Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/78/6f6ce2-e6ee-4e2a-905d-f9cb0a7b206c/1/bVo0tVaS--ymwNRI-J8n4HPRHG0.roa
File:                     bVo0tVaS--ymwNRI-J8n4HPRHG0.roa (raw, json)
Hash identifier:          A9OmNCx9OTmmoDMqFB5i8e+cca48MBI7nlWGPK9OIA0=
Subject key identifier:   6D:5A:34:B5:56:92:FB:EC:A6:C0:D4:48:F8:9F:27:E0:73:D1:1C:6D
Certificate issuer:       /CN=73c69d04583500c5ef81136831237593e0bb86ce
Certificate serial:       060D0AA9
Authority key identifier: 73:C6:9D:04:58:35:00:C5:EF:81:13:68:31:23:75:93:E0:BB:86:CE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/c8adBFg1AMXvgRNoMSN1k-C7hs4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/78/6f6ce2-e6ee-4e2a-905d-f9cb0a7b206c/1/bVo0tVaS--ymwNRI-J8n4HPRHG0.roa
Signing time:             Sat 19 Feb 2022 03:34:15 +0000
ROA not before:           Sat 19 Feb 2022 03:34:15 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     139317
IP address blocks:        2a0c:e640:1010::/44 maxlen: 48
                          2a0c:e640:1020::/44 maxlen: 48
                          2a0c:e640:6000::/36 maxlen: 48
                          2a0c:e640::/36 maxlen: 48
                          2a0c:e640:1000::/44 maxlen: 48

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 101517993 (0x60d0aa9)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73c69d04583500c5ef81136831237593e0bb86ce
        Validity
            Not Before: Feb 19 03:34:15 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=6d5a34b55692fbeca6c0d448f89f27e073d11c6d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:8b:51:f8:c6:47:2f:01:49:6c:c7:8e:4b:49:
                    c8:4e:ad:f4:c9:07:0c:ac:c2:bb:91:51:6f:81:03:
                    f7:7b:11:32:6e:ee:b5:af:42:60:92:b2:50:ae:5b:
                    93:a2:75:4c:30:8f:50:57:f4:d6:c0:d1:d4:51:ec:
                    ec:60:48:d4:41:29:b6:e6:85:73:99:ef:2f:b4:06:
                    ec:ee:7e:93:00:15:63:b2:2c:9f:81:06:af:cf:c7:
                    4e:56:f6:9c:48:35:f3:4e:ff:6a:b3:89:45:db:ce:
                    2f:e2:b3:80:05:78:a7:be:7e:d4:38:cd:98:cd:59:
                    cf:8c:28:04:0a:a2:d1:1e:73:a9:1b:66:5a:cf:51:
                    cd:47:00:7f:b2:b8:a8:84:98:22:16:e4:ad:9b:f1:
                    68:68:33:23:15:fa:91:4b:3a:6e:ef:ae:13:69:58:
                    ad:96:66:56:92:aa:83:24:55:dd:45:9d:ae:97:1d:
                    b5:74:00:6a:61:99:2e:2b:e7:a5:03:79:18:7d:c8:
                    02:f1:67:86:bd:37:93:c2:35:64:c7:2b:8f:10:7d:
                    a8:e0:c0:63:fd:c0:d0:e0:da:22:5c:5b:09:cc:88:
                    57:93:e7:fe:90:ab:98:27:8f:e9:5f:ac:12:d2:ed:
                    e3:a9:ea:76:24:22:34:b8:03:19:79:aa:83:53:0d:
                    1b:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6D:5A:34:B5:56:92:FB:EC:A6:C0:D4:48:F8:9F:27:E0:73:D1:1C:6D
            X509v3 Authority Key Identifier:
                keyid:73:C6:9D:04:58:35:00:C5:EF:81:13:68:31:23:75:93:E0:BB:86:CE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8adBFg1AMXvgRNoMSN1k-C7hs4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/6f6ce2-e6ee-4e2a-905d-f9cb0a7b206c/1/bVo0tVaS--ymwNRI-J8n4HPRHG0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/78/6f6ce2-e6ee-4e2a-905d-f9cb0a7b206c/1/c8adBFg1AMXvgRNoMSN1k-C7hs4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a0c:e640::-2a0c:e640:102f:ffff:ffff:ffff:ffff:ffff
                  2a0c:e640:6000::/36

    Signature Algorithm: sha256WithRSAEncryption
         cb:c6:6a:77:30:cd:38:fe:d4:59:1f:91:80:7a:94:ab:f6:72:
         e5:f8:e8:8c:a5:7f:e1:32:4f:12:8d:38:1a:cd:62:21:38:6d:
         b7:98:f2:98:02:94:9c:03:eb:2b:11:29:10:35:93:4d:a9:44:
         ec:fc:c0:51:6b:d3:55:c7:7f:cf:a7:73:72:30:e0:4b:f0:7d:
         1f:81:3a:97:66:6a:0d:3a:27:13:48:67:55:22:7d:1a:2d:bb:
         8d:3a:7d:fc:8f:9c:57:e4:03:f0:b7:72:48:03:c9:99:88:b2:
         73:6b:e4:a6:d0:22:a4:be:eb:1a:db:06:e1:65:bd:9c:98:98:
         48:f2:56:51:38:6a:dc:0a:c4:23:47:a0:7a:11:71:66:1c:ec:
         9e:c9:04:c1:f8:2d:b9:3b:16:ef:16:e9:e7:5d:b6:47:d5:d7:
         06:c4:19:2e:10:98:f6:ad:b8:af:d6:db:ed:4a:95:9e:b0:61:
         8f:70:53:99:17:45:c8:2b:af:85:02:ed:46:3e:b2:14:07:8b:
         7f:c8:51:80:5b:88:8b:2f:da:fb:a0:24:71:62:03:5e:d2:ff:
         90:82:a0:3f:29:d8:a9:96:ea:19:e2:12:da:11:16:23:2f:3d:
         dc:17:e1:3e:39:41:ed:d8:9c:66:95:ea:e8:02:07:d1:46:ae:
         ce:f5:98:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----