Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36FA15D/98166C5E623711EB931CB859F8AEA228/E6835EDA85BB11ECA71C649D5A40D577.roa
File:                     E6835EDA85BB11ECA71C649D5A40D577.roa (raw, json)
Hash identifier:          B9exnDjfkbCK4cctybYAp66rG71CDCo8qZ5f+xX7NLM=
Subject key identifier:   55:10:68:5B:3D:A8:C3:1B:2D:E0:D0:37:A4:FC:76:18:4F:88:6D:31
Certificate issuer:       /CN=F36FA15DAR/serialNumber=44A9F69F4141DA76B7353EB0D581523AFE2B81E1
Certificate serial:       058F
Authority key identifier: 44:A9:F6:9F:41:41:DA:76:B7:35:3E:B0:D5:81:52:3A:FE:2B:81:E1
Authority info access:    rsync://rpki.afrinic.net/repository/arin/RKn2n0FB2na3NT6w1YFSOv4rgeE.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36FA15D/98166C5E623711EB931CB859F8AEA228/E6835EDA85BB11ECA71C649D5A40D577.roa
Signing time:             Fri 04 Feb 2022 13:11:01 +0000
ROA not before:           Fri 04 Feb 2022 13:10:58 +0000
ROA not after:            Fri 03 Feb 2023 13:10:58 +0000
asID:                     58202
IP address blocks:        161.123.108.0/23 maxlen: 23

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1423 (0x58f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36FA15DAR/serialNumber=44A9F69F4141DA76B7353EB0D581523AFE2B81E1
        Validity
            Not Before: Feb  4 13:10:58 2022 GMT
            Not After : Feb  3 13:10:58 2023 GMT
        Subject: CN=61fd25e5-3b27
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:28:c0:4b:9a:62:77:83:ea:a6:a6:0a:a0:66:
                    65:58:00:63:07:10:9d:59:ad:d9:e0:bc:fe:43:1c:
                    40:bd:86:b7:d8:94:fe:c0:64:12:30:19:e4:d9:87:
                    e8:fc:b1:62:32:27:22:ee:86:39:b2:3a:8a:6a:7a:
                    cc:8a:b6:f6:c6:b7:03:8c:7b:75:dc:bf:af:c0:11:
                    f2:de:ab:e3:1a:1c:b6:06:05:3a:7e:eb:04:f4:03:
                    c7:b0:a7:ea:0c:2c:d6:10:ca:29:85:35:66:69:f1:
                    3a:b8:ee:5d:ee:15:a3:a1:bb:b8:d5:80:e1:57:e1:
                    44:24:02:48:35:93:cb:29:e9:df:cf:67:c5:bf:23:
                    1b:82:1b:b3:12:59:3d:b2:06:da:82:5f:24:47:03:
                    e9:7d:47:27:5b:ef:ef:42:60:21:4a:79:bd:75:04:
                    71:4b:94:9b:d6:ae:0c:d7:ca:c5:6c:92:28:a3:4c:
                    fb:21:5e:e1:3a:35:36:1b:cb:3d:57:9f:84:48:49:
                    1e:07:ab:5d:39:1c:b8:83:62:7a:c9:31:6c:2f:a0:
                    42:79:46:db:49:2c:2f:6e:66:aa:8d:f4:bd:3b:2e:
                    1d:0b:fc:28:66:ed:ef:23:04:f4:e0:6f:5d:52:a5:
                    2b:49:6d:83:83:62:e9:93:69:62:63:7f:e9:f4:f1:
                    be:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                55:10:68:5B:3D:A8:C3:1B:2D:E0:D0:37:A4:FC:76:18:4F:88:6D:31
            X509v3 Authority Key Identifier:
                keyid:44:A9:F6:9F:41:41:DA:76:B7:35:3E:B0:D5:81:52:3A:FE:2B:81:E1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36FA15D/98166C5E623711EB931CB859F8AEA228/RKn2n0FB2na3NT6w1YFSOv4rgeE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/RKn2n0FB2na3NT6w1YFSOv4rgeE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36FA15D/98166C5E623711EB931CB859F8AEA228/E6835EDA85BB11ECA71C649D5A40D577.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  161.123.108.0/23

    Signature Algorithm: sha256WithRSAEncryption
         96:f6:fb:7b:6a:3d:f8:e4:c4:92:98:63:1c:e0:19:fb:a7:22:
         c8:b6:c6:0b:72:6f:eb:d0:d6:ae:21:a1:7a:10:f2:dd:4f:8b:
         0d:3d:fe:36:26:7e:fc:5a:2d:75:84:5e:ed:46:39:57:f8:b6:
         f4:a5:01:c2:10:0d:ed:fd:03:5f:7f:3c:a6:65:50:79:03:a7:
         99:e1:05:e4:f4:4f:21:e7:cb:ef:26:96:84:c4:44:a4:4e:4f:
         08:98:0e:ba:7e:2c:c4:07:7b:71:61:9b:48:13:ff:e0:5b:b6:
         e5:cf:91:f2:73:7d:4f:47:8d:35:64:d7:9b:e9:b7:6e:59:85:
         07:68:22:f5:34:e8:93:26:16:1b:16:89:0d:aa:04:27:69:88:
         e8:cb:b1:38:b2:3d:0d:22:1c:8c:58:92:ff:3b:dc:08:fc:99:
         3f:85:5c:d8:5d:15:c1:72:69:cc:03:9b:8b:ed:db:6e:86:cd:
         f9:0f:4a:7d:a3:c0:e0:4e:eb:7b:49:2e:51:3b:c1:4d:ef:a7:
         59:f4:ad:31:11:aa:6c:1c:d5:45:ff:55:8b:f2:12:be:0a:fd:
         ba:01:d8:1a:bc:1c:82:98:c9:ec:79:ef:1a:31:d3:e0:81:ef:
         11:f5:6d:35:64:1a:84:94:22:96:da:a0:c4:8c:ad:74:0f:c3:
         74:0c:53:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----