Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9b/1e43e4-d06e-4a55-bdb6-3d91ede5b2b1/1/RCq8niJpcrhRBNd70KrFixOtZOM.roa
File:                     RCq8niJpcrhRBNd70KrFixOtZOM.roa (raw, json)
Hash identifier:          sjV03ylAvxnbLgx72zUqrObTofoUQcryzAZPAQi+tFk=
Subject key identifier:   44:2A:BC:9E:22:69:72:B8:51:04:D7:7B:D0:AA:C5:8B:13:AD:64:E3
Certificate issuer:       /CN=b8074b419ead4cefea2f2ad2c259d978c5ed7954
Certificate serial:       01847164D2847C6552348D9A4D4FF5755C34
Authority key identifier: B8:07:4B:41:9E:AD:4C:EF:EA:2F:2A:D2:C2:59:D9:78:C5:ED:79:54
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/uAdLQZ6tTO_qLyrSwlnZeMXteVQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/9b/1e43e4-d06e-4a55-bdb6-3d91ede5b2b1/1/RCq8niJpcrhRBNd70KrFixOtZOM.roa
Signing time:             Sun 13 Nov 2022 14:29:03 +0000
ROA not before:           Sun 13 Nov 2022 14:29:03 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     205602
IP address blocks:        2a06:e881:116::/48 maxlen: 48

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:84:71:64:d2:84:7c:65:52:34:8d:9a:4d:4f:f5:75:5c:34
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b8074b419ead4cefea2f2ad2c259d978c5ed7954
        Validity
            Not Before: Nov 13 14:29:03 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=442abc9e226972b85104d77bd0aac58b13ad64e3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:f9:29:64:60:e2:7a:cb:53:45:9b:57:21:92:
                    69:78:35:df:e3:6b:a1:bb:fb:cb:b9:d4:b1:58:b8:
                    ce:42:c1:c3:34:91:b8:a2:d5:0e:20:4a:21:46:9e:
                    a0:46:af:81:70:bc:a7:bd:a4:07:d1:c9:26:c3:66:
                    3b:a4:3e:09:53:08:52:2d:ab:95:5e:a1:59:b6:9d:
                    09:4f:8c:79:30:48:21:29:16:bd:14:1a:7d:4f:3b:
                    90:1b:63:71:29:fb:f0:15:37:d5:a7:b3:47:c6:42:
                    a7:42:6b:65:dd:73:0e:c4:01:2d:df:20:bf:ec:70:
                    a5:0f:73:74:35:c1:f5:b7:0f:66:d1:a9:ad:f9:6f:
                    08:3e:37:39:69:d3:76:5a:38:6a:55:29:47:ae:08:
                    61:d7:c5:c5:fd:2f:86:6c:4a:ee:68:ed:a0:7a:70:
                    8a:7b:bd:f7:be:dc:e3:b2:73:a6:e6:ee:db:4c:48:
                    11:72:c1:16:9f:d4:a9:c4:d0:41:c0:8e:06:5e:ff:
                    ce:c7:6e:99:11:6e:f5:47:ff:f6:48:b8:d1:54:e3:
                    69:89:9d:ac:2b:04:c3:a0:05:33:fb:15:69:54:a5:
                    e2:7e:06:fd:6d:44:df:de:8e:d2:e1:ee:05:59:df:
                    87:06:7f:8e:eb:00:23:37:3a:55:0e:45:1f:46:dc:
                    b9:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                44:2A:BC:9E:22:69:72:B8:51:04:D7:7B:D0:AA:C5:8B:13:AD:64:E3
            X509v3 Authority Key Identifier:
                keyid:B8:07:4B:41:9E:AD:4C:EF:EA:2F:2A:D2:C2:59:D9:78:C5:ED:79:54

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uAdLQZ6tTO_qLyrSwlnZeMXteVQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/1e43e4-d06e-4a55-bdb6-3d91ede5b2b1/1/RCq8niJpcrhRBNd70KrFixOtZOM.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/1e43e4-d06e-4a55-bdb6-3d91ede5b2b1/1/uAdLQZ6tTO_qLyrSwlnZeMXteVQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a06:e881:116::/48

    Signature Algorithm: sha256WithRSAEncryption
         73:a1:20:8a:64:7d:f2:a4:11:b9:1f:e7:a1:73:6b:2e:8e:d2:
         f7:38:a1:41:50:93:90:5b:c2:e5:8c:4d:c5:98:98:bd:0b:d5:
         74:c8:39:5d:fc:72:5b:3e:51:12:f1:6f:84:b5:47:dc:61:2a:
         ff:57:aa:08:53:e4:68:7b:6d:2e:5a:3c:1a:50:74:97:c6:94:
         cf:1b:35:ac:4d:a8:1d:17:d5:3b:cd:15:39:5c:db:26:d5:50:
         f5:2c:f4:4e:03:e1:bf:33:2f:36:56:c4:4e:52:c1:f4:49:ee:
         59:5f:91:54:f8:17:45:8a:14:cf:62:24:eb:47:64:f1:2b:3f:
         48:ac:ce:17:3d:b6:e5:31:0e:23:94:bb:ca:27:fd:52:85:db:
         2f:23:69:8d:20:ba:88:8e:61:a0:6d:b2:e7:8f:1e:e9:ef:b7:
         d1:fd:12:2f:34:91:43:80:6e:dd:d6:3c:21:8a:ab:4f:52:66:
         af:3c:28:fa:b6:ec:f5:f2:41:ea:ba:dd:7e:67:f0:ba:02:f1:
         fc:ec:bc:27:94:b7:cb:0b:77:ce:a2:2c:1a:a2:77:59:19:c3:
         88:e8:98:d7:be:8d:94:be:0a:3e:54:d3:b8:91:03:ea:02:2a:
         b4:44:e3:cf:a9:76:6a:a5:d3:48:d3:d1:98:ec:04:fc:70:61:
         a1:4b:40:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----