Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36FA15D/98166C5E623711EB931CB859F8AEA228/CFD9E1BC3D8111EDBF6D4DB3F1222468.roa
File:                     CFD9E1BC3D8111EDBF6D4DB3F1222468.roa (raw, json)
Hash identifier:          +ekkekxAkklRtnH5guYszRWWcF2KA03ldSHKSKFrtYA=
Subject key identifier:   20:C1:F6:02:2C:4D:07:AC:13:82:34:67:51:7A:1F:F4:09:BB:7A:E1
Certificate issuer:       /CN=F36FA15DAR/serialNumber=44A9F69F4141DA76B7353EB0D581523AFE2B81E1
Certificate serial:       087D
Authority key identifier: 44:A9:F6:9F:41:41:DA:76:B7:35:3E:B0:D5:81:52:3A:FE:2B:81:E1
Authority info access:    rsync://rpki.afrinic.net/repository/arin/RKn2n0FB2na3NT6w1YFSOv4rgeE.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36FA15D/98166C5E623711EB931CB859F8AEA228/CFD9E1BC3D8111EDBF6D4DB3F1222468.roa
Signing time:             Mon 26 Sep 2022 09:58:47 +0000
ROA not before:           Mon 26 Sep 2022 09:58:43 +0000
ROA not after:            Tue 26 Sep 2023 09:58:43 +0000
asID:                     203999
IP address blocks:        161.123.154.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2173 (0x87d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36FA15DAR/serialNumber=44A9F69F4141DA76B7353EB0D581523AFE2B81E1
        Validity
            Not Before: Sep 26 09:58:43 2022 GMT
            Not After : Sep 26 09:58:43 2023 GMT
        Subject: CN=633177d6-3a2c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:31:1f:6e:7c:d3:94:ae:40:bd:78:62:38:15:
                    94:e2:9e:6f:5d:bc:f3:51:9d:81:4c:75:ba:66:4d:
                    f9:66:be:5a:ab:5d:99:ca:01:6a:87:c1:b8:04:91:
                    28:66:10:3a:40:b9:cd:af:45:10:28:7c:6a:27:67:
                    d1:d2:e1:ab:34:59:cd:65:55:b9:3e:b9:1b:ed:2b:
                    40:e1:19:f3:72:54:2f:f4:31:b0:3c:2e:60:5e:de:
                    99:e5:13:78:58:c8:ea:42:49:57:95:ee:89:c3:3f:
                    1a:bb:e7:f4:2c:69:4f:1f:c8:d9:4b:96:b7:2b:e5:
                    2e:56:5a:d0:00:a7:df:cb:0c:aa:f6:b5:76:0c:9c:
                    ab:2c:aa:6f:19:1e:37:de:b8:34:0d:65:7e:58:22:
                    56:3d:af:6d:1c:1b:c6:46:94:8c:f9:7a:ee:f7:b2:
                    d3:4f:f2:5b:4c:c9:94:48:43:8e:af:0a:bc:5f:c2:
                    6d:8c:f8:69:68:4a:f2:04:63:2f:69:69:1b:5f:d5:
                    6f:56:0b:41:fa:d7:a0:12:78:f8:0e:5f:4e:44:10:
                    49:70:7e:34:fe:77:11:9b:84:88:28:55:b5:7c:52:
                    fa:78:03:0a:4e:00:45:87:ea:4f:db:51:8b:0b:37:
                    60:16:d3:45:99:1c:86:2b:f3:5e:2b:54:f7:df:11:
                    fc:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                20:C1:F6:02:2C:4D:07:AC:13:82:34:67:51:7A:1F:F4:09:BB:7A:E1
            X509v3 Authority Key Identifier:
                keyid:44:A9:F6:9F:41:41:DA:76:B7:35:3E:B0:D5:81:52:3A:FE:2B:81:E1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36FA15D/98166C5E623711EB931CB859F8AEA228/RKn2n0FB2na3NT6w1YFSOv4rgeE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/RKn2n0FB2na3NT6w1YFSOv4rgeE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36FA15D/98166C5E623711EB931CB859F8AEA228/CFD9E1BC3D8111EDBF6D4DB3F1222468.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  161.123.154.0/24

    Signature Algorithm: sha256WithRSAEncryption
         ba:6f:75:85:2d:13:91:60:84:57:d2:8d:ab:42:27:df:9e:b9:
         00:06:13:62:4d:89:85:b8:2d:dc:f8:c4:93:a5:e0:9f:47:82:
         0d:da:7e:bf:ef:d6:26:28:a3:05:3f:25:a3:12:aa:fa:cb:77:
         ec:0f:3d:cb:f4:6d:fd:f8:5b:4e:b0:ed:e5:54:11:21:76:5f:
         30:a3:d7:2e:16:64:ab:50:3c:60:bf:b3:18:9e:e7:60:21:fd:
         fe:ba:bd:b3:9e:70:4c:a3:c9:7f:8d:bb:00:19:e7:0f:77:65:
         a4:15:b2:31:67:30:3f:95:7f:f5:3f:72:15:5f:b6:eb:c8:88:
         0b:33:ae:59:c0:f5:68:f4:54:12:c6:8a:9a:7b:47:6d:01:9a:
         91:be:eb:4f:14:0b:e1:03:b2:59:50:ce:ae:f3:65:b4:67:a9:
         29:08:1f:c2:8a:b7:2c:90:53:0e:e8:63:fa:b3:30:12:82:cb:
         66:b8:9b:ba:6a:01:4e:7a:b7:cf:f7:57:77:92:c1:36:04:9c:
         5e:3e:95:dc:2e:ce:49:a6:d7:ce:e8:7f:47:5f:6c:35:55:c5:
         ad:4d:64:4b:cf:93:85:25:fd:bc:9d:2a:2b:86:2b:03:56:20:
         76:5c:8b:69:48:69:b2:dd:dc:7a:3d:41:0d:8d:b9:41:06:fc:
         c6:01:55:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----