Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/C0D9t-spQCWPsKr1gjtizrnwA34.roa
File:                     C0D9t-spQCWPsKr1gjtizrnwA34.roa (raw, json)
Hash identifier:          pfjl2O3iGU1J4iYOeN4n9DGFPN0/WjAJS4xTr5VQXXw=
Subject key identifier:   0B:40:FD:B7:EB:29:40:25:8F:B0:AA:F5:82:3B:62:CE:B9:F0:03:7E
Certificate issuer:       /CN=9e95a361fe2b2c5292626ba4c56a65a814e48008
Certificate serial:       0184B9B9793A34306176BA64F460073E88F0
Authority key identifier: 9E:95:A3:61:FE:2B:2C:52:92:62:6B:A4:C5:6A:65:A8:14:E4:80:08
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/npWjYf4rLFKSYmukxWplqBTkgAg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/C0D9t-spQCWPsKr1gjtizrnwA34.roa
Signing time:             Sun 27 Nov 2022 15:34:10 +0000
ROA not before:           Sun 27 Nov 2022 15:34:10 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     203314
IP address blocks:        2a0c:9a40:9500::/40 maxlen: 48
                          2a0c:9a40:8c90::/48 maxlen: 48

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:84:b9:b9:79:3a:34:30:61:76:ba:64:f4:60:07:3e:88:f0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9e95a361fe2b2c5292626ba4c56a65a814e48008
        Validity
            Not Before: Nov 27 15:34:10 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=0b40fdb7eb2940258fb0aaf5823b62ceb9f0037e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:86:60:9d:e5:2a:9c:d3:51:05:4e:1e:a3:1f:ed:
                    c9:af:12:9c:b4:df:37:69:bf:5d:94:a9:04:a9:18:
                    42:85:6f:9e:9e:2e:11:cf:77:e5:6d:7f:a6:2c:18:
                    81:34:e8:2d:20:48:57:86:80:12:08:77:b7:a0:4f:
                    8b:d7:c4:e8:ad:fd:64:5b:2f:33:5c:6b:31:b2:f0:
                    94:78:8e:59:6f:4f:71:ea:62:e3:cd:db:83:1f:32:
                    31:15:22:0f:8a:e4:d7:0d:d3:96:8e:88:d7:27:f6:
                    94:62:84:19:c8:ed:d6:59:16:4d:b0:cd:57:e4:26:
                    6d:4a:e9:ba:67:7e:2f:fd:27:13:ae:89:d9:76:0d:
                    04:8a:f7:25:de:8b:cf:b4:a1:d4:54:a4:74:0a:3b:
                    54:1c:a9:9e:42:a8:16:c0:69:52:f6:78:d5:1d:8e:
                    88:ad:31:06:c7:30:97:ca:aa:83:9a:80:64:b8:6f:
                    68:3a:54:0c:4b:95:e8:e1:c8:e3:69:cf:e2:2d:1f:
                    d4:b2:31:01:96:eb:44:35:0c:de:7d:a7:b5:aa:2b:
                    3b:fd:2b:ae:f6:1d:9b:db:bd:e8:52:40:a6:5c:fc:
                    38:7a:3a:b6:28:e4:a9:0c:c4:58:4f:35:d2:9d:3b:
                    6e:bc:c7:50:57:c2:60:d4:ba:18:6b:79:66:07:b4:
                    cd:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0B:40:FD:B7:EB:29:40:25:8F:B0:AA:F5:82:3B:62:CE:B9:F0:03:7E
            X509v3 Authority Key Identifier:
                keyid:9E:95:A3:61:FE:2B:2C:52:92:62:6B:A4:C5:6A:65:A8:14:E4:80:08

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/npWjYf4rLFKSYmukxWplqBTkgAg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/C0D9t-spQCWPsKr1gjtizrnwA34.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/npWjYf4rLFKSYmukxWplqBTkgAg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a0c:9a40:8c90::/48
                  2a0c:9a40:9500::/40

    Signature Algorithm: sha256WithRSAEncryption
         aa:4d:c4:b8:1e:c2:da:fb:d3:e3:5a:59:6c:78:f9:34:93:f9:
         a5:c8:8d:46:86:69:01:14:68:9b:14:8e:d7:c7:bf:38:2f:53:
         88:d9:51:5e:5c:4e:63:89:0c:dc:ed:ba:bb:d2:6d:ed:34:7c:
         1c:6b:08:f2:82:ff:ad:51:b3:8a:05:8d:f2:1e:4e:52:a9:46:
         f4:7a:0b:cb:8e:c2:cb:50:29:56:ce:7e:c2:9b:40:48:cd:88:
         e9:4d:c6:ef:03:9e:bf:b4:e7:81:9f:7a:f2:0b:c5:52:a7:97:
         3f:e0:a7:fb:d4:d9:57:d9:01:7e:d2:cd:94:17:85:b1:73:61:
         3e:40:b1:91:02:7a:5a:b3:68:4b:d6:b7:27:1a:df:76:a6:6d:
         96:fe:1b:c0:90:5c:78:e6:0e:b0:10:e7:e9:88:0e:b9:aa:18:
         08:50:04:24:fc:11:c6:f9:b9:d7:f5:cf:b6:19:9d:7f:b9:3f:
         81:c6:d1:ee:66:52:dd:f4:c8:9b:53:5b:4b:66:1e:3f:9f:2d:
         c4:69:49:23:a2:66:59:e7:cb:91:7a:3d:f2:5f:6e:30:3a:ea:
         43:0c:98:ef:66:db:0d:d3:ce:02:c0:47:e9:cf:32:28:80:53:
         1f:fe:a8:f9:55:e0:05:98:02:22:aa:96:5d:6e:e8:37:88:a6:
         38:9a:08:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----