Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/1-LHeI1_adwC3i9bXPSWTXGkzGyY.roa
File:                     1-LHeI1_adwC3i9bXPSWTXGkzGyY.roa (raw, json)
Hash identifier:          E7LiAB2M1qJquaUtHIg3iSPRG5FxvPjcSvCrkTbvgzc=
Subject key identifier:   F8:B1:DE:23:5F:DA:77:00:B7:8B:D6:D7:3D:25:93:5C:69:33:1B:26
Certificate issuer:       /CN=9e95a361fe2b2c5292626ba4c56a65a814e48008
Certificate serial:       018548D5B02F7F98449CB9E80B19DDD08D8A
Authority key identifier: 9E:95:A3:61:FE:2B:2C:52:92:62:6B:A4:C5:6A:65:A8:14:E4:80:08
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/npWjYf4rLFKSYmukxWplqBTkgAg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/1-LHeI1_adwC3i9bXPSWTXGkzGyY.roa
Signing time:             Sun 25 Dec 2022 10:30:41 +0000
ROA not before:           Sun 25 Dec 2022 10:30:41 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     38230
IP address blocks:        2a0e:7d46::/32 maxlen: 48

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:48:d5:b0:2f:7f:98:44:9c:b9:e8:0b:19:dd:d0:8d:8a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9e95a361fe2b2c5292626ba4c56a65a814e48008
        Validity
            Not Before: Dec 25 10:30:41 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=f8b1de235fda7700b78bd6d73d25935c69331b26
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:86:eb:5f:ce:fc:48:1b:c3:fe:e7:10:b7:50:c0:
                    1a:d2:ac:0d:f5:c7:55:c8:bf:45:79:eb:dd:75:83:
                    01:4b:c8:08:ab:67:bb:d9:49:74:89:67:01:5c:c9:
                    48:92:b1:8e:33:4a:8b:25:8e:66:8b:c8:f2:3a:87:
                    8e:df:63:3b:b3:e4:f5:3c:44:c6:88:b3:56:6b:75:
                    f4:58:ec:4a:d9:c0:de:f5:ea:e0:81:12:76:75:2e:
                    c3:6e:3d:1f:d8:a7:84:4e:ec:06:3a:6a:3b:c4:f7:
                    16:4f:bd:f8:84:ea:75:9f:aa:4a:79:2b:b5:2c:62:
                    20:99:6e:b9:70:5f:5b:bb:03:4e:5c:69:d2:9c:b0:
                    46:2c:c1:db:4c:88:45:d3:5d:e8:31:1e:2e:00:dd:
                    76:c5:c5:f7:45:10:17:0e:1a:04:f9:6b:c9:a5:0c:
                    0f:45:b0:e4:39:58:45:d0:e8:e7:9b:fc:a4:f9:e1:
                    18:fb:68:d3:ec:3d:ce:4a:89:0c:e6:cc:85:3a:f2:
                    2d:d5:9f:ed:1f:ba:b0:94:cd:c3:d5:e7:5c:8e:65:
                    49:f9:ec:e7:1c:76:2b:67:8a:6c:2a:ad:0a:e3:b5:
                    3e:b4:dd:6e:74:3c:bb:3c:46:10:4f:17:57:30:9f:
                    ba:7c:00:00:06:8e:8b:0a:f7:ce:ca:3b:26:15:d0:
                    1f:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F8:B1:DE:23:5F:DA:77:00:B7:8B:D6:D7:3D:25:93:5C:69:33:1B:26
            X509v3 Authority Key Identifier:
                keyid:9E:95:A3:61:FE:2B:2C:52:92:62:6B:A4:C5:6A:65:A8:14:E4:80:08

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/npWjYf4rLFKSYmukxWplqBTkgAg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/1-LHeI1_adwC3i9bXPSWTXGkzGyY.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/npWjYf4rLFKSYmukxWplqBTkgAg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a0e:7d46::/32

    Signature Algorithm: sha256WithRSAEncryption
         54:d5:1d:21:8c:11:06:cb:85:10:45:1d:ba:85:85:f6:81:86:
         c7:80:e0:ec:d0:be:2e:47:1c:94:18:bb:59:0b:22:de:8b:0d:
         5b:04:f8:7c:c2:f2:94:3e:6f:15:05:34:7f:d8:83:be:22:82:
         bf:c0:79:31:19:38:d5:5f:14:a2:7f:dc:21:4b:5f:61:14:b7:
         c9:b6:9b:5d:2e:46:6a:75:1c:19:a0:6d:63:7a:2e:3c:90:3d:
         13:3b:04:dd:ef:e0:e6:c5:31:aa:62:8c:20:e7:f4:90:be:40:
         31:cd:fb:65:63:df:de:55:e4:de:20:34:1c:14:fc:28:78:46:
         b9:09:f2:9e:c5:b4:0d:50:78:cf:aa:f3:e9:20:2f:c4:64:1a:
         99:2c:79:b5:2e:0d:a9:44:d3:b7:60:bc:e4:70:3f:99:45:09:
         57:3e:9d:0a:77:52:e4:76:2b:60:e5:a4:23:24:9f:3b:69:0d:
         7a:84:7d:af:0f:da:4e:ed:fa:db:f7:f0:21:b4:a3:28:1d:3b:
         45:af:09:33:19:2d:cf:95:33:87:f9:b6:a4:68:03:da:88:50:
         82:2e:97:ba:0e:30:60:9b:86:99:42:ed:01:8c:b5:33:73:b9:
         6f:2b:74:16:98:42:6d:32:bb:ce:a4:59:fb:ac:04:11:ac:9f:
         89:bf:0e:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----