Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36FA15D/98166C5E623711EB931CB859F8AEA228/E88437E0197C11ED893814ACF1222468.roa
File:                     E88437E0197C11ED893814ACF1222468.roa (raw, json)
Hash identifier:          sv8NnbwZcSGIP6KanT0n/C/ec5gwnZUILx8xZIUhB60=
Subject key identifier:   B1:4F:45:0C:16:39:DC:0E:4C:64:0E:D7:49:AE:DC:95:DF:81:07:F8
Certificate issuer:       /CN=F36FA15DAR/serialNumber=44A9F69F4141DA76B7353EB0D581523AFE2B81E1
Certificate serial:       07D9
Authority key identifier: 44:A9:F6:9F:41:41:DA:76:B7:35:3E:B0:D5:81:52:3A:FE:2B:81:E1
Authority info access:    rsync://rpki.afrinic.net/repository/arin/RKn2n0FB2na3NT6w1YFSOv4rgeE.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36FA15D/98166C5E623711EB931CB859F8AEA228/E88437E0197C11ED893814ACF1222468.roa
Signing time:             Thu 11 Aug 2022 13:52:59 +0000
ROA not before:           Thu 11 Aug 2022 13:52:54 +0000
ROA not after:            Sun 11 Dec 2022 13:52:54 +0000
asID:                     205431
IP address blocks:        161.123.150.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2009 (0x7d9)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36FA15DAR/serialNumber=44A9F69F4141DA76B7353EB0D581523AFE2B81E1
        Validity
            Not Before: Aug 11 13:52:54 2022 GMT
            Not After : Dec 11 13:52:54 2022 GMT
        Subject: CN=62f509bb-6b77
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:eb:53:a8:b4:1f:ab:78:ad:84:7d:fe:46:62:d8:
                    d5:85:88:0c:f6:75:8a:ad:c3:63:1a:83:6b:41:8e:
                    dd:d8:e9:8d:b5:c0:ce:ca:de:60:4f:da:47:ad:0e:
                    e9:13:e7:87:01:3b:c7:67:30:94:95:65:a5:c6:fc:
                    2e:74:59:d1:9f:c6:7a:a2:54:9a:1e:ec:27:7f:03:
                    da:af:09:9f:f8:1e:ab:63:63:54:1e:a8:f9:9e:b3:
                    6c:d0:da:5f:09:d8:45:b2:5d:2e:98:bc:c0:d2:9d:
                    7a:08:da:f8:cb:47:14:0e:07:77:16:6f:a6:48:79:
                    d3:cb:af:43:33:c6:c6:24:80:a0:ab:89:b1:15:d1:
                    d9:32:79:89:8f:dd:da:9a:c2:df:38:f4:25:73:74:
                    eb:74:a0:55:ee:b2:86:fb:bf:59:fb:69:b0:38:f4:
                    fa:f0:c1:32:11:a0:13:7c:35:25:a6:40:35:d3:3a:
                    6d:b9:44:11:39:3a:84:0f:21:04:53:a7:45:bf:e1:
                    8d:b2:b7:6b:55:35:65:e7:44:53:81:ae:99:7f:63:
                    ef:9a:f0:e5:90:e6:91:71:bf:4c:d8:af:a9:97:66:
                    27:b5:95:1a:ad:b3:87:ab:a6:67:8d:a1:12:d3:b5:
                    53:44:17:9a:4d:3a:5e:3a:59:81:8a:f3:17:f6:59:
                    9d:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B1:4F:45:0C:16:39:DC:0E:4C:64:0E:D7:49:AE:DC:95:DF:81:07:F8
            X509v3 Authority Key Identifier:
                keyid:44:A9:F6:9F:41:41:DA:76:B7:35:3E:B0:D5:81:52:3A:FE:2B:81:E1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36FA15D/98166C5E623711EB931CB859F8AEA228/RKn2n0FB2na3NT6w1YFSOv4rgeE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/RKn2n0FB2na3NT6w1YFSOv4rgeE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36FA15D/98166C5E623711EB931CB859F8AEA228/E88437E0197C11ED893814ACF1222468.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  161.123.150.0/24

    Signature Algorithm: sha256WithRSAEncryption
         bc:03:61:b0:86:46:29:a2:46:ea:30:5a:05:71:25:6b:35:66:
         b6:db:50:6e:fb:f3:ab:e5:9b:c8:d8:b4:06:c9:d3:57:b0:9a:
         44:bf:39:70:04:5c:f2:93:d7:b4:43:f4:46:a1:2f:3c:b1:d5:
         49:ee:ed:62:f0:88:46:b8:bc:fa:80:02:59:15:e1:39:c0:ba:
         77:0a:34:ac:94:b9:79:98:08:8b:ba:9b:c4:df:44:e2:79:8f:
         37:60:53:94:8a:2f:77:97:e8:27:10:9e:72:a4:ca:21:fd:7c:
         0d:48:f1:45:ea:a1:29:e8:6e:1d:50:98:d7:50:42:02:42:38:
         9a:86:84:b6:1e:ca:fc:3f:8b:f9:c5:81:2c:00:8e:4b:8c:bf:
         b1:86:52:59:6c:fa:e4:8d:15:39:3c:e3:20:53:18:27:66:be:
         f6:24:87:b8:91:8b:b8:03:29:dd:4d:59:0b:fc:5a:5c:c5:20:
         20:d0:ee:c9:68:9a:70:94:39:8e:83:82:7f:61:14:56:7e:32:
         b0:5d:1e:fb:90:5e:a6:8a:12:08:fa:29:48:dc:9c:69:08:56:
         06:c5:4e:61:83:d9:8f:b0:96:61:b2:2e:82:a5:98:d8:63:35:
         bb:dc:d6:ba:41:7c:55:ed:22:ee:36:90:bc:2f:c3:6f:13:2b:
         71:1b:d1:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----