Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/78/6f6ce2-e6ee-4e2a-905d-f9cb0a7b206c/1/JrMdFI68zBle3ktHayD0dtQGI74.roa
File:                     JrMdFI68zBle3ktHayD0dtQGI74.roa (raw, json)
Hash identifier:          AZG2zjF6rfYg3eZj2A6NtYfO4rHX3pdlMIGQ1U+dxdc=
Subject key identifier:   26:B3:1D:14:8E:BC:CC:19:5E:DE:4B:47:6B:20:F4:76:D4:06:23:BE
Certificate issuer:       /CN=73c69d04583500c5ef81136831237593e0bb86ce
Certificate serial:       05835859
Authority key identifier: 73:C6:9D:04:58:35:00:C5:EF:81:13:68:31:23:75:93:E0:BB:86:CE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/c8adBFg1AMXvgRNoMSN1k-C7hs4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/78/6f6ce2-e6ee-4e2a-905d-f9cb0a7b206c/1/JrMdFI68zBle3ktHayD0dtQGI74.roa
Signing time:             Sat 01 Jan 2022 05:01:20 +0000
ROA not before:           Sat 01 Jan 2022 05:01:20 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     138990
IP address blocks:        2a05:1084::/32 maxlen: 48

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 92493913 (0x5835859)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73c69d04583500c5ef81136831237593e0bb86ce
        Validity
            Not Before: Jan  1 05:01:20 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=26b31d148ebccc195ede4b476b20f476d40623be
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:15:43:2f:16:85:c6:c8:48:8e:6d:f6:a8:54:
                    70:9d:bd:75:e1:53:c1:f2:f7:9b:90:95:39:ce:b5:
                    69:ac:6c:24:c3:99:47:1b:21:b4:e4:f1:c7:6a:25:
                    80:5a:a9:21:cd:93:d8:94:e7:d9:56:05:c9:3d:9c:
                    1f:4d:49:08:f7:20:87:e2:fe:1b:bc:d3:63:c9:7e:
                    20:bb:c2:b9:ec:c3:cf:38:2d:99:19:4c:26:50:13:
                    af:09:07:77:85:b3:6e:fd:5e:e2:30:12:96:4c:72:
                    15:c4:87:94:bb:80:d3:3d:fd:4d:13:d2:c7:dc:6d:
                    cf:8e:81:7c:65:54:c7:7d:a9:c3:0d:46:18:23:ae:
                    c5:81:8e:1e:98:20:ce:cf:91:26:9f:f0:0a:f4:2f:
                    3f:29:d9:6f:ef:55:04:93:42:1e:55:08:68:a1:f1:
                    70:7d:8a:be:5e:3a:47:8c:1d:1f:89:43:20:e4:c3:
                    87:1e:9f:60:d1:69:de:aa:99:6d:42:d3:b7:30:73:
                    9e:9c:b0:ee:ed:13:8b:eb:d9:a6:f6:db:e3:5e:a6:
                    d1:d1:52:c1:30:eb:c7:5a:23:68:d8:23:b7:b6:69:
                    22:f5:f5:38:da:a2:eb:28:1f:7f:4d:e7:c9:4e:1c:
                    e5:d8:93:30:b5:2b:85:17:16:3a:93:a1:22:cc:d3:
                    88:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                26:B3:1D:14:8E:BC:CC:19:5E:DE:4B:47:6B:20:F4:76:D4:06:23:BE
            X509v3 Authority Key Identifier:
                keyid:73:C6:9D:04:58:35:00:C5:EF:81:13:68:31:23:75:93:E0:BB:86:CE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8adBFg1AMXvgRNoMSN1k-C7hs4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/6f6ce2-e6ee-4e2a-905d-f9cb0a7b206c/1/JrMdFI68zBle3ktHayD0dtQGI74.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/78/6f6ce2-e6ee-4e2a-905d-f9cb0a7b206c/1/c8adBFg1AMXvgRNoMSN1k-C7hs4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a05:1084::/32

    Signature Algorithm: sha256WithRSAEncryption
         c1:15:f8:e9:4e:a0:07:ec:f3:87:74:1b:0f:71:9f:f4:c2:3d:
         78:90:52:f5:b7:0e:01:a7:87:54:a4:ad:9d:93:05:7a:7c:56:
         8c:5d:0d:be:2d:e1:82:56:f8:2d:0a:6f:18:c4:f3:48:a4:b8:
         3a:81:92:c8:78:1b:35:c0:32:1c:cb:e1:59:f5:2b:b3:f4:d3:
         2d:87:00:6c:77:97:f7:29:a8:0f:f6:ab:43:55:1b:78:7a:49:
         ff:4e:a6:22:06:00:e3:10:f2:ba:59:15:02:b1:b6:0f:81:7b:
         92:0c:06:98:d6:e7:f8:92:fa:0b:cf:ea:a9:40:a3:d4:51:47:
         ee:01:d5:f0:84:b5:c6:ab:0b:b3:6d:83:84:93:e2:44:d7:41:
         9e:90:5f:4c:17:12:35:fa:f0:36:29:f1:3c:6c:a5:05:7f:cc:
         5f:8b:a9:dc:fa:f7:25:c6:fb:52:07:65:31:63:f2:8a:a5:ee:
         c8:09:8e:60:39:9d:9f:b2:b2:22:72:f3:75:26:a9:79:7b:f6:
         c8:6e:b6:3d:be:5b:88:3a:9e:25:36:d8:f0:5f:bf:c5:9c:7a:
         b5:e7:8f:11:73:d0:1a:35:6e:5a:c7:31:02:87:4a:1f:ea:26:
         36:eb:44:71:31:f5:1f:b6:72:65:8f:4e:08:d1:72:7d:31:3c:
         ba:fd:28:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----