Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/be/1f6458-dc75-4add-ae72-91e3184bb0ab/1/rxVtrhvjyMm7tQrqb8K0L_knOQQ.roa
File:                     rxVtrhvjyMm7tQrqb8K0L_knOQQ.roa (raw, json)
Hash identifier:          RRsUcSIpxPFXr5ykxBbcgujSeluGVKxFqVnjCvfHx34=
Subject key identifier:   AF:15:6D:AE:1B:E3:C8:C9:BB:B5:0A:EA:6F:C2:B4:2F:F9:27:39:04
Certificate issuer:       /CN=1aca63df248b7adf3ddd07e8c2d3eedd02cef933
Certificate serial:       39F00D37
Authority key identifier: 1A:CA:63:DF:24:8B:7A:DF:3D:DD:07:E8:C2:D3:EE:DD:02:CE:F9:33
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Gspj3ySLet893QfowtPu3QLO-TM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/be/1f6458-dc75-4add-ae72-91e3184bb0ab/1/rxVtrhvjyMm7tQrqb8K0L_knOQQ.roa
Signing time:             Sat 01 Jan 2022 14:00:29 +0000
ROA not before:           Sat 01 Jan 2022 14:00:29 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     8938
IP address blocks:        2001:4190:8024::/48 maxlen: 48

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 972033335 (0x39f00d37)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1aca63df248b7adf3ddd07e8c2d3eedd02cef933
        Validity
            Not Before: Jan  1 14:00:29 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=af156dae1be3c8c9bbb50aea6fc2b42ff9273904
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:21:f1:e7:76:e2:a7:77:28:f6:06:3c:fa:cd:
                    02:dc:bc:3a:57:fc:d9:19:5a:20:d8:e4:a8:b3:69:
                    d8:86:33:1a:97:84:f7:e2:ce:df:56:e4:fb:e3:ad:
                    fd:c7:24:2e:c6:8b:8e:32:82:aa:94:6a:48:e4:6a:
                    c2:58:fa:52:36:65:f0:de:11:f8:53:fa:44:06:e4:
                    56:59:89:13:8e:0c:bb:aa:49:47:b1:28:dc:b5:46:
                    11:7b:2a:26:4e:e3:86:c5:e4:63:4f:d9:cb:58:01:
                    9d:8f:6d:f9:56:bd:62:a8:85:7f:2c:61:b1:ed:0b:
                    03:6d:f7:0c:eb:1a:09:e2:1b:c0:a5:4f:c1:b6:23:
                    a0:41:12:ed:e2:12:22:10:96:21:9a:ca:fa:96:ec:
                    f0:ee:2f:54:da:e3:7a:2f:6c:0d:43:b5:a3:06:4d:
                    7b:82:e4:46:6f:3f:f5:9c:26:ca:a8:62:f7:15:a8:
                    0e:7a:39:b8:7f:30:71:7e:ab:5a:43:8e:45:18:66:
                    31:d3:a8:04:a0:c6:ae:4d:be:83:8b:d2:b7:69:02:
                    18:c2:ea:ff:d2:b2:3b:92:13:60:a2:92:49:ca:25:
                    cf:d8:c1:11:7a:6e:5c:29:de:6e:60:ea:32:b8:b0:
                    8a:48:eb:91:09:35:6b:2d:12:36:e6:b3:2f:0f:50:
                    80:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AF:15:6D:AE:1B:E3:C8:C9:BB:B5:0A:EA:6F:C2:B4:2F:F9:27:39:04
            X509v3 Authority Key Identifier:
                keyid:1A:CA:63:DF:24:8B:7A:DF:3D:DD:07:E8:C2:D3:EE:DD:02:CE:F9:33

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Gspj3ySLet893QfowtPu3QLO-TM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/1f6458-dc75-4add-ae72-91e3184bb0ab/1/rxVtrhvjyMm7tQrqb8K0L_knOQQ.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/be/1f6458-dc75-4add-ae72-91e3184bb0ab/1/Gspj3ySLet893QfowtPu3QLO-TM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:4190:8024::/48

    Signature Algorithm: sha256WithRSAEncryption
         9d:96:dd:83:9d:4c:e3:bb:aa:94:91:c5:1a:51:a9:32:dc:52:
         ea:9c:03:6d:6b:d7:07:a4:87:6d:64:22:d6:67:95:52:52:19:
         aa:19:7b:25:ea:13:d8:0c:0e:33:c1:0f:d9:7d:06:e5:b8:68:
         6b:a1:e8:e3:1e:85:3a:93:b9:af:f7:25:58:1b:d7:f5:be:41:
         cc:f5:18:e9:21:26:3c:0e:78:70:c6:28:89:f9:29:1c:09:2d:
         ac:1a:73:9a:39:f9:cb:be:3d:df:94:65:3f:f1:88:44:7c:28:
         f2:93:68:c0:2a:25:41:49:19:e1:bd:9d:ba:66:35:49:6b:b1:
         7f:e9:29:1c:65:7c:49:d7:58:6a:09:3d:7c:03:5d:0a:12:d0:
         50:17:6e:cc:c2:54:45:49:0d:ad:66:26:51:2f:fe:23:76:1c:
         49:34:d2:1b:4d:2a:96:f9:5b:ba:6c:c8:fe:93:26:4e:82:8a:
         dc:30:64:b3:f5:6c:a9:ba:c3:db:49:ff:f0:74:0b:0e:ec:0d:
         0f:23:6e:b4:6c:ec:6e:4e:76:9f:19:9e:32:65:89:22:a8:ae:
         91:c5:9c:f4:f5:0d:dd:e1:1a:ef:6a:a3:e0:d5:5d:34:10:95:
         2f:20:10:70:0d:79:0d:85:cd:fb:e9:b5:3b:47:8c:47:95:59:
         0a:2f:67:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----