Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36FA15D/98166C5E623711EB931CB859F8AEA228/F75F1E487DF911EC8110D4D25A40D577.roa
File:                     F75F1E487DF911EC8110D4D25A40D577.roa (raw, json)
Hash identifier:          fUhXwnIFji8vaLSNR4+YNuXgUnzZQV7wYzfAIiUUYc8=
Subject key identifier:   97:A1:D7:1B:5D:41:F0:32:85:A1:17:77:E8:B8:A0:19:61:88:85:BE
Certificate issuer:       /CN=F36FA15DAR/serialNumber=44A9F69F4141DA76B7353EB0D581523AFE2B81E1
Certificate serial:       0516
Authority key identifier: 44:A9:F6:9F:41:41:DA:76:B7:35:3E:B0:D5:81:52:3A:FE:2B:81:E1
Authority info access:    rsync://rpki.afrinic.net/repository/arin/RKn2n0FB2na3NT6w1YFSOv4rgeE.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36FA15D/98166C5E623711EB931CB859F8AEA228/F75F1E487DF911EC8110D4D25A40D577.roa
Signing time:             Tue 25 Jan 2022 16:15:09 +0000
ROA not before:           Tue 25 Jan 2022 16:15:06 +0000
ROA not after:            Wed 25 Jan 2023 16:15:06 +0000
asID:                     327790
IP address blocks:        161.123.110.0/23 maxlen: 23

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1302 (0x516)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36FA15DAR/serialNumber=44A9F69F4141DA76B7353EB0D581523AFE2B81E1
        Validity
            Not Before: Jan 25 16:15:06 2022 GMT
            Not After : Jan 25 16:15:06 2023 GMT
        Subject: CN=61f0220d-43d9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:07:6c:8a:83:44:11:07:6d:1b:1b:0d:67:ec:
                    e9:9b:d5:79:ca:26:98:0c:b3:c5:00:02:fa:6d:72:
                    50:7d:3e:b3:40:8a:a2:95:d2:32:52:a4:3f:ad:c8:
                    b4:46:55:6c:af:8b:39:85:ee:b6:e6:a0:d3:2c:94:
                    9a:50:9d:9f:fa:3c:18:79:20:a3:64:a4:8a:be:a3:
                    32:21:5d:81:58:ce:a2:e5:a2:7c:57:37:29:b4:73:
                    04:6f:a8:3d:23:41:f0:18:8c:2f:24:47:41:4c:78:
                    98:65:fc:38:ed:e0:6f:c7:79:b0:a7:bf:44:ec:4c:
                    85:6d:d2:99:8e:a4:2d:2f:09:6a:9e:20:f1:90:94:
                    9e:53:3f:c5:59:d1:18:0e:da:61:db:f3:bb:77:a3:
                    a0:3e:16:01:85:d1:dd:6a:24:2a:97:1f:5e:87:a5:
                    04:51:bc:6c:d2:00:b8:09:ae:50:3f:3a:42:fc:85:
                    42:b0:6e:c9:0a:1d:01:6b:c8:d8:db:2f:12:12:cc:
                    c6:17:31:40:00:ac:37:4e:ff:e2:85:62:11:8a:f3:
                    6e:9b:74:58:cf:5a:3d:b6:a2:9c:c5:37:e6:16:f1:
                    10:d3:08:11:28:f5:f9:e4:1a:fc:97:8a:9b:d5:1e:
                    4d:99:0b:2b:ce:96:1f:3d:2f:a7:1d:68:27:a5:4b:
                    00:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                97:A1:D7:1B:5D:41:F0:32:85:A1:17:77:E8:B8:A0:19:61:88:85:BE
            X509v3 Authority Key Identifier:
                keyid:44:A9:F6:9F:41:41:DA:76:B7:35:3E:B0:D5:81:52:3A:FE:2B:81:E1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36FA15D/98166C5E623711EB931CB859F8AEA228/RKn2n0FB2na3NT6w1YFSOv4rgeE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/RKn2n0FB2na3NT6w1YFSOv4rgeE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36FA15D/98166C5E623711EB931CB859F8AEA228/F75F1E487DF911EC8110D4D25A40D577.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  161.123.110.0/23

    Signature Algorithm: sha256WithRSAEncryption
         65:38:d1:0e:17:d9:1a:76:e5:e3:5e:19:4d:2a:d2:73:52:55:
         e1:6f:22:0b:13:9d:13:13:8e:9c:2d:e7:ce:62:4f:82:f7:0a:
         99:ac:e5:ae:ef:7a:2b:ff:29:8a:4b:e0:5d:49:cf:f1:8f:28:
         86:2b:d9:24:47:8e:17:0c:ff:97:fb:06:cd:5c:31:4a:16:16:
         62:76:53:a8:85:be:93:81:5a:4f:0a:c4:06:f8:bf:7c:ef:aa:
         a7:d5:ac:88:2e:ed:c0:68:f0:82:37:35:c2:d8:ff:ca:f5:6a:
         8f:d7:bf:e2:2b:17:ee:73:0b:b9:bd:6f:b9:87:e5:df:a1:58:
         a7:40:13:fc:37:14:2f:52:3d:e2:1d:72:35:a8:ac:57:d0:de:
         cd:64:c7:d7:18:62:34:4e:85:8f:0d:e1:c8:15:fc:71:c9:46:
         df:d8:36:8d:29:e3:ef:4d:c9:47:c4:2e:1d:2b:88:8b:8f:69:
         a3:d3:bd:57:ba:22:e1:c9:4c:1b:f2:d1:f4:4a:89:cd:76:1d:
         34:3d:f2:9d:08:90:ef:e7:8a:01:99:02:5f:29:a5:fa:69:c1:
         ea:ef:2a:cd:30:51:da:aa:80:60:67:02:aa:13:c2:58:fd:42:
         5f:48:a8:77:be:f6:4f:58:a0:fb:c9:cc:4c:b7:3e:f5:d5:40:
         22:e6:d3:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----