Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/C3Bj1e61-Amwrq9lON_u6Bwo2bU.roa
File:                     C3Bj1e61-Amwrq9lON_u6Bwo2bU.roa (raw, json)
Hash identifier:          HRV/AQQnk5fK+EFkUpPrXvFGvZtOOOw08P+5YOF13SE=
Subject key identifier:   0B:70:63:D5:EE:B5:F8:09:B0:AE:AF:65:38:DF:EE:E8:1C:28:D9:B5
Certificate issuer:       /CN=05976801363d375786152e4d061e75c8beb35058
Certificate serial:       012F2CCB
Authority key identifier: 05:97:68:01:36:3D:37:57:86:15:2E:4D:06:1E:75:C8:BE:B3:50:58
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/BZdoATY9N1eGFS5NBh51yL6zUFg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/C3Bj1e61-Amwrq9lON_u6Bwo2bU.roa
Signing time:             Sat 01 Jan 2022 00:59:49 +0000
ROA not before:           Sat 01 Jan 2022 00:59:49 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     209606
IP address blocks:        2a0c:b641:200::/44 maxlen: 48

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 19868875 (0x12f2ccb)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=05976801363d375786152e4d061e75c8beb35058
        Validity
            Not Before: Jan  1 00:59:49 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=0b7063d5eeb5f809b0aeaf6538dfeee81c28d9b5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:5f:80:63:6a:37:0b:fd:25:1a:d6:f2:03:9b:
                    ee:41:3e:86:2a:f0:82:b8:74:bb:6f:19:8b:af:bb:
                    62:d2:86:f9:1c:53:eb:e8:4e:2e:60:07:00:62:6f:
                    f2:41:f1:8b:d8:8b:33:42:49:f0:1f:75:02:3b:ae:
                    fb:73:0d:67:a8:48:be:8c:bb:42:29:8a:8c:a6:ef:
                    6b:d7:4a:2a:ee:d8:f5:ad:11:6a:7a:8d:9a:78:f6:
                    17:26:8a:87:58:cd:aa:36:11:50:68:96:b6:8d:37:
                    9e:f2:bf:24:a2:a4:20:2a:e2:3f:b4:ca:f3:e2:fc:
                    3f:65:4a:dd:ab:a3:b3:3d:91:f9:57:d5:2f:7b:04:
                    26:8f:bd:05:cc:1c:cb:d0:a4:5c:9d:4d:fd:c7:54:
                    ab:39:5a:33:d8:23:81:d2:0a:7e:02:23:5b:de:c9:
                    13:3f:7f:e3:b8:96:2e:54:f9:5c:08:9c:3a:4d:6d:
                    f7:a6:da:81:a3:79:56:17:51:29:01:63:ed:b1:41:
                    f7:d4:1f:6f:3d:6e:64:8f:4a:3a:f9:1a:bf:54:2e:
                    b7:c9:7f:ad:75:16:50:37:fe:5a:c6:11:89:96:ab:
                    89:bc:54:f3:af:ba:bb:d8:64:bf:71:89:d9:84:dd:
                    47:7d:42:c1:c8:2d:91:cd:6f:76:05:95:f9:c9:88:
                    41:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0B:70:63:D5:EE:B5:F8:09:B0:AE:AF:65:38:DF:EE:E8:1C:28:D9:B5
            X509v3 Authority Key Identifier:
                keyid:05:97:68:01:36:3D:37:57:86:15:2E:4D:06:1E:75:C8:BE:B3:50:58

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BZdoATY9N1eGFS5NBh51yL6zUFg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/C3Bj1e61-Amwrq9lON_u6Bwo2bU.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/BZdoATY9N1eGFS5NBh51yL6zUFg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a0c:b641:200::/44

    Signature Algorithm: sha256WithRSAEncryption
         98:52:e5:3c:1c:15:7c:40:86:51:28:c1:96:c0:a8:2d:e6:5d:
         ff:d6:3d:90:a4:1d:aa:8d:9a:e4:31:e3:0a:46:b3:10:34:ee:
         28:2b:c0:ed:69:f0:71:ac:07:a5:0d:4e:66:1e:05:75:5d:5c:
         d6:eb:cc:58:e8:0d:78:26:76:a4:39:07:08:55:87:46:a9:ea:
         d2:bc:f7:52:8c:04:7b:c0:dc:c8:bf:1e:84:e3:8e:03:62:d7:
         0e:4a:9f:76:ea:6b:ac:43:66:c7:cb:86:9d:1e:9a:d1:fd:b7:
         11:66:ec:8f:e0:5b:79:f3:c9:b5:f1:1d:76:51:c2:e0:5c:97:
         4f:f2:8c:b4:71:2e:03:88:00:62:47:21:d8:6a:99:d5:17:78:
         f4:98:7b:c1:6f:91:7d:0d:97:34:1f:9d:e8:28:5f:f4:1e:fa:
         18:41:db:c3:e6:30:34:b3:1f:da:f2:65:ec:1e:89:26:3d:2a:
         1a:d4:d1:22:a5:cc:b7:30:4b:45:d0:9e:f0:e2:0d:1f:9d:8a:
         b0:39:b8:0e:25:50:4d:47:5c:21:3c:56:75:cf:9b:db:6e:b8:
         4a:12:09:be:2e:bf:bf:de:c6:7a:c4:56:6f:ee:ed:12:c2:c8:
         fc:eb:5e:e3:58:52:db:28:47:22:c7:81:e3:b4:5d:85:8a:51:
         5f:58:a2:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----