Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a9/6b0798-3d4f-40e6-b739-cc1c9b5f6640/1/8V7ATul1QUC8qsWR9FE0mAGNiTc.roa
File:                     8V7ATul1QUC8qsWR9FE0mAGNiTc.roa (raw, json)
Hash identifier:          9fcUPXPZCiGGSIIEzCBnioYKv/rbuvruhDI6sMNTPP4=
Subject key identifier:   F1:5E:C0:4E:E9:75:41:40:BC:AA:C5:91:F4:51:34:98:01:8D:89:37
Certificate issuer:       /CN=4a644c1156851803f37adeec0876ccf989d5aef0
Certificate serial:       01839AAFFDCF0028DCE20119B575F18D8DC5
Authority key identifier: 4A:64:4C:11:56:85:18:03:F3:7A:DE:EC:08:76:CC:F9:89:D5:AE:F0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/SmRMEVaFGAPzet7sCHbM-YnVrvA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a9/6b0798-3d4f-40e6-b739-cc1c9b5f6640/1/8V7ATul1QUC8qsWR9FE0mAGNiTc.roa
Signing time:             Sun 02 Oct 2022 21:52:48 +0000
ROA not before:           Sun 02 Oct 2022 21:52:48 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     204994
IP address blocks:        2a0f:5707:9000::/44 maxlen: 48

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:83:9a:af:fd:cf:00:28:dc:e2:01:19:b5:75:f1:8d:8d:c5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4a644c1156851803f37adeec0876ccf989d5aef0
        Validity
            Not Before: Oct  2 21:52:48 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=f15ec04ee9754140bcaac591f4513498018d8937
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:74:9f:72:ce:57:4b:ce:5d:b4:88:62:99:1c:
                    5a:5e:d8:d9:1d:f1:dd:ae:5d:fd:ed:c4:c3:ec:c2:
                    66:fc:97:73:d5:10:5d:78:51:17:00:42:33:90:d0:
                    3d:1c:a0:d0:c7:85:91:7d:1e:af:51:26:16:ba:6e:
                    08:8e:89:c1:20:56:52:94:5c:fa:6b:82:d0:0d:90:
                    2c:f9:fb:63:83:0b:e1:00:9a:6a:4b:a0:ef:fb:41:
                    ea:c9:af:79:19:5c:df:74:47:69:ad:ad:af:13:b7:
                    4c:8b:1d:08:6a:35:75:eb:cc:63:7f:4a:60:c2:78:
                    f8:ca:7e:d6:7a:1e:1f:4c:b5:c1:e8:6c:ad:5a:b3:
                    fa:db:99:f3:ae:ed:02:d0:7c:60:7a:b5:3d:92:e1:
                    aa:dc:b2:7e:1e:2b:98:7d:26:d1:ed:ee:2c:a3:ed:
                    46:c2:a5:ee:96:8d:4d:ed:11:e1:f0:e4:d3:c0:d9:
                    1b:75:89:62:d7:b5:95:c7:9d:3e:50:29:1d:28:d8:
                    41:3c:85:66:84:7c:b1:3f:ab:e8:cb:31:13:69:27:
                    55:d0:77:fc:df:bd:b2:72:e4:e4:e4:80:ab:61:9e:
                    0a:fe:61:cb:5d:4b:bd:c5:fc:88:a4:8f:0f:15:41:
                    26:58:2c:20:f6:55:6c:33:1f:68:d1:fe:0d:e5:c3:
                    2a:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F1:5E:C0:4E:E9:75:41:40:BC:AA:C5:91:F4:51:34:98:01:8D:89:37
            X509v3 Authority Key Identifier:
                keyid:4A:64:4C:11:56:85:18:03:F3:7A:DE:EC:08:76:CC:F9:89:D5:AE:F0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SmRMEVaFGAPzet7sCHbM-YnVrvA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/6b0798-3d4f-40e6-b739-cc1c9b5f6640/1/8V7ATul1QUC8qsWR9FE0mAGNiTc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/6b0798-3d4f-40e6-b739-cc1c9b5f6640/1/SmRMEVaFGAPzet7sCHbM-YnVrvA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a0f:5707:9000::/44

    Signature Algorithm: sha256WithRSAEncryption
         9e:d4:74:ed:de:a6:6c:96:e8:d5:44:7c:2b:bb:b6:79:b1:f5:
         de:e4:1b:7c:29:76:d0:c3:19:1f:35:d3:1b:1a:bc:00:ca:74:
         9d:e5:c7:77:95:27:70:8b:81:42:27:06:aa:fc:ed:5f:f5:76:
         c3:af:cc:64:d8:81:2c:da:27:65:4e:6c:28:4d:b0:73:67:39:
         e7:dc:f4:3a:e3:11:a4:9c:49:b6:c5:51:4d:b7:b5:73:f6:d3:
         8c:86:c0:18:c5:e7:77:82:0b:c1:cb:d2:8e:4b:37:69:b3:a8:
         e8:ba:90:e0:47:f2:08:01:7a:75:cc:38:94:cb:05:94:26:98:
         90:4f:99:00:bf:65:f5:35:18:45:c9:87:07:a7:30:37:90:37:
         22:a5:20:41:a2:c4:87:a5:c7:a3:d3:00:09:bd:3a:0b:a2:83:
         92:83:60:13:8e:a9:63:ca:b4:4d:ce:6c:fc:20:79:67:f4:a5:
         09:5a:9d:67:31:13:69:10:5f:01:f1:11:1c:02:94:0b:11:8b:
         6f:11:68:d1:38:65:4c:ef:0a:65:14:e3:1e:a4:82:e5:ba:24:
         c5:f8:93:91:78:ee:48:e9:eb:95:48:2f:9f:5c:a3:9d:a6:85:
         fc:f2:d5:8f:37:fb:f5:7c:1e:54:fe:ca:90:0d:e5:7e:9f:06:
         34:cf:ff:27
-----BEGIN CERTIFICATE-----
MIIFADCCA+igAwIBAgISAYOar/3PACjc4gEZtXXxjY3FMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRhNjQ0YzExNTY4NTE4MDNmMzdhZGVlYzA4NzZjY2Y5ODlk
NWFlZjAwHhcNMjIxMDAyMjE1MjQ4WhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhmMTVlYzA0ZWU5NzU0MTQwYmNhYWM1OTFmNDUxMzQ5ODAxOGQ4OTM3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmHSfcs5XS85dtIhimRxaXtjZHfHd
rl397cTD7MJm/Jdz1RBdeFEXAEIzkNA9HKDQx4WRfR6vUSYWum4IjonBIFZSlFz6
a4LQDZAs+ftjgwvhAJpqS6Dv+0Hqya95GVzfdEdpra2vE7dMix0IajV168xjf0pg
wnj4yn7Weh4fTLXB6GytWrP625nzru0C0HxgerU9kuGq3LJ+HiuYfSbR7e4so+1G
wqXulo1N7RHh8OTTwNkbdYli17WVx50+UCkdKNhBPIVmhHyxP6voyzETaSdV0Hf8
372ycuTk5ICrYZ4K/mHLXUu9xfyIpI8PFUEmWCwg9lVsMx9o0f4N5cMqjwIDAQAB
o4ICDDCCAggwHQYDVR0OBBYEFPFewE7pdUFAvKrFkfRRNJgBjYk3MB8GA1UdIwQY
MBaAFEpkTBFWhRgD83re7Ah2zPmJ1a7wMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvU21STUVWYUZHQVB6ZXQ3c0NIYk0tWW5WcnZBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hOS82YjA3OTgtM2Q0Zi00MGU2LWI3Mzkt
Y2MxYzliNWY2NjQwLzEvOFY3QVR1bDFRVUM4cXNXUjlGRTBtQUdOaVRjLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hOS82YjA3OTgtM2Q0Zi00MGU2LWI3MzktY2MxYzliNWY2NjQw
LzEvU21STUVWYUZHQVB6ZXQ3c0NIYk0tWW5WcnZBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcEKg9XB5AA
MA0GCSqGSIb3DQEBCwUAA4IBAQCe1HTt3qZslujVRHwru7Z5sfXe5Bt8KXbQwxkf
NdMbGrwAynSd5cd3lSdwi4FCJwaq/O1f9XbDr8xk2IEs2idlTmwoTbBzZznn3PQ6
4xGknEm2xVFNt7Vz9tOMhsAYxed3ggvBy9KOSzdps6joupDgR/IIAXp1zDiUywWU
JpiQT5kAv2X1NRhFyYcHpzA3kDcipSBBosSHpcej0wAJvToLooOSg2ATjqljyrRN
zmz8IHln9KUJWp1nMRNpEF8B8REcApQLEYtvEWjROGVM7wplFOMepILluiTF+JOR
eO5I6euVSC+fXKOdpoX88tWPN/v1fB5U/sqQDeV+nwY0z/8n
-----END CERTIFICATE-----