Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36FA15D/98166C5E623711EB931CB859F8AEA228/C39E95983D7F11ED9310C3ADF1222468.roa
File:                     C39E95983D7F11ED9310C3ADF1222468.roa (raw, json)
Hash identifier:          apnsgjU62pfO/2VFGVJGVrdh0tu0Y/relmY77VVI/VE=
Subject key identifier:   95:2E:55:47:C7:5D:3B:08:E2:C8:23:D3:04:50:55:55:E6:4F:27:BF
Certificate issuer:       /CN=F36FA15DAR/serialNumber=44A9F69F4141DA76B7353EB0D581523AFE2B81E1
Certificate serial:       0857
Authority key identifier: 44:A9:F6:9F:41:41:DA:76:B7:35:3E:B0:D5:81:52:3A:FE:2B:81:E1
Authority info access:    rsync://rpki.afrinic.net/repository/arin/RKn2n0FB2na3NT6w1YFSOv4rgeE.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36FA15D/98166C5E623711EB931CB859F8AEA228/C39E95983D7F11ED9310C3ADF1222468.roa
Signing time:             Mon 26 Sep 2022 09:44:07 +0000
ROA not before:           Mon 26 Sep 2022 09:44:03 +0000
ROA not after:            Tue 26 Sep 2023 09:44:03 +0000
asID:                     203999
IP address blocks:        161.123.70.0/23 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2135 (0x857)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36FA15DAR/serialNumber=44A9F69F4141DA76B7353EB0D581523AFE2B81E1
        Validity
            Not Before: Sep 26 09:44:03 2022 GMT
            Not After : Sep 26 09:44:03 2023 GMT
        Subject: CN=63317467-2761
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:9e:2a:4e:d4:c6:9a:a6:5e:eb:f7:19:4e:7a:
                    af:31:40:36:43:43:45:5f:a5:91:27:d9:1c:7f:33:
                    f3:14:70:fb:c7:57:dd:e4:ce:26:7b:77:20:98:2e:
                    2e:fc:f0:c2:bc:a7:3a:5e:03:c6:9c:45:c0:8b:d2:
                    dc:c5:cb:a0:16:97:1d:40:2d:a6:40:37:01:75:6a:
                    7e:b5:78:b7:e7:ac:f5:9e:a9:73:8c:85:92:6d:04:
                    32:bb:99:93:76:b0:58:0b:cd:46:1d:ca:c7:18:60:
                    57:26:f7:98:30:79:57:7a:19:0b:43:f6:6c:c8:60:
                    41:d3:38:89:53:2a:19:83:ae:07:86:4b:db:78:5e:
                    13:14:01:8a:90:1e:48:8f:ff:6c:85:f5:b0:a2:71:
                    d7:50:d6:56:85:a4:f4:ba:c6:73:91:84:86:1e:6d:
                    ec:7a:87:aa:c6:67:73:aa:75:9e:d1:73:c0:18:7d:
                    9c:6e:ae:5b:ed:29:67:0e:27:fb:29:b6:04:36:be:
                    9e:de:a9:7f:b7:52:0a:64:18:36:94:f9:36:3b:40:
                    d0:97:bd:88:81:d5:39:d5:28:47:36:d1:12:ae:a4:
                    dd:43:34:28:a1:70:57:ac:04:f1:cf:1d:53:0f:73:
                    9b:50:21:5f:d0:cf:22:19:ca:e6:e0:ed:89:61:d1:
                    5b:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                95:2E:55:47:C7:5D:3B:08:E2:C8:23:D3:04:50:55:55:E6:4F:27:BF
            X509v3 Authority Key Identifier:
                keyid:44:A9:F6:9F:41:41:DA:76:B7:35:3E:B0:D5:81:52:3A:FE:2B:81:E1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36FA15D/98166C5E623711EB931CB859F8AEA228/RKn2n0FB2na3NT6w1YFSOv4rgeE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/RKn2n0FB2na3NT6w1YFSOv4rgeE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36FA15D/98166C5E623711EB931CB859F8AEA228/C39E95983D7F11ED9310C3ADF1222468.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  161.123.70.0/23

    Signature Algorithm: sha256WithRSAEncryption
         b7:95:1a:10:0f:72:13:9e:27:81:ed:27:40:02:23:6b:7f:19:
         99:e3:e7:50:97:89:a7:63:40:e1:2c:57:ba:b4:7a:8b:25:90:
         2b:14:30:83:02:34:c7:b4:26:48:27:4e:53:99:2f:c5:6f:c2:
         ea:81:c6:8f:44:35:f5:5a:62:ba:ef:06:bc:34:83:c3:3a:76:
         0c:40:dc:47:d2:2e:af:59:c5:4c:f7:cf:21:12:60:02:8f:96:
         fe:28:0b:e9:e5:e9:af:3b:19:f9:eb:b1:bf:6b:66:d5:a4:65:
         45:10:a6:9b:d6:d2:82:1e:5f:a5:b2:c1:46:ea:50:df:39:7c:
         21:41:d0:02:b3:4c:9b:65:14:dd:0a:34:27:27:b2:4a:e2:8a:
         99:51:46:8c:13:5b:54:77:b3:4a:8b:1f:cb:a2:3c:fe:e4:ca:
         3b:8e:bb:25:9d:84:89:34:0e:3d:bb:27:f7:95:77:4e:cc:6b:
         2f:cc:7b:ad:2b:25:2e:6d:1a:da:6f:ff:60:e1:bf:43:6f:24:
         3f:66:26:15:d4:c6:75:04:be:26:04:13:8e:0c:23:0e:5a:5a:
         ed:54:bb:62:d2:10:14:4b:61:f7:0a:62:d4:73:f4:f4:4a:41:
         e9:3b:dd:df:20:23:e8:bd:d0:c9:68:bf:d8:c8:2e:a6:67:9f:
         77:73:4c:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----