Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9b/91af66-d394-42fa-a0c6-b16cb4dfadd3/1/g8DlYUbNN2Ae5qkKHFlrEVtozCE.roa
File:                     g8DlYUbNN2Ae5qkKHFlrEVtozCE.roa (raw, json)
Hash identifier:          YZPlSf7zl+TakuAzMjf3Re/OJQ9KxOnJQ/j7hhQ2rug=
Subject key identifier:   83:C0:E5:61:46:CD:37:60:1E:E6:A9:0A:1C:59:6B:11:5B:68:CC:21
Certificate issuer:       /CN=827603a93bca31b018f511f6d4b0b7546e963362
Certificate serial:       0827EB70
Authority key identifier: 82:76:03:A9:3B:CA:31:B0:18:F5:11:F6:D4:B0:B7:54:6E:96:33:62
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/gnYDqTvKMbAY9RH21LC3VG6WM2I.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/9b/91af66-d394-42fa-a0c6-b16cb4dfadd3/1/g8DlYUbNN2Ae5qkKHFlrEVtozCE.roa
Signing time:             Mon 24 Jan 2022 17:18:59 +0000
ROA not before:           Mon 24 Jan 2022 17:18:59 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     1239
IP address blocks:        2a10:14c0::/29 maxlen: 29

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 136833904 (0x827eb70)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=827603a93bca31b018f511f6d4b0b7546e963362
        Validity
            Not Before: Jan 24 17:18:59 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=83c0e56146cd37601ee6a90a1c596b115b68cc21
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:18:06:d1:f5:2a:3e:3e:42:be:27:6a:d3:71:
                    ac:09:51:b0:47:9f:2a:57:f8:e1:f3:42:96:cb:bd:
                    2f:5b:11:ed:36:1b:4c:39:bb:3c:ff:55:31:aa:fb:
                    63:41:81:14:d5:0e:f5:45:eb:30:fe:69:75:2a:b1:
                    9f:8c:a4:35:43:70:72:9b:10:bc:aa:64:cc:2c:56:
                    dd:6a:0f:3f:30:d8:c9:4d:13:68:95:34:89:73:b3:
                    4e:73:c5:0d:35:10:67:b8:d8:08:eb:24:2c:2c:84:
                    b0:37:1d:eb:d3:68:df:d6:30:80:a4:96:67:52:e1:
                    85:9c:c2:10:4f:e5:48:e3:1e:b0:65:73:a0:30:10:
                    8a:d0:38:2d:56:92:ef:15:e8:62:0b:ab:5b:22:dd:
                    ad:bc:96:d8:36:4b:f4:52:2c:d4:e4:1a:06:c4:d1:
                    ec:dd:bc:d5:f8:ea:27:51:15:0e:72:a1:85:90:49:
                    aa:4f:08:36:43:41:a0:67:27:e1:90:24:55:c9:f1:
                    bf:64:e5:01:40:7a:b5:1a:b9:16:6a:76:c9:08:c1:
                    56:3f:aa:d4:87:c4:8b:6a:de:54:68:05:2e:d3:d3:
                    8b:31:4c:e5:85:41:c0:bf:50:5c:3f:34:3e:b8:a8:
                    5a:f0:c4:c8:04:1f:d5:f8:50:4d:ec:57:b6:88:ac:
                    b1:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                83:C0:E5:61:46:CD:37:60:1E:E6:A9:0A:1C:59:6B:11:5B:68:CC:21
            X509v3 Authority Key Identifier:
                keyid:82:76:03:A9:3B:CA:31:B0:18:F5:11:F6:D4:B0:B7:54:6E:96:33:62

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gnYDqTvKMbAY9RH21LC3VG6WM2I.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/91af66-d394-42fa-a0c6-b16cb4dfadd3/1/g8DlYUbNN2Ae5qkKHFlrEVtozCE.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/91af66-d394-42fa-a0c6-b16cb4dfadd3/1/gnYDqTvKMbAY9RH21LC3VG6WM2I.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a10:14c0::/29

    Signature Algorithm: sha256WithRSAEncryption
         33:c7:7b:8a:ae:f5:ee:2d:a0:76:e1:fe:d9:e1:8b:59:3c:70:
         b4:bb:cc:b7:f8:d6:90:a2:97:e2:ef:42:3b:9c:8a:3f:2f:6e:
         b0:ae:6b:51:71:7a:3e:76:45:10:9d:1d:97:db:98:dd:f1:67:
         83:71:10:ff:68:09:48:62:06:97:91:b8:fa:32:76:4e:de:ff:
         a5:35:99:42:3a:3b:3b:68:47:a0:96:30:69:c4:f9:70:4a:6f:
         d3:2b:4f:44:cb:47:43:4d:22:42:68:68:7c:c0:3a:d1:0b:e1:
         bd:95:d2:b6:6d:a3:33:0d:88:04:11:0d:aa:da:5b:45:42:ae:
         2f:a2:57:6e:4c:18:69:d4:5f:76:6c:7a:35:17:1d:73:c1:ae:
         59:4e:86:7d:b5:c9:06:dc:07:b3:3a:2f:de:06:7f:e8:d5:d0:
         5c:15:49:a8:43:63:a4:18:01:d8:6c:ad:7c:b6:db:ac:95:77:
         3d:ef:10:d2:c2:6a:05:04:2a:f3:ab:ac:d5:cf:31:ec:44:ff:
         8e:c9:59:b3:54:4d:b0:2e:c9:dd:d1:9f:e9:a5:00:a1:4f:0b:
         b5:7b:b1:05:04:05:3a:7f:0d:e2:6d:d8:26:f9:72:d0:d4:90:
         2e:eb:85:32:e3:97:76:6e:0a:bb:89:3e:81:b5:2d:15:48:21:
         fb:7b:22:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----