Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36FA15D/98166C5E623711EB931CB859F8AEA228/99526846919911ED8C57F6D9F1222468.roa
File:                     99526846919911ED8C57F6D9F1222468.roa (raw, json)
Hash identifier:          nMEnQ9NSGnuGO0Rp8UQzgQV5f/mCt9MQ4t7Cr++ku2o=
Subject key identifier:   6A:BA:5C:9C:A9:B2:B9:AD:90:59:83:FB:7A:51:6A:4D:5C:F5:4B:57
Certificate issuer:       /CN=F36FA15DAR/serialNumber=44A9F69F4141DA76B7353EB0D581523AFE2B81E1
Certificate serial:       0960
Authority key identifier: 44:A9:F6:9F:41:41:DA:76:B7:35:3E:B0:D5:81:52:3A:FE:2B:81:E1
Authority info access:    rsync://rpki.afrinic.net/repository/arin/RKn2n0FB2na3NT6w1YFSOv4rgeE.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36FA15D/98166C5E623711EB931CB859F8AEA228/99526846919911ED8C57F6D9F1222468.roa
Signing time:             Wed 11 Jan 2023 10:20:41 +0000
ROA not before:           Wed 11 Jan 2023 10:20:37 +0000
ROA not after:            Thu 11 Jan 2024 10:20:37 +0000
asID:                     133499
IP address blocks:        161.123.70.0/23 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2400 (0x960)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36FA15DAR/serialNumber=44A9F69F4141DA76B7353EB0D581523AFE2B81E1
        Validity
            Not Before: Jan 11 10:20:37 2023 GMT
            Not After : Jan 11 10:20:37 2024 GMT
        Subject: CN=63be8d79-2546
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f2:64:bb:d0:f6:7a:29:d5:ea:df:39:31:3a:96:
                    70:c7:37:91:e2:26:f1:5e:e0:5c:a4:7d:8e:ce:03:
                    46:4a:1e:86:a9:27:b5:ce:03:57:9e:a5:0b:eb:69:
                    36:11:b8:67:12:4e:cc:d8:01:74:af:90:e0:2c:0d:
                    4d:2a:ae:96:02:fa:1d:74:c5:4d:16:2a:fe:1d:24:
                    b1:fd:e9:55:5b:90:69:d4:fa:a0:b4:41:da:87:87:
                    61:a6:0a:db:30:20:47:82:cb:d0:d6:50:fa:f0:82:
                    90:bc:b8:0a:5b:89:c8:1a:71:6d:9d:e7:bb:60:4f:
                    50:47:ba:65:fe:5f:66:d7:82:3a:e6:e1:d9:e2:4f:
                    a2:c6:62:c1:d8:11:0a:5e:31:0a:77:87:97:9c:03:
                    17:d8:3b:91:fc:ff:1c:29:28:67:99:22:66:0b:82:
                    52:2c:5e:bd:33:a0:ac:71:cb:63:53:15:85:23:44:
                    b7:af:6e:b3:35:d4:ec:b1:3d:39:91:7e:b7:12:4f:
                    84:c8:ec:5e:a7:c6:29:b3:5d:1e:4f:2c:b0:0f:43:
                    1d:ba:14:17:3a:79:e2:8c:8c:0e:87:1d:cc:5d:c3:
                    2b:97:96:5b:46:c2:0e:2f:d4:f6:1e:ee:15:df:c8:
                    26:44:fe:43:40:64:7a:f8:c4:e6:09:3a:b9:69:a7:
                    88:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6A:BA:5C:9C:A9:B2:B9:AD:90:59:83:FB:7A:51:6A:4D:5C:F5:4B:57
            X509v3 Authority Key Identifier:
                keyid:44:A9:F6:9F:41:41:DA:76:B7:35:3E:B0:D5:81:52:3A:FE:2B:81:E1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36FA15D/98166C5E623711EB931CB859F8AEA228/RKn2n0FB2na3NT6w1YFSOv4rgeE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/RKn2n0FB2na3NT6w1YFSOv4rgeE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36FA15D/98166C5E623711EB931CB859F8AEA228/99526846919911ED8C57F6D9F1222468.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  161.123.70.0/23

    Signature Algorithm: sha256WithRSAEncryption
         ba:9b:73:cd:99:0f:0a:db:03:a5:e5:7e:0e:8b:e6:5e:51:9b:
         33:b6:ef:b6:70:07:39:e7:f1:e9:2f:8a:18:bc:02:8f:ef:48:
         f8:be:d5:f6:23:37:74:72:03:ac:16:96:40:62:b6:ba:63:ab:
         c8:29:04:2d:f2:21:27:e3:b8:d9:78:40:1e:55:36:e7:34:1d:
         f9:f1:ea:80:8c:92:58:47:49:3f:6b:2a:4f:89:cd:76:38:b4:
         53:2b:05:0d:9e:4a:09:b4:5f:65:52:22:24:29:92:03:31:3f:
         a6:9b:02:67:81:bb:c5:50:57:f9:40:0b:42:94:e1:51:49:be:
         7e:d3:5e:15:4a:ad:e1:ba:4e:11:52:4c:d4:8b:a6:06:34:ca:
         94:bb:06:ed:a4:9f:ef:1c:54:86:f1:cd:f8:bb:34:5c:c6:2b:
         33:2f:48:ae:6d:f1:af:2c:5b:2c:0c:62:d0:25:d3:89:57:e1:
         e0:5a:20:53:3b:56:4d:f9:4a:71:47:58:e8:78:dc:39:12:74:
         f1:98:97:e1:06:19:b9:aa:1c:ea:d0:4d:ce:93:69:23:26:83:
         d9:44:be:c5:e0:66:ad:36:47:38:cd:11:46:01:11:a6:93:d0:
         ff:7b:fb:60:31:85:6f:83:dc:d8:7a:5d:65:a5:48:b7:3e:6c:
         9e:79:a4:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----