Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/TBJzI5RNhFC-0wVZD-Cj9gFjyEg.roa
File:                     TBJzI5RNhFC-0wVZD-Cj9gFjyEg.roa (raw, json)
Hash identifier:          h3bRuEGLH4eM+I+M7m7gIXVa/HXQpzj2692n/wFynJE=
Subject key identifier:   4C:12:73:23:94:4D:84:50:BE:D3:05:59:0F:E0:A3:F6:01:63:C8:48
Certificate issuer:       /CN=05976801363d375786152e4d061e75c8beb35058
Certificate serial:       01C14738
Authority key identifier: 05:97:68:01:36:3D:37:57:86:15:2E:4D:06:1E:75:C8:BE:B3:50:58
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/BZdoATY9N1eGFS5NBh51yL6zUFg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/TBJzI5RNhFC-0wVZD-Cj9gFjyEg.roa
Signing time:             Tue 08 Feb 2022 07:54:51 +0000
ROA not before:           Tue 08 Feb 2022 07:54:51 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     213154
IP address blocks:        2a0c:b641:100::/44 maxlen: 48

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 29443896 (0x1c14738)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=05976801363d375786152e4d061e75c8beb35058
        Validity
            Not Before: Feb  8 07:54:51 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=4c127323944d8450bed305590fe0a3f60163c848
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:60:0c:a5:22:92:75:3e:e6:70:ee:1a:93:5e:
                    6e:0d:3c:43:24:61:b0:34:f9:c5:a8:6d:57:87:5b:
                    1a:12:9e:36:e7:65:7e:4b:97:1c:23:df:f6:38:03:
                    ff:a1:bd:d8:25:e6:f8:8f:03:a2:d5:a1:87:16:35:
                    c6:48:ea:97:22:af:66:80:60:bc:57:86:b8:e4:7e:
                    87:ca:ab:42:57:89:e6:4a:40:d3:e3:4e:55:e3:40:
                    5d:6a:5e:7b:8d:c6:ce:a0:0c:ae:46:2e:91:c1:8a:
                    88:cc:b1:57:51:c2:b3:99:b6:3f:dd:a3:d5:d5:16:
                    c6:51:6d:a1:61:e1:88:03:5e:62:5f:5a:1e:9a:38:
                    c6:94:f2:dd:3b:16:6f:2c:35:9e:af:11:e0:d9:0a:
                    65:25:6b:f1:84:19:1c:ce:57:6b:f7:38:3a:51:4a:
                    4f:db:23:94:90:87:f0:5a:af:95:8a:1b:98:e0:ca:
                    c1:cd:da:ec:a4:1e:4a:a3:2a:46:ea:10:2f:08:88:
                    1b:77:28:5c:b2:58:d4:d1:02:6b:b9:20:37:8a:3c:
                    ba:64:39:35:03:e5:b2:01:e3:b7:c1:81:33:f2:63:
                    a6:91:f2:3d:65:9f:51:87:67:93:ac:bb:5e:78:ab:
                    9e:0c:ad:99:9b:61:11:56:83:41:a7:0c:1f:ab:4a:
                    b6:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4C:12:73:23:94:4D:84:50:BE:D3:05:59:0F:E0:A3:F6:01:63:C8:48
            X509v3 Authority Key Identifier:
                keyid:05:97:68:01:36:3D:37:57:86:15:2E:4D:06:1E:75:C8:BE:B3:50:58

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BZdoATY9N1eGFS5NBh51yL6zUFg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/TBJzI5RNhFC-0wVZD-Cj9gFjyEg.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/BZdoATY9N1eGFS5NBh51yL6zUFg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a0c:b641:100::/44

    Signature Algorithm: sha256WithRSAEncryption
         29:fb:af:7b:e4:2a:2a:fc:81:65:42:59:e5:83:7b:d3:b4:37:
         1b:05:1a:df:e2:97:4b:b6:5a:8e:c0:b7:c0:b5:80:9c:fa:f4:
         7a:58:00:9b:76:b9:35:e1:be:a6:10:c5:0b:83:ca:f1:a6:2e:
         86:b0:75:e6:6e:43:da:85:60:69:d4:31:b9:54:5a:e3:f3:3e:
         e3:cd:79:14:58:00:ed:a3:7b:40:86:a4:e5:f3:b1:18:89:fd:
         3c:8a:85:36:b8:65:ff:01:5f:5d:79:cf:b1:7d:04:1b:6a:93:
         83:e3:9e:d0:0a:0b:23:25:9f:f2:e0:4d:5f:37:40:7b:5e:c1:
         30:46:80:60:e6:20:24:7c:69:f5:65:d6:c2:10:01:4e:62:92:
         4a:77:8f:da:13:f4:7f:d6:37:01:ea:e9:27:98:55:09:83:d9:
         21:f6:13:82:e4:6d:5d:5e:46:24:9f:4f:31:3e:ce:15:c7:1e:
         5e:fe:cd:98:f6:22:87:17:22:d8:52:ed:b7:09:58:f9:86:73:
         c5:f4:af:7d:2c:a1:7e:28:f6:e5:4f:ee:a8:94:23:54:87:69:
         fb:77:80:dc:2f:cd:e2:23:64:a3:f5:b7:17:d1:88:ab:e9:72:
         d7:be:aa:38:bc:d1:66:4d:f6:12:3a:64:3f:86:0d:77:9a:56:
         e4:45:ab:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----