Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/78/6f6ce2-e6ee-4e2a-905d-f9cb0a7b206c/1/w3agLxHX8IIuSxPGcBt8k6Z1F-Y.roa
File:                     w3agLxHX8IIuSxPGcBt8k6Z1F-Y.roa (raw, json)
Hash identifier:          a40vEZjthk+FVDT9QVGVRJX0epnYkXLJGAgAH6JEbp4=
Subject key identifier:   C3:76:A0:2F:11:D7:F0:82:2E:4B:13:C6:70:1B:7C:93:A6:75:17:E6
Certificate issuer:       /CN=73c69d04583500c5ef81136831237593e0bb86ce
Certificate serial:       059BACE3
Authority key identifier: 73:C6:9D:04:58:35:00:C5:EF:81:13:68:31:23:75:93:E0:BB:86:CE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/c8adBFg1AMXvgRNoMSN1k-C7hs4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/78/6f6ce2-e6ee-4e2a-905d-f9cb0a7b206c/1/w3agLxHX8IIuSxPGcBt8k6Z1F-Y.roa
Signing time:             Sat 01 Jan 2022 05:01:34 +0000
ROA not before:           Sat 01 Jan 2022 05:01:34 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     213316
IP address blocks:        2a0c:e643:8000::/33 maxlen: 48

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 94088419 (0x59bace3)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73c69d04583500c5ef81136831237593e0bb86ce
        Validity
            Not Before: Jan  1 05:01:34 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=c376a02f11d7f0822e4b13c6701b7c93a67517e6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:34:68:82:84:c7:a4:92:6c:6f:f3:9b:29:85:
                    35:aa:00:9d:87:43:50:16:93:e6:e5:4d:ce:3f:c4:
                    e4:f5:ec:83:31:69:13:18:5b:63:55:5a:a8:d6:18:
                    4a:fc:d2:3b:5c:74:dc:f0:b1:b2:bd:72:eb:f0:dc:
                    c0:0c:91:6f:6c:6f:e1:c0:7d:1f:3c:e2:40:af:0e:
                    ed:aa:6b:51:75:60:fb:6e:8c:77:45:ae:13:5e:45:
                    a2:50:0c:e9:0b:d2:23:76:a6:56:4e:ad:11:d0:3b:
                    c9:d9:c8:f3:3f:c9:78:96:ad:ed:29:a2:ce:8b:08:
                    7c:e7:8a:8a:8c:1c:12:6e:fa:88:28:c1:13:49:5c:
                    f2:f1:ca:47:ac:c0:87:a8:96:ae:5a:12:23:15:d9:
                    7e:49:67:b9:8d:35:a0:ae:6e:28:9d:e5:fb:c1:8a:
                    98:c3:70:bf:0c:a0:ac:78:22:cc:62:79:d2:3d:28:
                    8f:c1:3c:34:7a:f3:4d:e1:f2:bb:40:2f:c4:3f:c4:
                    92:9a:89:5b:77:8a:69:14:8a:ff:6c:06:a7:f6:d4:
                    a5:65:f2:48:ce:e4:d1:ce:2b:2f:50:13:67:f4:3a:
                    f6:a7:8c:34:5e:25:9f:77:97:2f:4c:2c:9e:45:27:
                    ff:a7:89:34:f8:c5:bf:f5:9a:d4:80:ea:5c:fe:f7:
                    f3:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C3:76:A0:2F:11:D7:F0:82:2E:4B:13:C6:70:1B:7C:93:A6:75:17:E6
            X509v3 Authority Key Identifier:
                keyid:73:C6:9D:04:58:35:00:C5:EF:81:13:68:31:23:75:93:E0:BB:86:CE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8adBFg1AMXvgRNoMSN1k-C7hs4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/6f6ce2-e6ee-4e2a-905d-f9cb0a7b206c/1/w3agLxHX8IIuSxPGcBt8k6Z1F-Y.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/78/6f6ce2-e6ee-4e2a-905d-f9cb0a7b206c/1/c8adBFg1AMXvgRNoMSN1k-C7hs4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a0c:e643:8000::/33

    Signature Algorithm: sha256WithRSAEncryption
         7b:23:ac:81:36:1b:56:6c:82:66:5b:0a:c5:ce:1e:08:97:7f:
         2d:c3:60:8c:c1:c8:28:eb:83:a4:3b:8b:e4:c0:d3:a9:d4:c2:
         02:d6:29:66:8e:b3:ed:89:a2:26:5d:d9:27:63:7d:87:75:77:
         5d:8e:b5:25:27:a8:28:44:c9:1a:5b:69:8f:ef:f0:66:3c:a9:
         28:6d:49:84:62:01:41:40:2d:8b:84:6c:f5:6b:8c:72:15:9e:
         14:47:b4:e6:5c:fb:71:dd:08:ce:e1:2c:a5:ae:dc:b4:5c:4d:
         8a:2d:e3:b4:8b:0e:0f:1b:21:e5:95:12:a2:c9:1a:f2:2d:8c:
         a8:b8:3e:29:76:9f:ef:81:0e:55:ed:cc:26:89:d4:c5:b8:c7:
         60:11:5b:e2:ca:62:ec:e5:72:2f:db:43:ce:86:b6:a4:d9:2d:
         63:70:5d:da:a4:2e:25:10:31:31:c3:45:3b:dc:80:05:af:cb:
         6f:c7:b7:5b:b9:57:d0:ee:e7:ee:ec:36:c3:86:de:42:bc:17:
         c6:19:5c:ed:6a:43:ed:c9:bf:de:66:01:16:28:b2:c7:ed:7e:
         43:75:ed:01:57:b0:f3:9e:bb:9d:75:97:cd:ce:c1:ba:fb:24:
         60:0b:ba:71:f0:06:44:78:97:b7:13:94:71:50:e5:44:8f:bc:
         f2:d5:ef:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----