Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36FA15D/98166C5E623711EB931CB859F8AEA228/89F3741E1EAC11EC8CA75D59D8A014CE.roa
File:                     89F3741E1EAC11EC8CA75D59D8A014CE.roa (raw, json)
Hash identifier:          Msl8/9s14h0YVkKXMHXenttD0m/906LcSO4I8mXhECM=
Subject key identifier:   F0:57:07:31:2C:9B:52:67:A6:E5:2B:FF:91:00:C4:86:3B:E3:D7:81
Certificate issuer:       /CN=F36FA15DAR/serialNumber=44A9F69F4141DA76B7353EB0D581523AFE2B81E1
Certificate serial:       01A4
Authority key identifier: 44:A9:F6:9F:41:41:DA:76:B7:35:3E:B0:D5:81:52:3A:FE:2B:81:E1
Authority info access:    rsync://rpki.afrinic.net/repository/arin/RKn2n0FB2na3NT6w1YFSOv4rgeE.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36FA15D/98166C5E623711EB931CB859F8AEA228/89F3741E1EAC11EC8CA75D59D8A014CE.roa
Signing time:             Sun 26 Sep 2021 09:31:34 +0000
ROA not before:           Sun 26 Sep 2021 09:31:30 +0000
ROA not after:            Mon 26 Sep 2022 09:31:30 +0000
asID:                     327790
IP address blocks:        161.123.184.0/22 maxlen: 22

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 420 (0x1a4)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36FA15DAR/serialNumber=44A9F69F4141DA76B7353EB0D581523AFE2B81E1
        Validity
            Not Before: Sep 26 09:31:30 2021 GMT
            Not After : Sep 26 09:31:30 2022 GMT
        Subject: CN=61503df6-121e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:1a:68:fd:38:3b:56:fe:80:d8:f7:36:c8:c5:
                    54:de:81:66:74:de:a4:69:05:72:6b:a3:3a:48:0d:
                    34:5a:f7:fd:99:da:39:f1:17:88:a2:42:43:49:cf:
                    63:55:da:8b:74:0a:d4:25:61:2d:35:c7:45:d6:31:
                    fb:77:61:da:43:7a:3e:fb:f2:56:2d:90:9b:0e:f5:
                    6f:bc:58:4a:d8:6e:1c:ff:4f:b8:ba:84:fa:ef:ee:
                    5b:41:33:f0:fa:30:31:fb:96:97:39:40:2d:e7:25:
                    d5:86:0d:58:93:c5:08:05:05:18:fd:e9:86:8a:62:
                    0d:3f:13:61:cb:c4:b6:e0:79:cb:53:e0:3e:5f:74:
                    f1:09:ed:a9:f7:52:38:1f:52:73:bb:7d:83:95:48:
                    7c:f2:d0:50:40:d0:c5:0c:9d:81:5c:6a:e3:43:40:
                    21:1c:eb:a5:1a:51:21:3b:12:12:e3:4d:c3:b3:0f:
                    0b:a5:fb:8b:c7:89:b3:e5:2e:60:a7:62:4b:8c:a7:
                    b5:bc:9a:69:d9:77:a9:51:c8:02:49:dd:6f:ca:34:
                    d0:dc:2f:e8:fd:3f:78:2d:2b:a7:0b:1f:33:bf:24:
                    69:3a:fd:60:4c:f0:f8:82:b2:4b:13:bc:dc:a3:b1:
                    90:a0:a6:90:9d:35:b1:7f:90:99:b2:25:48:88:f9:
                    67:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F0:57:07:31:2C:9B:52:67:A6:E5:2B:FF:91:00:C4:86:3B:E3:D7:81
            X509v3 Authority Key Identifier:
                keyid:44:A9:F6:9F:41:41:DA:76:B7:35:3E:B0:D5:81:52:3A:FE:2B:81:E1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36FA15D/98166C5E623711EB931CB859F8AEA228/RKn2n0FB2na3NT6w1YFSOv4rgeE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/RKn2n0FB2na3NT6w1YFSOv4rgeE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36FA15D/98166C5E623711EB931CB859F8AEA228/89F3741E1EAC11EC8CA75D59D8A014CE.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  161.123.184.0/22

    Signature Algorithm: sha256WithRSAEncryption
         a4:bb:cb:f0:b1:50:c3:ce:0b:c6:c8:5d:44:6d:4f:a7:f1:b9:
         c5:67:65:54:e2:7e:ad:bb:cc:52:e9:45:ef:22:03:a0:55:1b:
         33:9a:53:11:69:c0:ba:07:4f:b7:7e:fa:14:3a:b7:cd:1e:7c:
         b9:09:fe:c5:28:c9:18:e4:e4:a2:f9:94:27:92:e8:ee:a8:ad:
         72:f5:11:82:da:94:f1:c6:51:d3:24:fb:b8:1f:d0:d2:89:4d:
         8e:4a:03:4c:8c:4e:e7:5f:87:40:97:a4:9d:84:7e:b8:3f:ca:
         bf:f7:a8:37:2e:95:8b:9b:9f:ce:1a:11:e2:a4:9a:fa:a8:86:
         85:31:bc:09:b0:3d:ea:3a:be:cd:e8:44:ea:ce:36:6c:89:a9:
         71:89:5d:86:01:0e:56:ca:d2:da:4b:14:27:3c:6e:92:33:82:
         bd:3d:fb:00:9e:fb:75:1c:ee:e5:c9:31:ef:75:3a:de:82:94:
         7c:8f:56:ba:7a:97:37:21:e8:4e:ee:fd:1c:3d:64:ce:9b:d1:
         12:70:ca:2c:22:f4:24:b8:c6:1d:3f:01:0a:4c:2a:4c:25:0a:
         44:e1:a0:e5:21:91:67:96:e5:83:e6:e3:ab:c6:9a:dd:13:8e:
         0b:1d:35:55:36:0c:4d:48:14:60:f0:ac:24:4b:51:ee:0d:71:
         93:71:c3:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----