Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36FA15D/98166C5E623711EB931CB859F8AEA228/DCC39DCCB03311EC99B1CDDC5A40D577.roa
File:                     DCC39DCCB03311EC99B1CDDC5A40D577.roa (raw, json)
Hash identifier:          OFQ/A0c6bBFFqdCCxbX0OhMffntZ8ihejZ54xt/b0tE=
Subject key identifier:   87:5A:29:18:C8:9E:05:21:A6:15:CA:35:5D:7A:88:67:F3:B6:C8:07
Certificate issuer:       /CN=F36FA15DAR/serialNumber=44A9F69F4141DA76B7353EB0D581523AFE2B81E1
Certificate serial:       0639
Authority key identifier: 44:A9:F6:9F:41:41:DA:76:B7:35:3E:B0:D5:81:52:3A:FE:2B:81:E1
Authority info access:    rsync://rpki.afrinic.net/repository/arin/RKn2n0FB2na3NT6w1YFSOv4rgeE.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36FA15D/98166C5E623711EB931CB859F8AEA228/DCC39DCCB03311EC99B1CDDC5A40D577.roa
Signing time:             Wed 30 Mar 2022 14:15:34 +0000
ROA not before:           Wed 30 Mar 2022 14:15:29 +0000
ROA not after:            Thu 30 Mar 2023 14:15:29 +0000
asID:                     327790
IP address blocks:        161.123.93.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1593 (0x639)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36FA15DAR/serialNumber=44A9F69F4141DA76B7353EB0D581523AFE2B81E1
        Validity
            Not Before: Mar 30 14:15:29 2022 GMT
            Not After : Mar 30 14:15:29 2023 GMT
        Subject: CN=62446605-04d8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:ef:b3:28:84:01:eb:ec:2b:3b:b2:e9:ca:08:
                    f0:40:ca:27:22:7c:0d:e6:d5:86:dd:a8:0e:7e:91:
                    ad:8b:74:27:e3:77:7f:99:81:46:24:27:58:49:14:
                    f5:50:59:81:4f:d5:f5:44:3e:32:67:1a:79:ce:58:
                    c8:aa:1f:e1:c0:49:62:c4:5e:11:52:c1:15:f8:d2:
                    d6:e2:ea:8b:ab:af:9b:6c:bd:56:c9:16:5c:d9:c1:
                    84:42:13:80:e5:6d:3f:74:9e:f3:48:ac:0a:b3:f8:
                    13:38:76:16:47:8e:29:f7:8e:4a:f0:d2:41:d0:3a:
                    63:4e:36:27:5b:18:71:4e:57:89:30:68:93:d3:dd:
                    06:c9:10:62:4d:3e:5d:0e:8b:22:ec:37:3e:88:1a:
                    6f:1c:81:2f:d1:f1:a1:b0:11:de:7d:f7:16:e3:37:
                    33:a8:d6:53:eb:17:30:48:7a:74:0c:7a:00:78:cc:
                    ca:8c:a9:06:fc:8c:23:3c:b8:04:e2:82:c0:fb:4d:
                    27:d7:36:f8:7c:cc:80:da:2e:87:58:21:4d:e8:79:
                    2f:47:49:f7:68:33:32:b0:62:aa:50:20:d5:de:68:
                    cb:59:46:bb:6c:29:8e:20:2c:bd:fd:2a:22:d0:2b:
                    5b:86:2e:2d:4a:a7:90:64:45:86:be:31:47:3a:83:
                    11:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                87:5A:29:18:C8:9E:05:21:A6:15:CA:35:5D:7A:88:67:F3:B6:C8:07
            X509v3 Authority Key Identifier:
                keyid:44:A9:F6:9F:41:41:DA:76:B7:35:3E:B0:D5:81:52:3A:FE:2B:81:E1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36FA15D/98166C5E623711EB931CB859F8AEA228/RKn2n0FB2na3NT6w1YFSOv4rgeE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/RKn2n0FB2na3NT6w1YFSOv4rgeE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36FA15D/98166C5E623711EB931CB859F8AEA228/DCC39DCCB03311EC99B1CDDC5A40D577.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  161.123.93.0/24

    Signature Algorithm: sha256WithRSAEncryption
         3c:c4:3d:df:77:c9:01:10:e4:ca:ae:a8:ab:5f:cb:bd:2c:7e:
         42:e5:28:f3:d4:21:81:ee:a1:5d:fb:03:85:78:44:b5:7e:bd:
         c2:90:bd:10:fa:9a:ff:01:eb:c7:38:c8:84:17:99:81:e1:9c:
         9a:9d:d2:80:1b:58:36:25:5a:e7:75:52:fd:aa:51:e7:d2:5a:
         e7:b6:43:ce:23:0b:e2:02:4d:33:3b:2a:3e:54:db:19:ec:20:
         12:c6:cd:95:6e:1d:31:e7:a1:c2:4f:df:28:1a:48:f9:48:f7:
         f5:3c:47:e9:d9:d0:7c:79:fd:b7:05:6a:15:e7:ae:c9:77:f4:
         18:d5:bc:27:7b:b2:84:bf:5b:f7:84:7b:6a:8e:44:6d:31:4f:
         63:35:80:c7:df:a1:11:57:af:cb:09:dc:1a:d9:ab:1f:0b:9b:
         9b:c0:62:d1:25:0b:25:97:fb:3d:6f:4c:6b:90:fe:55:b4:a1:
         f7:0b:d2:91:91:ff:8f:3c:1a:e7:8e:da:bd:84:d9:81:a1:72:
         63:0b:58:1f:28:d4:3c:15:5b:0e:78:11:e3:2f:cb:e1:61:d1:
         7c:fc:8e:03:c5:97:18:22:df:67:29:93:46:e9:09:63:49:5d:
         bc:3e:e8:b8:ce:c3:00:1e:20:e8:bb:f4:a3:4f:e8:81:20:51:
         e9:55:c2:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----