Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/JZUp6lqqAWFbXvc9shXxO2d9Jw4.roa
File:                     JZUp6lqqAWFbXvc9shXxO2d9Jw4.roa (raw, json)
Hash identifier:          aiaejeJDp2PjrxMrA/uLsQ6GNNbPYxktB9NohwUBA3M=
Subject key identifier:   25:95:29:EA:5A:AA:01:61:5B:5E:F7:3D:B2:15:F1:3B:67:7D:27:0E
Certificate issuer:       /CN=05976801363d375786152e4d061e75c8beb35058
Certificate serial:       01537351
Authority key identifier: 05:97:68:01:36:3D:37:57:86:15:2E:4D:06:1E:75:C8:BE:B3:50:58
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/BZdoATY9N1eGFS5NBh51yL6zUFg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/JZUp6lqqAWFbXvc9shXxO2d9Jw4.roa
Signing time:             Sat 01 Jan 2022 01:00:24 +0000
ROA not before:           Sat 01 Jan 2022 01:00:24 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     212625
IP address blocks:        2a0c:b641:2b0::/44 maxlen: 48

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 22246225 (0x1537351)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=05976801363d375786152e4d061e75c8beb35058
        Validity
            Not Before: Jan  1 01:00:24 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=259529ea5aaa01615b5ef73db215f13b677d270e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:4e:2f:b5:76:da:fe:68:d2:cb:90:18:76:68:
                    cc:8c:06:13:11:86:6e:8d:66:98:1c:0f:a5:75:9c:
                    36:a5:0f:9e:9e:23:0b:85:76:47:90:eb:64:5e:32:
                    af:a9:f1:09:b7:92:03:6e:a2:91:2c:68:8c:2f:64:
                    27:68:1a:c2:d8:af:44:cc:d5:de:8c:13:3e:86:6f:
                    a4:99:62:6a:7a:d3:aa:8c:4f:d5:9a:79:f2:0e:53:
                    f5:b9:e7:fb:b9:6a:68:75:1b:eb:89:76:7f:a1:23:
                    4f:af:3b:d9:7a:2b:a9:1e:d5:6b:6f:30:f1:b4:71:
                    45:25:fe:23:1a:25:98:68:f4:2c:78:db:1a:c1:86:
                    4b:7d:e7:22:f7:1b:fc:ee:10:17:15:3d:85:24:f6:
                    cb:24:28:1a:a8:9c:d0:af:53:8b:9e:17:11:ff:33:
                    a5:84:09:e8:73:4e:42:2a:52:ff:1b:93:fd:48:ec:
                    c0:22:f7:3a:3d:ac:31:fc:f7:37:18:86:48:0a:f8:
                    d1:4e:87:9e:5c:80:92:7a:80:10:5e:dd:52:ad:2a:
                    b5:6b:67:7d:4c:3b:85:69:97:2b:d6:7c:9c:a5:24:
                    a9:80:6d:ac:b5:a0:4b:b4:51:ef:1e:41:28:89:2c:
                    8a:13:e7:bc:9b:18:0c:90:2b:84:72:0f:cf:15:a8:
                    f7:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                25:95:29:EA:5A:AA:01:61:5B:5E:F7:3D:B2:15:F1:3B:67:7D:27:0E
            X509v3 Authority Key Identifier:
                keyid:05:97:68:01:36:3D:37:57:86:15:2E:4D:06:1E:75:C8:BE:B3:50:58

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BZdoATY9N1eGFS5NBh51yL6zUFg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/JZUp6lqqAWFbXvc9shXxO2d9Jw4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/BZdoATY9N1eGFS5NBh51yL6zUFg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a0c:b641:2b0::/44

    Signature Algorithm: sha256WithRSAEncryption
         0b:4b:57:03:14:47:77:6d:7a:84:c6:a2:7d:e7:3c:21:03:f3:
         26:db:ad:b0:ec:3c:82:67:ca:d9:99:f9:60:b1:ab:0e:da:b9:
         32:68:5f:53:96:d6:b5:60:6d:1a:64:cb:c2:20:54:87:af:06:
         9b:0a:5b:88:d7:84:fd:2c:96:f1:e2:34:a2:a6:72:9c:f8:e3:
         d1:6b:71:78:e1:61:3a:de:a4:3b:fa:21:df:0b:ac:05:6c:d3:
         10:6f:0e:8f:3a:90:39:ad:66:f9:ec:f8:9d:56:5f:03:84:5a:
         16:04:8e:f7:b8:08:be:5e:50:6a:4e:43:d8:41:3e:63:55:a9:
         6c:79:6d:0c:0b:29:ae:3f:66:76:0f:56:b7:1b:cf:7d:ea:ca:
         60:7f:db:fe:1e:4b:97:12:36:b8:36:c6:c7:a6:3a:6b:0d:c7:
         fd:86:6c:44:be:6e:bb:cc:ac:53:c3:29:f1:10:5e:99:dc:45:
         c9:92:c2:47:0b:08:53:4f:7a:52:a2:cf:ea:7a:9b:21:42:a9:
         7d:dc:49:87:ab:48:31:9f:76:e4:03:33:58:ee:ba:8c:78:20:
         4a:bb:69:bc:0a:59:67:c4:ad:0d:4d:95:7d:bd:a3:cf:70:bf:
         a3:38:29:56:b2:c9:a6:79:86:4f:24:3d:c3:8b:87:e6:01:42:
         27:84:7c:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----