Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9b/91af66-d394-42fa-a0c6-b16cb4dfadd3/1/j9QF2H47ydyK2_yW6lf_1yy1oiw.roa
File:                     j9QF2H47ydyK2_yW6lf_1yy1oiw.roa (raw, json)
Hash identifier:          61afhTuvjZgp19PrMipvdbvFgUqQkkjcpfvGuTgMGak=
Subject key identifier:   8F:D4:05:D8:7E:3B:C9:DC:8A:DB:FC:96:EA:57:FF:D7:2C:B5:A2:2C
Certificate issuer:       /CN=827603a93bca31b018f511f6d4b0b7546e963362
Certificate serial:       092D84A5
Authority key identifier: 82:76:03:A9:3B:CA:31:B0:18:F5:11:F6:D4:B0:B7:54:6E:96:33:62
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/gnYDqTvKMbAY9RH21LC3VG6WM2I.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/9b/91af66-d394-42fa-a0c6-b16cb4dfadd3/1/j9QF2H47ydyK2_yW6lf_1yy1oiw.roa
Signing time:             Sun 01 May 2022 09:30:51 +0000
ROA not before:           Sun 01 May 2022 09:30:51 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     210107
IP address blocks:        2a10:f40::/29 maxlen: 32

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 153978021 (0x92d84a5)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=827603a93bca31b018f511f6d4b0b7546e963362
        Validity
            Not Before: May  1 09:30:51 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=8fd405d87e3bc9dc8adbfc96ea57ffd72cb5a22c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:f5:fa:b9:ae:9e:30:b0:44:1a:65:98:23:9c:
                    64:ec:b6:2f:18:4b:8a:dd:c1:4a:a2:d0:a0:22:31:
                    52:ab:2a:8b:8a:f3:f2:88:1b:cf:8e:ed:a5:e0:b1:
                    85:5a:51:c1:03:b9:d8:08:b3:07:c7:c2:77:99:e0:
                    3f:ee:73:d2:82:a6:ae:fa:9a:80:8d:ba:c3:32:14:
                    94:f0:0d:11:46:00:28:0e:c7:e6:e2:58:f7:e4:9c:
                    29:42:4a:ed:66:fe:f2:08:76:3d:ce:5f:95:21:2c:
                    ef:19:94:ae:08:29:f7:c1:e5:a9:3a:cd:9c:52:56:
                    08:73:08:68:64:12:1e:f7:69:3c:f8:3a:73:af:ee:
                    6d:d4:89:7e:74:58:46:de:35:f2:fd:4f:da:c0:84:
                    10:3a:d4:d6:46:73:d6:02:3f:e2:cd:2b:e9:d1:14:
                    63:1b:cd:06:ee:40:c0:50:1e:da:38:fc:47:ba:d3:
                    d5:be:34:65:66:a3:b9:60:6c:b0:c1:72:2f:44:a2:
                    39:e9:75:c2:27:c9:92:b2:82:a0:19:d1:58:64:eb:
                    d4:00:96:d6:7f:4f:b4:4d:11:42:b9:a1:d7:2e:8c:
                    33:d2:2c:f6:71:40:9a:3a:f8:01:1c:b7:e6:bb:b2:
                    c8:3f:ed:6b:d3:e9:b3:0f:8a:af:06:2f:a9:00:02:
                    2a:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8F:D4:05:D8:7E:3B:C9:DC:8A:DB:FC:96:EA:57:FF:D7:2C:B5:A2:2C
            X509v3 Authority Key Identifier:
                keyid:82:76:03:A9:3B:CA:31:B0:18:F5:11:F6:D4:B0:B7:54:6E:96:33:62

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gnYDqTvKMbAY9RH21LC3VG6WM2I.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/91af66-d394-42fa-a0c6-b16cb4dfadd3/1/j9QF2H47ydyK2_yW6lf_1yy1oiw.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/91af66-d394-42fa-a0c6-b16cb4dfadd3/1/gnYDqTvKMbAY9RH21LC3VG6WM2I.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a10:f40::/29

    Signature Algorithm: sha256WithRSAEncryption
         20:ef:9e:28:1a:50:93:54:92:d1:6c:4b:ea:b3:87:29:2d:ed:
         f0:7e:67:99:9e:74:f0:2b:88:51:8e:22:a9:f2:4a:21:85:3b:
         47:a7:a6:bc:c1:28:2d:7a:b6:a2:50:91:c4:4d:de:3d:dd:36:
         47:a1:80:61:e1:d2:66:10:23:be:38:08:49:d1:f1:e0:ec:19:
         08:81:a5:b7:a1:ac:94:13:d6:51:82:b4:f1:b3:ae:40:f8:5c:
         1c:3c:ed:3a:1b:2c:2d:01:43:62:55:44:2c:71:c9:5f:a5:6a:
         69:ce:e3:8c:62:1b:4b:07:d3:e0:66:67:72:8b:8d:1b:7f:bc:
         d7:2a:fe:9f:a6:a9:cc:d8:16:88:5f:a1:13:1d:e6:a7:61:e1:
         34:88:5f:42:3e:43:4c:96:fd:c8:e4:a1:71:68:77:23:48:e4:
         d1:5d:10:4c:ba:8a:b4:a5:64:ce:89:62:a5:bd:95:24:a1:f0:
         04:28:c1:9e:33:f2:2a:bb:c1:64:18:e5:18:d5:08:a8:6c:bc:
         03:f5:42:24:b4:c7:fe:df:a8:7e:2e:c6:5f:c8:72:ac:da:8e:
         fa:fc:c1:8f:89:ba:6d:37:db:66:e0:bb:c5:37:d7:83:4d:67:
         7b:a2:18:9f:9b:86:2d:7f:02:3a:ec:25:8e:4a:a9:ae:00:57:
         a2:45:67:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----