Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/A5iNVIwC4h0i0thTxrlPu3brSwE.roa
File:                     A5iNVIwC4h0i0thTxrlPu3brSwE.roa (raw, json)
Hash identifier:          rPzE2x9oereoMkj6E0/l4T16exKxMZxlIs9ShGsRYBY=
Subject key identifier:   03:98:8D:54:8C:02:E2:1D:22:D2:D8:53:C6:B9:4F:BB:76:EB:4B:01
Certificate issuer:       /CN=05976801363d375786152e4d061e75c8beb35058
Certificate serial:       0123672B
Authority key identifier: 05:97:68:01:36:3D:37:57:86:15:2E:4D:06:1E:75:C8:BE:B3:50:58
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/BZdoATY9N1eGFS5NBh51yL6zUFg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/A5iNVIwC4h0i0thTxrlPu3brSwE.roa
Signing time:             Sat 01 Jan 2022 00:59:44 +0000
ROA not before:           Sat 01 Jan 2022 00:59:44 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     207759
IP address blocks:        2a0c:b641:20::/44 maxlen: 48

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 19097387 (0x123672b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=05976801363d375786152e4d061e75c8beb35058
        Validity
            Not Before: Jan  1 00:59:44 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=03988d548c02e21d22d2d853c6b94fbb76eb4b01
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:3d:1c:f9:52:2e:fd:25:ab:9f:8b:ac:cc:27:
                    2b:ab:e9:9c:f1:69:bb:bc:a6:55:dd:7f:8a:55:0d:
                    4e:80:a0:56:d7:a1:20:25:f2:70:f2:bc:8b:19:69:
                    54:95:bd:e9:88:b0:2b:6c:39:58:52:13:a8:25:e3:
                    2f:16:27:b5:13:9d:4b:4e:f0:35:e9:7e:3f:4e:19:
                    7b:2b:01:20:9d:6b:88:67:5c:55:58:99:5c:74:35:
                    2c:0c:b9:99:9a:10:1b:25:cd:10:38:24:f6:43:d0:
                    3b:a7:62:38:0a:3e:86:56:70:df:22:6c:32:b8:2d:
                    35:c3:ba:fa:55:ec:9c:d5:90:73:38:79:f4:12:77:
                    2e:97:47:58:46:b3:39:02:be:ed:85:40:9d:3f:e3:
                    b4:d1:a9:c4:2a:e1:b6:34:4c:3c:a7:a9:57:cf:fe:
                    e2:ac:91:34:31:01:e5:76:c4:77:36:e3:10:93:00:
                    2a:86:39:a7:f5:40:d5:4b:fd:af:ad:51:65:fe:94:
                    05:ba:c2:9d:b8:24:fe:5c:5a:fa:62:3b:18:47:1f:
                    19:26:a9:c5:c2:f6:a0:4b:ef:f1:4c:e1:5b:be:43:
                    cd:07:38:9c:99:80:37:f5:0d:97:c7:6a:68:d7:a8:
                    23:c0:8e:7c:9e:3d:14:fe:cf:96:51:a3:39:35:4c:
                    25:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                03:98:8D:54:8C:02:E2:1D:22:D2:D8:53:C6:B9:4F:BB:76:EB:4B:01
            X509v3 Authority Key Identifier:
                keyid:05:97:68:01:36:3D:37:57:86:15:2E:4D:06:1E:75:C8:BE:B3:50:58

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BZdoATY9N1eGFS5NBh51yL6zUFg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/A5iNVIwC4h0i0thTxrlPu3brSwE.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/BZdoATY9N1eGFS5NBh51yL6zUFg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a0c:b641:20::/44

    Signature Algorithm: sha256WithRSAEncryption
         00:ff:3b:05:f3:63:66:7b:7c:9d:d5:cf:62:21:e7:2e:eb:0c:
         ea:bc:77:46:a8:43:47:fc:60:47:ff:e3:74:09:74:fa:07:e2:
         73:9c:82:67:be:5b:7b:23:b4:62:ba:4a:b3:d2:cf:7c:1b:2b:
         ff:58:e3:4d:da:7f:71:01:07:03:51:df:fc:31:5d:6a:f7:21:
         32:fa:7f:69:4c:a6:f8:40:dc:b7:7c:78:aa:81:e3:13:b8:5b:
         45:69:27:31:7d:2b:dd:89:ed:b4:a7:35:d9:70:1f:85:f1:52:
         5f:45:82:96:31:e3:7a:48:de:69:ef:d1:aa:b3:f9:79:b4:1c:
         4d:bc:f2:5e:be:37:48:bb:3f:e1:3b:f1:7f:42:3b:4f:35:b8:
         eb:d0:d9:69:8c:b7:d0:34:b4:d9:2f:c5:ea:36:00:96:1f:e5:
         a4:24:17:28:43:48:65:6c:f2:8f:51:83:c1:4e:80:6d:63:f7:
         b3:04:95:27:dc:49:26:09:03:9d:79:c8:31:f3:80:4d:24:63:
         4e:5a:ec:61:73:4e:65:c3:8a:fd:88:a5:03:6b:a7:5c:71:01:
         22:91:7b:73:a8:e8:c8:5b:b1:7d:b8:45:b2:0a:9e:01:67:20:
         2e:47:f0:c6:a7:e5:b7:02:f1:d7:4b:9a:82:57:a0:34:50:2e:
         ab:01:42:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----