Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/25/30dc85-2dd8-4b1c-b151-4bd63adc7354/1/5FGxPWW_3gMOzNEPFDN0vrVWGYY.roa
File:                     5FGxPWW_3gMOzNEPFDN0vrVWGYY.roa (raw, json)
Hash identifier:          1pxcOKTP07PzfQy9BxwWIyIgLCdGrGgubVXq1hLcCHI=
Subject key identifier:   E4:51:B1:3D:65:BF:DE:03:0E:CC:D1:0F:14:33:74:BE:B5:56:19:86
Certificate issuer:       /CN=bf84113545d9000760f66062a4221933a2e959d8
Certificate serial:       03422B6A
Authority key identifier: BF:84:11:35:45:D9:00:07:60:F6:60:62:A4:22:19:33:A2:E9:59:D8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/v4QRNUXZAAdg9mBipCIZM6LpWdg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/25/30dc85-2dd8-4b1c-b151-4bd63adc7354/1/5FGxPWW_3gMOzNEPFDN0vrVWGYY.roa
Signing time:             Sat 01 Jan 2022 00:57:59 +0000
ROA not before:           Sat 01 Jan 2022 00:57:59 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     208861
IP address blocks:        2a10:2ec0::/29 maxlen: 48
                          2a0c:ab06::/32 maxlen: 32
                          2a0c:ab05::/32 maxlen: 32
                          2a0c:ab03::/32 maxlen: 32
                          2a0c:ab07:2000::/36 maxlen: 36
                          2a0c:ab07:3000::/36 maxlen: 36
                          2a0c:ab07:c000::/36 maxlen: 36
                          2a0c:ab07:5000::/36 maxlen: 36
                          2a0c:ab07:f000::/36 maxlen: 36
                          2a0c:ab07:e000::/36 maxlen: 36
                          2a0c:ab07:d000::/36 maxlen: 36
                          2a10:2ec1::/32 maxlen: 32

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 54668138 (0x3422b6a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bf84113545d9000760f66062a4221933a2e959d8
        Validity
            Not Before: Jan  1 00:57:59 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=e451b13d65bfde030eccd10f143374beb5561986
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:c5:04:39:32:4b:9b:85:b7:b9:d0:5b:2a:fe:
                    4a:15:6b:ad:41:f4:bd:ac:e9:b1:f7:07:86:03:d8:
                    b5:38:b7:17:2e:62:ef:3e:a9:44:d7:55:5d:f6:26:
                    0d:2e:fe:8a:8c:0e:09:26:c2:2e:82:f7:a3:c2:41:
                    a0:a8:a8:ce:09:e0:33:c4:6c:36:67:51:d9:82:5e:
                    9d:de:9e:c5:13:16:64:bd:45:2f:f9:6e:e3:87:09:
                    9f:13:09:13:74:61:e1:a4:55:31:fb:2f:2d:7e:a8:
                    80:7c:9f:9a:a3:25:9a:9c:9b:af:d9:e9:c5:34:e2:
                    7c:d9:d9:0b:23:5d:dc:a6:0f:c5:05:c8:ac:68:08:
                    29:0a:33:fd:93:9f:fa:e0:00:0a:e7:da:e2:e8:48:
                    99:62:4f:d9:20:80:af:17:53:a9:67:19:23:92:a5:
                    1c:dc:fe:94:85:1f:5c:81:e1:da:c3:de:59:cf:74:
                    9f:77:60:60:22:5d:95:b4:97:77:f6:e2:28:a9:c1:
                    78:0b:e7:32:90:19:55:c0:44:b6:78:b2:e0:11:42:
                    1f:c9:ca:91:2b:3b:6c:53:b1:e2:35:80:fa:96:ef:
                    ae:ca:3f:2c:ee:f6:bd:4e:e9:0d:b7:a1:eb:32:a3:
                    4c:de:7c:fb:ee:e3:1f:6f:38:75:5a:fb:5e:41:22:
                    13:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E4:51:B1:3D:65:BF:DE:03:0E:CC:D1:0F:14:33:74:BE:B5:56:19:86
            X509v3 Authority Key Identifier:
                keyid:BF:84:11:35:45:D9:00:07:60:F6:60:62:A4:22:19:33:A2:E9:59:D8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/v4QRNUXZAAdg9mBipCIZM6LpWdg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/30dc85-2dd8-4b1c-b151-4bd63adc7354/1/5FGxPWW_3gMOzNEPFDN0vrVWGYY.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/25/30dc85-2dd8-4b1c-b151-4bd63adc7354/1/v4QRNUXZAAdg9mBipCIZM6LpWdg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a0c:ab03::/32
                  2a0c:ab05::-2a0c:ab06:ffff:ffff:ffff:ffff:ffff:ffff
                  2a0c:ab07:2000::/35
                  2a0c:ab07:5000::/36
                  2a0c:ab07:c000::/34
                  2a10:2ec0::/29

    Signature Algorithm: sha256WithRSAEncryption
         a8:b5:39:81:8f:68:c9:cf:82:be:2a:29:3c:a8:98:28:8b:31:
         a1:4d:87:35:f8:74:9e:ee:59:50:c5:ff:ec:8b:3c:33:59:91:
         b5:a6:66:9f:59:df:72:a6:c5:cd:bf:94:4e:c1:ac:30:8e:25:
         e3:8e:fd:a9:10:16:b4:eb:14:6d:1f:38:40:89:d5:5b:ab:8a:
         69:29:bf:7d:87:6a:6e:b5:07:c5:f6:99:98:c6:75:b4:a8:3f:
         db:bf:21:2d:83:fe:be:a1:49:69:a5:f7:43:2b:b8:96:70:7e:
         35:c9:ef:34:2d:c0:f3:16:bc:d8:a1:d3:df:1e:d6:19:27:f6:
         ed:d9:55:d1:4d:01:82:8a:d8:25:da:8e:d1:33:dc:c1:1e:da:
         0b:e9:fd:3a:09:b9:b9:48:bd:ee:e5:e4:1e:bf:a8:84:86:99:
         84:c5:4a:6f:0a:e6:60:5a:35:1c:9b:8a:6b:c4:14:10:23:53:
         77:a7:d6:eb:e4:a0:d5:8a:9d:79:ef:c2:c6:bc:b9:c3:09:16:
         61:b7:91:c7:22:07:26:05:74:82:ed:2b:48:84:db:17:70:86:
         36:72:bd:d1:11:8e:9b:75:e7:74:12:ba:45:1e:bf:5a:c2:8e:
         9a:74:d0:5c:5a:ff:b9:0a:ae:ac:33:bc:7c:06:78:77:59:fe:
         84:fe:05:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----