Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36FA15D/98166C5E623711EB931CB859F8AEA228/7AD8FADC7DF511ECBD300EC65A40D577.roa
File:                     7AD8FADC7DF511ECBD300EC65A40D577.roa (raw, json)
Hash identifier:          gcyI1V3wdlHZfOcx0k0D28mBfDboigeNjHBUOOeeA98=
Subject key identifier:   A7:EE:BF:34:E7:70:30:D6:FD:60:9F:B3:9F:E8:01:36:7A:12:B7:76
Certificate issuer:       /CN=F36FA15DAR/serialNumber=44A9F69F4141DA76B7353EB0D581523AFE2B81E1
Certificate serial:       0506
Authority key identifier: 44:A9:F6:9F:41:41:DA:76:B7:35:3E:B0:D5:81:52:3A:FE:2B:81:E1
Authority info access:    rsync://rpki.afrinic.net/repository/arin/RKn2n0FB2na3NT6w1YFSOv4rgeE.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36FA15D/98166C5E623711EB931CB859F8AEA228/7AD8FADC7DF511ECBD300EC65A40D577.roa
Signing time:             Tue 25 Jan 2022 15:43:02 +0000
ROA not before:           Tue 25 Jan 2022 15:42:59 +0000
ROA not after:            Wed 25 Jan 2023 15:42:59 +0000
asID:                     327790
IP address blocks:        161.123.8.0/22 maxlen: 22

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1286 (0x506)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36FA15DAR/serialNumber=44A9F69F4141DA76B7353EB0D581523AFE2B81E1
        Validity
            Not Before: Jan 25 15:42:59 2022 GMT
            Not After : Jan 25 15:42:59 2023 GMT
        Subject: CN=61f01a86-a845
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:03:58:a1:9d:a2:f7:03:76:5f:bf:a5:e6:69:
                    ce:fb:33:48:da:ad:a6:c0:ed:a7:2d:f0:5e:d1:3f:
                    e8:94:c2:54:3b:31:71:af:f6:83:ed:3c:d4:30:1c:
                    3a:34:99:43:6c:cc:d4:25:8f:13:b5:a0:ce:65:8e:
                    60:73:38:5f:3a:23:f5:75:1c:da:db:b6:52:d1:77:
                    2a:b8:30:08:77:ce:88:1a:2e:9c:6c:03:51:dd:41:
                    20:de:b3:82:1a:81:a7:bf:ae:e2:3d:24:27:22:ef:
                    0b:9b:f7:81:43:70:ef:8f:04:7d:e1:92:8e:02:81:
                    50:ee:e0:55:db:dc:e2:ab:e6:c6:31:47:b5:a9:11:
                    a1:c1:68:9d:e5:87:e5:31:b5:8d:fa:ca:c2:c5:2c:
                    4f:6b:ca:63:08:6d:33:85:f2:11:b8:61:c2:47:8c:
                    a4:8d:e8:0d:24:4a:64:20:0e:1d:25:c3:e1:82:b1:
                    46:37:b2:53:ec:b3:16:16:ab:57:e5:62:03:8c:0d:
                    29:8f:56:6a:41:b8:42:60:0f:41:72:59:bc:4f:26:
                    d4:f7:e2:cb:23:e1:d4:56:0f:8a:2e:23:f4:41:31:
                    f4:f3:04:06:5c:b6:6d:52:a3:46:5c:88:fa:0f:a8:
                    fb:cf:c5:4f:b5:c9:aa:22:be:25:de:6a:d1:24:da:
                    e2:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A7:EE:BF:34:E7:70:30:D6:FD:60:9F:B3:9F:E8:01:36:7A:12:B7:76
            X509v3 Authority Key Identifier:
                keyid:44:A9:F6:9F:41:41:DA:76:B7:35:3E:B0:D5:81:52:3A:FE:2B:81:E1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36FA15D/98166C5E623711EB931CB859F8AEA228/RKn2n0FB2na3NT6w1YFSOv4rgeE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/RKn2n0FB2na3NT6w1YFSOv4rgeE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36FA15D/98166C5E623711EB931CB859F8AEA228/7AD8FADC7DF511ECBD300EC65A40D577.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  161.123.8.0/22

    Signature Algorithm: sha256WithRSAEncryption
         56:ff:d7:d9:a8:7e:c8:74:c4:46:87:9b:29:dd:78:33:24:a7:
         0a:0d:5b:4a:e1:e8:32:4b:52:f0:f8:7d:f8:ec:2f:72:ec:f4:
         bb:0f:09:d5:91:ed:45:62:88:44:7b:2a:db:5f:08:fd:a9:f4:
         84:5b:6d:27:ad:66:20:b9:69:b3:9b:24:43:f2:0d:37:45:5e:
         83:1c:68:ba:08:ef:5e:70:a8:97:a0:97:5c:f1:e4:73:c0:1e:
         1d:9d:00:34:a8:d0:20:c9:67:8a:e7:53:47:75:ce:d1:c0:ec:
         2c:6b:b2:47:ef:f7:1b:d6:97:2f:7e:96:da:9f:7c:fd:df:bb:
         af:21:c2:c1:2a:94:66:d9:b1:8b:61:48:c7:8a:f8:fb:fa:6d:
         c1:72:47:bb:6c:7d:1a:83:24:54:4e:ce:b8:00:42:f8:d8:be:
         d4:08:75:82:18:e3:66:63:02:78:5e:08:b4:3b:8b:a0:0c:d7:
         8a:6c:96:ac:cb:22:c3:f2:a5:36:a5:a5:63:a9:2d:a0:bc:ea:
         95:98:07:2c:0f:d9:4b:f5:17:a5:d6:25:1a:a6:b6:12:05:c5:
         ea:66:c0:57:f3:69:66:1e:0c:ab:98:45:e4:ed:44:79:28:f0:
         49:47:d0:e5:03:92:26:f3:ba:c1:9a:14:c3:c2:c4:ec:c6:80:
         39:54:03:2c
-----BEGIN CERTIFICATE-----
MIIFgDCCBGigAwIBAgICBQYwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAwwKRjM2
RkExNURBUjExMC8GA1UEBRMoNDRBOUY2OUY0MTQxREE3NkI3MzUzRUIwRDU4MTUy
M0FGRTJCODFFMTAeFw0yMjAxMjUxNTQyNTlaFw0yMzAxMjUxNTQyNTlaMBgxFjAU
BgNVBAMMDTYxZjAxYTg2LWE4NDUwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQCtA1ihnaL3A3Zfv6Xmac77M0jarabA7act8F7RP+iUwlQ7MXGv9oPtPNQw
HDo0mUNszNQljxO1oM5ljmBzOF86I/V1HNrbtlLRdyq4MAh3zogaLpxsA1HdQSDe
s4Iagae/ruI9JCci7wub94FDcO+PBH3hko4CgVDu4FXb3OKr5sYxR7WpEaHBaJ3l
h+UxtY36ysLFLE9rymMIbTOF8hG4YcJHjKSN6A0kSmQgDh0lw+GCsUY3slPssxYW
q1flYgOMDSmPVmpBuEJgD0FyWbxPJtT34ssj4dRWD4ouI/RBMfTzBAZctm1So0Zc
iPoPqPvPxU+1yaoiviXeatEk2uKpAgMBAAGjggKiMIICnjAdBgNVHQ4EFgQUp+6/
NOdwMNb9YJ+zn+gBNnoSt3YwHwYDVR0jBBgwFoAURKn2n0FB2na3NT6w1YFSOv4r
geEwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNkZBMTVELzk4MTY2QzVFNjIzNzExRUI5MzFDQjg1OUY4QUVBMjI4L1JLbjJu
MEZCMm5hM05UNncxWUZTT3Y0cmdlRS5jcmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hcmlu
L1JLbjJuMEZCMm5hM05UNncxWUZTT3Y0cmdlRS5jZXIwTwYDVR0gAQH/BEUwQzBB
BggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5pYy5u
ZXQvcG9saWN5L0NQUy5wZGYwgdsGCCsGAQUFBwELBIHOMIHLMIGRBggrBgEFBQcw
C4aBhHJzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9y
ZXBvc2l0b3J5L0YzNkZBMTVELzk4MTY2QzVFNjIzNzExRUI5MzFDQjg1OUY4QUVB
MjI4LzdBRDhGQURDN0RGNTExRUNCRDMwMEVDNjVBNDBENTc3LnJvYTA1BggrBgEF
BQcwDYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54bWww
HwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAKhewgwDQYJKoZIhvcNAQELBQAD
ggEBAFb/19mofsh0xEaHmyndeDMkpwoNW0rh6DJLUvD4ffjsL3Ls9LsPCdWR7UVi
iER7KttfCP2p9IRbbSetZiC5abObJEPyDTdFXoMcaLoI715wqJegl1zx5HPAHh2d
ADSo0CDJZ4rnU0d1ztHA7Cxrskfv9xvWly9+ltqffP3fu68hwsEqlGbZsYthSMeK
+Pv6bcFyR7tsfRqDJFROzrgAQvjYvtQIdYIY42ZjAnheCLQ7i6AM14pslqzLIsPy
pTalpWOpLaC86pWYBywP2Uv1F6XWJRqmthIFxepmwFfzaWYeDKuYReTtRHko8ElH
0OUDkibzusGaFMPCxOzGgDlUAyw=
-----END CERTIFICATE-----