Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36FA15D/98166C5E623711EB931CB859F8AEA228/CA9B298E7DFD11EC885AFCDD5A40D577.roa
File:                     CA9B298E7DFD11EC885AFCDD5A40D577.roa (raw, json)
Hash identifier:          0v18iFX5N6Ud7xE2azm4a8wnVeMSCO2DbCuT+TuQW1w=
Subject key identifier:   DF:61:7D:DF:56:20:F4:B8:4C:6D:82:5D:68:83:E7:2F:5F:5A:E0:E0
Certificate issuer:       /CN=F36FA15DAR/serialNumber=44A9F69F4141DA76B7353EB0D581523AFE2B81E1
Certificate serial:       0549
Authority key identifier: 44:A9:F6:9F:41:41:DA:76:B7:35:3E:B0:D5:81:52:3A:FE:2B:81:E1
Authority info access:    rsync://rpki.afrinic.net/repository/arin/RKn2n0FB2na3NT6w1YFSOv4rgeE.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36FA15D/98166C5E623711EB931CB859F8AEA228/CA9B298E7DFD11EC885AFCDD5A40D577.roa
Signing time:             Tue 25 Jan 2022 16:42:32 +0000
ROA not before:           Tue 25 Jan 2022 16:42:28 +0000
ROA not after:            Wed 25 Jan 2023 16:42:28 +0000
asID:                     327790
IP address blocks:        161.123.2.0/23 maxlen: 23

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1353 (0x549)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36FA15DAR/serialNumber=44A9F69F4141DA76B7353EB0D581523AFE2B81E1
        Validity
            Not Before: Jan 25 16:42:28 2022 GMT
            Not After : Jan 25 16:42:28 2023 GMT
        Subject: CN=61f02878-781f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e6:f1:88:cc:fb:ed:e6:8f:52:a0:44:d8:78:64:
                    e2:91:ad:28:e0:41:60:a8:85:6e:9d:46:d8:3d:63:
                    ef:a4:9e:25:1b:49:9f:4c:8d:e6:f4:d9:5e:87:4a:
                    32:6c:d6:1c:6a:6f:73:8b:04:97:cc:f3:4c:9d:17:
                    c5:5d:28:5c:d6:47:6c:af:18:ba:52:59:ef:18:af:
                    40:ea:4d:31:73:d5:04:92:ec:35:cd:96:ed:4b:3f:
                    f4:9d:02:2d:c8:11:9e:be:7c:f0:c7:ce:a2:e6:fc:
                    88:53:00:31:2c:61:da:1f:01:32:13:69:60:53:93:
                    db:02:81:ee:91:e9:c9:ca:fc:a8:51:09:38:41:50:
                    a8:22:63:fc:9c:d5:4b:ad:5d:73:b0:b8:24:fd:3e:
                    f2:fa:7d:3a:de:1c:87:db:6a:7c:81:71:0b:aa:a8:
                    58:6e:1a:fa:d5:51:4e:c1:eb:d7:06:b9:a0:61:42:
                    9d:e0:c9:56:a1:83:40:23:9e:80:4b:b2:b7:53:66:
                    a6:97:93:33:96:05:16:0e:bf:66:60:3f:d9:b4:94:
                    7e:38:84:49:44:24:70:24:75:15:70:e7:28:5d:85:
                    12:73:9f:20:9c:7d:bd:77:90:27:31:93:fc:dd:a4:
                    13:78:df:ea:02:29:04:5e:88:f3:2c:05:70:2c:14:
                    2d:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DF:61:7D:DF:56:20:F4:B8:4C:6D:82:5D:68:83:E7:2F:5F:5A:E0:E0
            X509v3 Authority Key Identifier:
                keyid:44:A9:F6:9F:41:41:DA:76:B7:35:3E:B0:D5:81:52:3A:FE:2B:81:E1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36FA15D/98166C5E623711EB931CB859F8AEA228/RKn2n0FB2na3NT6w1YFSOv4rgeE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/RKn2n0FB2na3NT6w1YFSOv4rgeE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36FA15D/98166C5E623711EB931CB859F8AEA228/CA9B298E7DFD11EC885AFCDD5A40D577.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  161.123.2.0/23

    Signature Algorithm: sha256WithRSAEncryption
         86:50:e7:fd:0f:c9:2d:e9:4e:b3:13:54:2c:5a:5c:f6:be:75:
         87:64:18:fc:73:ee:02:fb:56:1c:66:61:95:fa:cf:27:56:c0:
         48:1f:05:80:32:c6:b8:20:0b:8a:b9:ae:58:79:29:bf:7f:d2:
         7d:76:2b:be:cf:f7:b6:5c:58:13:db:14:ae:26:90:9e:44:1c:
         af:f1:0e:29:be:2c:b1:e8:aa:a9:a3:79:1b:56:fc:51:06:c7:
         9a:ea:0e:9f:cf:72:df:c5:b6:70:76:d1:57:c3:bd:d2:39:0e:
         0c:d2:f8:64:cf:34:62:40:ea:5c:d6:17:bf:f7:2c:55:66:96:
         35:66:cc:f3:3c:89:71:9d:68:b6:88:f0:c4:40:bf:31:55:39:
         99:4c:72:fa:1a:b9:6d:8f:33:4e:98:d8:1e:03:a7:7b:40:fe:
         d1:4d:89:4f:31:ad:53:5c:b2:ec:19:10:96:dc:5f:7b:0f:36:
         d9:cf:b4:5a:6f:c1:23:9e:a9:bc:4d:18:12:73:7a:77:89:96:
         cd:0c:14:25:a6:ce:2a:67:1b:09:44:2d:32:e2:05:08:0e:33:
         40:37:31:7e:1f:d7:c7:2b:56:03:8b:a2:34:3e:75:58:d1:97:
         d9:4b:45:62:a6:1b:ef:76:18:6f:a8:27:91:36:c0:68:47:60:
         0d:c9:bf:6f
-----BEGIN CERTIFICATE-----
MIIFgDCCBGigAwIBAgICBUkwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAwwKRjM2
RkExNURBUjExMC8GA1UEBRMoNDRBOUY2OUY0MTQxREE3NkI3MzUzRUIwRDU4MTUy
M0FGRTJCODFFMTAeFw0yMjAxMjUxNjQyMjhaFw0yMzAxMjUxNjQyMjhaMBgxFjAU
BgNVBAMMDTYxZjAyODc4LTc4MWYwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQDm8YjM++3mj1KgRNh4ZOKRrSjgQWCohW6dRtg9Y++kniUbSZ9Mjeb02V6H
SjJs1hxqb3OLBJfM80ydF8VdKFzWR2yvGLpSWe8Yr0DqTTFz1QSS7DXNlu1LP/Sd
Ai3IEZ6+fPDHzqLm/IhTADEsYdofATITaWBTk9sCge6R6cnK/KhRCThBUKgiY/yc
1UutXXOwuCT9PvL6fTreHIfbanyBcQuqqFhuGvrVUU7B69cGuaBhQp3gyVahg0Aj
noBLsrdTZqaXkzOWBRYOv2ZgP9m0lH44hElEJHAkdRVw5yhdhRJznyCcfb13kCcx
k/zdpBN43+oCKQReiPMsBXAsFC2rAgMBAAGjggKiMIICnjAdBgNVHQ4EFgQU32F9
31Yg9LhMbYJdaIPnL19a4OAwHwYDVR0jBBgwFoAURKn2n0FB2na3NT6w1YFSOv4r
geEwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNkZBMTVELzk4MTY2QzVFNjIzNzExRUI5MzFDQjg1OUY4QUVBMjI4L1JLbjJu
MEZCMm5hM05UNncxWUZTT3Y0cmdlRS5jcmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hcmlu
L1JLbjJuMEZCMm5hM05UNncxWUZTT3Y0cmdlRS5jZXIwTwYDVR0gAQH/BEUwQzBB
BggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5pYy5u
ZXQvcG9saWN5L0NQUy5wZGYwgdsGCCsGAQUFBwELBIHOMIHLMIGRBggrBgEFBQcw
C4aBhHJzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9y
ZXBvc2l0b3J5L0YzNkZBMTVELzk4MTY2QzVFNjIzNzExRUI5MzFDQjg1OUY4QUVB
MjI4L0NBOUIyOThFN0RGRDExRUM4ODVBRkNERDVBNDBENTc3LnJvYTA1BggrBgEF
BQcwDYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54bWww
HwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAGhewIwDQYJKoZIhvcNAQELBQAD
ggEBAIZQ5/0PyS3pTrMTVCxaXPa+dYdkGPxz7gL7VhxmYZX6zydWwEgfBYAyxrgg
C4q5rlh5Kb9/0n12K77P97ZcWBPbFK4mkJ5EHK/xDim+LLHoqqmjeRtW/FEGx5rq
Dp/Pct/FtnB20VfDvdI5DgzS+GTPNGJA6lzWF7/3LFVmljVmzPM8iXGdaLaI8MRA
vzFVOZlMcvoauW2PM06Y2B4Dp3tA/tFNiU8xrVNcsuwZEJbcX3sPNtnPtFpvwSOe
qbxNGBJzeneJls0MFCWmzipnGwlELTLiBQgOM0A3MX4f18crVgOLojQ+dVjRl9lL
RWKmG+92GG+oJ5E2wGhHYA3Jv28=
-----END CERTIFICATE-----