Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/78/6f6ce2-e6ee-4e2a-905d-f9cb0a7b206c/1/HC9Jx7X66hltO8-gnGk4CSX654s.roa
File:                     HC9Jx7X66hltO8-gnGk4CSX654s.roa (raw, json)
Hash identifier:          Rj5HF7lTH8VQbPonGRHMeko1+3PUTiaBGCGD2tMJrWQ=
Subject key identifier:   1C:2F:49:C7:B5:FA:EA:19:6D:3B:CF:A0:9C:69:38:09:25:FA:E7:8B
Certificate issuer:       /CN=73c69d04583500c5ef81136831237593e0bb86ce
Certificate serial:       060D91DC
Authority key identifier: 73:C6:9D:04:58:35:00:C5:EF:81:13:68:31:23:75:93:E0:BB:86:CE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/c8adBFg1AMXvgRNoMSN1k-C7hs4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/78/6f6ce2-e6ee-4e2a-905d-f9cb0a7b206c/1/HC9Jx7X66hltO8-gnGk4CSX654s.roa
Signing time:             Sat 19 Feb 2022 03:34:15 +0000
ROA not before:           Sat 19 Feb 2022 03:34:15 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     211876
IP address blocks:        2a0c:e640:1010::/44 maxlen: 48
                          2a0c:e640:1000::/44 maxlen: 48
                          2a0c:e640:1020::/44 maxlen: 48
                          2a0c:e640:6000::/36 maxlen: 48
                          2a0c:e640::/36 maxlen: 48

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 101552604 (0x60d91dc)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73c69d04583500c5ef81136831237593e0bb86ce
        Validity
            Not Before: Feb 19 03:34:15 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=1c2f49c7b5faea196d3bcfa09c69380925fae78b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:6a:03:69:3f:fe:23:81:dd:03:d2:de:86:fe:
                    ca:5d:62:03:80:50:b6:8b:4d:15:af:5c:42:b5:1e:
                    0d:10:c9:fe:3b:e8:b6:87:2d:05:ad:b4:9f:f5:b1:
                    27:2a:c9:a1:5f:5c:81:60:e0:f4:85:82:ba:f5:19:
                    3e:e5:e6:93:e6:28:89:52:3e:0e:b6:20:37:3d:f8:
                    e0:56:b7:39:01:b0:3b:3b:61:0f:06:08:06:a7:2f:
                    54:b1:9b:85:fe:f3:a3:ff:e2:0c:b5:9c:6e:b0:a6:
                    6f:da:b6:8f:3e:45:25:aa:5c:fa:27:3e:25:2f:cc:
                    03:88:67:21:86:b6:49:f8:17:0b:b1:b9:dc:3f:70:
                    a2:01:24:c8:e7:1b:31:73:f1:fc:68:7e:c7:86:df:
                    08:a3:48:01:99:ae:9a:b3:5d:57:67:2c:33:53:bc:
                    e4:27:d5:cb:bb:3d:75:fa:02:8c:85:56:fd:7a:8e:
                    f1:33:02:b3:c9:b2:d4:c1:ed:4d:90:7a:51:41:31:
                    21:fd:09:7c:4a:9b:7e:46:e3:9a:bc:3b:06:74:9f:
                    c3:01:3f:ea:f7:66:59:ba:7a:61:dd:83:26:88:0e:
                    d1:ed:4f:58:70:74:ce:55:52:41:ac:ec:40:06:30:
                    e9:53:00:a4:ba:f8:0a:eb:79:82:1f:e0:53:02:58:
                    81:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1C:2F:49:C7:B5:FA:EA:19:6D:3B:CF:A0:9C:69:38:09:25:FA:E7:8B
            X509v3 Authority Key Identifier:
                keyid:73:C6:9D:04:58:35:00:C5:EF:81:13:68:31:23:75:93:E0:BB:86:CE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8adBFg1AMXvgRNoMSN1k-C7hs4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/6f6ce2-e6ee-4e2a-905d-f9cb0a7b206c/1/HC9Jx7X66hltO8-gnGk4CSX654s.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/78/6f6ce2-e6ee-4e2a-905d-f9cb0a7b206c/1/c8adBFg1AMXvgRNoMSN1k-C7hs4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a0c:e640::-2a0c:e640:102f:ffff:ffff:ffff:ffff:ffff
                  2a0c:e640:6000::/36

    Signature Algorithm: sha256WithRSAEncryption
         27:c4:7c:84:0a:52:e3:e8:be:6e:96:e9:88:9d:cd:5d:8d:d7:
         b6:91:e5:ea:bc:5c:62:e8:d3:55:d1:61:e7:b5:08:8e:28:8f:
         3d:06:4e:dd:4a:f6:f3:ad:68:ad:df:99:e8:8c:d2:62:d4:a6:
         e9:f6:b1:92:f8:ae:bf:8b:c9:04:3c:83:95:03:ad:5f:89:0f:
         b5:1a:00:98:64:bb:d9:4d:d5:1c:78:6e:93:f1:ef:a2:4d:3b:
         1c:b8:58:6c:de:2f:6e:c1:24:c3:2f:48:cc:ba:1c:20:ef:95:
         71:25:52:2c:87:18:03:d3:61:c2:85:a8:56:4e:f8:67:ee:45:
         9e:fd:28:da:4d:38:b6:8c:f7:84:06:a0:5e:ca:c9:85:bc:e4:
         a5:0e:44:c7:5a:3a:08:21:6a:c5:c5:28:0b:96:2b:db:14:2d:
         49:65:6c:79:aa:e0:ca:c5:d5:c6:0a:bd:8a:c0:2f:20:34:e0:
         f8:66:d0:27:6a:88:3c:b2:81:65:b0:fc:32:bf:0c:f0:58:65:
         8f:a8:6d:16:f2:5f:12:f4:32:0a:46:60:3c:8b:2b:45:79:71:
         c8:87:bd:24:38:7d:87:e6:52:97:3e:ce:d9:a7:78:73:80:82:
         f8:eb:c7:24:86:78:4b:6e:42:3f:33:67:79:40:f1:b6:69:b7:
         5a:8d:bf:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----