Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/78/6f6ce2-e6ee-4e2a-905d-f9cb0a7b206c/1/aTsvXbks3nT_plrUtrTlygk0AaM.roa
File:                     aTsvXbks3nT_plrUtrTlygk0AaM.roa (raw, json)
Hash identifier:          FkklvW5ewjp0ccqkYwZaOvcB9zY+CGa9XDgwrYNZtis=
Subject key identifier:   69:3B:2F:5D:B9:2C:DE:74:FF:A6:5A:D4:B6:B4:E5:CA:09:34:01:A3
Certificate issuer:       /CN=73c69d04583500c5ef81136831237593e0bb86ce
Certificate serial:       05912EA7
Authority key identifier: 73:C6:9D:04:58:35:00:C5:EF:81:13:68:31:23:75:93:E0:BB:86:CE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/c8adBFg1AMXvgRNoMSN1k-C7hs4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/78/6f6ce2-e6ee-4e2a-905d-f9cb0a7b206c/1/aTsvXbks3nT_plrUtrTlygk0AaM.roa
Signing time:             Sat 01 Jan 2022 05:01:28 +0000
ROA not before:           Sat 01 Jan 2022 05:01:28 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     209650
IP address blocks:        2a0d:2687::/32 maxlen: 48

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 93400743 (0x5912ea7)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73c69d04583500c5ef81136831237593e0bb86ce
        Validity
            Not Before: Jan  1 05:01:28 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=693b2f5db92cde74ffa65ad4b6b4e5ca093401a3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:be:1a:3c:d7:d1:59:34:5d:19:7c:72:b5:5b:
                    36:6b:fb:53:f2:4d:c0:f1:6d:42:6b:66:f2:54:a5:
                    51:50:3a:70:98:90:8b:2d:c2:39:24:3f:5f:db:2f:
                    01:55:4a:e6:1a:c5:26:d8:bb:41:0a:73:22:ab:bf:
                    aa:59:6e:2d:e6:2c:aa:e8:5f:0a:e5:d4:1a:a0:d5:
                    7d:3e:f2:70:6d:79:81:35:08:10:54:c6:1b:bc:59:
                    d1:ad:17:fd:1b:bc:0d:5e:69:60:6b:13:4a:4b:37:
                    2b:3c:c6:91:9f:63:c1:1b:7f:fd:7e:a9:46:ba:12:
                    30:11:58:8c:09:01:79:73:89:a4:c7:b1:5c:55:36:
                    60:81:6a:9f:e7:57:dd:d9:9a:66:15:01:2e:25:6b:
                    9b:8b:88:27:af:2c:86:7b:2e:fd:f4:b5:f9:58:51:
                    c3:b0:5c:63:d3:3a:9b:5e:3d:2f:4f:52:30:3b:9d:
                    4d:1c:e8:21:be:0c:5d:f6:24:27:91:20:d5:cf:f9:
                    4a:92:f9:f2:ad:10:79:4f:23:4b:2a:3e:28:92:e1:
                    66:33:2e:47:d3:19:f3:81:99:22:7d:03:9a:21:de:
                    ea:9b:37:0f:df:65:b2:7b:bb:24:aa:b4:0c:0d:17:
                    c7:c2:ef:59:27:94:59:38:d1:1d:45:e7:f0:6e:ba:
                    65:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                69:3B:2F:5D:B9:2C:DE:74:FF:A6:5A:D4:B6:B4:E5:CA:09:34:01:A3
            X509v3 Authority Key Identifier:
                keyid:73:C6:9D:04:58:35:00:C5:EF:81:13:68:31:23:75:93:E0:BB:86:CE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8adBFg1AMXvgRNoMSN1k-C7hs4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/6f6ce2-e6ee-4e2a-905d-f9cb0a7b206c/1/aTsvXbks3nT_plrUtrTlygk0AaM.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/78/6f6ce2-e6ee-4e2a-905d-f9cb0a7b206c/1/c8adBFg1AMXvgRNoMSN1k-C7hs4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a0d:2687::/32

    Signature Algorithm: sha256WithRSAEncryption
         00:f7:85:a7:40:58:f8:60:eb:1a:42:d7:35:94:7a:b5:4f:ce:
         cb:84:72:01:70:b8:24:7e:79:17:fb:f3:99:09:f4:85:4b:1c:
         8f:46:cf:fb:4a:97:76:bb:a6:ea:6e:2c:f1:fd:6c:0c:03:b7:
         b7:be:f7:cc:fa:a9:de:83:45:f6:45:2e:7a:3d:c2:e0:bd:1d:
         9f:99:dd:6a:47:fb:60:64:87:d4:de:9c:c6:e6:d9:f1:1f:35:
         9c:fe:b4:75:9e:12:57:d9:2f:0f:53:a1:db:21:6f:f8:86:22:
         cc:26:9c:0a:43:15:0d:25:74:52:cf:2d:ef:88:c2:a0:f7:d5:
         bc:4f:95:ed:28:da:89:6b:2e:f9:22:10:d1:30:63:fa:a1:e4:
         4f:ab:9f:5f:07:21:ba:fe:51:8a:df:40:00:64:e3:61:2e:a1:
         1a:76:25:10:bf:04:a1:07:1a:6c:6a:20:fa:07:02:88:14:33:
         ac:64:ca:9c:37:06:09:7f:3e:26:77:70:c5:ed:ec:8f:1f:0d:
         ef:37:09:2e:ee:3a:69:41:0a:1b:17:19:98:55:16:82:aa:ab:
         4f:f1:18:6d:63:52:bb:80:84:ad:41:da:99:41:f0:89:44:e3:
         dd:57:d7:00:f6:bf:18:c3:63:cd:cf:fa:3b:91:1a:f7:7d:12:
         0e:3d:3b:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----