Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36FA15D/98166C5E623711EB931CB859F8AEA228/875CF9B47DFC11EC8EAA65DA5A40D577.roa
File:                     875CF9B47DFC11EC8EAA65DA5A40D577.roa (raw, json)
Hash identifier:          v0At8s5ULKa4XhvM2QLfk/oSl+mr4FCxelJHDeQ86eI=
Subject key identifier:   73:8A:10:CB:EB:41:C1:63:57:5F:88:7E:22:DD:00:63:F3:BF:08:79
Certificate issuer:       /CN=F36FA15DAR/serialNumber=44A9F69F4141DA76B7353EB0D581523AFE2B81E1
Certificate serial:       0544
Authority key identifier: 44:A9:F6:9F:41:41:DA:76:B7:35:3E:B0:D5:81:52:3A:FE:2B:81:E1
Authority info access:    rsync://rpki.afrinic.net/repository/arin/RKn2n0FB2na3NT6w1YFSOv4rgeE.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36FA15D/98166C5E623711EB931CB859F8AEA228/875CF9B47DFC11EC8EAA65DA5A40D577.roa
Signing time:             Tue 25 Jan 2022 16:33:30 +0000
ROA not before:           Tue 25 Jan 2022 16:33:25 +0000
ROA not after:            Wed 25 Jan 2023 16:33:25 +0000
asID:                     327790
IP address blocks:        161.123.244.0/23 maxlen: 23

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1348 (0x544)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36FA15DAR/serialNumber=44A9F69F4141DA76B7353EB0D581523AFE2B81E1
        Validity
            Not Before: Jan 25 16:33:25 2022 GMT
            Not After : Jan 25 16:33:25 2023 GMT
        Subject: CN=61f0265a-c4bd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:a5:a1:d5:fc:05:90:fe:67:a8:80:79:5c:10:
                    99:0d:a4:37:8e:2e:65:7a:6a:84:69:30:bf:70:b5:
                    a4:f7:0d:c4:14:07:e0:0a:39:85:77:b9:44:8e:85:
                    43:f0:99:33:63:fc:26:1e:3e:de:87:2f:f6:b4:bf:
                    21:79:7b:6b:42:3a:71:61:46:94:e7:f9:2f:47:12:
                    d8:99:dc:12:16:65:c4:9a:fa:5a:ac:db:bb:1b:9a:
                    af:4f:23:d5:a8:62:ac:cf:9d:f8:15:95:15:03:21:
                    e1:7f:68:cc:3e:96:2f:e1:ef:43:70:a9:9a:43:8d:
                    aa:c8:16:c0:73:f5:a8:a2:bd:69:c0:82:82:13:8d:
                    22:82:60:e6:37:ca:50:fd:e0:48:8a:81:23:4b:c6:
                    ac:49:4f:ba:5c:d1:03:47:88:fe:02:23:4c:65:ee:
                    12:21:be:8e:3b:19:63:88:c2:95:5f:e7:13:f1:a1:
                    c7:e1:b5:96:19:8a:a5:12:e2:2b:7b:88:11:ef:50:
                    ed:d9:c1:c3:3c:92:4e:63:96:f0:bb:57:09:29:99:
                    7b:07:87:9e:b0:ff:40:04:7d:ed:b3:e6:cc:86:b4:
                    72:34:56:17:23:f9:87:54:26:98:e2:7c:9f:58:c7:
                    03:6c:83:b3:d1:54:6c:70:51:b8:12:84:cf:d4:ec:
                    f6:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                73:8A:10:CB:EB:41:C1:63:57:5F:88:7E:22:DD:00:63:F3:BF:08:79
            X509v3 Authority Key Identifier:
                keyid:44:A9:F6:9F:41:41:DA:76:B7:35:3E:B0:D5:81:52:3A:FE:2B:81:E1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36FA15D/98166C5E623711EB931CB859F8AEA228/RKn2n0FB2na3NT6w1YFSOv4rgeE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/RKn2n0FB2na3NT6w1YFSOv4rgeE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36FA15D/98166C5E623711EB931CB859F8AEA228/875CF9B47DFC11EC8EAA65DA5A40D577.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  161.123.244.0/23

    Signature Algorithm: sha256WithRSAEncryption
         77:09:1b:a3:76:5f:f5:09:8b:f9:c9:cc:47:96:99:1e:ee:56:
         1e:98:5e:0e:64:a3:84:2e:db:30:7e:58:d1:b2:b5:73:98:93:
         e9:39:58:99:60:0b:d9:77:b6:19:91:37:fa:fd:b9:b6:46:aa:
         d6:06:fb:b7:3f:50:a8:4a:d7:dc:2e:35:e9:da:22:8b:09:da:
         71:e8:1b:2d:68:0a:d4:21:32:52:5c:e6:72:17:b6:ad:c3:4d:
         c4:8a:09:fa:dc:37:c9:98:5a:0b:c5:e2:8b:cb:11:fb:42:9e:
         92:00:35:db:9b:8c:a9:87:08:6c:b9:5e:f4:d6:88:8a:54:0d:
         2e:d7:85:12:81:17:6b:5e:50:17:64:68:1d:4b:92:cc:15:b5:
         f0:54:79:d3:d4:80:65:22:36:29:0d:32:b5:3f:f7:62:e1:20:
         d6:a8:ab:c2:21:64:3a:27:75:fb:88:ba:f9:50:74:1f:77:9f:
         9c:53:17:e9:38:4c:54:22:77:71:34:a5:b3:35:c4:6f:71:a2:
         c9:16:47:59:e1:51:88:3f:a8:28:85:3e:90:89:b9:4a:99:3e:
         cf:2e:9b:42:e7:c7:0f:7e:be:e6:43:2f:84:71:b2:89:d8:6f:
         e1:6c:53:76:d7:d8:c4:83:04:7d:7a:bb:18:27:ef:dc:f8:b9:
         10:51:85:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----