Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36FA15D/98166C5E623711EB931CB859F8AEA228/C5332A4A327211ECA56FF06AD8A014CE.roa
File:                     C5332A4A327211ECA56FF06AD8A014CE.roa (raw, json)
Hash identifier:          A5CrzVRDXFpF8ZIGRC51dYGGCz1IHDGjMya2OzqgjvM=
Subject key identifier:   7F:20:EB:65:67:8B:94:24:78:97:46:2E:33:E7:2B:57:8E:43:08:12
Certificate issuer:       /CN=F36FA15DAR/serialNumber=44A9F69F4141DA76B7353EB0D581523AFE2B81E1
Certificate serial:       01DE
Authority key identifier: 44:A9:F6:9F:41:41:DA:76:B7:35:3E:B0:D5:81:52:3A:FE:2B:81:E1
Authority info access:    rsync://rpki.afrinic.net/repository/arin/RKn2n0FB2na3NT6w1YFSOv4rgeE.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36FA15D/98166C5E623711EB931CB859F8AEA228/C5332A4A327211ECA56FF06AD8A014CE.roa
Signing time:             Thu 21 Oct 2021 13:28:26 +0000
ROA not before:           Thu 21 Oct 2021 13:28:22 +0000
ROA not after:            Fri 21 Oct 2022 13:28:22 +0000
asID:                     60458
IP address blocks:        161.123.167.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 478 (0x1de)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36FA15DAR/serialNumber=44A9F69F4141DA76B7353EB0D581523AFE2B81E1
        Validity
            Not Before: Oct 21 13:28:22 2021 GMT
            Not After : Oct 21 13:28:22 2022 GMT
        Subject: CN=61716afa-07ab
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:40:fd:6e:8c:fe:36:84:5b:f5:93:c7:ba:07:
                    bb:7a:36:3b:9c:61:6e:5a:38:ce:45:13:40:ff:c7:
                    64:fd:a9:f8:2c:14:35:fd:78:2e:5a:8e:db:0b:14:
                    8d:9b:f1:77:e5:da:1d:15:b3:f0:f7:d4:df:d5:19:
                    6e:3d:fb:95:e2:ae:36:31:ce:ec:78:c4:19:56:a4:
                    d0:d8:09:3b:fb:66:ad:8c:ea:38:97:79:49:92:67:
                    6e:dc:73:cb:d0:45:87:f8:9a:35:a4:33:3a:5f:a0:
                    2a:e7:04:04:82:d9:d3:09:81:e8:0c:93:22:38:93:
                    0d:67:43:d2:ed:e8:23:42:bc:3e:e2:33:cd:ce:14:
                    0a:7c:7e:8d:6b:96:83:98:56:ea:03:a4:88:79:d5:
                    20:78:e8:19:7f:31:3b:94:4c:e5:91:33:f0:b7:a7:
                    c8:8a:5c:ef:22:90:16:cc:52:6d:55:d2:c4:4c:8b:
                    f5:44:3b:7e:9b:23:91:6d:3f:b4:f5:7d:f5:9f:5a:
                    a3:a8:46:6b:cc:51:59:2e:c5:42:88:51:bf:33:da:
                    99:6d:fb:0d:3e:8e:3e:53:a0:17:c1:31:7e:5e:05:
                    bc:7f:44:bb:62:1e:98:12:16:09:94:4a:45:0f:b8:
                    ab:22:b0:14:be:79:05:3c:4c:da:36:c0:66:b3:88:
                    7d:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7F:20:EB:65:67:8B:94:24:78:97:46:2E:33:E7:2B:57:8E:43:08:12
            X509v3 Authority Key Identifier:
                keyid:44:A9:F6:9F:41:41:DA:76:B7:35:3E:B0:D5:81:52:3A:FE:2B:81:E1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36FA15D/98166C5E623711EB931CB859F8AEA228/RKn2n0FB2na3NT6w1YFSOv4rgeE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/RKn2n0FB2na3NT6w1YFSOv4rgeE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36FA15D/98166C5E623711EB931CB859F8AEA228/C5332A4A327211ECA56FF06AD8A014CE.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  161.123.167.0/24

    Signature Algorithm: sha256WithRSAEncryption
         12:c1:26:b9:fe:a3:74:76:cd:71:d1:3b:66:60:d1:25:1b:84:
         bb:69:f4:5c:a0:36:5e:dd:02:5d:e3:ae:0f:64:af:cb:be:ab:
         cd:99:70:0e:c1:4c:e6:0f:a7:16:e9:b1:db:9a:bd:5f:bf:dc:
         e8:c2:09:7e:5f:b5:00:cb:1d:42:f4:2d:d4:84:f4:a4:d9:c6:
         01:b0:54:28:6b:bd:bf:7b:4f:20:b2:40:1b:bf:dd:04:f5:22:
         11:09:c7:0c:31:72:d7:32:06:28:c5:db:25:66:0c:21:4d:2a:
         6d:80:67:99:dd:20:1a:63:db:73:70:a9:14:2c:94:95:e6:23:
         06:ee:d1:b9:cf:ab:58:8e:16:2c:0c:56:42:1b:76:dc:e1:6d:
         b3:86:cb:46:7a:95:28:72:49:7c:40:8e:b9:5b:f6:49:76:72:
         bc:ec:d3:98:54:09:0f:1a:a6:2f:d3:81:fb:ed:02:6b:49:c8:
         7d:3f:48:96:67:ab:e6:88:e7:53:cf:a4:c2:df:ef:0d:5c:e4:
         59:16:cf:60:fa:6f:f2:3c:5d:b6:4c:83:b3:c8:4f:1c:a8:05:
         61:6f:a1:4f:2e:c2:2d:39:73:55:df:ce:4e:52:d9:9d:f8:b1:
         e1:5d:05:f5:6d:78:e6:b4:33:f6:9f:bd:9b:cf:c1:33:1d:a9:
         83:0f:f6:2f
-----BEGIN CERTIFICATE-----
MIIFgDCCBGigAwIBAgICAd4wDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
RkExNURBUjExMC8GA1UEBRMoNDRBOUY2OUY0MTQxREE3NkI3MzUzRUIwRDU4MTUy
M0FGRTJCODFFMTAeFw0yMTEwMjExMzI4MjJaFw0yMjEwMjExMzI4MjJaMBgxFjAU
BgNVBAMMDTYxNzE2YWZhLTA3YWIwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQCmQP1ujP42hFv1k8e6B7t6NjucYW5aOM5FE0D/x2T9qfgsFDX9eC5ajtsL
FI2b8Xfl2h0Vs/D31N/VGW49+5XirjYxzux4xBlWpNDYCTv7Zq2M6jiXeUmSZ27c
c8vQRYf4mjWkMzpfoCrnBASC2dMJgegMkyI4kw1nQ9Lt6CNCvD7iM83OFAp8fo1r
loOYVuoDpIh51SB46Bl/MTuUTOWRM/C3p8iKXO8ikBbMUm1V0sRMi/VEO36bI5Ft
P7T1ffWfWqOoRmvMUVkuxUKIUb8z2plt+w0+jj5ToBfBMX5eBbx/RLtiHpgSFgmU
SkUPuKsisBS+eQU8TNo2wGaziH0VAgMBAAGjggKiMIICnjAdBgNVHQ4EFgQUfyDr
ZWeLlCR4l0YuM+crV45DCBIwHwYDVR0jBBgwFoAURKn2n0FB2na3NT6w1YFSOv4r
geEwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNkZBMTVELzk4MTY2QzVFNjIzNzExRUI5MzFDQjg1OUY4QUVBMjI4L1JLbjJu
MEZCMm5hM05UNncxWUZTT3Y0cmdlRS5jcmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hcmlu
L1JLbjJuMEZCMm5hM05UNncxWUZTT3Y0cmdlRS5jZXIwTwYDVR0gAQH/BEUwQzBB
BggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5pYy5u
ZXQvcG9saWN5L0NQUy5wZGYwgdsGCCsGAQUFBwELBIHOMIHLMIGRBggrBgEFBQcw
C4aBhHJzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9y
ZXBvc2l0b3J5L0YzNkZBMTVELzk4MTY2QzVFNjIzNzExRUI5MzFDQjg1OUY4QUVB
MjI4L0M1MzMyQTRBMzI3MjExRUNBNTZGRjA2QUQ4QTAxNENFLnJvYTA1BggrBgEF
BQcwDYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54bWww
HwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAChe6cwDQYJKoZIhvcNAQELBQAD
ggEBABLBJrn+o3R2zXHRO2Zg0SUbhLtp9FygNl7dAl3jrg9kr8u+q82ZcA7BTOYP
pxbpsduavV+/3OjCCX5ftQDLHUL0LdSE9KTZxgGwVChrvb97TyCyQBu/3QT1IhEJ
xwwxctcyBijF2yVmDCFNKm2AZ5ndIBpj23NwqRQslJXmIwbu0bnPq1iOFiwMVkIb
dtzhbbOGy0Z6lShySXxAjrlb9kl2crzs05hUCQ8api/TgfvtAmtJyH0/SJZnq+aI
51PPpMLf7w1c5FkWz2D6b/I8XbZMg7PITxyoBWFvoU8uwi05c1Xfzk5S2Z34seFd
BfVteOa0M/afvZvPwTMdqYMP9i8=
-----END CERTIFICATE-----