Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36FA15D/98166C5E623711EB931CB859F8AEA228/B3B2717A7DEC11ECA5AD33AD5A40D577.roa
File:                     B3B2717A7DEC11ECA5AD33AD5A40D577.roa (raw, json)
Hash identifier:          Z2ajLyN2HlhqU2eILPAe+IDD24gOnhoc30vAncPMiXw=
Subject key identifier:   B1:A2:65:32:C9:E6:3C:DB:0B:E8:6E:FC:8E:7D:39:DA:BA:5B:C5:84
Certificate issuer:       /CN=F36FA15DAR/serialNumber=44A9F69F4141DA76B7353EB0D581523AFE2B81E1
Certificate serial:       04EE
Authority key identifier: 44:A9:F6:9F:41:41:DA:76:B7:35:3E:B0:D5:81:52:3A:FE:2B:81:E1
Authority info access:    rsync://rpki.afrinic.net/repository/arin/RKn2n0FB2na3NT6w1YFSOv4rgeE.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36FA15D/98166C5E623711EB931CB859F8AEA228/B3B2717A7DEC11ECA5AD33AD5A40D577.roa
Signing time:             Tue 25 Jan 2022 14:40:12 +0000
ROA not before:           Tue 25 Jan 2022 14:40:09 +0000
ROA not after:            Wed 25 Jan 2023 14:40:09 +0000
asID:                     58202
IP address blocks:        161.123.224.0/22 maxlen: 22

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1262 (0x4ee)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36FA15DAR/serialNumber=44A9F69F4141DA76B7353EB0D581523AFE2B81E1
        Validity
            Not Before: Jan 25 14:40:09 2022 GMT
            Not After : Jan 25 14:40:09 2023 GMT
        Subject: CN=61f00bcc-b68f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:a9:6f:67:74:57:74:87:c8:47:2f:71:46:39:
                    d9:3e:1f:f5:a8:43:76:29:c7:c4:23:1f:d0:85:3b:
                    8a:69:ec:a5:2d:0a:f6:79:b3:c8:7d:f1:ad:9e:a4:
                    42:25:8d:76:9e:6f:5f:1f:e4:2a:37:93:85:88:09:
                    8b:2d:59:12:91:a8:1b:8a:c0:66:e3:2a:98:a9:a6:
                    79:6d:49:4d:94:2d:aa:4e:b1:fa:56:b5:f1:19:25:
                    3f:41:9c:5c:cb:84:af:6b:a8:4a:4a:94:9b:3c:45:
                    d7:5b:6e:49:30:f7:b5:9b:0a:6b:f3:0c:d2:29:a3:
                    0a:6a:9c:90:30:72:27:97:74:6b:fb:7c:cd:7e:e1:
                    53:df:4b:89:71:e0:c0:a7:d6:aa:da:02:07:fa:88:
                    e5:2a:0f:94:bc:0c:36:49:0a:3a:6c:26:c4:29:e0:
                    2a:0b:13:39:dd:6e:45:03:8b:d0:75:fd:5c:01:2b:
                    ee:7b:9a:f9:bc:86:21:bb:7c:ac:b0:36:76:14:93:
                    ef:94:27:16:39:1b:d7:89:b2:80:28:f6:95:b6:8a:
                    d3:1f:8d:6b:de:81:d7:11:38:b8:69:40:a3:43:8d:
                    f5:7c:e5:f9:cc:af:31:11:e4:d1:43:81:1b:f7:eb:
                    76:9d:5d:d1:a7:ad:9e:6e:bd:c7:35:39:31:f9:7d:
                    c4:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B1:A2:65:32:C9:E6:3C:DB:0B:E8:6E:FC:8E:7D:39:DA:BA:5B:C5:84
            X509v3 Authority Key Identifier:
                keyid:44:A9:F6:9F:41:41:DA:76:B7:35:3E:B0:D5:81:52:3A:FE:2B:81:E1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36FA15D/98166C5E623711EB931CB859F8AEA228/RKn2n0FB2na3NT6w1YFSOv4rgeE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/RKn2n0FB2na3NT6w1YFSOv4rgeE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36FA15D/98166C5E623711EB931CB859F8AEA228/B3B2717A7DEC11ECA5AD33AD5A40D577.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  161.123.224.0/22

    Signature Algorithm: sha256WithRSAEncryption
         38:3c:68:38:38:87:4a:38:7e:db:ab:08:b1:04:fe:a7:11:6a:
         e7:d3:51:75:0f:48:b3:3b:ae:b2:97:73:a5:b1:2a:4b:f1:4a:
         c9:27:72:d5:a2:41:3b:82:44:1e:37:b3:63:c1:69:ed:fb:9b:
         06:c9:97:25:72:7d:38:23:30:86:1b:98:99:fb:3b:46:3e:25:
         71:f7:ee:91:63:fe:78:6b:0c:94:c7:2d:19:99:d5:00:7c:dd:
         e3:78:14:6d:c6:02:b1:f1:73:29:47:03:9b:14:9f:8e:59:8c:
         fc:9c:e2:67:20:dd:9b:b9:f4:9f:6b:95:80:e2:60:8f:38:c0:
         07:31:a2:63:de:34:37:a8:ab:37:a3:4c:87:66:bb:40:17:e7:
         4c:4c:18:01:6a:33:8b:33:db:3e:25:8e:57:cd:76:b7:ba:94:
         61:4f:e6:80:8c:94:d8:37:12:a3:f5:52:cf:81:f2:f0:92:f5:
         04:8e:cc:17:99:de:ad:7b:38:28:08:10:03:cc:31:91:6a:57:
         50:89:00:be:de:50:1c:7c:05:bd:a5:f5:a6:01:8c:c5:10:2d:
         e9:7e:b6:74:29:b1:41:8a:2e:34:c8:9e:3c:b2:98:17:7c:5a:
         57:ec:f4:36:dc:ab:1f:22:da:1b:66:8d:5a:2f:75:39:65:38:
         e0:73:e9:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----