Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36FA15D/98166C5E623711EB931CB859F8AEA228/FC6B468A1EAB11ECB8307758D8A014CE.roa
File:                     FC6B468A1EAB11ECB8307758D8A014CE.roa (raw, json)
Hash identifier:          zS2qMzui283FzcA4ULivlDnqouB47DJMxTDsjm3iKZY=
Subject key identifier:   E3:9C:BD:3B:C6:A1:B6:7B:AE:E0:C8:DF:E8:71:D8:FF:AC:E7:DB:C8
Certificate issuer:       /CN=F36FA15DAR/serialNumber=44A9F69F4141DA76B7353EB0D581523AFE2B81E1
Certificate serial:       019A
Authority key identifier: 44:A9:F6:9F:41:41:DA:76:B7:35:3E:B0:D5:81:52:3A:FE:2B:81:E1
Authority info access:    rsync://rpki.afrinic.net/repository/arin/RKn2n0FB2na3NT6w1YFSOv4rgeE.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36FA15D/98166C5E623711EB931CB859F8AEA228/FC6B468A1EAB11ECB8307758D8A014CE.roa
Signing time:             Sun 26 Sep 2021 09:27:36 +0000
ROA not before:           Sun 26 Sep 2021 09:27:31 +0000
ROA not after:            Mon 26 Sep 2022 09:27:31 +0000
asID:                     327790
IP address blocks:        161.123.164.0/22 maxlen: 22

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 410 (0x19a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36FA15DAR/serialNumber=44A9F69F4141DA76B7353EB0D581523AFE2B81E1
        Validity
            Not Before: Sep 26 09:27:31 2021 GMT
            Not After : Sep 26 09:27:31 2022 GMT
        Subject: CN=61503d08-dbdb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:6d:30:25:62:02:09:16:fe:2e:b8:12:22:9b:
                    59:72:a0:19:96:ae:d6:4f:97:71:51:5c:27:6c:53:
                    50:c6:0c:d0:d7:97:28:bb:b5:b7:bd:8b:b3:6e:8f:
                    35:eb:25:0d:12:6e:ed:76:26:ad:98:35:bc:3b:cb:
                    50:64:29:88:c1:91:52:a3:f1:a7:7b:75:d8:f7:fe:
                    e0:a1:86:1c:0e:a0:5e:bf:11:ac:2b:8e:51:10:33:
                    6d:b2:0b:73:f3:98:3a:05:4e:08:5e:71:45:f6:9d:
                    e4:d8:60:a4:95:02:da:d6:e2:10:8b:ae:f4:cd:4c:
                    d8:03:43:98:8a:82:5c:58:7c:f7:a0:4a:d9:77:b7:
                    d3:c2:c8:32:14:fb:72:89:b5:3f:7d:b4:eb:c8:b8:
                    40:ad:26:b1:d6:6c:95:2f:97:04:97:06:3a:0f:f2:
                    5a:e1:a2:3a:92:5f:ce:e5:6e:25:b3:98:40:6d:84:
                    27:75:98:3d:84:81:cf:8b:5e:9c:45:d7:b8:dc:f1:
                    3c:32:ac:1b:7a:31:e2:19:7f:6a:81:be:97:ef:7c:
                    c2:52:89:78:1b:a6:9c:46:e7:c5:fa:ea:0d:c2:fb:
                    33:dd:f7:f4:b1:cd:8b:27:8e:8e:aa:d1:02:2c:35:
                    47:b2:c2:e1:a7:a3:56:53:7b:0f:61:47:8a:e0:b0:
                    3f:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E3:9C:BD:3B:C6:A1:B6:7B:AE:E0:C8:DF:E8:71:D8:FF:AC:E7:DB:C8
            X509v3 Authority Key Identifier:
                keyid:44:A9:F6:9F:41:41:DA:76:B7:35:3E:B0:D5:81:52:3A:FE:2B:81:E1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36FA15D/98166C5E623711EB931CB859F8AEA228/RKn2n0FB2na3NT6w1YFSOv4rgeE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/RKn2n0FB2na3NT6w1YFSOv4rgeE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36FA15D/98166C5E623711EB931CB859F8AEA228/FC6B468A1EAB11ECB8307758D8A014CE.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  161.123.164.0/22

    Signature Algorithm: sha256WithRSAEncryption
         7f:37:e0:4d:03:e0:67:a2:2c:47:85:2e:65:61:3a:61:f9:f0:
         08:63:49:68:9b:9d:0f:2c:52:09:1f:9e:7b:11:b8:0e:fe:9a:
         c5:7f:16:fb:cb:56:c2:cb:e9:0a:95:53:6d:56:a0:65:d4:45:
         8c:c3:84:27:1a:12:f6:c3:3e:de:e6:77:f8:1e:e6:3c:46:21:
         e0:9f:ed:43:f5:1e:82:74:57:a0:4a:d0:73:4f:34:30:d7:07:
         89:09:17:d4:dd:5e:4b:46:66:0f:41:f2:ea:a6:c4:d1:51:a0:
         20:e1:a3:ea:75:62:03:47:4d:e4:d7:46:e1:ab:7b:e0:ef:cc:
         9d:8d:da:07:75:9d:07:47:7f:2a:3d:2c:c1:a1:61:ce:66:5e:
         ea:32:cf:f9:cb:2e:7c:a4:5b:b4:96:5b:1e:c7:c3:5c:29:7c:
         6f:0c:4e:8f:40:64:c7:d7:c4:91:b5:d1:10:f0:ea:73:a2:b8:
         e3:8c:c9:15:72:6e:9a:2d:23:d4:7b:41:6f:9e:f8:cb:43:04:
         41:68:ca:02:b1:f0:6b:86:a9:e0:5e:9b:85:37:12:a5:fb:2f:
         d0:1d:7f:83:ab:17:a1:53:b8:9e:b5:ed:6d:a0:0e:c6:38:61:
         2e:cc:29:2b:ea:80:93:5f:9c:27:8c:d1:4b:a0:2a:4b:29:a0:
         96:65:0e:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----