Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36FA15D/98166C5E623711EB931CB859F8AEA228/D1F473909CE511EDB5C367CCF1222468.roa
File:                     D1F473909CE511EDB5C367CCF1222468.roa (raw, json)
Hash identifier:          LHAKzRrRWY1fiSs8OKVGGMjmHtj/XQkkqJCI8tib8FI=
Subject key identifier:   2A:46:58:0F:0E:7F:CC:4A:2A:5D:41:84:A5:7D:B0:9C:40:0E:2E:A0
Certificate issuer:       /CN=F36FA15DAR/serialNumber=44A9F69F4141DA76B7353EB0D581523AFE2B81E1
Certificate serial:       097E
Authority key identifier: 44:A9:F6:9F:41:41:DA:76:B7:35:3E:B0:D5:81:52:3A:FE:2B:81:E1
Authority info access:    rsync://rpki.afrinic.net/repository/arin/RKn2n0FB2na3NT6w1YFSOv4rgeE.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36FA15D/98166C5E623711EB931CB859F8AEA228/D1F473909CE511EDB5C367CCF1222468.roa
Signing time:             Wed 25 Jan 2023 19:24:00 +0000
ROA not before:           Wed 25 Jan 2023 19:23:56 +0000
ROA not after:            Fri 31 Mar 2023 19:23:56 +0000
asID:                     205431
IP address blocks:        161.123.192.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2430 (0x97e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36FA15DAR/serialNumber=44A9F69F4141DA76B7353EB0D581523AFE2B81E1
        Validity
            Not Before: Jan 25 19:23:56 2023 GMT
            Not After : Mar 31 19:23:56 2023 GMT
        Subject: CN=63d181d0-590f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e5:bd:c3:9c:65:18:67:3f:e7:7c:37:20:df:48:
                    7c:89:3f:b5:93:e1:70:8c:4d:91:8c:95:59:5c:36:
                    48:61:e9:5e:63:af:23:a3:84:ea:33:28:fa:a3:e8:
                    29:f5:45:38:5a:5d:db:64:f1:b2:28:71:e8:ca:10:
                    bd:fc:2b:2d:35:ed:98:af:b5:f9:fc:05:d6:5e:0c:
                    1b:85:9d:6f:25:29:ab:1c:f0:74:ef:9e:07:ca:e5:
                    cb:57:f1:00:28:d9:e4:24:07:bf:1f:f2:fc:13:af:
                    99:28:59:0a:74:88:0a:e1:f2:dd:d0:e2:04:08:7c:
                    9c:d0:2f:1b:96:dd:e7:1e:89:2b:2c:42:d5:53:b6:
                    06:ca:54:42:17:f6:b8:01:75:8a:eb:e8:0f:54:26:
                    a8:b2:d3:a4:49:06:91:9e:c6:94:5c:ae:fc:f8:3a:
                    99:fc:9a:75:5d:5a:bf:3c:a0:ac:6a:08:ea:fe:72:
                    34:9f:54:be:46:09:79:08:fc:c4:de:50:2e:a5:4b:
                    a8:31:f0:b4:00:9a:90:0b:7a:08:5d:49:2e:ca:53:
                    0e:55:c4:07:a4:82:bc:cb:7d:ac:dc:ba:10:67:83:
                    0f:77:3b:84:d1:68:6d:93:59:54:b0:3c:9b:7c:d8:
                    8e:b0:a9:08:97:e5:ef:cb:4f:fd:18:c6:7c:4b:cc:
                    d5:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2A:46:58:0F:0E:7F:CC:4A:2A:5D:41:84:A5:7D:B0:9C:40:0E:2E:A0
            X509v3 Authority Key Identifier:
                keyid:44:A9:F6:9F:41:41:DA:76:B7:35:3E:B0:D5:81:52:3A:FE:2B:81:E1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36FA15D/98166C5E623711EB931CB859F8AEA228/RKn2n0FB2na3NT6w1YFSOv4rgeE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/RKn2n0FB2na3NT6w1YFSOv4rgeE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36FA15D/98166C5E623711EB931CB859F8AEA228/D1F473909CE511EDB5C367CCF1222468.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  161.123.192.0/24

    Signature Algorithm: sha256WithRSAEncryption
         4e:fc:e4:e5:49:41:4b:53:1b:fb:d9:fb:af:1c:ed:46:1f:bd:
         c4:e3:ce:d3:41:56:e1:5f:31:55:22:83:fb:60:63:bd:6e:45:
         4e:65:5c:f7:8c:04:92:bd:ac:aa:cc:a8:74:98:ab:02:ca:1a:
         2f:0d:a1:15:5a:e4:93:a4:79:bd:dc:31:b5:87:2b:75:3e:26:
         6c:cd:1b:0b:89:af:6a:e1:28:73:60:0d:ae:b2:03:3b:28:92:
         85:76:59:f6:ad:18:d5:df:29:73:15:e8:d4:ec:d3:f0:57:7c:
         77:0c:48:88:f2:d6:13:44:a4:a6:cf:13:e0:08:48:27:0b:79:
         ba:89:aa:07:83:d2:1e:32:54:be:56:2e:28:e9:aa:34:22:3b:
         64:27:96:83:d7:c8:bb:86:95:e0:f9:f5:03:c8:d9:53:56:bd:
         0c:f8:19:4d:c2:26:28:13:df:b2:34:21:b8:80:96:75:fe:36:
         1d:57:d4:e5:33:b9:7f:d4:a5:95:41:11:49:a9:92:df:5c:e4:
         3f:5f:8a:ef:b2:a5:d0:4e:60:a5:dd:f0:6d:ad:b1:11:c4:45:
         88:33:9c:63:08:c5:eb:f9:54:3b:79:fb:46:f1:41:78:8c:25:
         77:43:7f:1c:37:3f:20:0e:b8:51:1b:c2:0c:43:1b:77:fb:1e:
         38:4f:29:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----