Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/JD0_OqhCfmPHCipPI0ZKyTZ8zh0.roa
File:                     JD0_OqhCfmPHCipPI0ZKyTZ8zh0.roa (raw, json)
Hash identifier:          zO+G3CjaT6oMxm1EK67yJnoJ9WYsG/0yjWQPD+DrSNw=
Subject key identifier:   24:3D:3F:3A:A8:42:7E:63:C7:0A:2A:4F:23:46:4A:C9:36:7C:CE:1D
Certificate issuer:       /CN=9e95a361fe2b2c5292626ba4c56a65a814e48008
Certificate serial:       0BE6C63B
Authority key identifier: 9E:95:A3:61:FE:2B:2C:52:92:62:6B:A4:C5:6A:65:A8:14:E4:80:08
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/npWjYf4rLFKSYmukxWplqBTkgAg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/JD0_OqhCfmPHCipPI0ZKyTZ8zh0.roa
Signing time:             Sat 01 Jan 2022 12:55:02 +0000
ROA not before:           Sat 01 Jan 2022 12:55:02 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     204438
IP address blocks:        2a0c:9a40:8113::/48 maxlen: 48
                          2a0c:9a40:8106::/48 maxlen: 48
                          2a0c:9a40:8101::/48 maxlen: 48
                          2a0c:9a40:8114::/48 maxlen: 48
                          2a0c:9a40:811a::/48 maxlen: 48
                          2a0c:9a40:8112::/48 maxlen: 48
                          2a0c:9a40:8115::/48 maxlen: 48
                          2a0c:9a40:8110::/44 maxlen: 48
                          2a0c:9a40:8110::/48 maxlen: 48

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 199673403 (0xbe6c63b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9e95a361fe2b2c5292626ba4c56a65a814e48008
        Validity
            Not Before: Jan  1 12:55:02 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=243d3f3aa8427e63c70a2a4f23464ac9367cce1d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:1f:90:39:cc:88:cf:c7:41:c7:f8:f3:3e:54:
                    ad:67:3c:20:49:52:2e:c4:7f:5f:c4:f7:45:54:2a:
                    61:4c:43:e5:53:05:bb:8e:2a:1e:5a:6d:6d:9b:d3:
                    b0:ce:a8:be:5a:7f:fd:83:8b:81:75:b4:b8:3a:77:
                    73:3e:c7:d4:e9:87:37:2d:10:52:73:9e:a9:91:2d:
                    7e:6a:b6:db:1f:01:3a:fd:d5:82:36:3c:b3:29:ae:
                    f1:65:55:05:ce:b3:d6:ba:71:5f:10:f0:ee:f3:d5:
                    10:15:9d:4d:7b:09:cb:6a:60:7c:1f:f0:d6:ca:9d:
                    b3:b9:04:a3:68:a7:72:87:60:b7:1d:27:e5:67:b2:
                    a1:a1:bd:9c:ab:b2:44:25:9e:66:02:98:ac:fd:9e:
                    ff:2f:84:92:3a:9c:31:b7:56:34:11:22:45:e8:0a:
                    45:60:47:8f:b1:f6:cb:c1:1d:dd:80:31:e8:80:ac:
                    81:d1:2a:fd:3d:c5:3b:d3:8a:21:be:02:40:12:d1:
                    79:9e:75:b1:7d:6e:f5:10:7a:6a:4f:8d:e5:17:17:
                    52:29:6a:69:52:a4:41:85:e9:18:91:d5:92:c7:de:
                    0d:99:f8:6c:73:87:6a:b7:ac:30:df:b1:26:3c:1e:
                    23:a7:98:35:3d:12:ad:06:f4:a6:bf:8d:be:df:61:
                    27:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                24:3D:3F:3A:A8:42:7E:63:C7:0A:2A:4F:23:46:4A:C9:36:7C:CE:1D
            X509v3 Authority Key Identifier:
                keyid:9E:95:A3:61:FE:2B:2C:52:92:62:6B:A4:C5:6A:65:A8:14:E4:80:08

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/npWjYf4rLFKSYmukxWplqBTkgAg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/JD0_OqhCfmPHCipPI0ZKyTZ8zh0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/npWjYf4rLFKSYmukxWplqBTkgAg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a0c:9a40:8101::/48
                  2a0c:9a40:8106::/48
                  2a0c:9a40:8110::/44

    Signature Algorithm: sha256WithRSAEncryption
         5e:a2:9e:3a:1f:a3:59:6b:9e:48:b4:06:2c:a9:c3:08:f1:57:
         8f:41:7b:0b:bb:47:a7:60:41:98:0d:67:b2:07:29:94:7d:c5:
         92:26:5d:dc:59:69:ba:14:05:3c:82:01:4d:28:4e:b4:b8:6b:
         b2:6d:be:a3:c7:02:8b:96:83:17:cc:db:c3:a9:a5:1b:6f:29:
         a9:9b:ce:08:e4:bd:80:4a:ea:70:84:ce:0d:5e:a0:bc:51:01:
         58:17:e5:5e:b8:14:67:cf:46:75:c8:c5:70:6a:f3:b8:0c:a6:
         5b:26:a2:29:26:3f:b2:0d:eb:bb:bb:2c:b9:5b:4a:be:f7:46:
         f4:6b:03:e2:6c:71:f2:80:49:c2:dc:51:7f:1e:bd:e1:43:d1:
         71:b1:2c:8b:9e:4d:f1:f4:ee:31:93:18:59:18:fb:b8:85:22:
         11:5c:d7:f3:ad:9f:2d:57:81:2d:1d:0b:71:c7:2c:06:04:b4:
         26:6c:30:e1:e5:47:df:44:02:3d:ef:d7:ab:d5:fd:db:da:48:
         7c:14:40:08:3c:5a:ec:4f:de:7e:ba:41:1c:fd:aa:29:7f:21:
         8f:61:b8:18:2c:4d:60:ea:97:67:95:c2:33:73:aa:1b:ee:38:
         9e:c4:f8:38:f7:0f:f0:9a:86:26:a6:a1:a7:6d:02:6f:2a:a3:
         17:0f:fd:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----