Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fe/d1a717-4cf3-4ae5-b0fc-0bd9ddf3970e/1/IxI2RQ8K4N4U_veynNBGeSKYX5Y.roa
File:                     IxI2RQ8K4N4U_veynNBGeSKYX5Y.roa (raw, json)
Hash identifier:          B28RTrE+dOqYT/NU0xxVfZffKQTAQdHN5bQBJO4tmo0=
Subject key identifier:   23:12:36:45:0F:0A:E0:DE:14:FE:F7:B2:9C:D0:46:79:22:98:5F:96
Certificate issuer:       /CN=8d892f4ded92257e67ba74f1762c8bc914ebd61c
Certificate serial:       0184C2AC944D14C8FA2114C2B895D70E8C70
Authority key identifier: 8D:89:2F:4D:ED:92:25:7E:67:BA:74:F1:76:2C:8B:C9:14:EB:D6:1C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/jYkvTe2SJX5nunTxdiyLyRTr1hw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/fe/d1a717-4cf3-4ae5-b0fc-0bd9ddf3970e/1/IxI2RQ8K4N4U_veynNBGeSKYX5Y.roa
Signing time:             Tue 29 Nov 2022 09:16:40 +0000
ROA not before:           Tue 29 Nov 2022 09:16:40 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     39892
IP address blocks:        2001:67c:1098::/48 maxlen: 48

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:84:c2:ac:94:4d:14:c8:fa:21:14:c2:b8:95:d7:0e:8c:70
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8d892f4ded92257e67ba74f1762c8bc914ebd61c
        Validity
            Not Before: Nov 29 09:16:40 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=231236450f0ae0de14fef7b29cd0467922985f96
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:e1:e4:39:74:98:5c:d3:4d:0d:49:9a:44:cb:
                    a3:77:8c:7b:93:cd:88:be:f3:b1:14:3a:84:11:f3:
                    ae:2c:49:36:fa:05:7b:1e:ad:9b:ea:ee:51:7c:10:
                    15:a5:00:e3:55:65:93:2b:5f:61:ba:ef:4f:5b:b6:
                    7b:a2:0c:3f:d6:ab:c0:52:28:b3:90:96:24:37:eb:
                    b1:c0:d1:0c:9b:12:02:e7:9e:6c:ea:6a:f0:8a:9d:
                    6c:9a:3f:02:b5:9e:b0:b4:c4:b5:c6:b7:33:89:4c:
                    5e:5e:a3:8a:b4:9e:30:7a:6a:14:a9:05:94:36:7e:
                    e2:dd:89:f4:b3:64:88:5c:c3:49:7b:e9:62:87:91:
                    89:04:9b:61:18:f4:49:50:61:a8:8c:9e:d2:1e:f1:
                    b8:d2:18:7e:97:45:55:2a:1c:8f:4f:75:6a:71:38:
                    9a:21:64:de:cc:30:e2:74:60:89:71:3f:cd:e5:40:
                    c9:e8:c0:d7:ae:6f:50:0a:23:db:4f:41:0d:7d:1d:
                    7b:c4:de:eb:9a:d6:02:20:4f:ff:73:4c:80:9b:5e:
                    d0:95:10:6c:c0:aa:d8:ea:83:78:e9:ba:cf:da:99:
                    0a:e8:a5:f2:ef:36:72:3e:52:a5:e4:14:18:09:40:
                    90:c6:09:14:40:9d:4b:56:a3:5f:6a:2f:71:7f:4e:
                    06:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                23:12:36:45:0F:0A:E0:DE:14:FE:F7:B2:9C:D0:46:79:22:98:5F:96
            X509v3 Authority Key Identifier:
                keyid:8D:89:2F:4D:ED:92:25:7E:67:BA:74:F1:76:2C:8B:C9:14:EB:D6:1C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jYkvTe2SJX5nunTxdiyLyRTr1hw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/d1a717-4cf3-4ae5-b0fc-0bd9ddf3970e/1/IxI2RQ8K4N4U_veynNBGeSKYX5Y.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/d1a717-4cf3-4ae5-b0fc-0bd9ddf3970e/1/jYkvTe2SJX5nunTxdiyLyRTr1hw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:67c:1098::/48

    Signature Algorithm: sha256WithRSAEncryption
         18:5a:64:aa:53:75:35:b5:26:93:f5:35:98:24:df:0c:63:f5:
         57:1c:00:4b:0e:e1:12:1b:ec:27:f1:32:6f:85:4d:83:89:8b:
         d5:9a:3c:f5:7c:e1:a6:dc:db:6a:aa:d8:14:21:96:5f:5d:20:
         81:e4:07:5b:26:6c:1d:1d:73:98:2e:20:51:ec:d2:07:a9:26:
         60:e8:fb:13:32:8d:c7:5a:6f:47:2a:f6:b4:5c:95:d6:5c:85:
         1a:cc:de:68:c0:ca:32:04:c0:35:ce:5f:ef:05:5c:68:11:7b:
         ec:fa:da:a5:9f:1e:81:e9:cd:8c:14:c3:dd:1c:8b:32:2e:b0:
         4d:24:e2:0c:9e:8c:cc:4d:40:6c:6e:5b:ae:f6:88:29:d7:a1:
         68:0a:5b:09:fd:bc:3b:b5:b4:7a:a6:04:d1:29:ed:76:c9:dc:
         bd:99:db:02:fb:4f:e6:c8:f9:98:07:64:cf:f5:25:15:dd:b5:
         f1:5b:2a:3b:b5:14:a9:05:47:9e:8a:84:6f:6a:bb:83:c4:b7:
         99:d0:a7:89:9d:d0:e9:e8:f6:5d:c6:43:dc:9d:fa:dc:a4:6a:
         c7:32:ad:84:a4:0f:f9:98:74:31:a9:58:6b:37:15:ac:c1:6c:
         ca:6f:51:44:e6:55:7e:29:df:ce:af:42:c4:a4:7b:b4:d1:30:
         0d:26:82:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----