Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36FA15D/98166C5E623711EB931CB859F8AEA228/ED642794327211EC9552356BD8A014CE.roa
File:                     ED642794327211EC9552356BD8A014CE.roa (raw, json)
Hash identifier:          k8S+voJ+jXas+HmhPtLiTQdNQd6pELasXB7e1ck4a7k=
Subject key identifier:   62:CA:3E:61:5D:E5:84:21:BE:FD:EC:18:64:8D:10:C5:7C:D2:91:84
Certificate issuer:       /CN=F36FA15DAR/serialNumber=44A9F69F4141DA76B7353EB0D581523AFE2B81E1
Certificate serial:       01E2
Authority key identifier: 44:A9:F6:9F:41:41:DA:76:B7:35:3E:B0:D5:81:52:3A:FE:2B:81:E1
Authority info access:    rsync://rpki.afrinic.net/repository/arin/RKn2n0FB2na3NT6w1YFSOv4rgeE.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36FA15D/98166C5E623711EB931CB859F8AEA228/ED642794327211EC9552356BD8A014CE.roa
Signing time:             Thu 21 Oct 2021 13:29:33 +0000
ROA not before:           Thu 21 Oct 2021 13:29:30 +0000
ROA not after:            Fri 21 Oct 2022 13:29:30 +0000
asID:                     60458
IP address blocks:        161.123.173.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 482 (0x1e2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36FA15DAR/serialNumber=44A9F69F4141DA76B7353EB0D581523AFE2B81E1
        Validity
            Not Before: Oct 21 13:29:30 2021 GMT
            Not After : Oct 21 13:29:30 2022 GMT
        Subject: CN=61716b3d-407d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:51:4f:c7:80:3b:db:3d:0e:4c:ce:b3:ba:3a:
                    72:36:c9:da:75:14:93:9c:53:2d:2e:b5:60:5a:17:
                    e0:df:df:a0:6e:9b:15:52:a9:bc:e7:79:28:c9:57:
                    18:3f:46:76:65:4f:6f:4e:35:35:3c:46:fc:7f:be:
                    be:c9:e9:73:59:ea:9a:ae:a8:60:b6:fa:78:22:82:
                    1d:ab:97:70:b7:f8:9c:0a:6d:76:00:de:02:31:6e:
                    b3:33:5f:56:ad:e5:3c:d7:61:9e:98:51:b7:b1:39:
                    cd:c5:0c:b2:02:1e:5b:6b:52:bf:4a:1d:c3:69:36:
                    a4:16:b3:64:f6:c3:f0:aa:05:79:85:23:65:59:1d:
                    f5:4a:8d:82:ec:ec:73:e2:1c:b2:3a:de:52:7a:5d:
                    bf:f2:05:1c:48:31:df:8f:0f:7c:52:09:19:21:42:
                    95:f7:99:4d:e7:be:89:2b:b9:87:7f:f8:c9:71:ef:
                    ff:6e:10:d1:a3:64:7e:8b:01:f7:ef:59:ba:ae:1f:
                    33:8c:cd:ed:12:3c:2b:a4:f4:cd:41:90:56:45:20:
                    9a:a8:56:73:f3:39:ee:58:d9:21:bb:37:dc:94:d6:
                    7f:4f:91:03:5f:a6:09:d7:b8:46:91:9e:01:10:fa:
                    bf:02:4d:77:68:cc:cb:0f:18:4a:ee:5e:fe:9c:5d:
                    c0:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                62:CA:3E:61:5D:E5:84:21:BE:FD:EC:18:64:8D:10:C5:7C:D2:91:84
            X509v3 Authority Key Identifier:
                keyid:44:A9:F6:9F:41:41:DA:76:B7:35:3E:B0:D5:81:52:3A:FE:2B:81:E1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36FA15D/98166C5E623711EB931CB859F8AEA228/RKn2n0FB2na3NT6w1YFSOv4rgeE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/RKn2n0FB2na3NT6w1YFSOv4rgeE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36FA15D/98166C5E623711EB931CB859F8AEA228/ED642794327211EC9552356BD8A014CE.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  161.123.173.0/24

    Signature Algorithm: sha256WithRSAEncryption
         9e:67:88:61:b3:91:2b:e6:7b:a6:dd:52:c9:47:0b:f8:02:31:
         56:60:37:ca:10:2c:04:c5:51:23:e3:75:4a:57:52:f2:9c:7b:
         55:14:1b:36:65:ff:71:58:6f:71:ab:eb:19:33:41:8b:6e:c3:
         1d:dc:13:fd:93:5f:88:68:e8:33:f7:70:27:e6:9b:77:42:78:
         2a:a1:4f:fe:4a:47:17:68:66:bc:34:11:fc:d4:4a:ae:52:ee:
         47:3c:e2:68:d2:5a:dc:c6:d6:33:50:00:28:58:66:dc:2c:98:
         f8:9e:ef:ae:37:59:7c:bc:f4:1e:c5:0c:9f:cc:8a:4f:20:7c:
         62:be:dc:27:40:70:f6:e5:12:8f:dc:73:39:5c:4c:36:3a:2d:
         25:eb:91:8f:a0:99:9a:15:68:28:8d:e8:7c:03:1f:8c:47:2d:
         43:21:12:9c:39:f6:7a:c0:5a:e6:ca:83:d6:bc:0f:ff:08:75:
         02:7c:c8:c0:5c:c6:52:77:7f:a9:cb:20:da:ae:de:ea:6e:30:
         6a:14:6e:86:54:2b:7c:d9:a6:86:73:5f:4a:86:9f:7a:59:06:
         ee:82:e5:45:ee:4e:08:40:84:58:a0:d7:ca:79:59:09:0b:63:
         cf:a0:1b:32:62:91:26:5d:ad:6e:8e:c5:f5:61:37:3a:fd:35:
         2a:f3:4b:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----