Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/46db3a-a573-4f28-b43b-37b62d223924/1/359vkryBCcxnP898AC1WZAz0jY8.roa
File:                     359vkryBCcxnP898AC1WZAz0jY8.roa (raw, json)
Hash identifier:          0OqB6a2t/f+tQCHM1xrF5ile0fKYD1J323oEcBeE45M=
Subject key identifier:   DF:9F:6F:92:BC:81:09:CC:67:3F:CF:7C:00:2D:56:64:0C:F4:8D:8F
Certificate issuer:       /CN=e754c347d68d15493de71bb962f0a567e134d603
Certificate serial:       018319E99B209F8CF9F3B73CBC385D679F20
Authority key identifier: E7:54:C3:47:D6:8D:15:49:3D:E7:1B:B9:62:F0:A5:67:E1:34:D6:03
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/51TDR9aNFUk95xu5YvClZ-E01gM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b0/46db3a-a573-4f28-b43b-37b62d223924/1/359vkryBCcxnP898AC1WZAz0jY8.roa
Signing time:             Wed 07 Sep 2022 21:44:43 +0000
ROA not before:           Wed 07 Sep 2022 21:44:43 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     834
IP address blocks:        103.35.56.0/22 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:83:19:e9:9b:20:9f:8c:f9:f3:b7:3c:bc:38:5d:67:9f:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e754c347d68d15493de71bb962f0a567e134d603
        Validity
            Not Before: Sep  7 21:44:43 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=df9f6f92bc8109cc673fcf7c002d56640cf48d8f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:52:f8:0c:70:03:4b:1c:78:d3:88:a5:57:d1:
                    c2:2f:8c:47:99:32:88:ac:13:17:a4:19:28:06:9f:
                    8d:ef:1c:40:71:ad:b6:46:76:65:36:f6:3f:5a:8b:
                    f3:80:5b:dc:d4:04:7d:35:5e:c5:5a:1c:52:11:02:
                    66:05:bc:6a:b3:5c:d8:03:94:f4:8d:dc:71:21:c7:
                    66:f0:51:34:f2:af:14:67:d9:a5:a6:f7:a2:45:b6:
                    90:13:4b:5a:87:f8:fe:92:e5:c1:62:15:64:d2:67:
                    01:b2:0a:b2:b3:89:1e:e1:13:ea:42:07:e5:ef:cd:
                    a0:48:f3:96:cb:fb:5b:0f:00:1b:c3:e1:ef:c0:1f:
                    fd:74:2f:d5:e7:21:67:c3:8a:47:8d:a1:89:51:a0:
                    16:d0:32:db:93:48:32:82:75:05:82:eb:0f:41:af:
                    57:91:9d:0d:21:62:b1:26:b5:ab:ed:ac:f1:ab:15:
                    70:f4:01:a3:68:fb:3f:9b:31:72:75:0b:f5:41:43:
                    40:c2:7e:56:af:78:69:3d:90:da:bb:0b:53:ca:a8:
                    37:1c:5d:c0:8a:1c:4e:ed:e4:3d:7e:1e:de:c9:01:
                    5d:6d:ba:f5:b1:b1:29:e8:47:e1:03:f3:da:c0:80:
                    9c:2f:2e:be:e5:29:96:d2:56:35:bd:1e:94:48:07:
                    0d:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DF:9F:6F:92:BC:81:09:CC:67:3F:CF:7C:00:2D:56:64:0C:F4:8D:8F
            X509v3 Authority Key Identifier:
                keyid:E7:54:C3:47:D6:8D:15:49:3D:E7:1B:B9:62:F0:A5:67:E1:34:D6:03

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/51TDR9aNFUk95xu5YvClZ-E01gM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/46db3a-a573-4f28-b43b-37b62d223924/1/359vkryBCcxnP898AC1WZAz0jY8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/46db3a-a573-4f28-b43b-37b62d223924/1/51TDR9aNFUk95xu5YvClZ-E01gM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.35.56.0/22

    Signature Algorithm: sha256WithRSAEncryption
         12:59:d0:31:ff:a2:a3:41:28:e0:14:20:90:4f:13:c6:1f:cd:
         bc:29:78:54:6b:3b:bc:10:cd:81:7e:17:f0:09:50:6e:f0:4b:
         1d:48:3e:97:45:dd:40:cc:98:ae:f8:95:83:55:16:2e:c0:4b:
         f7:f0:dc:b3:b3:00:0e:c5:7c:88:e7:53:3f:73:58:2b:80:f7:
         fe:6b:04:05:6a:c3:25:ba:d3:bc:4d:00:83:8b:62:6b:46:2a:
         2b:8d:9f:ba:dc:04:68:60:01:33:e6:76:bd:98:19:f0:04:3b:
         5b:fc:c0:28:f9:5e:a8:67:ce:21:33:08:97:d1:2a:51:af:23:
         87:15:2d:f1:93:d0:1e:27:76:66:f5:a1:ad:bc:51:9f:e7:4c:
         db:76:45:8f:3c:c2:93:fe:57:0e:33:29:9c:27:2f:d1:c6:60:
         04:1a:bf:55:d9:f3:ef:02:3d:48:a6:09:87:7f:9b:71:98:4c:
         1d:dc:1f:a8:89:25:fe:0c:e1:02:f5:0a:a5:f5:0c:29:d8:03:
         fc:5f:c3:11:64:e4:55:54:ed:95:b1:a7:db:77:07:4b:0e:3b:
         ec:7c:ce:10:0f:f5:a7:98:fb:22:37:be:9a:d1:25:e0:03:5f:
         11:02:88:e8:4e:c5:e7:5f:88:17:62:89:8d:4b:43:ee:00:8d:
         35:22:e2:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----