Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/f134c8-f814-4b71-957b-394acd21f39b/1/A6i-pP2T7KorDgDl8g4vekLdHlk.roa
File:                     A6i-pP2T7KorDgDl8g4vekLdHlk.roa (raw, json)
Hash identifier:          PVaEnQ/NPYXFS3tPD8iDQbDJhGzQG/YxWrHXtkCuzKc=
Subject key identifier:   03:A8:BE:A4:FD:93:EC:AA:2B:0E:00:E5:F2:0E:2F:7A:42:DD:1E:59
Certificate issuer:       /CN=b1a7b0d8de8251d36d7c83faf6bc7efec73b5034
Certificate serial:       08FB0882
Authority key identifier: B1:A7:B0:D8:DE:82:51:D3:6D:7C:83:FA:F6:BC:7E:FE:C7:3B:50:34
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/saew2N6CUdNtfIP69rx-_sc7UDQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/17/f134c8-f814-4b71-957b-394acd21f39b/1/A6i-pP2T7KorDgDl8g4vekLdHlk.roa
Signing time:             Sat 01 Jan 2022 16:00:21 +0000
ROA not before:           Sat 01 Jan 2022 16:00:21 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     29802
IP address blocks:        2a0b:b87:ffd1::/48 maxlen: 48

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 150669442 (0x8fb0882)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b1a7b0d8de8251d36d7c83faf6bc7efec73b5034
        Validity
            Not Before: Jan  1 16:00:21 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=03a8bea4fd93ecaa2b0e00e5f20e2f7a42dd1e59
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:23:44:2e:97:a3:c9:a4:70:bc:cf:24:e1:a4:
                    0c:c6:1b:72:2c:44:51:54:ec:73:af:b7:7f:bf:0b:
                    c8:4c:db:3a:9d:90:a3:4d:29:15:55:d1:62:b0:06:
                    16:06:aa:f8:bf:68:96:ee:2c:76:aa:3d:a4:40:2f:
                    9e:eb:6f:8f:ec:c0:56:20:be:3c:10:cc:5e:d8:76:
                    15:21:6f:47:26:67:4e:26:6d:d8:b6:69:a0:35:0b:
                    15:45:63:bc:6e:d8:e2:f5:8d:cd:a6:63:79:d2:11:
                    d3:17:65:70:63:20:53:fc:99:04:5a:f5:93:c0:b3:
                    87:8c:c5:37:5b:b3:43:54:69:cd:f9:d3:f0:21:fb:
                    de:40:8d:e7:f2:61:f0:85:a8:4d:ac:94:ce:00:f9:
                    3f:75:e9:2c:bb:40:4e:4f:cd:8e:f6:e4:cc:e8:12:
                    25:85:3c:f3:61:bd:89:21:a4:06:56:5b:ae:3d:31:
                    f9:d8:82:91:cd:9a:92:8b:ff:5a:8e:f6:15:2a:76:
                    12:a2:04:4f:a7:bd:d0:eb:f1:1d:9d:a0:7a:92:a0:
                    cb:72:f9:23:dd:d3:6f:13:70:0d:3c:fd:d2:3d:c8:
                    7b:ba:7d:7c:18:c0:69:11:30:bb:17:2e:26:3b:5f:
                    66:31:58:4a:1e:62:47:7a:95:19:b2:37:c6:51:12:
                    ab:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                03:A8:BE:A4:FD:93:EC:AA:2B:0E:00:E5:F2:0E:2F:7A:42:DD:1E:59
            X509v3 Authority Key Identifier:
                keyid:B1:A7:B0:D8:DE:82:51:D3:6D:7C:83:FA:F6:BC:7E:FE:C7:3B:50:34

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/saew2N6CUdNtfIP69rx-_sc7UDQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/f134c8-f814-4b71-957b-394acd21f39b/1/A6i-pP2T7KorDgDl8g4vekLdHlk.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/17/f134c8-f814-4b71-957b-394acd21f39b/1/saew2N6CUdNtfIP69rx-_sc7UDQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a0b:b87:ffd1::/48

    Signature Algorithm: sha256WithRSAEncryption
         db:bc:34:38:99:d7:84:0b:20:81:59:95:40:88:12:83:d1:d8:
         bf:15:c6:1b:08:14:d2:8a:01:35:6c:7e:f7:76:79:9a:ec:b2:
         e5:32:35:d0:13:fd:7d:15:62:88:4a:fd:66:90:cf:e6:3d:fc:
         2a:82:71:e0:ed:1d:00:d9:f9:5c:a9:b6:84:67:0b:01:f6:af:
         6b:44:f8:22:81:21:95:6d:93:43:0a:99:65:3e:f3:6e:0d:16:
         2e:07:08:d8:22:21:b5:7a:a0:65:34:15:37:a0:68:2f:a9:f0:
         bc:35:83:bc:0d:f7:5e:40:3d:7a:ed:f8:63:7d:ed:d0:03:c2:
         4a:66:94:7f:f1:ea:91:c6:ac:f3:a4:5e:13:8a:4c:97:ac:f4:
         5b:2e:50:21:38:02:83:fa:eb:72:58:dc:99:0e:ff:bf:b5:2c:
         09:c0:90:6d:51:e8:c3:be:6a:a3:d7:6d:e6:03:93:40:74:b1:
         d0:5c:9d:cc:36:d8:8a:49:72:24:97:d4:16:d4:60:57:c1:66:
         a1:4d:e2:75:c6:01:ea:fa:a6:1e:3a:85:69:37:21:1b:b9:9d:
         8e:87:3c:77:df:ff:a0:17:38:78:62:27:ee:9f:eb:07:d2:d9:
         60:7a:5b:44:5f:87:09:10:b5:5d:1f:4f:c0:31:33:df:c4:cf:
         1d:21:1c:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----