Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/62/70bf8b-d8c4-40c3-9022-63348cdbf024/1/JxqkPFBoYH8uI1p8_awRO25a9Mw.roa
File:                     JxqkPFBoYH8uI1p8_awRO25a9Mw.roa (raw, json)
Hash identifier:          Us2auW2ud2TRlOCyxO+xAjM3MHU3+a1pU5Id38jo22w=
Subject key identifier:   27:1A:A4:3C:50:68:60:7F:2E:23:5A:7C:FD:AC:11:3B:6E:5A:F4:CC
Certificate issuer:       /CN=8e1c11658d2041eaf2502fe5408ed493bbd4f318
Certificate serial:       01848B2128685F1CEDDBF21F6A223FE496B7
Authority key identifier: 8E:1C:11:65:8D:20:41:EA:F2:50:2F:E5:40:8E:D4:93:BB:D4:F3:18
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/jhwRZY0gQeryUC_lQI7Uk7vU8xg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/62/70bf8b-d8c4-40c3-9022-63348cdbf024/1/JxqkPFBoYH8uI1p8_awRO25a9Mw.roa
Signing time:             Fri 18 Nov 2022 14:25:16 +0000
ROA not before:           Fri 18 Nov 2022 14:25:16 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     8452
IP address blocks:        2a0e:4200::/32 maxlen: 32

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:84:8b:21:28:68:5f:1c:ed:db:f2:1f:6a:22:3f:e4:96:b7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8e1c11658d2041eaf2502fe5408ed493bbd4f318
        Validity
            Not Before: Nov 18 14:25:16 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=271aa43c5068607f2e235a7cfdac113b6e5af4cc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:35:5c:67:83:68:3a:ed:d3:0c:5a:ae:13:43:
                    6a:4b:a5:ec:0f:6f:c9:18:69:54:f1:c2:f1:ac:ea:
                    c4:ee:f4:2c:bc:ad:e3:41:4b:6c:b1:6f:ee:2f:b1:
                    19:3c:71:fe:8b:83:60:e3:7a:bc:0e:ec:7a:ee:a9:
                    b0:24:85:a7:9e:32:f2:e2:c9:6b:ab:ea:0c:75:23:
                    ea:7c:83:c3:59:32:45:c4:51:8c:eb:a0:86:1a:cc:
                    70:e9:bb:86:a2:4b:45:fa:73:3d:cf:de:be:48:e0:
                    55:cb:07:98:f9:c5:ba:1b:2d:a7:36:05:06:81:9a:
                    4e:d0:22:6c:26:b4:f3:98:fd:78:48:8a:22:02:3f:
                    12:76:8b:e7:b9:ea:d2:85:ee:23:78:ca:55:7e:71:
                    0b:03:35:31:ee:3a:85:8e:8b:1b:a4:7d:4f:15:b7:
                    2c:d3:3a:fe:b8:92:c9:2a:de:96:9a:c2:cb:8d:c6:
                    37:bc:56:80:d9:47:d0:1e:82:35:15:fa:fd:37:94:
                    60:36:d2:1a:84:56:12:b2:0d:88:46:c7:00:85:a9:
                    00:ac:b0:44:1b:70:aa:33:a8:91:a9:b1:95:13:33:
                    9f:a9:26:56:96:86:0b:5b:56:0e:d4:57:a1:0b:e8:
                    e1:e6:0f:ff:36:13:71:31:13:0b:60:e5:1e:25:52:
                    14:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                27:1A:A4:3C:50:68:60:7F:2E:23:5A:7C:FD:AC:11:3B:6E:5A:F4:CC
            X509v3 Authority Key Identifier:
                keyid:8E:1C:11:65:8D:20:41:EA:F2:50:2F:E5:40:8E:D4:93:BB:D4:F3:18

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jhwRZY0gQeryUC_lQI7Uk7vU8xg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/70bf8b-d8c4-40c3-9022-63348cdbf024/1/JxqkPFBoYH8uI1p8_awRO25a9Mw.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/62/70bf8b-d8c4-40c3-9022-63348cdbf024/1/jhwRZY0gQeryUC_lQI7Uk7vU8xg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a0e:4200::/32

    Signature Algorithm: sha256WithRSAEncryption
         8c:64:0a:02:79:a1:7d:45:9f:e2:e7:a6:6e:d3:7d:b0:b7:ac:
         46:34:ac:5a:19:c3:0c:38:1e:75:93:0e:da:00:97:93:2e:a8:
         2f:1c:05:3c:4b:85:e0:fb:9b:df:f9:33:0b:6d:1c:a2:c7:29:
         64:a6:23:ae:3f:d0:2f:c9:ea:d0:e3:31:65:a8:f6:07:d7:b6:
         17:66:36:82:67:06:6c:fe:0b:9a:59:c2:0c:07:f1:47:75:53:
         14:1c:3e:73:2b:ba:fb:66:44:55:db:3e:e2:92:b8:aa:db:2b:
         a4:f4:ea:77:cc:ad:ea:68:0b:ea:a8:53:44:46:08:43:9d:e9:
         3b:06:21:e2:93:7d:41:9a:0d:cd:62:65:c6:5e:6b:a5:51:80:
         00:2d:66:54:4d:1d:37:dd:36:1c:25:bf:ac:83:76:a3:ac:5b:
         72:ef:a3:34:69:51:39:21:8b:c6:29:14:19:75:09:c7:42:0e:
         57:8a:c4:2d:2d:a3:0b:50:9d:d1:df:c3:39:c9:12:d3:e8:36:
         c0:80:61:44:9f:11:c6:bb:a3:36:4c:e4:95:51:b5:31:96:e5:
         cd:46:eb:12:f7:68:29:50:a8:2a:18:e5:09:6b:d7:92:c5:5d:
         a2:c9:a3:b0:da:28:70:a4:ce:c9:cf:69:2e:98:b0:46:7a:9b:
         89:47:af:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----