Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b2/b5f798-f518-4f95-ad5e-9dd55e1ff892/1/lCxa72Agg2R6jEYDfAzArypdjys.roa
File:                     lCxa72Agg2R6jEYDfAzArypdjys.roa (raw, json)
Hash identifier:          tlidECktbdVdXC6cXw2e5+/mXMxfwHCw0C91TNqjlOI=
Subject key identifier:   94:2C:5A:EF:60:20:83:64:7A:8C:46:03:7C:0C:C0:AF:2A:5D:8F:2B
Certificate issuer:       /CN=dc980bb7e0718e3ce1f0a0ae268afe79af774f2f
Certificate serial:       018486AC3C8F67273E1D03398B3EF68CEAFB
Authority key identifier: DC:98:0B:B7:E0:71:8E:3C:E1:F0:A0:AE:26:8A:FE:79:AF:77:4F:2F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/3JgLt-Bxjjzh8KCuJor-ea93Ty8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b2/b5f798-f518-4f95-ad5e-9dd55e1ff892/1/lCxa72Agg2R6jEYDfAzArypdjys.roa
Signing time:             Thu 17 Nov 2022 17:39:05 +0000
ROA not before:           Thu 17 Nov 2022 17:39:05 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     22773
IP address blocks:        2a11:b140::/29 maxlen: 29

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:84:86:ac:3c:8f:67:27:3e:1d:03:39:8b:3e:f6:8c:ea:fb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=dc980bb7e0718e3ce1f0a0ae268afe79af774f2f
        Validity
            Not Before: Nov 17 17:39:05 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=942c5aef602083647a8c46037c0cc0af2a5d8f2b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:3e:52:3d:c7:dc:86:d4:74:73:74:c7:32:63:
                    2b:32:cb:ee:41:07:13:9d:3f:94:8f:3f:9d:ae:15:
                    73:bc:47:74:7e:59:b7:3c:1d:65:40:bb:12:be:5a:
                    56:a6:3a:f9:b3:49:0b:7b:c1:33:37:04:5d:e4:d9:
                    a3:23:7f:a4:7a:46:28:36:a9:c0:b6:72:3a:00:85:
                    5e:a5:7e:f3:b3:b6:30:56:5e:0c:13:7f:83:26:e4:
                    21:03:a0:ca:58:8a:e2:a8:c4:3d:a2:f1:85:dd:87:
                    a2:45:a5:4a:0c:50:c6:b7:9a:a8:77:15:4b:64:0d:
                    42:40:ac:8b:4c:cd:10:86:d4:51:a9:3c:e3:87:c5:
                    49:30:f9:01:b6:ba:ee:35:73:47:64:68:97:06:22:
                    ef:3d:05:e2:cf:32:76:7b:c1:d1:b1:19:d4:53:ee:
                    c4:1a:3a:f7:be:f5:3e:86:b7:18:83:24:1b:d8:bd:
                    1f:fc:a7:b5:26:f3:25:aa:b6:19:4f:75:32:48:2a:
                    a4:ff:1f:d4:44:a3:86:1e:ba:a8:82:22:69:5a:eb:
                    e7:d0:8b:82:ab:ef:73:71:10:7e:35:62:2e:ff:37:
                    07:ad:06:41:d2:12:21:7d:c3:11:66:6f:55:69:4f:
                    c9:bb:e2:e5:09:7b:bc:e4:52:9d:83:d7:c9:ce:97:
                    de:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                94:2C:5A:EF:60:20:83:64:7A:8C:46:03:7C:0C:C0:AF:2A:5D:8F:2B
            X509v3 Authority Key Identifier:
                keyid:DC:98:0B:B7:E0:71:8E:3C:E1:F0:A0:AE:26:8A:FE:79:AF:77:4F:2F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3JgLt-Bxjjzh8KCuJor-ea93Ty8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/b5f798-f518-4f95-ad5e-9dd55e1ff892/1/lCxa72Agg2R6jEYDfAzArypdjys.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/b5f798-f518-4f95-ad5e-9dd55e1ff892/1/3JgLt-Bxjjzh8KCuJor-ea93Ty8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a11:b140::/29

    Signature Algorithm: sha256WithRSAEncryption
         3e:ba:33:c5:a6:01:ba:70:2a:a8:bd:68:e3:78:2d:e6:7a:b8:
         11:bd:42:f2:09:48:b2:f8:9f:a1:ee:67:0a:db:a8:13:d2:b5:
         eb:26:23:bf:6c:1e:6e:4d:4f:21:79:80:e3:8a:b7:f4:42:23:
         52:70:8e:04:cb:f0:ed:5a:13:2e:c6:78:a6:fd:14:92:56:55:
         1e:22:4e:24:34:e9:4a:00:b0:73:09:62:4f:3a:5f:5c:42:82:
         da:6c:11:2d:89:50:87:c0:35:54:45:b9:cd:8f:18:51:8c:7e:
         5d:f0:0b:d0:21:71:57:13:c8:f9:e2:1c:9f:e6:d3:63:92:8d:
         87:a4:bf:3d:a4:8d:7b:83:59:9c:48:11:4a:8e:ec:ab:0c:e7:
         f9:0a:cb:71:6a:54:a4:d6:97:d1:de:be:3d:13:5a:fd:64:11:
         02:cb:3b:15:21:c3:a2:fa:cc:9e:51:56:1d:98:d4:ed:6c:9c:
         5c:ec:0b:c4:8c:6a:2d:0e:df:50:df:d8:38:7b:ff:ac:fe:ad:
         a0:8b:96:3e:b6:cc:99:fd:03:d2:57:86:bd:a4:6b:8c:9d:bc:
         a4:55:48:6b:9f:bf:2a:9f:0c:a4:60:64:21:6c:d9:99:ea:ae:
         65:09:56:b0:59:3e:06:c2:2e:26:e5:49:86:7f:66:88:b5:e3:
         ae:72:2e:92
-----BEGIN CERTIFICATE-----
MIIE/jCCA+agAwIBAgISAYSGrDyPZyc+HQM5iz72jOr7MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRjOTgwYmI3ZTA3MThlM2NlMWYwYTBhZTI2OGFmZTc5YWY3
NzRmMmYwHhcNMjIxMTE3MTczOTA1WhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg5NDJjNWFlZjYwMjA4MzY0N2E4YzQ2MDM3YzBjYzBhZjJhNWQ4ZjJiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmz5SPcfchtR0c3THMmMrMsvuQQcT
nT+Ujz+drhVzvEd0flm3PB1lQLsSvlpWpjr5s0kLe8EzNwRd5NmjI3+kekYoNqnA
tnI6AIVepX7zs7YwVl4ME3+DJuQhA6DKWIriqMQ9ovGF3YeiRaVKDFDGt5qodxVL
ZA1CQKyLTM0QhtRRqTzjh8VJMPkBtrruNXNHZGiXBiLvPQXizzJ2e8HRsRnUU+7E
Gjr3vvU+hrcYgyQb2L0f/Ke1JvMlqrYZT3UySCqk/x/URKOGHrqogiJpWuvn0IuC
q+9zcRB+NWIu/zcHrQZB0hIhfcMRZm9VaU/Ju+LlCXu85FKdg9fJzpfeLQIDAQAB
o4ICCjCCAgYwHQYDVR0OBBYEFJQsWu9gIINkeoxGA3wMwK8qXY8rMB8GA1UdIwQY
MBaAFNyYC7fgcY484fCgriaK/nmvd08vMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvM0pnTHQtQnhqanpoOEtDdUpvci1lYTkzVHk4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMi9iNWY3OTgtZjUxOC00Zjk1LWFkNWUt
OWRkNTVlMWZmODkyLzEvbEN4YTcyQWdnMlI2akVZRGZBekFyeXBkanlzLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iMi9iNWY3OTgtZjUxOC00Zjk1LWFkNWUtOWRkNTVlMWZmODky
LzEvM0pnTHQtQnhqanpoOEtDdUpvci1lYTkzVHk4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUDKhGxQDAN
BgkqhkiG9w0BAQsFAAOCAQEAProzxaYBunAqqL1o43gt5nq4Eb1C8glIsvifoe5n
CtuoE9K16yYjv2webk1PIXmA44q39EIjUnCOBMvw7VoTLsZ4pv0UklZVHiJOJDTp
SgCwcwliTzpfXEKC2mwRLYlQh8A1VEW5zY8YUYx+XfAL0CFxVxPI+eIcn+bTY5KN
h6S/PaSNe4NZnEgRSo7sqwzn+QrLcWpUpNaX0d6+PRNa/WQRAss7FSHDovrMnlFW
HZjU7WycXOwLxIxqLQ7fUN/YOHv/rP6toIuWPrbMmf0D0leGvaRrjJ28pFVIa5+/
Kp8MpGBkIWzZmequZQlWsFk+BsIuJuVJhn9miLXjrnIukg==
-----END CERTIFICATE-----