Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/bba973-7c9f-4b11-b611-ad575522b365/1/kK_9Ckb_VnTbbhWWOKNwGmRrRes.roa
File:                     kK_9Ckb_VnTbbhWWOKNwGmRrRes.roa (raw, json)
Hash identifier:          PlYJVTX1X2cDutqsvqt8UnGWA4Zj6UwsBrgQHhpTtfE=
Subject key identifier:   90:AF:FD:0A:46:FF:56:74:DB:6E:15:96:38:A3:70:1A:64:6B:45:EB
Certificate issuer:       /CN=b05d28d16626bc5dcabf2e915435782b96e14071
Certificate serial:       0183180F5C13902611D41AE706B9ECEAB4E2
Authority key identifier: B0:5D:28:D1:66:26:BC:5D:CA:BF:2E:91:54:35:78:2B:96:E1:40:71
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/sF0o0WYmvF3Kvy6RVDV4K5bhQHE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c3/bba973-7c9f-4b11-b611-ad575522b365/1/kK_9Ckb_VnTbbhWWOKNwGmRrRes.roa
Signing time:             Wed 07 Sep 2022 13:06:43 +0000
ROA not before:           Wed 07 Sep 2022 13:06:43 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     19905
IP address blocks:        2a04:9a04::/48 maxlen: 48

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:83:18:0f:5c:13:90:26:11:d4:1a:e7:06:b9:ec:ea:b4:e2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b05d28d16626bc5dcabf2e915435782b96e14071
        Validity
            Not Before: Sep  7 13:06:43 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=90affd0a46ff5674db6e159638a3701a646b45eb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:4e:e5:a7:51:85:aa:11:37:cb:07:1e:46:e3:
                    98:ac:de:c8:26:fb:c9:a1:85:07:49:5e:a5:1a:29:
                    ba:94:22:1b:99:51:f8:ec:b5:73:8a:fb:19:b7:28:
                    16:8a:4b:d3:04:2f:d2:43:76:1f:70:ad:31:5f:50:
                    d6:f1:a6:b1:ab:be:29:9d:2e:72:93:5f:14:3b:6f:
                    2c:8a:02:7e:dd:f6:a7:15:2c:be:7c:5d:c4:1e:b1:
                    03:a4:37:ba:56:78:5b:63:4d:88:f5:bb:62:d9:62:
                    88:28:5b:80:4a:2f:46:04:75:70:9c:d4:25:4c:86:
                    31:ed:9c:9e:cc:0d:ef:77:96:25:e0:10:37:7a:a5:
                    5f:66:02:70:c3:5d:e4:86:f0:9b:59:e1:02:3d:2a:
                    2c:33:04:99:0c:95:6b:9e:96:48:84:01:8d:f1:ba:
                    94:e3:39:8c:2a:f7:9e:b6:af:74:0f:dd:0b:b4:a5:
                    f5:55:44:57:83:8d:b4:ad:49:44:a4:46:ec:a9:c9:
                    33:f3:a0:cf:8d:c6:0b:cb:64:3f:44:1c:ff:ca:b6:
                    d7:51:7b:91:67:aa:74:99:6d:da:43:b2:6a:86:43:
                    fa:c4:5e:dd:6f:8b:17:96:89:77:25:cc:5c:db:f0:
                    54:79:f4:cf:7c:3a:7e:1d:b3:0e:03:b0:79:8c:4d:
                    a4:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                90:AF:FD:0A:46:FF:56:74:DB:6E:15:96:38:A3:70:1A:64:6B:45:EB
            X509v3 Authority Key Identifier:
                keyid:B0:5D:28:D1:66:26:BC:5D:CA:BF:2E:91:54:35:78:2B:96:E1:40:71

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sF0o0WYmvF3Kvy6RVDV4K5bhQHE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/bba973-7c9f-4b11-b611-ad575522b365/1/kK_9Ckb_VnTbbhWWOKNwGmRrRes.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/bba973-7c9f-4b11-b611-ad575522b365/1/sF0o0WYmvF3Kvy6RVDV4K5bhQHE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a04:9a04::/48

    Signature Algorithm: sha256WithRSAEncryption
         0c:61:ab:3d:16:a6:6f:20:ac:41:ff:84:08:03:80:a3:e2:62:
         27:9c:d7:ff:24:38:9c:25:9d:f7:f7:f4:5a:30:69:5a:30:ba:
         58:f1:a1:b1:aa:70:7b:0a:74:75:79:14:e6:a9:69:77:37:53:
         74:1d:97:a7:6e:4f:bd:70:fa:b7:78:03:ea:d7:86:f7:f2:20:
         78:e1:fa:ab:08:4c:a8:88:03:32:f1:10:02:13:33:05:b4:de:
         6c:2f:10:bd:91:f0:55:44:b3:97:dc:79:bf:a0:91:3b:51:7d:
         0c:4f:86:aa:e4:30:1b:1a:e3:14:28:3d:a6:80:d6:7e:81:5a:
         bd:4e:34:18:19:6c:68:c1:20:c1:da:b1:90:6a:19:b1:c4:ba:
         9c:3b:90:0e:db:84:2f:f7:91:07:8e:35:1b:3c:74:a0:f9:61:
         d1:69:a6:b9:9f:c4:a6:4f:f5:f2:c7:fa:33:67:3c:53:cf:9c:
         e2:97:07:a9:af:7c:65:95:a4:a8:dd:89:98:dd:0b:06:21:ab:
         b2:9e:79:b4:1d:f8:5f:90:0b:b8:e2:23:78:e5:f3:df:7c:5a:
         4c:85:5b:6c:45:08:54:0b:00:17:80:51:8d:30:3e:95:9a:cc:
         e9:ac:17:cb:37:d6:6f:b8:e2:15:bc:1d:82:be:95:65:17:7e:
         23:c8:a6:20
-----BEGIN CERTIFICATE-----
MIIFADCCA+igAwIBAgISAYMYD1wTkCYR1BrnBrns6rTiMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGIwNWQyOGQxNjYyNmJjNWRjYWJmMmU5MTU0MzU3ODJiOTZl
MTQwNzEwHhcNMjIwOTA3MTMwNjQzWhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg5MGFmZmQwYTQ2ZmY1Njc0ZGI2ZTE1OTYzOGEzNzAxYTY0NmI0NWViMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvk7lp1GFqhE3ywceRuOYrN7IJvvJ
oYUHSV6lGim6lCIbmVH47LVzivsZtygWikvTBC/SQ3YfcK0xX1DW8aaxq74pnS5y
k18UO28sigJ+3fanFSy+fF3EHrEDpDe6VnhbY02I9bti2WKIKFuASi9GBHVwnNQl
TIYx7ZyezA3vd5Yl4BA3eqVfZgJww13khvCbWeECPSosMwSZDJVrnpZIhAGN8bqU
4zmMKveetq90D90LtKX1VURXg420rUlEpEbsqckz86DPjcYLy2Q/RBz/yrbXUXuR
Z6p0mW3aQ7JqhkP6xF7db4sXlol3Jcxc2/BUefTPfDp+HbMOA7B5jE2kMwIDAQAB
o4ICDDCCAggwHQYDVR0OBBYEFJCv/QpG/1Z0224VljijcBpka0XrMB8GA1UdIwQY
MBaAFLBdKNFmJrxdyr8ukVQ1eCuW4UBxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvc0YwbzBXWW12RjNLdnk2UlZEVjRLNWJoUUhFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMy9iYmE5NzMtN2M5Zi00YjExLWI2MTEt
YWQ1NzU1MjJiMzY1LzEva0tfOUNrYl9WblRiYmhXV09LTndHbVJyUmVzLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jMy9iYmE5NzMtN2M5Zi00YjExLWI2MTEtYWQ1NzU1MjJiMzY1
LzEvc0YwbzBXWW12RjNLdnk2UlZEVjRLNWJoUUhFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAKgSaBAAA
MA0GCSqGSIb3DQEBCwUAA4IBAQAMYas9FqZvIKxB/4QIA4Cj4mInnNf/JDicJZ33
9/RaMGlaMLpY8aGxqnB7CnR1eRTmqWl3N1N0HZenbk+9cPq3eAPq14b38iB44fqr
CEyoiAMy8RACEzMFtN5sLxC9kfBVRLOX3Hm/oJE7UX0MT4aq5DAbGuMUKD2mgNZ+
gVq9TjQYGWxowSDB2rGQahmxxLqcO5AO24Qv95EHjjUbPHSg+WHRaaa5n8SmT/Xy
x/ozZzxTz5zilwepr3xllaSo3YmY3QsGIauynnm0HfhfkAu44iN45fPffFpMhVts
RQhUCwAXgFGNMD6VmszprBfLN9ZvuOIVvB2CvpVlF34jyKYg
-----END CERTIFICATE-----