Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fb/7215e0-9ab8-4a13-a605-31ab32ff7c68/1/70sGzbob7QJnC5zESaNynY_LLkY.roa
File:                     70sGzbob7QJnC5zESaNynY_LLkY.roa (raw, json)
Hash identifier:          BBppqNSJLl8woH4f7/yIDK4eEFSUQXzPdLwSoxzsPT4=
Subject key identifier:   EF:4B:06:CD:BA:1B:ED:02:67:0B:9C:C4:49:A3:72:9D:8F:CB:2E:46
Certificate issuer:       /CN=e1584910124af776e30e5acf055d6bae1761a536
Certificate serial:       0183E77C13993F66328FA2AD28DB66BC67D8
Authority key identifier: E1:58:49:10:12:4A:F7:76:E3:0E:5A:CF:05:5D:6B:AE:17:61:A5:36
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/4VhJEBJK93bjDlrPBV1rrhdhpTY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/fb/7215e0-9ab8-4a13-a605-31ab32ff7c68/1/70sGzbob7QJnC5zESaNynY_LLkY.roa
Signing time:             Mon 17 Oct 2022 19:46:51 +0000
ROA not before:           Mon 17 Oct 2022 19:46:51 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     14618
IP address blocks:        2a13:3c0:3::/48 maxlen: 48
                          2a13:3c0:6::/48 maxlen: 48
                          2a13:3c0:1::/48 maxlen: 48
                          2a13:3c0:11::/48 maxlen: 48
                          2a13:3c0:9::/48 maxlen: 48
                          2a13:3c0:7::/48 maxlen: 48
                          2a13:3c0:2::/48 maxlen: 48
                          2a13:3c0:5::/48 maxlen: 48
                          2a13:3c0:10::/48 maxlen: 48
                          2a13:3c0:8::/48 maxlen: 48

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:83:e7:7c:13:99:3f:66:32:8f:a2:ad:28:db:66:bc:67:d8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e1584910124af776e30e5acf055d6bae1761a536
        Validity
            Not Before: Oct 17 19:46:51 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=ef4b06cdba1bed02670b9cc449a3729d8fcb2e46
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:7b:99:1f:1e:ae:3d:7f:59:e3:b5:21:e1:ac:
                    f0:48:9c:a3:5c:cd:f5:d5:a0:5e:25:2e:15:0e:df:
                    45:5f:00:4f:eb:03:34:b2:fc:fc:b0:a9:ea:f9:f6:
                    06:32:a3:02:21:02:8c:5e:f2:ef:1c:2d:9a:2f:db:
                    b0:0e:d1:90:65:f8:74:d6:02:b6:7b:a6:a3:1e:df:
                    95:b4:33:41:d9:46:d1:40:2c:1f:cc:cd:2b:13:c8:
                    88:35:09:68:ba:c1:85:2f:fc:a1:a4:0b:1c:29:db:
                    81:a4:a0:0a:f4:5b:91:51:aa:21:91:36:ba:81:ed:
                    ec:07:0c:58:84:a9:2b:45:8e:42:74:2b:8c:34:4f:
                    18:2d:98:bd:46:9c:bb:a4:99:f8:c1:d7:c0:01:4c:
                    05:d2:d5:84:86:ef:c5:5a:ae:ec:c1:88:73:29:35:
                    a6:01:9f:b0:47:32:65:38:6b:41:6e:f2:23:1f:6a:
                    dc:b3:1c:3e:25:4f:ea:94:74:9a:10:27:37:5a:d5:
                    06:68:09:c1:63:79:a7:69:ad:e6:5d:bd:a1:99:21:
                    72:fc:92:e1:a1:50:3d:1d:4d:3d:62:40:f7:1b:e3:
                    c3:90:6f:29:39:a5:5a:3e:0a:34:3e:95:9e:df:58:
                    7b:01:84:bb:b8:4a:75:c4:68:a7:3b:ab:bf:44:bb:
                    7c:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EF:4B:06:CD:BA:1B:ED:02:67:0B:9C:C4:49:A3:72:9D:8F:CB:2E:46
            X509v3 Authority Key Identifier:
                keyid:E1:58:49:10:12:4A:F7:76:E3:0E:5A:CF:05:5D:6B:AE:17:61:A5:36

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4VhJEBJK93bjDlrPBV1rrhdhpTY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/7215e0-9ab8-4a13-a605-31ab32ff7c68/1/70sGzbob7QJnC5zESaNynY_LLkY.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/7215e0-9ab8-4a13-a605-31ab32ff7c68/1/4VhJEBJK93bjDlrPBV1rrhdhpTY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a13:3c0:1::-2a13:3c0:3:ffff:ffff:ffff:ffff:ffff
                  2a13:3c0:5::-2a13:3c0:9:ffff:ffff:ffff:ffff:ffff
                  2a13:3c0:10::/47

    Signature Algorithm: sha256WithRSAEncryption
         60:e0:15:e3:61:84:ff:18:25:18:ce:5f:29:02:d1:55:eb:2e:
         32:be:5d:fd:b8:9b:a9:4d:9b:8b:74:3b:e6:3a:2f:49:cb:13:
         e1:34:94:9a:9f:8f:b4:b0:29:11:01:fc:bb:36:c3:13:45:00:
         ff:0e:f3:10:b3:26:8e:42:ec:45:54:84:9d:3d:13:d9:63:d8:
         77:bf:f8:56:c5:be:fd:4f:bf:65:3b:07:ba:bf:22:00:3d:81:
         d0:b8:df:87:0b:8b:af:b5:0e:9a:1d:32:c0:73:bb:dc:d9:3d:
         d9:e7:c0:7f:80:cd:f8:9b:2b:59:23:28:d3:da:39:45:b1:40:
         75:d4:32:28:c6:cd:77:a8:18:12:b3:3f:50:07:cc:b8:39:8c:
         97:83:ff:e2:8a:f8:b5:a4:b1:05:8c:50:aa:32:84:a7:b9:17:
         97:dd:f8:06:e4:b2:2d:65:78:b8:62:3c:94:c6:26:10:b0:bc:
         40:fa:ab:87:6b:07:75:14:42:83:74:06:26:fe:97:38:59:ef:
         2c:f7:83:8b:34:62:6c:b5:b7:4c:73:a8:8d:1a:21:0a:4f:6f:
         0b:9c:8a:20:ff:9f:96:0c:32:9f:ae:b5:80:dc:9b:8b:78:c4:
         44:cc:34:5a:6d:f7:25:c0:9d:a8:da:8a:07:2e:9e:9b:ab:8a:
         0b:03:9a:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----