Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36FA15D/98166C5E623711EB931CB859F8AEA228/A4C313763D8211ED965C89B5F1222468.roa
File:                     A4C313763D8211ED965C89B5F1222468.roa (raw, json)
Hash identifier:          7DIfLHkbhAYXtbLcGkdJTlotkTo8g294lBFMMqNwGZ8=
Subject key identifier:   26:48:2F:84:F0:B8:E6:3B:7A:5F:A2:D5:F9:E1:10:8C:1A:F3:C3:66
Certificate issuer:       /CN=F36FA15DAR/serialNumber=44A9F69F4141DA76B7353EB0D581523AFE2B81E1
Certificate serial:       088D
Authority key identifier: 44:A9:F6:9F:41:41:DA:76:B7:35:3E:B0:D5:81:52:3A:FE:2B:81:E1
Authority info access:    rsync://rpki.afrinic.net/repository/arin/RKn2n0FB2na3NT6w1YFSOv4rgeE.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36FA15D/98166C5E623711EB931CB859F8AEA228/A4C313763D8211ED965C89B5F1222468.roa
Signing time:             Mon 26 Sep 2022 10:04:44 +0000
ROA not before:           Mon 26 Sep 2022 10:04:40 +0000
ROA not after:            Tue 26 Sep 2023 10:04:40 +0000
asID:                     203999
IP address blocks:        161.123.208.0/23 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2189 (0x88d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36FA15DAR/serialNumber=44A9F69F4141DA76B7353EB0D581523AFE2B81E1
        Validity
            Not Before: Sep 26 10:04:40 2022 GMT
            Not After : Sep 26 10:04:40 2023 GMT
        Subject: CN=6331793c-dccf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:b8:de:e1:d7:a0:d2:75:46:c3:29:c3:20:b0:
                    94:4b:0d:70:02:41:fc:7e:c3:d9:e8:d6:42:7e:c4:
                    5d:ff:0a:ce:cc:af:55:d5:98:3e:df:6e:28:f3:c1:
                    a2:45:90:16:d2:90:0d:2f:14:57:0a:67:e6:c3:52:
                    e3:54:4f:9d:fc:28:6a:0c:08:f8:c7:1f:6b:b3:a1:
                    55:13:5c:54:43:20:97:5d:c0:cc:1a:e0:c3:f2:bc:
                    19:54:c1:4d:30:33:08:5a:5c:8a:79:cd:b1:9b:68:
                    7e:2b:c4:a5:9b:44:83:a4:2c:c9:12:13:e9:c9:df:
                    48:97:2f:49:e2:06:36:0f:a0:5b:e0:74:a3:d0:3c:
                    ff:8c:9c:81:a8:37:23:fb:5d:31:20:db:e1:05:d2:
                    be:0d:c5:7b:43:9d:5a:ae:4f:3e:4f:01:99:79:4e:
                    f0:42:7f:6c:ed:cd:21:69:78:fc:73:12:71:c7:f3:
                    28:86:cd:1f:a9:17:ba:2f:ad:d9:99:a6:0a:3d:cc:
                    9c:84:d5:a0:ef:79:4d:75:6b:e8:52:11:16:fa:cc:
                    49:df:bd:6c:33:8c:bf:fe:8c:58:20:10:96:9d:51:
                    f3:b4:ba:c3:91:b2:d8:35:b9:65:7e:9d:28:31:40:
                    79:56:fc:26:e3:5f:88:58:a8:1a:33:8f:02:e9:ef:
                    d4:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                26:48:2F:84:F0:B8:E6:3B:7A:5F:A2:D5:F9:E1:10:8C:1A:F3:C3:66
            X509v3 Authority Key Identifier:
                keyid:44:A9:F6:9F:41:41:DA:76:B7:35:3E:B0:D5:81:52:3A:FE:2B:81:E1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36FA15D/98166C5E623711EB931CB859F8AEA228/RKn2n0FB2na3NT6w1YFSOv4rgeE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/RKn2n0FB2na3NT6w1YFSOv4rgeE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36FA15D/98166C5E623711EB931CB859F8AEA228/A4C313763D8211ED965C89B5F1222468.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  161.123.208.0/23

    Signature Algorithm: sha256WithRSAEncryption
         82:2c:6c:b9:94:83:da:84:de:aa:d8:c2:75:71:f2:d5:f3:b9:
         52:5a:49:3a:7e:78:58:05:cb:9a:06:94:b3:d5:c9:c5:c2:c6:
         8d:72:08:f3:f7:ce:be:77:84:90:da:3f:9d:3c:a0:ea:f4:fc:
         c9:d3:a0:d3:ac:be:4b:d0:4e:87:66:a0:5d:52:fc:f0:e7:31:
         23:e2:2c:5d:e6:66:7b:6d:78:5a:a2:a5:96:80:58:16:07:b1:
         5d:49:80:ea:2c:5e:54:bd:63:81:0d:41:8b:39:69:15:6b:c8:
         c8:be:f3:8f:1a:dd:aa:ac:e4:eb:40:0f:92:98:41:b7:09:8d:
         93:e6:60:ea:f0:69:96:d0:09:ea:1f:14:9e:49:4b:ec:66:7c:
         c2:c6:59:c0:86:ad:a8:20:2d:f1:c6:8e:79:02:2e:15:60:cf:
         72:49:78:e5:e6:4c:76:90:62:32:3c:3a:19:f4:02:6b:ca:3d:
         62:2f:cd:a1:5e:64:48:56:22:0a:1e:60:1d:4f:aa:27:12:da:
         85:a3:6c:bc:ca:e4:92:f6:dc:c6:5f:d2:13:31:56:f7:16:f8:
         72:b7:85:34:aa:99:0f:4e:ff:8d:d1:ae:71:fd:8a:22:4b:e8:
         8d:2d:ca:ab:fd:28:53:03:ae:96:e9:5d:45:7f:2a:2a:1f:c0:
         89:c5:4e:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----