Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36FA15D/98166C5E623711EB931CB859F8AEA228/809D0DA6262811EDA1B2D6ECF1222468.roa
File:                     809D0DA6262811EDA1B2D6ECF1222468.roa (raw, json)
Hash identifier:          gcqhtm1RIm3yRtUBTAgb0lAKRAMNiASAJ4RI1g3Sox8=
Subject key identifier:   1B:24:6A:7F:15:08:47:F9:6B:43:2D:53:4A:3D:36:14:25:4A:ED:AC
Certificate issuer:       /CN=F36FA15DAR/serialNumber=44A9F69F4141DA76B7353EB0D581523AFE2B81E1
Certificate serial:       07FC
Authority key identifier: 44:A9:F6:9F:41:41:DA:76:B7:35:3E:B0:D5:81:52:3A:FE:2B:81:E1
Authority info access:    rsync://rpki.afrinic.net/repository/arin/RKn2n0FB2na3NT6w1YFSOv4rgeE.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36FA15D/98166C5E623711EB931CB859F8AEA228/809D0DA6262811EDA1B2D6ECF1222468.roa
Signing time:             Sat 27 Aug 2022 16:51:32 +0000
ROA not before:           Sat 27 Aug 2022 16:51:27 +0000
ROA not after:            Tue 27 Sep 2022 16:51:27 +0000
asID:                     35916
IP address blocks:        161.123.114.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2044 (0x7fc)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36FA15DAR/serialNumber=44A9F69F4141DA76B7353EB0D581523AFE2B81E1
        Validity
            Not Before: Aug 27 16:51:27 2022 GMT
            Not After : Sep 27 16:51:27 2022 GMT
        Subject: CN=630a4b94-775a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:a8:55:1d:95:c3:37:8a:56:6f:26:f8:9a:72:
                    09:09:ef:a7:3c:9b:97:63:fc:16:64:bf:07:ab:8a:
                    9f:94:3d:0d:da:6f:27:63:67:38:de:84:ac:89:27:
                    ce:c6:2b:0f:31:9b:1e:53:6b:a6:75:1c:b3:95:e6:
                    99:de:87:5e:8a:ee:2a:6a:23:7a:a0:7e:58:65:7c:
                    ce:bc:fa:06:10:58:0d:7d:6d:fe:14:b0:f8:7f:b1:
                    85:5f:f2:d7:2e:32:a1:bf:c7:0a:39:9e:7d:c1:de:
                    ba:88:84:e6:78:57:bd:55:bb:cf:b9:09:c4:72:96:
                    30:da:9b:dd:ed:47:96:8c:43:62:ca:77:dc:a5:45:
                    48:77:42:b2:74:22:9e:20:db:b7:26:1a:2a:57:89:
                    78:e3:33:07:a6:7e:52:dd:5a:4d:d9:8d:86:f0:76:
                    53:ee:61:d1:6c:43:c7:2a:82:22:6b:db:67:7b:06:
                    a3:f2:94:f8:c7:ba:2f:84:46:44:5c:1a:76:f1:fb:
                    d7:c1:32:01:fc:82:48:aa:67:27:7e:55:cc:16:07:
                    fb:3a:5a:a7:fb:b1:27:af:23:1a:67:b3:27:b1:7a:
                    e3:5c:8e:3e:6d:01:4e:df:a1:3e:e0:fa:09:b8:b3:
                    9e:3f:e9:07:e6:69:80:4c:73:4c:5e:25:72:13:f6:
                    51:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1B:24:6A:7F:15:08:47:F9:6B:43:2D:53:4A:3D:36:14:25:4A:ED:AC
            X509v3 Authority Key Identifier:
                keyid:44:A9:F6:9F:41:41:DA:76:B7:35:3E:B0:D5:81:52:3A:FE:2B:81:E1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36FA15D/98166C5E623711EB931CB859F8AEA228/RKn2n0FB2na3NT6w1YFSOv4rgeE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/RKn2n0FB2na3NT6w1YFSOv4rgeE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36FA15D/98166C5E623711EB931CB859F8AEA228/809D0DA6262811EDA1B2D6ECF1222468.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  161.123.114.0/24

    Signature Algorithm: sha256WithRSAEncryption
         3b:c2:06:cc:18:a9:7d:df:46:2b:1e:4a:4e:c1:82:c1:03:1e:
         6a:75:d3:3a:dd:be:5a:b6:dd:36:74:4d:76:3c:27:9a:a6:ec:
         a1:66:6b:fb:91:3b:1d:26:45:8e:8d:0e:19:89:01:05:5d:9c:
         30:fe:75:c7:91:09:0d:d6:9a:89:66:70:d0:bc:f6:1b:eb:11:
         03:81:06:cf:bc:11:38:16:9c:18:92:1f:25:21:d5:a4:43:5a:
         cf:a9:a1:3f:58:11:ca:55:af:2a:6a:93:2d:ee:64:05:55:c3:
         46:8e:50:cd:33:40:f2:54:b9:7f:c1:ba:66:51:4d:68:8d:f5:
         0f:b4:27:70:8c:d9:85:48:db:fc:96:34:17:f5:90:6d:f8:6e:
         30:f6:6f:d8:62:d6:1e:7a:cb:b5:ba:44:f9:16:94:46:2c:b5:
         1d:1c:84:f0:23:5f:a2:58:70:a5:41:7e:1e:fe:06:e2:29:93:
         37:bf:c7:8b:76:76:09:1e:da:ec:39:48:b0:09:bb:f7:26:86:
         3c:d8:37:1e:db:c8:0d:57:b6:d0:0f:7d:10:06:51:7d:fe:aa:
         f3:23:39:da:b3:73:fd:e9:e5:2c:3e:db:b9:43:60:18:b5:55:
         4b:09:26:8e:e6:c5:0a:68:e1:30:1d:3a:cd:6b:c1:6d:04:b1:
         9e:e4:6f:02
-----BEGIN CERTIFICATE-----
MIIFgDCCBGigAwIBAgICB/wwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAwwKRjM2
RkExNURBUjExMC8GA1UEBRMoNDRBOUY2OUY0MTQxREE3NkI3MzUzRUIwRDU4MTUy
M0FGRTJCODFFMTAeFw0yMjA4MjcxNjUxMjdaFw0yMjA5MjcxNjUxMjdaMBgxFjAU
BgNVBAMMDTYzMGE0Yjk0LTc3NWEwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQCmqFUdlcM3ilZvJviacgkJ76c8m5dj/BZkvwerip+UPQ3abydjZzjehKyJ
J87GKw8xmx5Ta6Z1HLOV5pneh16K7ipqI3qgflhlfM68+gYQWA19bf4UsPh/sYVf
8tcuMqG/xwo5nn3B3rqIhOZ4V71Vu8+5CcRyljDam93tR5aMQ2LKd9ylRUh3QrJ0
Ip4g27cmGipXiXjjMwemflLdWk3ZjYbwdlPuYdFsQ8cqgiJr22d7BqPylPjHui+E
RkRcGnbx+9fBMgH8gkiqZyd+VcwWB/s6Wqf7sSevIxpnsyexeuNcjj5tAU7foT7g
+gm4s54/6QfmaYBMc0xeJXIT9lEXAgMBAAGjggKiMIICnjAdBgNVHQ4EFgQUGyRq
fxUIR/lrQy1TSj02FCVK7awwHwYDVR0jBBgwFoAURKn2n0FB2na3NT6w1YFSOv4r
geEwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNkZBMTVELzk4MTY2QzVFNjIzNzExRUI5MzFDQjg1OUY4QUVBMjI4L1JLbjJu
MEZCMm5hM05UNncxWUZTT3Y0cmdlRS5jcmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hcmlu
L1JLbjJuMEZCMm5hM05UNncxWUZTT3Y0cmdlRS5jZXIwTwYDVR0gAQH/BEUwQzBB
BggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5pYy5u
ZXQvcG9saWN5L0NQUy5wZGYwgdsGCCsGAQUFBwELBIHOMIHLMIGRBggrBgEFBQcw
C4aBhHJzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9y
ZXBvc2l0b3J5L0YzNkZBMTVELzk4MTY2QzVFNjIzNzExRUI5MzFDQjg1OUY4QUVB
MjI4LzgwOUQwREE2MjYyODExRURBMUIyRDZFQ0YxMjIyNDY4LnJvYTA1BggrBgEF
BQcwDYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54bWww
HwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAChe3IwDQYJKoZIhvcNAQELBQAD
ggEBADvCBswYqX3fRiseSk7BgsEDHmp10zrdvlq23TZ0TXY8J5qm7KFma/uROx0m
RY6NDhmJAQVdnDD+dceRCQ3WmolmcNC89hvrEQOBBs+8ETgWnBiSHyUh1aRDWs+p
oT9YEcpVrypqky3uZAVVw0aOUM0zQPJUuX/BumZRTWiN9Q+0J3CM2YVI2/yWNBf1
kG34bjD2b9hi1h56y7W6RPkWlEYstR0chPAjX6JYcKVBfh7+BuIpkze/x4t2dgke
2uw5SLAJu/cmhjzYNx7byA1XttAPfRAGUX3+qvMjOdqzc/3p5Sw+27lDYBi1VUsJ
Jo7mxQpo4TAdOs1rwW0EsZ7kbwI=
-----END CERTIFICATE-----