Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36FA15D/98166C5E623711EB931CB859F8AEA228/DB30176EF16111ECA74337B2F1222468.roa
File:                     DB30176EF16111ECA74337B2F1222468.roa (raw, json)
Hash identifier:          kDeTVKxYZeXxS/+DJI9I0zNkCw+pKXP8Kq16jpkamZg=
Subject key identifier:   E7:35:58:53:38:A9:B5:65:94:05:33:95:80:43:91:F8:8B:51:B3:EA
Certificate issuer:       /CN=F36FA15DAR/serialNumber=44A9F69F4141DA76B7353EB0D581523AFE2B81E1
Certificate serial:       0769
Authority key identifier: 44:A9:F6:9F:41:41:DA:76:B7:35:3E:B0:D5:81:52:3A:FE:2B:81:E1
Authority info access:    rsync://rpki.afrinic.net/repository/arin/RKn2n0FB2na3NT6w1YFSOv4rgeE.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36FA15D/98166C5E623711EB931CB859F8AEA228/DB30176EF16111ECA74337B2F1222468.roa
Signing time:             Tue 21 Jun 2022 12:58:33 +0000
ROA not before:           Tue 21 Jun 2022 12:58:29 +0000
ROA not after:            Wed 21 Jun 2023 12:58:29 +0000
asID:                     203999
IP address blocks:        161.123.36.0/22 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1897 (0x769)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36FA15DAR/serialNumber=44A9F69F4141DA76B7353EB0D581523AFE2B81E1
        Validity
            Not Before: Jun 21 12:58:29 2022 GMT
            Not After : Jun 21 12:58:29 2023 GMT
        Subject: CN=62b1c079-1611
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:cf:3f:86:70:99:89:86:a5:d8:be:20:5a:13:
                    67:cf:7d:b4:db:ce:98:23:3e:9c:fe:ad:83:6f:e8:
                    2c:ce:d3:c7:4c:6d:26:40:21:d6:16:98:43:7e:6f:
                    cd:92:b5:53:8b:53:07:4a:83:cb:88:ff:f2:6e:31:
                    37:09:18:e0:f6:b2:49:a9:f4:ac:12:d2:fd:c6:55:
                    2f:e3:38:3e:8b:aa:f2:dd:5b:61:6e:27:c4:c0:03:
                    55:15:6e:35:f2:62:70:c3:a1:1e:f5:bf:66:2c:60:
                    6a:71:29:72:2b:e0:bf:0a:c9:9d:44:8a:0d:f1:00:
                    77:8c:fc:20:d2:d1:c3:bb:16:bf:63:2f:bd:a9:28:
                    19:79:5b:b7:ba:cb:8b:4a:df:5b:3f:82:52:bf:62:
                    6d:a9:7b:84:60:57:d0:b7:3e:02:da:b3:3f:af:47:
                    4c:50:9f:44:56:cd:58:ab:c8:39:09:f4:1b:1c:89:
                    fe:41:ba:09:6c:0f:a4:7b:5d:54:f8:66:fd:b7:b1:
                    3e:4c:e2:d6:e1:77:30:73:0a:a3:a3:50:6b:2b:96:
                    c4:5c:37:11:cb:a1:44:70:2e:7d:df:aa:0e:c8:67:
                    d0:e2:0b:5e:11:a2:7a:b9:31:96:a6:2f:f1:a1:a2:
                    85:55:a3:67:ce:ad:b8:c4:84:a1:1c:fd:77:1c:16:
                    f4:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E7:35:58:53:38:A9:B5:65:94:05:33:95:80:43:91:F8:8B:51:B3:EA
            X509v3 Authority Key Identifier:
                keyid:44:A9:F6:9F:41:41:DA:76:B7:35:3E:B0:D5:81:52:3A:FE:2B:81:E1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36FA15D/98166C5E623711EB931CB859F8AEA228/RKn2n0FB2na3NT6w1YFSOv4rgeE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/RKn2n0FB2na3NT6w1YFSOv4rgeE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36FA15D/98166C5E623711EB931CB859F8AEA228/DB30176EF16111ECA74337B2F1222468.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  161.123.36.0/22

    Signature Algorithm: sha256WithRSAEncryption
         94:29:1d:69:cc:bd:87:c1:17:63:f9:d5:06:5c:46:b0:e0:fb:
         35:ed:9c:39:93:3c:35:8e:0b:fb:50:94:f0:fd:a8:f8:f0:77:
         e9:9d:91:1f:2a:8e:2b:bc:66:15:48:ff:4c:cd:bf:74:76:44:
         a7:36:e4:17:9b:31:0a:b9:ce:29:fa:05:2e:bc:ff:62:7b:a4:
         41:06:ac:d4:cf:41:8b:02:e4:f2:f7:6b:82:78:0c:62:0a:59:
         52:64:f4:25:77:a4:ac:89:c4:01:ff:0e:b6:1a:05:70:36:6b:
         16:63:61:63:31:6e:2b:72:d0:c5:a2:d7:6c:2e:6c:73:b3:89:
         08:51:8e:af:c1:09:58:75:de:36:e1:af:e8:04:c6:e8:fe:18:
         3f:74:f6:f5:e8:b6:01:a5:d9:66:5c:2f:01:c0:f0:24:7f:71:
         41:e9:38:bc:a6:ba:c7:da:24:d8:a3:4d:bd:11:cd:8f:f3:f1:
         63:ce:54:11:3e:b9:de:f3:25:c6:c4:c6:36:43:3c:07:64:2b:
         ae:c1:25:7e:27:10:38:99:e8:eb:27:ac:65:99:7a:83:24:38:
         84:6e:df:ad:37:47:d2:91:b9:bf:cf:0a:65:86:22:e9:e7:6b:
         82:d0:6b:98:c5:cb:4d:03:b6:93:db:24:17:40:b0:b8:58:71:
         5d:ab:95:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----