65:
                    b1:be:9f:97:84:f1:57:2f:38:76:35:d3:a3:19:11:
                    a5:3f:b4:88:f6:b5:6a:b2:34:60:56:14:7c:81:6f:
                    dc:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                08:55:3C:F5:21:C6:A0:47:B3:89:21:73:0C:5B:C0:2E:DF:1A:49:FF
            X509v3 Authority Key Identifier:
                keyid:44:A9:F6:9F:41:41:DA:76:B7:35:3E:B0:D5:81:52:3A:FE:2B:81:E1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36FA15D/98166C5E623711EB931CB859F8AEA228/RKn2n0FB2na3NT6w1YFSOv4rgeE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/RKn2n0FB2na3NT6w1YFSOv4rgeE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36FA15D/98166C5E623711EB931CB859F8AEA228/7881D330327311ECBA86286CD8A014CE.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  161.123.182.0/24

    Signature Algorithm: sha256WithRSAEncryption
         54:18:4b:a2:fb:d1:d2:71:bd:0e:86:2b:ef:c6:f8:a5:29:60:
         7b:ae:8b:24:2a:2e:4b:12:85:14:d1:d2:39:44:fe:0c:4a:60:
         a8:96:50:5c:13:ee:c4:a1:47:6e:53:c8:9e:97:56:ac:9c:af:
         8a:a5:2b:13:b2:6b:e7:15:04:05:ef:f6:04:ca:ac:a8:92:eb:
         49:64:bb:48:3e:26:c8:3f:38:81:bd:87:69:42:e3:98:5b:1e:
         e5:27:aa:d3:d2:13:c8:94:02:cd:55:34:52:fd:67:8b:85:f1:
         4c:e2:c4:c0:b1:72:c7:ff:b7:7b:f7:9f:50:a1:8b:ab:9e:04:
         f8:0a:f7:aa:57:76:35:d5:10:bd:2e:1b:13:7b:28:90:ea:e3:
         9c:fe:53:a2:5e:be:de:77:e7:ec:73:b0:76:9f:66:50:f2:30:
         ec:e2:59:fb:fc:e0:8b:1e:da:02:c3:fa:7c:11:b3:af:2b:4f:
         78:9e:ea:21:9e:80:2b:97:b1:4e:08:34:55:56:12:c2:9b:df:
         e6:7e:8d:b7:4e:3e:80:e8:ed:92:5f:93:50:f2:20:41:c1:b6:
         0d:8d:90:f6:fc:50:65:2c:01:df:9c:6d:f3:ae:f0:a2:04:46:
         2b:c7:97:79:65:75:1a:71:d3:e1:b0:00:ef:43:7a:18:83:f0:
         05:d4:64:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----