Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7f/72bf2f-8e34-48a2-849a-a541d1bcee19/1/GozqOKmtikRO4fyngtiFHdKOHYo.roa
File:                     GozqOKmtikRO4fyngtiFHdKOHYo.roa (raw, json)
Hash identifier:          e+cUzKDTlUH05a4Yok9U0B30g9AgjqyKDkSSo0qUAAQ=
Subject key identifier:   1A:8C:EA:38:A9:AD:8A:44:4E:E1:FC:A7:82:D8:85:1D:D2:8E:1D:8A
Certificate issuer:       /CN=9361b5cd696825b74fccba7d97c3d0a2724ef3aa
Certificate serial:       0967AFE4
Authority key identifier: 93:61:B5:CD:69:68:25:B7:4F:CC:BA:7D:97:C3:D0:A2:72:4E:F3:AA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/k2G1zWloJbdPzLp9l8PQonJO86o.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/7f/72bf2f-8e34-48a2-849a-a541d1bcee19/1/GozqOKmtikRO4fyngtiFHdKOHYo.roa
Signing time:             Sat 01 Jan 2022 09:03:55 +0000
ROA not before:           Sat 01 Jan 2022 09:03:55 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     205591
IP address blocks:        2a0e:aa01:bad0::/44 maxlen: 48

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 157790180 (0x967afe4)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9361b5cd696825b74fccba7d97c3d0a2724ef3aa
        Validity
            Not Before: Jan  1 09:03:55 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=1a8cea38a9ad8a444ee1fca782d8851dd28e1d8a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:33:a4:bf:32:d4:7c:d0:e2:29:57:79:b9:53:
                    2a:a5:cc:ea:28:0e:5a:8e:e2:19:52:3b:89:c3:92:
                    25:f6:4c:53:14:b6:68:ff:d6:3c:62:da:be:78:c9:
                    e4:2f:96:b6:f6:f2:23:47:7c:8e:fc:57:ca:77:bc:
                    f2:58:b3:d2:66:11:a9:8f:2d:08:7e:e3:29:6c:f3:
                    78:07:63:6b:c7:79:2f:9e:ef:88:da:33:15:c2:25:
                    44:a6:ad:58:2c:80:77:a1:aa:77:93:53:00:e0:6d:
                    fc:46:02:88:b3:ce:2f:d9:0b:18:4d:8d:b0:36:da:
                    ae:d1:8f:98:c1:b7:c8:3f:1e:fc:78:34:eb:af:25:
                    78:db:6b:25:07:21:b7:b7:af:80:f5:8e:83:ba:4e:
                    aa:92:58:71:54:92:ee:89:28:50:7a:79:df:c7:9d:
                    4d:e9:b3:63:9f:3a:8e:6f:40:b9:f2:f5:43:3d:1c:
                    64:27:e1:4c:87:43:5e:d0:af:f0:7c:f0:2c:f3:2a:
                    74:ba:60:89:db:c5:cb:c4:78:f3:bf:07:18:7b:c5:
                    6f:ac:80:b4:8f:a3:eb:0b:e6:4a:78:af:68:ff:70:
                    c0:a0:1e:05:74:b5:f7:44:84:e2:c5:c4:17:59:04:
                    cb:b9:9c:09:6a:e8:ae:89:68:da:bf:8f:e4:37:a6:
                    3e:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1A:8C:EA:38:A9:AD:8A:44:4E:E1:FC:A7:82:D8:85:1D:D2:8E:1D:8A
            X509v3 Authority Key Identifier:
                keyid:93:61:B5:CD:69:68:25:B7:4F:CC:BA:7D:97:C3:D0:A2:72:4E:F3:AA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/k2G1zWloJbdPzLp9l8PQonJO86o.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/72bf2f-8e34-48a2-849a-a541d1bcee19/1/GozqOKmtikRO4fyngtiFHdKOHYo.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/72bf2f-8e34-48a2-849a-a541d1bcee19/1/k2G1zWloJbdPzLp9l8PQonJO86o.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a0e:aa01:bad0::/44

    Signature Algorithm: sha256WithRSAEncryption
         8d:7a:f1:b5:bd:af:51:75:69:1e:cc:d3:26:d3:e2:f3:28:cd:
         bf:fb:84:7e:ec:cf:28:1a:79:03:b2:ed:76:a5:51:38:f1:a4:
         42:ac:bb:55:5f:b6:0e:1e:09:4e:60:05:42:44:89:58:d2:fe:
         60:be:9a:3d:c0:7f:32:13:46:7f:74:d6:3d:0d:fe:cf:81:39:
         2a:f4:a4:c6:eb:84:6b:d0:8f:9d:7b:02:45:98:d1:e1:18:f0:
         f7:e3:48:b7:1e:15:c6:d7:64:5d:e4:5b:28:dd:e2:46:7a:1f:
         e7:25:b9:af:5b:b4:41:78:ad:7c:8e:43:00:f1:10:7b:91:48:
         09:cf:61:e6:8c:4d:37:b9:12:7b:c9:76:52:55:fb:0d:36:6b:
         3c:39:f3:2d:56:4a:89:1c:11:55:a5:e0:3a:ef:f3:9f:d4:e9:
         bf:e7:40:60:08:4b:b7:32:89:07:96:db:a0:f5:2b:cd:bc:c8:
         40:fe:02:c1:6e:f9:56:bb:a9:be:57:c4:8b:fc:f4:f3:b2:48:
         f4:22:c0:e9:c6:da:60:5c:3a:b3:da:95:19:d5:3f:fe:42:88:
         f7:d4:bc:f2:51:3c:6c:08:47:fd:b7:52:17:6c:ab:fa:83:6e:
         7b:06:b4:ea:0b:01:70:18:5c:c7:fa:1f:68:56:15:33:94:31:
         6e:f9:50:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----