Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/96/7290d5-1ed5-4ca1-96fd-bfc73dd0bbb6/1/c-u0dQ4JcV7dOm1Fhy7hj0zA_Ec.roa
File:                     c-u0dQ4JcV7dOm1Fhy7hj0zA_Ec.roa (raw, json)
Hash identifier:          Z8UW01WZd9EWLUTrtD6zih4FpmvOJu8ck5/1Dfbfz4A=
Subject key identifier:   73:EB:B4:75:0E:09:71:5E:DD:3A:6D:45:87:2E:E1:8F:4C:C0:FC:47
Certificate issuer:       /CN=9b86bd882e476e4698318f370712f71c2bf50dfc
Certificate serial:       018506BA08FEC016B1D866E734D5D839B297
Authority key identifier: 9B:86:BD:88:2E:47:6E:46:98:31:8F:37:07:12:F7:1C:2B:F5:0D:FC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/m4a9iC5HbkaYMY83BxL3HCv1Dfw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/96/7290d5-1ed5-4ca1-96fd-bfc73dd0bbb6/1/c-u0dQ4JcV7dOm1Fhy7hj0zA_Ec.roa
Signing time:             Mon 12 Dec 2022 14:25:33 +0000
ROA not before:           Mon 12 Dec 2022 14:25:33 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     201612
IP address blocks:        2001:67c:10e0::/48 maxlen: 48

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:06:ba:08:fe:c0:16:b1:d8:66:e7:34:d5:d8:39:b2:97
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9b86bd882e476e4698318f370712f71c2bf50dfc
        Validity
            Not Before: Dec 12 14:25:33 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=73ebb4750e09715edd3a6d45872ee18f4cc0fc47
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:1b:bd:4a:f4:a1:95:6a:79:93:af:ed:b9:b2:
                    6d:62:e8:10:1e:c4:71:9a:8d:83:64:8b:73:cd:cc:
                    ea:22:13:2c:cb:1c:9c:e1:1f:44:05:4c:79:f4:08:
                    93:98:9c:79:62:ba:03:3b:a5:4f:79:95:57:26:9d:
                    bc:1e:59:a5:1c:47:4f:5e:52:96:a7:47:ed:0c:c6:
                    ff:6e:96:90:52:0b:4f:83:83:5f:45:06:c4:9c:e6:
                    04:39:f3:e8:96:88:a1:4f:14:7b:1f:61:9b:25:53:
                    3b:09:0c:20:74:55:1c:e5:09:40:e9:41:9a:c2:f1:
                    33:5f:de:bb:d3:6e:77:bc:56:95:48:a8:28:c7:e5:
                    15:f8:4a:15:7c:da:35:6b:29:bf:fd:53:57:c7:b0:
                    b4:29:50:60:7e:53:81:db:d1:7f:c0:f9:95:4d:20:
                    de:23:d7:fc:1c:42:88:01:f2:31:e2:61:de:3c:97:
                    c7:4d:7e:fb:d2:70:b0:0a:d9:b3:0e:9a:6c:7c:7d:
                    e9:37:f5:48:70:b9:63:8d:97:6f:f5:68:27:2b:64:
                    a1:fd:0d:9e:43:8e:9b:ef:50:11:69:e2:f7:4b:1e:
                    7c:6f:77:77:df:0e:b2:12:21:0b:d3:d5:28:3e:67:
                    eb:62:3f:a3:9d:a1:f8:4e:5b:af:0d:1e:46:c9:36:
                    0b:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                73:EB:B4:75:0E:09:71:5E:DD:3A:6D:45:87:2E:E1:8F:4C:C0:FC:47
            X509v3 Authority Key Identifier:
                keyid:9B:86:BD:88:2E:47:6E:46:98:31:8F:37:07:12:F7:1C:2B:F5:0D:FC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/m4a9iC5HbkaYMY83BxL3HCv1Dfw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/96/7290d5-1ed5-4ca1-96fd-bfc73dd0bbb6/1/c-u0dQ4JcV7dOm1Fhy7hj0zA_Ec.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/96/7290d5-1ed5-4ca1-96fd-bfc73dd0bbb6/1/m4a9iC5HbkaYMY83BxL3HCv1Dfw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:67c:10e0::/48

    Signature Algorithm: sha256WithRSAEncryption
         5a:2d:cf:4e:47:ac:50:c2:43:d6:70:c6:63:e4:7d:c2:cc:bc:
         95:91:19:21:2c:5c:03:9f:a2:e7:66:cf:d6:93:0e:5e:e8:42:
         a4:fd:6a:75:99:01:b7:c0:ff:2c:bb:a1:e7:39:b0:1a:a4:4c:
         2a:66:46:16:89:c0:cd:c9:04:e4:09:bb:b4:b5:2a:17:93:9d:
         91:7c:c8:7c:43:f4:23:12:6d:66:13:c4:0d:ef:bf:9a:c3:6a:
         2e:67:ca:97:4e:ad:51:4f:92:da:32:c0:62:77:46:4c:d5:36:
         4f:d1:b6:0a:9c:e0:b0:ff:60:b8:64:19:0d:51:4c:1a:9e:81:
         3f:44:9b:80:d9:eb:9b:ff:8d:a9:8e:11:50:6d:3c:68:a8:17:
         25:e4:19:8d:f1:23:52:20:59:27:32:e6:ba:8a:77:ad:f8:df:
         30:c5:78:f8:0b:c7:81:d0:00:df:92:15:9c:0e:c6:c4:66:76:
         2f:49:23:df:3e:b8:c2:30:f0:3d:1a:6e:f2:b9:3f:8d:ce:19:
         53:08:53:f5:cc:ae:2d:59:2c:37:4a:d3:1b:ae:94:21:fd:d9:
         e8:38:90:4c:00:8f:92:e1:dc:2c:d4:5f:ce:ea:60:32:c5:33:
         2d:7d:43:d1:54:1f:b9:28:ce:d0:44:9f:78:5d:d7:e7:95:be:
         bc:fd:f3:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----