Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/78/6f6ce2-e6ee-4e2a-905d-f9cb0a7b206c/1/878ecZ3jgk9Mzr33BCKD3rVJ6U0.roa
File:                     878ecZ3jgk9Mzr33BCKD3rVJ6U0.roa (raw, json)
Hash identifier:          XhRpgTPkMOjtMlfWMrTVfJIw5wpg60s/U9k6aJSwAUk=
Subject key identifier:   F3:BF:1E:71:9D:E3:82:4F:4C:CE:BD:F7:04:22:83:DE:B5:49:E9:4D
Certificate issuer:       /CN=73c69d04583500c5ef81136831237593e0bb86ce
Certificate serial:       059851E7
Authority key identifier: 73:C6:9D:04:58:35:00:C5:EF:81:13:68:31:23:75:93:E0:BB:86:CE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/c8adBFg1AMXvgRNoMSN1k-C7hs4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/78/6f6ce2-e6ee-4e2a-905d-f9cb0a7b206c/1/878ecZ3jgk9Mzr33BCKD3rVJ6U0.roa
Signing time:             Sat 01 Jan 2022 05:01:33 +0000
ROA not before:           Sat 01 Jan 2022 05:01:33 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     211876
IP address blocks:        2a05:1083:ff0f::/48 maxlen: 48
                          2a05:1083:ff19::/48 maxlen: 48
                          2a05:1083:ff09::/48 maxlen: 48
                          2a05:1083:ff16::/48 maxlen: 48
                          2a05:1083:ff00::/40 maxlen: 48
                          2a05:1083:ff10::/48 maxlen: 48
                          2a05:1083:ff00::/48 maxlen: 48
                          2a0c:e640::/36 maxlen: 48
                          2a0c:e640:6000::/36 maxlen: 48
                          2a05:1083:ff12::/48 maxlen: 48
                          2a05:1083:ff02::/48 maxlen: 48
                          2a05:1083:ff17::/48 maxlen: 48
                          2a05:1083:ff11::/48 maxlen: 48
                          2a05:1083:ff01::/48 maxlen: 48
                          2a05:1083:ff0e::/48 maxlen: 48
                          2a05:1083:ff13::/48 maxlen: 48
                          2a05:1083:ff03::/48 maxlen: 48
                          2a05:1083:ff18::/48 maxlen: 48
                          2a05:1083:ff08::/48 maxlen: 48
                          2a0c:e640:1010::/44 maxlen: 48
                          2a0c:e640:1000::/44 maxlen: 48
                          2a0c:e640:1020::/44 maxlen: 48

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 93868519 (0x59851e7)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73c69d04583500c5ef81136831237593e0bb86ce
        Validity
            Not Before: Jan  1 05:01:33 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=f3bf1e719de3824f4ccebdf7042283deb549e94d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:60:d5:cd:7e:82:db:7b:ac:84:18:70:15:94:
                    74:02:cf:2c:a6:c2:0d:03:63:bf:d8:72:d1:31:12:
                    ca:9b:8e:e7:0e:8b:a9:d6:44:01:86:bb:63:8a:21:
                    93:c7:6d:96:5b:8c:e9:35:a4:00:4d:50:10:6e:2a:
                    a6:09:1a:e6:b1:a2:9d:68:ff:c6:3b:fa:27:af:0c:
                    90:d3:87:8f:53:f4:9d:04:42:69:48:67:f3:52:91:
                    c8:31:4e:98:17:e7:c2:22:4c:6a:fa:5f:e6:0d:6c:
                    5d:62:43:c2:a9:97:98:8d:ee:5a:c7:8f:0a:87:b5:
                    b1:32:24:b0:b0:4a:08:7a:95:fe:31:58:ba:65:ae:
                    cf:fe:33:ec:c8:87:5d:9f:f6:a5:62:65:76:88:66:
                    c8:cf:30:5b:a5:45:a4:ee:b5:de:14:ab:71:e1:83:
                    1d:55:be:ea:8f:5c:20:e6:71:b7:32:a8:5d:b0:80:
                    0d:32:c4:8e:f6:e6:76:b5:d0:ed:41:76:e0:7e:27:
                    da:49:0c:b0:c6:d2:a4:34:b3:26:11:6d:d5:fb:71:
                    4b:bd:6b:84:0b:72:9e:16:ad:89:36:ab:18:92:e6:
                    bc:12:7d:e8:4d:b2:03:b9:f1:4b:8f:3e:5f:01:7a:
                    3a:91:93:42:5e:fd:f3:c8:ad:e6:0e:64:57:42:c3:
                    d1:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F3:BF:1E:71:9D:E3:82:4F:4C:CE:BD:F7:04:22:83:DE:B5:49:E9:4D
            X509v3 Authority Key Identifier:
                keyid:73:C6:9D:04:58:35:00:C5:EF:81:13:68:31:23:75:93:E0:BB:86:CE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8adBFg1AMXvgRNoMSN1k-C7hs4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/6f6ce2-e6ee-4e2a-905d-f9cb0a7b206c/1/878ecZ3jgk9Mzr33BCKD3rVJ6U0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/78/6f6ce2-e6ee-4e2a-905d-f9cb0a7b206c/1/c8adBFg1AMXvgRNoMSN1k-C7hs4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a05:1083:ff00::/40
                  2a0c:e640::-2a0c:e640:102f:ffff:ffff:ffff:ffff:ffff
                  2a0c:e640:6000::/36

    Signature Algorithm: sha256WithRSAEncryption
         05:b3:57:7a:2f:eb:a6:5b:0b:9c:66:b3:38:c9:0a:5f:09:c0:
         68:06:c8:77:a8:4e:b5:6f:0a:64:44:5c:e5:4b:41:14:61:50:
         8b:96:c4:ae:a7:4c:72:ca:52:09:7b:a5:0a:bd:c3:e3:69:81:
         dc:44:a7:03:17:c8:00:f2:33:3b:08:f5:cd:09:48:94:14:a4:
         fb:46:43:85:b4:a3:e2:95:c7:81:85:63:c7:dc:52:24:1e:38:
         a5:60:43:05:43:19:57:14:c1:27:1f:77:5d:20:28:3c:97:78:
         3b:58:6f:2c:be:17:b4:17:4c:6e:6f:33:cf:72:9f:70:81:05:
         ce:f2:49:a5:f6:ae:fa:1c:9b:5c:31:b7:f3:a8:c0:6c:8a:9c:
         2f:39:03:20:46:af:b9:a3:3d:dc:fa:70:1b:57:28:35:4c:fe:
         4f:ed:4a:69:9b:6c:e1:49:78:9d:a7:c5:41:e2:1b:18:9d:bc:
         23:23:4b:f8:19:7b:06:af:e1:7f:fc:29:e0:64:f0:a1:ea:2b:
         83:d6:b8:a7:53:e8:fd:ff:27:23:cf:81:ed:e9:3a:47:54:0f:
         d9:f9:6c:ce:2e:da:f7:22:86:ca:2d:b2:ec:01:35:08:9d:63:
         21:e0:25:55:d0:79:67:d8:e2:00:a8:e9:f0:9f:65:42:b7:86:
         91:54:87:62
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----