Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ab/99ae2f-39cc-43f3-941d-51920373353c/1/aVEj0OcZV4laO2EHuPx9ddaXKag.roa
File:                     aVEj0OcZV4laO2EHuPx9ddaXKag.roa (raw, json)
Hash identifier:          auk1TyeioGGjjMN/QiBRovBHAcNNQlR+xgPpX+nGc2E=
Subject key identifier:   69:51:23:D0:E7:19:57:89:5A:3B:61:07:B8:FC:7D:75:D6:97:29:A8
Certificate issuer:       /CN=89056fa9625b6c87404267c6dc219924ac160045
Certificate serial:       0183141B03C27ACEE35E73675FF6D7F753FE
Authority key identifier: 89:05:6F:A9:62:5B:6C:87:40:42:67:C6:DC:21:99:24:AC:16:00:45
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/iQVvqWJbbIdAQmfG3CGZJKwWAEU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ab/99ae2f-39cc-43f3-941d-51920373353c/1/aVEj0OcZV4laO2EHuPx9ddaXKag.roa
Signing time:             Tue 06 Sep 2022 18:40:58 +0000
ROA not before:           Tue 06 Sep 2022 18:40:58 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     48031
IP address blocks:        2a11:840:25::/48 maxlen: 48

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:83:14:1b:03:c2:7a:ce:e3:5e:73:67:5f:f6:d7:f7:53:fe
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=89056fa9625b6c87404267c6dc219924ac160045
        Validity
            Not Before: Sep  6 18:40:58 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=695123d0e71957895a3b6107b8fc7d75d69729a8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:aa:b0:df:f4:f2:db:b1:5a:e6:9b:7a:50:18:
                    fc:ee:86:5b:31:ef:a5:a6:85:e6:97:ed:3b:43:02:
                    07:6a:b0:eb:3b:75:49:3c:3d:0f:cf:a6:41:95:d9:
                    9b:be:85:ab:80:4e:79:73:c4:28:79:a8:a6:10:76:
                    1e:ce:4f:57:82:dd:41:c7:6a:df:f0:99:b8:85:9f:
                    be:2b:45:91:0d:15:68:76:f1:65:df:e0:bd:c2:71:
                    8b:9c:75:1c:c7:13:0b:2f:65:0f:c9:82:a0:b3:22:
                    7a:b1:69:07:8b:06:4b:0e:e5:5d:99:74:32:3d:f8:
                    fc:dc:be:e5:44:5b:99:7d:1c:9e:a4:9a:88:b6:db:
                    e8:fc:26:56:7f:9f:7c:4f:6c:99:5c:49:84:91:c5:
                    bd:04:ac:30:5a:77:62:74:d8:dc:57:ee:02:da:04:
                    f1:69:a6:5e:22:9a:ed:8c:51:51:ed:80:c5:31:68:
                    71:e6:a0:f4:c0:bd:f7:36:ad:e7:d1:ea:3a:7d:68:
                    3c:56:bb:91:c4:ba:47:81:ae:05:c6:fc:26:b1:03:
                    68:1a:a2:09:fe:51:8d:f0:4f:e6:27:89:0d:76:ed:
                    14:05:9f:41:9a:a3:d3:49:a5:82:ef:df:ea:32:4f:
                    43:05:8e:2a:49:ff:d7:e3:2e:c1:52:9b:71:e7:7e:
                    d8:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                69:51:23:D0:E7:19:57:89:5A:3B:61:07:B8:FC:7D:75:D6:97:29:A8
            X509v3 Authority Key Identifier:
                keyid:89:05:6F:A9:62:5B:6C:87:40:42:67:C6:DC:21:99:24:AC:16:00:45

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iQVvqWJbbIdAQmfG3CGZJKwWAEU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/99ae2f-39cc-43f3-941d-51920373353c/1/aVEj0OcZV4laO2EHuPx9ddaXKag.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/99ae2f-39cc-43f3-941d-51920373353c/1/iQVvqWJbbIdAQmfG3CGZJKwWAEU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a11:840:25::/48

    Signature Algorithm: sha256WithRSAEncryption
         8e:3a:f2:32:dc:09:c2:0f:45:70:0e:13:92:a6:67:c2:0b:da:
         a2:05:c1:7c:ca:bc:f7:a5:79:fd:13:4b:4e:b3:29:3b:71:98:
         95:3c:0a:bf:e7:81:4f:ca:98:6c:41:f7:c0:71:ed:28:e8:fd:
         de:33:28:30:05:a1:e1:36:b6:e8:38:66:45:76:c1:27:a0:d0:
         25:cb:08:a1:a2:de:92:aa:2a:cd:67:d7:14:5e:be:4e:13:e7:
         a9:ed:cb:ae:90:9d:32:b8:b7:99:3a:40:e9:a1:e5:2e:5c:67:
         f2:0d:7c:1c:8d:dc:50:82:b6:d4:c7:bb:89:0a:85:35:6e:35:
         98:8f:6f:5e:55:a5:aa:f4:09:1e:a8:7e:18:aa:db:aa:a5:ba:
         f3:6c:03:09:0b:33:6c:c0:b6:c3:41:44:d0:c0:72:5d:13:1b:
         ca:97:27:eb:99:10:40:f3:83:29:72:0d:8a:93:5f:81:50:88:
         75:94:dc:53:76:14:ef:ad:7e:02:3b:d4:5b:53:cb:72:2d:3a:
         21:dd:a9:2a:c2:2b:0e:da:5c:c4:b2:17:9a:e3:06:9f:68:bb:
         89:21:aa:32:fb:10:79:96:ee:52:2c:65:68:f8:23:5d:4f:4b:
         95:16:dc:89:0a:23:23:fd:04:51:72:0b:a9:37:a3:e7:f9:ca:
         0d:1c:94:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----