Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36FA15D/98166C5E623711EB931CB859F8AEA228/A83E8EA8AB5211ECB57E80895A40D577.roa
File:                     A83E8EA8AB5211ECB57E80895A40D577.roa (raw, json)
Hash identifier:          rVnxiL3knrntOzsL1pcAW1QBS31ruFb6Q1vBdmCh9jg=
Subject key identifier:   32:9B:F8:F4:ED:46:0F:E8:AC:C5:8F:EB:D6:B1:17:28:9A:BC:0C:8D
Certificate issuer:       /CN=F36FA15DAR/serialNumber=44A9F69F4141DA76B7353EB0D581523AFE2B81E1
Certificate serial:       0622
Authority key identifier: 44:A9:F6:9F:41:41:DA:76:B7:35:3E:B0:D5:81:52:3A:FE:2B:81:E1
Authority info access:    rsync://rpki.afrinic.net/repository/arin/RKn2n0FB2na3NT6w1YFSOv4rgeE.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36FA15D/98166C5E623711EB931CB859F8AEA228/A83E8EA8AB5211ECB57E80895A40D577.roa
Signing time:             Thu 24 Mar 2022 09:13:24 +0000
ROA not before:           Thu 24 Mar 2022 09:13:21 +0000
ROA not after:            Fri 24 Mar 2023 09:13:21 +0000
asID:                     400377
IP address blocks:        161.123.122.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1570 (0x622)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36FA15DAR/serialNumber=44A9F69F4141DA76B7353EB0D581523AFE2B81E1
        Validity
            Not Before: Mar 24 09:13:21 2022 GMT
            Not After : Mar 24 09:13:21 2023 GMT
        Subject: CN=623c3634-7f89
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:83:db:4c:7c:32:0c:d7:75:39:fb:40:2d:63:
                    62:d2:01:37:f9:43:d8:14:c6:ed:15:7a:9e:81:9e:
                    ab:01:fa:04:74:19:23:d2:bd:af:36:d8:5c:8b:ef:
                    97:c3:e3:8f:02:ba:9d:d8:8e:75:31:92:49:b2:d0:
                    06:ec:e6:a0:77:e7:78:29:cc:56:76:4a:b5:89:d6:
                    ac:4f:d2:87:a3:8a:57:fc:bf:17:4b:85:50:e0:95:
                    08:29:9e:0e:9d:05:1f:48:68:3f:e0:35:be:aa:34:
                    f3:3a:d2:87:14:f2:74:0b:fc:61:44:de:46:5f:48:
                    18:14:91:b9:2c:c9:17:ba:b4:05:dc:c9:cd:02:0d:
                    fe:16:1d:16:49:e5:bd:3a:9e:25:d2:99:ce:ea:e3:
                    a1:4a:92:76:03:ca:dc:21:02:ff:10:0a:aa:96:bb:
                    67:dc:29:e0:c1:dc:5c:8e:9a:41:e4:cb:de:eb:1c:
                    88:02:71:74:cf:fb:8a:00:e3:ee:f8:bd:c1:27:c5:
                    bf:59:5e:f9:8c:ed:9e:5c:1d:16:f6:04:71:ad:0d:
                    33:a8:af:60:94:34:87:10:50:b5:91:16:f4:60:58:
                    e8:67:c5:ed:3b:21:8a:94:28:5c:f3:97:ff:ed:1d:
                    6f:7c:e8:d8:b3:c2:f5:12:c3:09:57:14:f3:ba:18:
                    bb:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                32:9B:F8:F4:ED:46:0F:E8:AC:C5:8F:EB:D6:B1:17:28:9A:BC:0C:8D
            X509v3 Authority Key Identifier:
                keyid:44:A9:F6:9F:41:41:DA:76:B7:35:3E:B0:D5:81:52:3A:FE:2B:81:E1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36FA15D/98166C5E623711EB931CB859F8AEA228/RKn2n0FB2na3NT6w1YFSOv4rgeE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/RKn2n0FB2na3NT6w1YFSOv4rgeE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36FA15D/98166C5E623711EB931CB859F8AEA228/A83E8EA8AB5211ECB57E80895A40D577.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  161.123.122.0/24

    Signature Algorithm: sha256WithRSAEncryption
         0a:0d:59:74:9b:87:63:e2:bd:98:42:49:94:14:fa:40:cb:d5:
         8c:06:09:73:6e:47:69:dd:ca:78:6d:50:ec:6a:8f:4b:49:2b:
         49:67:27:27:81:a5:50:3f:5f:17:0f:f4:00:06:7f:70:1b:ea:
         f2:38:fb:c9:69:1f:89:fe:b2:1d:4d:2c:0e:f8:54:cd:2c:c9:
         48:15:c4:68:db:c0:cf:e9:54:b5:e9:a9:71:2c:bb:f6:86:c9:
         12:c1:bf:15:ca:a0:a8:e3:bb:a6:7c:5b:1b:fb:2a:56:15:62:
         6d:d0:b5:94:33:7f:02:71:f6:63:ef:84:bc:18:25:78:ea:ac:
         52:2d:e1:fc:ca:83:7c:d6:cc:35:e1:ea:c8:49:9d:bd:93:a4:
         25:aa:d1:28:86:4b:fa:03:4f:2c:ed:34:21:87:ad:10:02:c9:
         a2:5c:91:60:71:55:5d:c6:b6:be:00:2e:22:e4:a8:2e:81:15:
         d0:e0:af:84:25:f5:4e:b3:9d:d1:b6:23:76:e4:9b:e5:f4:65:
         6b:a7:cf:27:84:b1:05:f1:9c:7c:07:cb:b1:f9:65:e8:fc:b9:
         84:13:86:79:91:a7:c3:d3:a2:ac:66:83:ec:65:cf:28:81:e2:
         f4:1f:fe:13:31:c9:70:07:88:02:28:97:4f:44:bc:d0:34:d7:
         3c:c4:fb:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----