Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36FA15D/98166C5E623711EB931CB859F8AEA228/5CCD927AB99E11ECA3475A845A40D577.roa
File:                     5CCD927AB99E11ECA3475A845A40D577.roa (raw, json)
Hash identifier:          AOLfjld/7uMVDFliYcyp9fnwsBSYB890fCDg1pFcxP4=
Subject key identifier:   36:0A:BF:31:4D:6D:79:02:AE:2E:35:08:0C:63:0E:41:EE:A9:C0:56
Certificate issuer:       /CN=F36FA15DAR/serialNumber=44A9F69F4141DA76B7353EB0D581523AFE2B81E1
Certificate serial:       0656
Authority key identifier: 44:A9:F6:9F:41:41:DA:76:B7:35:3E:B0:D5:81:52:3A:FE:2B:81:E1
Authority info access:    rsync://rpki.afrinic.net/repository/arin/RKn2n0FB2na3NT6w1YFSOv4rgeE.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36FA15D/98166C5E623711EB931CB859F8AEA228/5CCD927AB99E11ECA3475A845A40D577.roa
Signing time:             Mon 11 Apr 2022 13:50:35 +0000
ROA not before:           Mon 11 Apr 2022 13:50:31 +0000
ROA not after:            Tue 11 Apr 2023 13:50:31 +0000
asID:                     400377
IP address blocks:        161.123.114.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1622 (0x656)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36FA15DAR/serialNumber=44A9F69F4141DA76B7353EB0D581523AFE2B81E1
        Validity
            Not Before: Apr 11 13:50:31 2022 GMT
            Not After : Apr 11 13:50:31 2023 GMT
        Subject: CN=6254322b-fda2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:10:14:3f:1b:bf:51:2e:f4:0f:6f:ec:14:0c:
                    30:55:e5:42:73:07:ab:12:21:cf:a9:78:d1:ba:62:
                    d3:1e:25:ec:f6:a5:86:e2:14:88:95:fc:ac:b6:ec:
                    87:1c:93:74:c3:09:d7:69:01:3a:e2:cf:d3:1b:2b:
                    50:ba:1f:19:39:8f:6d:1b:ce:51:e7:3a:ed:50:09:
                    b2:0b:d5:2d:39:5d:96:e8:ca:92:db:17:e6:c1:2f:
                    a1:d3:4b:c9:f8:0b:2a:92:cc:16:28:2b:b4:1a:73:
                    bf:4e:ad:a3:77:72:d8:f2:84:e0:04:60:87:03:14:
                    5d:71:2a:5e:e2:03:f9:13:b9:cd:3d:87:4a:92:83:
                    97:d9:89:80:93:79:0a:21:ec:1f:f3:1d:c0:fd:f8:
                    10:70:b3:c3:bd:35:7c:29:bf:2e:83:15:7e:1f:35:
                    34:81:c9:91:b5:a3:14:16:17:13:32:be:e6:64:07:
                    58:81:bb:9a:48:30:4c:69:ba:93:e9:bc:2f:ff:f9:
                    72:2e:06:f0:31:8e:3a:b5:80:64:cf:c9:b5:8f:e2:
                    43:54:81:7e:4c:3c:39:f5:c0:41:50:64:f5:fd:3c:
                    7c:e7:da:69:3a:e6:5f:27:86:02:5b:7a:b4:f8:3f:
                    3d:c3:6d:88:d8:ab:52:c3:64:8b:33:5e:0b:21:c4:
                    b0:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                36:0A:BF:31:4D:6D:79:02:AE:2E:35:08:0C:63:0E:41:EE:A9:C0:56
            X509v3 Authority Key Identifier:
                keyid:44:A9:F6:9F:41:41:DA:76:B7:35:3E:B0:D5:81:52:3A:FE:2B:81:E1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36FA15D/98166C5E623711EB931CB859F8AEA228/RKn2n0FB2na3NT6w1YFSOv4rgeE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/RKn2n0FB2na3NT6w1YFSOv4rgeE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36FA15D/98166C5E623711EB931CB859F8AEA228/5CCD927AB99E11ECA3475A845A40D577.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  161.123.114.0/24

    Signature Algorithm: sha256WithRSAEncryption
         21:df:ce:0d:7e:fc:f6:db:4d:8b:8b:03:ed:54:c7:bc:1f:c3:
         72:44:9f:a2:7b:a0:30:f5:c8:aa:17:b9:d9:8e:28:3e:4a:df:
         d1:37:71:57:69:55:62:d4:62:48:48:38:f3:dc:e4:e1:96:9d:
         fc:38:8f:e1:0c:bb:9d:87:69:d7:e7:27:4b:30:b5:81:32:f3:
         a5:c6:8b:b0:88:e6:cf:eb:81:6a:1e:67:00:d0:39:78:3f:21:
         f7:7c:c0:2f:36:09:cf:26:f9:16:7a:8d:c5:08:6a:78:35:c0:
         e9:39:b7:fa:25:34:2d:e2:0d:86:49:bc:5c:59:f2:9a:9e:ef:
         55:67:8a:af:7a:95:d7:50:4a:37:c0:c1:2d:86:5c:d8:21:35:
         24:da:6d:b5:8c:84:b1:5d:ad:f9:6f:b4:a5:fb:1f:74:d5:6d:
         c6:38:86:d9:57:0b:c6:86:fb:a1:b5:22:2f:d8:bb:33:22:22:
         9f:10:6b:c8:11:cb:7a:c5:6a:6d:3c:fd:35:b2:61:a8:ea:4a:
         52:17:56:9e:3a:7b:a8:82:1b:da:af:65:dc:a2:fb:e5:9e:d7:
         1f:2b:3f:eb:5d:d5:d3:c4:34:12:67:b4:c5:ee:a1:25:38:fa:
         ae:88:a9:7f:a2:0e:bf:bc:67:ed:db:f9:d5:b9:48:d1:63:71:
         42:3a:3e:72
-----BEGIN CERTIFICATE-----
MIIFgDCCBGigAwIBAgICBlYwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAwwKRjM2
RkExNURBUjExMC8GA1UEBRMoNDRBOUY2OUY0MTQxREE3NkI3MzUzRUIwRDU4MTUy
M0FGRTJCODFFMTAeFw0yMjA0MTExMzUwMzFaFw0yMzA0MTExMzUwMzFaMBgxFjAU
BgNVBAMMDTYyNTQzMjJiLWZkYTIwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQDAEBQ/G79RLvQPb+wUDDBV5UJzB6sSIc+peNG6YtMeJez2pYbiFIiV/Ky2
7Icck3TDCddpATriz9MbK1C6Hxk5j20bzlHnOu1QCbIL1S05XZboypLbF+bBL6HT
S8n4CyqSzBYoK7Qac79OraN3ctjyhOAEYIcDFF1xKl7iA/kTuc09h0qSg5fZiYCT
eQoh7B/zHcD9+BBws8O9NXwpvy6DFX4fNTSByZG1oxQWFxMyvuZkB1iBu5pIMExp
upPpvC//+XIuBvAxjjq1gGTPybWP4kNUgX5MPDn1wEFQZPX9PHzn2mk65l8nhgJb
erT4Pz3DbYjYq1LDZIszXgshxLDLAgMBAAGjggKiMIICnjAdBgNVHQ4EFgQUNgq/
MU1teQKuLjUIDGMOQe6pwFYwHwYDVR0jBBgwFoAURKn2n0FB2na3NT6w1YFSOv4r
geEwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNkZBMTVELzk4MTY2QzVFNjIzNzExRUI5MzFDQjg1OUY4QUVBMjI4L1JLbjJu
MEZCMm5hM05UNncxWUZTT3Y0cmdlRS5jcmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hcmlu
L1JLbjJuMEZCMm5hM05UNncxWUZTT3Y0cmdlRS5jZXIwTwYDVR0gAQH/BEUwQzBB
BggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5pYy5u
ZXQvcG9saWN5L0NQUy5wZGYwgdsGCCsGAQUFBwELBIHOMIHLMIGRBggrBgEFBQcw
C4aBhHJzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9y
ZXBvc2l0b3J5L0YzNkZBMTVELzk4MTY2QzVFNjIzNzExRUI5MzFDQjg1OUY4QUVB
MjI4LzVDQ0Q5MjdBQjk5RTExRUNBMzQ3NUE4NDVBNDBENTc3LnJvYTA1BggrBgEF
BQcwDYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54bWww
HwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAChe3IwDQYJKoZIhvcNAQELBQAD
ggEBACHfzg1+/PbbTYuLA+1Ux7wfw3JEn6J7oDD1yKoXudmOKD5K39E3cVdpVWLU
YkhIOPPc5OGWnfw4j+EMu52HadfnJ0swtYEy86XGi7CI5s/rgWoeZwDQOXg/Ifd8
wC82Cc8m+RZ6jcUIang1wOk5t/olNC3iDYZJvFxZ8pqe71Vniq96lddQSjfAwS2G
XNghNSTabbWMhLFdrflvtKX7H3TVbcY4htlXC8aG+6G1Ii/YuzMiIp8Qa8gRy3rF
am08/TWyYajqSlIXVp46e6iCG9qvZdyi++We1x8rP+td1dPENBJntMXuoSU4+q6I
qX+iDr+8Z+3b+dW5SNFjcUI6PnI=
-----END CERTIFICATE-----