Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36FA15D/98166C5E623711EB931CB859F8AEA228/ED8C5830327311ECAD02FA6CD8A014CE.roa
File:                     ED8C5830327311ECAD02FA6CD8A014CE.roa (raw, json)
Hash identifier:          FLW5Cr1wGs7WXOzS0zh4Do2WIMqZh4IBVKAtoDCww9U=
Subject key identifier:   6D:D9:81:24:04:E0:55:97:FD:6B:1E:44:0F:90:D9:D1:DE:46:CA:0E
Certificate issuer:       /CN=F36FA15DAR/serialNumber=44A9F69F4141DA76B7353EB0D581523AFE2B81E1
Certificate serial:       01FE
Authority key identifier: 44:A9:F6:9F:41:41:DA:76:B7:35:3E:B0:D5:81:52:3A:FE:2B:81:E1
Authority info access:    rsync://rpki.afrinic.net/repository/arin/RKn2n0FB2na3NT6w1YFSOv4rgeE.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36FA15D/98166C5E623711EB931CB859F8AEA228/ED8C5830327311ECAD02FA6CD8A014CE.roa
Signing time:             Thu 21 Oct 2021 13:36:43 +0000
ROA not before:           Thu 21 Oct 2021 13:36:40 +0000
ROA not after:            Fri 21 Oct 2022 13:36:40 +0000
asID:                     60458
IP address blocks:        161.123.190.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 510 (0x1fe)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36FA15DAR/serialNumber=44A9F69F4141DA76B7353EB0D581523AFE2B81E1
        Validity
            Not Before: Oct 21 13:36:40 2021 GMT
            Not After : Oct 21 13:36:40 2022 GMT
        Subject: CN=61716ceb-4d23
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:7f:19:75:fb:4e:0d:03:ea:c9:3c:53:70:93:
                    1d:29:ba:1b:71:50:56:ab:07:44:39:1b:15:6b:f8:
                    af:e4:97:ac:f4:cb:4b:00:d1:9b:03:6c:e2:9c:22:
                    a3:da:d5:c7:49:ac:85:4b:7a:26:47:ae:6c:24:38:
                    04:e3:8b:62:2c:ef:19:26:8a:bf:b7:b6:6e:43:2e:
                    f8:eb:1f:3f:80:1d:dc:de:ed:3e:85:ab:04:b1:5f:
                    ea:b8:bd:32:e3:c7:d2:28:01:96:0a:9a:74:e9:90:
                    d3:92:07:e5:da:73:e0:13:f4:0d:51:c2:56:d4:98:
                    eb:65:b5:b4:93:da:a0:6a:88:3d:72:aa:f4:5e:7f:
                    c6:c7:b0:7a:e0:a6:26:a7:70:65:38:c9:f8:61:0f:
                    e4:fa:74:81:a4:69:2c:3f:cd:6e:5a:8b:15:e0:27:
                    ab:5c:a5:74:16:61:c0:86:ad:65:2d:f1:bf:c5:8a:
                    cf:49:fc:2a:c4:c9:8d:58:0c:c2:1d:50:22:24:1f:
                    4f:d1:b1:96:e2:13:9a:1c:b8:6b:b3:e2:f4:25:d2:
                    72:bf:87:5f:a2:d2:60:d2:e4:88:eb:b4:13:19:38:
                    23:82:ba:20:28:ae:8b:db:34:18:92:ab:38:85:77:
                    3f:ca:76:dd:de:04:1a:b5:f7:1f:30:28:69:59:c4:
                    fb:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6D:D9:81:24:04:E0:55:97:FD:6B:1E:44:0F:90:D9:D1:DE:46:CA:0E
            X509v3 Authority Key Identifier:
                keyid:44:A9:F6:9F:41:41:DA:76:B7:35:3E:B0:D5:81:52:3A:FE:2B:81:E1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36FA15D/98166C5E623711EB931CB859F8AEA228/RKn2n0FB2na3NT6w1YFSOv4rgeE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/RKn2n0FB2na3NT6w1YFSOv4rgeE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36FA15D/98166C5E623711EB931CB859F8AEA228/ED8C5830327311ECAD02FA6CD8A014CE.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  161.123.190.0/24

    Signature Algorithm: sha256WithRSAEncryption
         68:60:5b:9a:fa:d5:a1:64:a5:ed:4e:e6:18:11:c4:60:b7:8a:
         00:d9:bb:33:19:d0:69:9e:ca:d0:14:75:8d:56:0f:2f:da:ee:
         fb:e7:96:27:85:7a:63:43:97:ec:c4:c0:db:3b:54:5a:b7:1b:
         91:45:4d:0c:33:8a:74:0e:89:5c:f0:d8:4f:0c:1e:3a:66:f8:
         b0:75:37:39:7d:72:12:84:70:9d:9a:8d:ab:3d:27:ce:b0:ca:
         2b:5c:fe:4f:b7:04:1b:91:8f:e4:77:5b:f3:69:1c:9d:d7:97:
         1c:b1:06:2b:32:cd:12:be:6e:fa:cf:66:0c:d2:4e:84:2e:a3:
         97:5e:da:b4:fb:55:07:77:e3:22:92:a1:60:55:fb:db:85:ca:
         af:cf:7e:29:08:05:4f:10:7d:1b:3a:73:51:50:b7:7a:83:30:
         72:e4:d1:32:46:aa:7b:8d:5d:ca:a6:a4:6a:ff:81:52:5c:12:
         dc:ca:b2:4a:d2:09:fb:77:09:65:31:23:81:4b:78:1d:4a:3e:
         5c:9d:53:4d:de:75:28:dc:da:08:e6:25:e3:10:d5:fc:ca:49:
         58:bd:64:30:9c:d4:a3:de:00:9b:02:9f:5e:6d:db:67:c1:bc:
         8d:c2:2c:96:ab:29:32:60:71:8e:36:16:09:56:a7:63:72:95:
         0c:f3:12:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----