Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/20/9488c7-849c-4ff1-ab4c-ae9283e7964e/1/hINqYnj-Z8jLQaW6mJs6pqlu7Z0.roa
File:                     hINqYnj-Z8jLQaW6mJs6pqlu7Z0.roa (raw, json)
Hash identifier:          c3MwI6Efv5DQp6lZ+8tp2Xj1FimcEFLES0sOs7uDS0A=
Subject key identifier:   84:83:6A:62:78:FE:67:C8:CB:41:A5:BA:98:9B:3A:A6:A9:6E:ED:9D
Certificate issuer:       /CN=4a6d2817491dd2cd0678068e35a9efc68667df02
Certificate serial:       01855D3F0EA39E882271C745E67CC892FCEE
Authority key identifier: 4A:6D:28:17:49:1D:D2:CD:06:78:06:8E:35:A9:EF:C6:86:67:DF:02
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Sm0oF0kd0s0GeAaONanvxoZn3wI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/20/9488c7-849c-4ff1-ab4c-ae9283e7964e/1/hINqYnj-Z8jLQaW6mJs6pqlu7Z0.roa
Signing time:             Thu 29 Dec 2022 09:38:11 +0000
ROA not before:           Thu 29 Dec 2022 09:38:11 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     47484
IP address blocks:        2a10:4646:6::/48 maxlen: 48

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:5d:3f:0e:a3:9e:88:22:71:c7:45:e6:7c:c8:92:fc:ee
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4a6d2817491dd2cd0678068e35a9efc68667df02
        Validity
            Not Before: Dec 29 09:38:11 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=84836a6278fe67c8cb41a5ba989b3aa6a96eed9d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:14:41:52:bb:20:68:93:33:c4:b5:a7:27:b6:
                    62:12:57:3f:d4:4a:5b:ca:7e:8c:eb:b8:41:26:ca:
                    40:a9:88:68:23:5e:63:ac:e0:99:ee:03:38:54:84:
                    57:b8:7c:cc:3a:0e:60:10:75:99:75:99:7f:b4:d9:
                    14:ca:e1:6f:22:2e:b7:aa:86:73:0c:b6:25:cc:66:
                    93:9d:d4:9b:31:d8:db:5e:e7:a6:72:68:70:d5:32:
                    86:6d:d3:39:83:71:54:b9:0f:96:a9:6f:e7:a8:04:
                    13:48:b4:f4:48:6a:fd:20:91:05:4d:73:22:8a:73:
                    42:d0:33:64:91:7e:85:a1:3d:76:f4:94:0c:d4:e3:
                    97:fa:0c:b0:d8:bf:0c:7b:93:4f:d7:6b:81:ea:78:
                    24:79:90:25:c1:68:49:19:26:fe:7b:5b:19:e7:e0:
                    67:5c:71:e7:e2:c2:5e:50:aa:46:42:fc:cd:9e:43:
                    15:08:d1:24:21:7a:bc:42:1d:33:ac:eb:d6:52:bd:
                    a9:cb:2a:68:cb:e3:02:fb:97:49:7e:5c:10:73:fa:
                    70:22:9f:d8:e5:a8:96:33:9a:89:3c:c1:31:04:b4:
                    58:5a:b9:61:d5:9c:2f:06:60:87:f4:58:79:66:22:
                    23:da:94:05:c0:c5:55:b5:b8:b8:fd:bd:0c:8d:68:
                    79:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                84:83:6A:62:78:FE:67:C8:CB:41:A5:BA:98:9B:3A:A6:A9:6E:ED:9D
            X509v3 Authority Key Identifier:
                keyid:4A:6D:28:17:49:1D:D2:CD:06:78:06:8E:35:A9:EF:C6:86:67:DF:02

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Sm0oF0kd0s0GeAaONanvxoZn3wI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/20/9488c7-849c-4ff1-ab4c-ae9283e7964e/1/hINqYnj-Z8jLQaW6mJs6pqlu7Z0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/20/9488c7-849c-4ff1-ab4c-ae9283e7964e/1/Sm0oF0kd0s0GeAaONanvxoZn3wI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a10:4646:6::/48

    Signature Algorithm: sha256WithRSAEncryption
         c9:1f:49:6d:9c:5d:e9:50:ff:12:9f:0a:db:0e:b2:b6:15:8e:
         e2:3a:8f:52:d5:4d:12:64:2d:2d:44:e3:49:f8:b6:8f:ab:f8:
         ef:db:f2:3f:36:3e:a6:92:4a:12:5a:d3:19:82:17:38:0a:5c:
         3b:60:fc:f9:45:26:b0:5c:8b:2b:13:79:00:b6:44:a2:7a:a9:
         19:13:a2:c9:f4:fe:4a:00:58:48:37:60:67:1a:16:f8:1e:10:
         d1:42:e6:62:ce:1e:fd:b2:81:98:73:2f:f2:f4:3f:09:e5:f2:
         dc:9f:d9:9b:a0:e7:b1:86:76:f9:d5:41:d3:97:fd:40:d1:d8:
         07:d1:9c:84:87:02:23:28:98:ef:6d:e9:52:2e:0f:ef:dd:e1:
         36:d2:3c:1f:8e:e7:33:3b:7b:a6:80:18:2c:3c:c8:d9:df:70:
         14:84:63:e5:3e:d0:49:75:20:e6:10:5b:62:81:d3:0f:93:70:
         a5:ea:42:6e:49:f5:ea:0e:00:68:01:cb:6b:c7:39:89:91:1f:
         36:f1:28:52:97:e8:b5:bc:cd:a6:3b:c0:89:92:94:e2:59:50:
         7a:fe:1f:32:6f:fe:02:4b:5f:00:51:04:a9:ce:32:14:a4:8b:
         05:cc:20:16:72:a8:2e:c1:30:c9:12:54:8e:54:dd:a0:4f:f6:
         59:8d:eb:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----