Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36FA15D/98166C5E623711EB931CB859F8AEA228/AA07A7F0919911EDB9503CDAF1222468.roa
File:                     AA07A7F0919911EDB9503CDAF1222468.roa (raw, json)
Hash identifier:          812htoYamRz9ynTlJBlXQpDzFE3aW/BsSLphmtuxOAo=
Subject key identifier:   52:73:6E:90:BA:38:7B:FB:12:14:98:24:A1:6B:92:DB:E6:F2:88:9D
Certificate issuer:       /CN=F36FA15DAR/serialNumber=44A9F69F4141DA76B7353EB0D581523AFE2B81E1
Certificate serial:       0962
Authority key identifier: 44:A9:F6:9F:41:41:DA:76:B7:35:3E:B0:D5:81:52:3A:FE:2B:81:E1
Authority info access:    rsync://rpki.afrinic.net/repository/arin/RKn2n0FB2na3NT6w1YFSOv4rgeE.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36FA15D/98166C5E623711EB931CB859F8AEA228/AA07A7F0919911EDB9503CDAF1222468.roa
Signing time:             Wed 11 Jan 2023 10:21:09 +0000
ROA not before:           Wed 11 Jan 2023 10:21:05 +0000
ROA not after:            Thu 11 Jan 2024 10:21:05 +0000
asID:                     133499
IP address blocks:        161.123.94.0/23 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2402 (0x962)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36FA15DAR/serialNumber=44A9F69F4141DA76B7353EB0D581523AFE2B81E1
        Validity
            Not Before: Jan 11 10:21:05 2023 GMT
            Not After : Jan 11 10:21:05 2024 GMT
        Subject: CN=63be8d95-54ba
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:13:c8:c1:10:d0:02:24:a7:f6:01:06:d8:61:
                    56:15:99:1a:ac:9c:c9:b7:c8:8e:78:2b:9b:73:16:
                    b2:2a:b6:25:65:9f:9c:ac:bd:17:d5:4f:37:93:98:
                    0d:ee:9f:53:67:d2:56:96:a0:11:c7:a1:29:24:83:
                    de:fa:72:5d:dc:20:30:99:37:3d:63:a9:33:83:a2:
                    36:ef:a4:e8:27:07:4f:9d:8d:38:9a:69:6a:ef:32:
                    f7:76:13:a4:71:a6:1e:4f:4e:1a:08:d7:b2:35:13:
                    f4:cb:d5:aa:ff:c9:8a:1e:c2:45:c9:b2:a2:b0:2f:
                    94:30:41:bf:b7:07:96:21:59:f8:47:ba:44:96:b4:
                    bd:d0:73:6c:35:d8:6d:87:7f:6d:51:9e:ad:bd:ab:
                    81:cd:3e:24:54:e8:d0:0b:76:14:13:d9:79:4c:12:
                    38:46:6e:a9:3f:b0:cc:e0:cc:21:0f:94:fa:69:c0:
                    8e:85:01:aa:82:03:ea:e0:5c:0a:08:b2:73:68:89:
                    67:c6:be:29:09:5b:45:6d:9e:5a:eb:49:cd:5c:a0:
                    77:a5:d6:d9:6f:df:1c:e1:8f:8e:d7:92:dd:63:b7:
                    0f:79:13:8b:d0:ac:1d:0b:ed:de:b8:f0:ba:c5:c7:
                    51:cb:3b:2e:75:bb:07:2d:3f:5d:5c:aa:fb:fa:1d:
                    23:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                52:73:6E:90:BA:38:7B:FB:12:14:98:24:A1:6B:92:DB:E6:F2:88:9D
            X509v3 Authority Key Identifier:
                keyid:44:A9:F6:9F:41:41:DA:76:B7:35:3E:B0:D5:81:52:3A:FE:2B:81:E1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36FA15D/98166C5E623711EB931CB859F8AEA228/RKn2n0FB2na3NT6w1YFSOv4rgeE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/RKn2n0FB2na3NT6w1YFSOv4rgeE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36FA15D/98166C5E623711EB931CB859F8AEA228/AA07A7F0919911EDB9503CDAF1222468.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  161.123.94.0/23

    Signature Algorithm: sha256WithRSAEncryption
         a2:39:08:83:90:fc:79:32:5f:b0:1c:9b:0b:22:ee:1c:44:11:
         f5:5f:53:50:90:98:7b:83:c3:1f:47:b3:4e:62:49:77:49:c2:
         b7:50:f8:81:8b:1d:fe:43:5b:92:dd:0d:8f:32:eb:c1:56:93:
         b0:dc:0e:33:bc:bc:17:24:04:d0:7f:7a:72:05:fc:74:5d:bb:
         b6:4f:ea:16:79:91:f5:80:24:3c:1f:51:a8:f3:c4:d9:64:78:
         73:f6:17:66:e3:c2:4f:7b:e3:5e:87:05:d4:67:78:85:0b:42:
         75:9e:b6:9e:a4:04:7d:96:e1:b9:95:aa:30:44:31:f2:09:b3:
         18:3c:4a:30:f9:6f:c1:ad:92:0e:02:07:2f:ea:4b:44:16:ce:
         68:74:e7:3b:1a:af:0b:07:e4:51:4f:d5:f3:da:6e:66:3d:d1:
         8e:3f:f1:d0:ae:ae:b1:fe:f9:6f:3e:0d:e4:07:9f:cb:b8:71:
         dc:3d:34:a8:f3:7a:61:a1:24:f8:45:bc:df:f7:a2:d3:13:c2:
         f2:6f:43:a1:c9:37:92:db:95:58:7a:c9:15:eb:2f:58:9d:3a:
         c0:64:6e:5e:11:39:bc:71:ef:a7:c5:f7:48:e0:14:e1:af:f2:
         b4:56:a4:67:43:94:a4:dc:83:bb:1b:33:0b:18:bc:da:bd:a0:
         0f:8d:9a:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----