Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/62/70bf8b-d8c4-40c3-9022-63348cdbf024/1/J9ttbx8w5ONTtbdjzjc46xl1gHc.roa
File:                     J9ttbx8w5ONTtbdjzjc46xl1gHc.roa (raw, json)
Hash identifier:          2aFk7sV77VUYv7E8TNNPrOj6OkW+LB4+cZUYSOZBiG4=
Subject key identifier:   27:DB:6D:6F:1F:30:E4:E3:53:B5:B7:63:CE:37:38:EB:19:75:80:77
Certificate issuer:       /CN=8e1c11658d2041eaf2502fe5408ed493bbd4f318
Certificate serial:       018414DE57A6630D38632CEA624C668C5F69
Authority key identifier: 8E:1C:11:65:8D:20:41:EA:F2:50:2F:E5:40:8E:D4:93:BB:D4:F3:18
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/jhwRZY0gQeryUC_lQI7Uk7vU8xg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/62/70bf8b-d8c4-40c3-9022-63348cdbf024/1/J9ttbx8w5ONTtbdjzjc46xl1gHc.roa
Signing time:             Wed 26 Oct 2022 15:17:06 +0000
ROA not before:           Wed 26 Oct 2022 15:17:06 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     212477
IP address blocks:        45.91.116.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:84:14:de:57:a6:63:0d:38:63:2c:ea:62:4c:66:8c:5f:69
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8e1c11658d2041eaf2502fe5408ed493bbd4f318
        Validity
            Not Before: Oct 26 15:17:06 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=27db6d6f1f30e4e353b5b763ce3738eb19758077
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:34:ce:1a:ba:36:64:33:f6:96:d2:ac:3d:cb:
                    e7:fc:1f:91:1e:0f:08:41:ff:f1:db:27:38:94:43:
                    7f:fc:0c:e9:52:24:1f:29:3f:b4:ab:f6:ae:43:cc:
                    a9:da:5a:0a:b1:c4:97:94:dc:67:11:16:a7:3c:9b:
                    78:7c:f3:98:ff:56:c4:f4:e1:b2:f3:59:eb:93:04:
                    51:85:e9:bb:27:7f:0b:a8:b1:0f:dd:ee:5e:65:83:
                    d9:24:46:07:92:06:52:ab:fb:99:61:eb:f6:96:da:
                    df:b1:eb:2b:4e:3d:21:41:24:d3:e2:05:24:f4:48:
                    4a:f2:da:d5:98:81:ce:96:a3:7e:0a:f9:e0:6d:a3:
                    b4:51:f3:d0:3c:1d:18:b5:68:54:62:6a:fb:22:94:
                    91:52:5e:1d:d1:f4:07:54:e2:1b:aa:f1:4a:61:da:
                    80:c2:01:14:ee:3c:39:d3:12:fa:a6:9c:eb:83:81:
                    64:d9:90:46:c4:0b:f6:84:47:0d:2f:10:6c:9e:bc:
                    3e:8d:42:45:1d:03:4c:b7:77:0f:45:08:20:87:72:
                    5c:3b:56:f3:cd:ea:c9:51:bf:76:1d:dd:5d:e1:9c:
                    7e:85:4a:d8:31:d4:15:d1:a1:63:ce:66:8c:3d:20:
                    01:f9:0d:27:d8:88:9c:59:3e:d3:83:26:97:52:b8:
                    df:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                27:DB:6D:6F:1F:30:E4:E3:53:B5:B7:63:CE:37:38:EB:19:75:80:77
            X509v3 Authority Key Identifier:
                keyid:8E:1C:11:65:8D:20:41:EA:F2:50:2F:E5:40:8E:D4:93:BB:D4:F3:18

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jhwRZY0gQeryUC_lQI7Uk7vU8xg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/70bf8b-d8c4-40c3-9022-63348cdbf024/1/J9ttbx8w5ONTtbdjzjc46xl1gHc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/62/70bf8b-d8c4-40c3-9022-63348cdbf024/1/jhwRZY0gQeryUC_lQI7Uk7vU8xg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.91.116.0/24

    Signature Algorithm: sha256WithRSAEncryption
         1b:a1:04:ad:fe:62:3c:74:69:0f:72:c5:bc:00:bb:37:b7:d7:
         af:b6:1b:0a:ca:a3:28:67:4f:de:79:ee:7b:9f:c5:4d:d5:3d:
         d6:7f:38:3a:52:b6:d4:8d:60:12:8e:55:25:72:de:68:64:2b:
         38:cc:99:ab:0e:39:92:09:9a:06:40:8b:35:60:4e:67:1e:96:
         64:35:0f:d1:06:0a:1d:ec:17:19:38:df:3c:48:c3:99:a2:05:
         69:3b:85:5f:d0:18:99:30:42:fd:57:25:af:8a:33:25:9b:f6:
         30:ef:a9:fa:75:14:da:98:96:86:bc:ce:7a:c3:50:12:3d:da:
         58:e5:2c:30:07:c3:62:25:dd:c6:c0:e5:6d:1c:f7:53:bc:14:
         b3:b9:74:80:a3:d9:62:f9:12:58:95:ab:44:f4:c1:b9:59:d8:
         58:27:1d:ea:64:c5:b0:f2:15:2e:f2:d4:a5:e2:87:34:0d:25:
         11:d2:54:20:4c:36:e6:d5:1a:d0:77:d3:c0:b1:c3:7f:88:bd:
         b5:4f:76:88:2b:b9:35:82:14:dd:3a:1c:8c:2a:d8:6d:62:42:
         85:d8:e7:4b:95:b3:62:54:fe:92:1e:f9:df:04:36:ae:c8:cd:
         cb:28:d8:2b:52:c7:81:92:44:8e:9f:66:75:4f:b0:f7:d1:13:
         e8:15:33:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----