Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7a/f55757-5965-4270-beab-a0d6dbfac6eb/1/IG6OCm1vPg7U3EUI9hLP2A_jBbQ.roa
File:                     IG6OCm1vPg7U3EUI9hLP2A_jBbQ.roa (raw, json)
Hash identifier:          IxksOhjCnguuggqBFjOBFMjNxR2F35AjrbNOk1TaLVg=
Subject key identifier:   20:6E:8E:0A:6D:6F:3E:0E:D4:DC:45:08:F6:12:CF:D8:0F:E3:05:B4
Certificate issuer:       /CN=3f3bf511774b6e1d706bb2727b3d3125775a912f
Certificate serial:       02AA346D
Authority key identifier: 3F:3B:F5:11:77:4B:6E:1D:70:6B:B2:72:7B:3D:31:25:77:5A:91:2F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Pzv1EXdLbh1wa7Jyez0xJXdakS8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/7a/f55757-5965-4270-beab-a0d6dbfac6eb/1/IG6OCm1vPg7U3EUI9hLP2A_jBbQ.roa
Signing time:             Sat 01 Jan 2022 09:57:28 +0000
ROA not before:           Sat 01 Jan 2022 09:57:28 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     14618
IP address blocks:        2a0a:144::/35 maxlen: 48

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 44708973 (0x2aa346d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3f3bf511774b6e1d706bb2727b3d3125775a912f
        Validity
            Not Before: Jan  1 09:57:28 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=206e8e0a6d6f3e0ed4dc4508f612cfd80fe305b4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e3:5c:4d:b6:74:5b:98:b6:ee:1e:3d:83:65:55:
                    a0:0e:96:be:a2:32:29:c6:36:a1:8e:70:31:90:84:
                    c8:0a:91:51:2e:fa:c3:c6:87:6a:f9:e7:85:05:63:
                    85:a4:5b:3d:db:8b:1a:76:61:63:5a:de:7d:5b:c3:
                    68:50:4a:93:10:3a:88:06:ec:70:b8:41:2c:f9:13:
                    19:2e:da:5f:61:59:89:5f:e6:b8:33:bc:ff:a4:4b:
                    f6:36:dc:b5:ab:c7:75:75:54:59:5c:c3:92:c2:8c:
                    9d:93:92:cc:e9:c5:d9:f4:26:8f:db:57:11:69:8b:
                    19:42:b8:5a:e1:99:7e:3d:46:39:22:fd:27:8d:3f:
                    a1:10:fd:be:54:57:2e:00:1d:5b:21:0f:25:db:4a:
                    02:62:9c:76:a9:7b:92:36:07:3d:56:d3:52:69:00:
                    fd:0b:ec:f7:25:8c:a9:00:92:28:43:43:a9:99:da:
                    d7:5a:6e:2e:70:59:65:6d:10:2a:be:82:9b:26:58:
                    b6:65:cb:32:4f:92:85:41:26:08:a0:69:c1:ce:18:
                    81:de:93:a2:21:8e:1d:a0:65:2c:04:35:13:16:71:
                    97:a1:4c:b6:e0:52:08:7f:1f:37:45:6e:e2:dd:81:
                    68:a8:b2:1b:73:67:c8:f2:07:e6:cf:96:07:b4:75:
                    8d:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                20:6E:8E:0A:6D:6F:3E:0E:D4:DC:45:08:F6:12:CF:D8:0F:E3:05:B4
            X509v3 Authority Key Identifier:
                keyid:3F:3B:F5:11:77:4B:6E:1D:70:6B:B2:72:7B:3D:31:25:77:5A:91:2F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Pzv1EXdLbh1wa7Jyez0xJXdakS8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/f55757-5965-4270-beab-a0d6dbfac6eb/1/IG6OCm1vPg7U3EUI9hLP2A_jBbQ.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/f55757-5965-4270-beab-a0d6dbfac6eb/1/Pzv1EXdLbh1wa7Jyez0xJXdakS8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a0a:144::/35

    Signature Algorithm: sha256WithRSAEncryption
         11:33:7e:7f:78:1d:40:5f:96:04:57:cf:c2:94:ac:ae:37:85:
         79:63:61:a4:38:76:f8:0b:b1:4e:fc:da:64:21:fd:c2:7a:68:
         69:ab:42:07:57:8d:a8:20:0f:09:fb:09:a8:02:3a:7a:43:dd:
         c1:aa:03:1b:6a:bb:d2:6e:d6:d1:e1:9f:3a:c9:49:28:44:e9:
         ba:2e:b0:88:b6:1d:48:84:b3:b5:87:c7:72:87:7c:f8:0c:20:
         b0:a0:d3:f7:4a:7b:49:79:e0:10:15:33:8c:6b:f4:f2:31:f7:
         35:b1:b0:c0:5c:b6:d0:87:83:5f:25:6a:9a:fa:85:b9:2a:0d:
         d6:7d:9b:1e:41:e4:ce:29:23:b5:0e:19:4d:68:f1:da:a8:64:
         4d:6f:1d:b1:27:44:8d:ad:1f:62:06:64:9c:91:c1:7a:64:87:
         2a:2c:bb:fa:79:aa:f4:36:00:b5:7b:ac:89:8d:e0:8f:58:f7:
         63:0d:69:02:22:31:7d:f1:58:16:63:3d:74:3e:5e:6c:3f:c2:
         66:29:d9:7a:59:e4:36:8f:13:a9:80:47:fa:05:df:0e:94:56:
         42:da:93:a6:5a:e8:4a:c2:08:3f:27:a3:42:ea:96:ce:cb:46:
         4e:52:57:a4:8c:47:bc:e4:3a:9e:59:28:eb:52:5c:58:e2:e3:
         bf:7e:fa:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----