Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36FA15D/98166C5E623711EB931CB859F8AEA228/D0E531167DF511ECAEDC14C75A40D577.roa
File:                     D0E531167DF511ECAEDC14C75A40D577.roa (raw, json)
Hash identifier:          dhZ5XjJiyWT8GyymbLQVXbVy0uL0ZaQVmwVprdApbg4=
Subject key identifier:   DE:87:06:DA:A3:66:E7:84:F9:80:16:A9:12:52:69:24:5F:0C:CA:4C
Certificate issuer:       /CN=F36FA15DAR/serialNumber=44A9F69F4141DA76B7353EB0D581523AFE2B81E1
Certificate serial:       050C
Authority key identifier: 44:A9:F6:9F:41:41:DA:76:B7:35:3E:B0:D5:81:52:3A:FE:2B:81:E1
Authority info access:    rsync://rpki.afrinic.net/repository/arin/RKn2n0FB2na3NT6w1YFSOv4rgeE.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36FA15D/98166C5E623711EB931CB859F8AEA228/D0E531167DF511ECAEDC14C75A40D577.roa
Signing time:             Tue 25 Jan 2022 15:45:27 +0000
ROA not before:           Tue 25 Jan 2022 15:45:23 +0000
ROA not after:            Wed 25 Jan 2023 15:45:23 +0000
asID:                     327790
IP address blocks:        161.123.26.0/23 maxlen: 23

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1292 (0x50c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36FA15DAR/serialNumber=44A9F69F4141DA76B7353EB0D581523AFE2B81E1
        Validity
            Not Before: Jan 25 15:45:23 2022 GMT
            Not After : Jan 25 15:45:23 2023 GMT
        Subject: CN=61f01b17-5431
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:a1:32:11:94:9d:c6:06:e0:9c:67:38:f0:8b:
                    85:c3:f6:0f:ac:fd:4d:f3:31:4b:46:8c:45:89:97:
                    f3:f8:bf:1e:c6:b1:44:99:f5:fb:6d:bd:5e:03:e9:
                    1b:14:de:0e:d5:8c:44:5e:80:bb:60:2b:91:bd:35:
                    54:26:7c:a7:bc:6e:44:b5:06:53:51:37:67:75:20:
                    38:70:ca:8b:e8:d9:a6:d5:29:d3:ca:a6:75:ea:47:
                    e2:d1:1c:0c:75:42:22:82:25:98:6f:c9:20:e7:fa:
                    31:b0:d0:12:53:59:c6:3d:1b:c4:91:97:e9:f4:61:
                    be:f5:fd:c3:5c:a0:3e:04:fd:df:f2:57:22:ea:a3:
                    81:0c:17:cc:d0:2a:78:a5:66:fc:18:70:7f:7f:1f:
                    d0:50:50:6d:35:85:9d:ed:bc:54:ea:07:30:12:88:
                    d2:15:62:86:18:c3:94:76:bd:7b:5c:da:2a:96:c9:
                    a9:35:29:8e:10:f6:f5:df:3d:00:7e:94:6d:6e:10:
                    2b:d2:ef:c6:1c:16:33:d6:7e:d4:7d:d5:95:b9:e5:
                    82:76:a2:31:1f:b2:48:42:7e:15:e1:a8:d5:18:03:
                    4f:da:38:71:22:be:bc:3f:54:b6:99:d9:dc:0a:74:
                    37:e0:fd:a0:62:9d:96:b8:2d:08:01:d3:3c:ec:86:
                    08:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DE:87:06:DA:A3:66:E7:84:F9:80:16:A9:12:52:69:24:5F:0C:CA:4C
            X509v3 Authority Key Identifier:
                keyid:44:A9:F6:9F:41:41:DA:76:B7:35:3E:B0:D5:81:52:3A:FE:2B:81:E1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36FA15D/98166C5E623711EB931CB859F8AEA228/RKn2n0FB2na3NT6w1YFSOv4rgeE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/RKn2n0FB2na3NT6w1YFSOv4rgeE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36FA15D/98166C5E623711EB931CB859F8AEA228/D0E531167DF511ECAEDC14C75A40D577.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  161.123.26.0/23

    Signature Algorithm: sha256WithRSAEncryption
         a6:9b:ba:96:99:64:6e:fe:f2:42:48:a8:d8:db:35:55:c9:84:
         d6:fa:44:01:c3:23:48:c4:62:c2:54:3f:39:87:5f:dd:0f:e7:
         f0:21:8b:a1:38:06:66:83:13:67:1b:42:8a:71:a7:3b:b2:e2:
         d8:14:91:c5:af:35:44:19:3b:63:72:80:09:85:60:95:45:9f:
         56:9d:f1:57:41:c3:9b:bd:52:a0:ff:22:36:e4:de:b7:7d:b6:
         6f:82:c5:b8:2c:74:d2:2b:77:1f:3f:e5:e6:a0:fc:d8:16:7e:
         d2:2e:65:3b:49:fa:46:6d:7f:af:05:f5:e4:77:89:9e:d6:b3:
         d4:1b:f7:77:7a:b0:6a:2f:c2:ee:f8:55:79:28:05:72:07:ea:
         36:c5:7b:10:34:43:c0:d1:e9:88:70:f6:9e:13:e2:94:d0:f2:
         1a:63:f1:60:cb:41:27:84:ee:3e:c8:21:9b:83:eb:00:32:2e:
         a7:ea:1b:5b:1f:ee:cf:14:5e:9f:f4:f8:ae:77:92:65:22:6a:
         d6:5e:a8:96:49:e1:c1:f7:2a:75:90:68:c3:03:b6:69:e5:d9:
         ac:42:a3:ad:d9:a8:ad:27:6b:7c:a5:42:9a:8a:c9:d1:4e:be:
         b8:16:67:7b:df:07:15:97:68:f4:f7:ae:9e:65:48:11:ff:03:
         3f:cb:be:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----