Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cd/58a19b-70c4-4a0e-b8ab-58c3f418f3fd/1/aJR8-0LrTmFO9OLHIghkpcXWkU0.roa
File:                     aJR8-0LrTmFO9OLHIghkpcXWkU0.roa (raw, json)
Hash identifier:          0+N1Eyw+YqZHqjDASQ7qL+GljGpjKjQ3KKJDic9mEzk=
Subject key identifier:   68:94:7C:FB:42:EB:4E:61:4E:F4:E2:C7:22:08:64:A5:C5:D6:91:4D
Certificate issuer:       /CN=a65f995603663a569430ccc617287e919df144a0
Certificate serial:       024EC945
Authority key identifier: A6:5F:99:56:03:66:3A:56:94:30:CC:C6:17:28:7E:91:9D:F1:44:A0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/pl-ZVgNmOlaUMMzGFyh-kZ3xRKA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/cd/58a19b-70c4-4a0e-b8ab-58c3f418f3fd/1/aJR8-0LrTmFO9OLHIghkpcXWkU0.roa
Signing time:             Sat 01 Jan 2022 15:06:30 +0000
ROA not before:           Sat 01 Jan 2022 15:06:30 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     62269
IP address blocks:        193.56.133.0/24 maxlen: 24
                          2a11:5b00::/32 maxlen: 48

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 38717765 (0x24ec945)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a65f995603663a569430ccc617287e919df144a0
        Validity
            Not Before: Jan  1 15:06:30 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=68947cfb42eb4e614ef4e2c7220864a5c5d6914d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:aa:28:cf:68:cd:ad:23:c5:84:2c:80:0f:9b:
                    f0:3b:82:dd:2e:e5:ca:0c:cd:a8:bd:5f:99:ab:4e:
                    d9:a7:3d:ba:94:31:22:5b:df:3b:ae:1d:02:ed:39:
                    e0:33:a0:e3:a2:5f:4e:65:4f:5f:26:41:c2:32:fb:
                    05:cf:64:77:d7:36:a6:19:54:ba:7a:ba:ea:fa:ad:
                    be:14:9b:ef:67:f9:f3:5d:fa:26:d2:56:11:f9:eb:
                    08:a4:58:58:33:28:2a:e8:f3:61:83:56:7a:a9:a6:
                    b8:7d:cb:41:21:2d:6b:c0:d3:9b:90:3a:6b:eb:59:
                    f0:34:e8:a9:44:ef:c6:46:42:92:4a:40:f8:a2:f7:
                    14:13:08:c5:cf:78:2b:98:9a:6f:99:86:8c:a1:f9:
                    87:92:25:13:41:e9:61:23:85:f7:e5:21:b1:95:ff:
                    64:cd:02:0b:18:e3:a8:3e:1e:10:9b:dd:ab:b8:93:
                    0d:bd:ef:d0:b2:1f:40:40:4a:68:b6:5c:53:17:4f:
                    d1:b7:f9:6e:a6:a9:ab:6b:11:72:f2:0a:f7:7d:82:
                    00:17:05:4e:06:48:74:7a:21:5f:fe:6a:69:a6:4c:
                    62:e8:12:d6:23:6e:c1:78:e5:b0:33:cb:70:4d:9f:
                    1f:d5:7f:6b:1a:56:1f:f0:96:51:d8:4b:a9:b3:61:
                    06:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                68:94:7C:FB:42:EB:4E:61:4E:F4:E2:C7:22:08:64:A5:C5:D6:91:4D
            X509v3 Authority Key Identifier:
                keyid:A6:5F:99:56:03:66:3A:56:94:30:CC:C6:17:28:7E:91:9D:F1:44:A0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pl-ZVgNmOlaUMMzGFyh-kZ3xRKA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/58a19b-70c4-4a0e-b8ab-58c3f418f3fd/1/aJR8-0LrTmFO9OLHIghkpcXWkU0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/58a19b-70c4-4a0e-b8ab-58c3f418f3fd/1/pl-ZVgNmOlaUMMzGFyh-kZ3xRKA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  193.56.133.0/24
                IPv6:
                  2a11:5b00::/32

    Signature Algorithm: sha256WithRSAEncryption
         3d:26:ab:99:ff:be:23:92:61:fb:cf:66:ef:be:7c:c1:d4:3d:
         f5:33:c7:a2:c7:71:70:7c:f9:db:fd:cd:7d:e3:12:c5:d8:39:
         ef:29:15:99:b7:18:e0:9b:71:e9:60:a3:9d:b9:7e:e1:30:a9:
         7a:30:76:3f:4b:eb:66:da:67:ac:66:e1:38:47:1d:46:a1:cf:
         a5:35:4d:23:53:4c:14:8b:fa:0f:e4:9c:a2:6f:93:19:64:c9:
         05:a5:66:42:a8:89:43:77:ad:25:03:9b:e4:fa:1f:8d:61:9d:
         ac:ec:e5:d5:61:b2:d9:fd:a5:1d:cd:82:7d:37:26:52:10:7d:
         ad:c0:67:f2:9a:e3:40:90:a5:6f:77:0f:1c:e9:30:8e:97:d6:
         93:dc:d8:94:a0:c3:bf:4a:9d:a5:86:aa:5c:40:64:17:d1:d1:
         39:49:76:df:21:64:9e:22:46:31:d6:da:68:66:70:73:59:11:
         e9:23:23:34:fd:50:3e:26:2b:03:c1:83:48:1b:2a:e8:34:18:
         b7:3c:a0:ef:5f:6a:71:ad:74:5e:88:83:79:b7:c5:9a:e9:2f:
         74:9f:be:1e:fe:b4:2b:34:c5:2d:b5:62:b4:28:54:d4:18:ad:
         65:b5:69:f3:4f:d8:95:20:57:bc:17:99:47:f8:08:dd:33:c8:
         5a:b4:e6:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----