Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7f/72bf2f-8e34-48a2-849a-a541d1bcee19/1/0nf_5ZCdJ94LpBpvBNRv4QKixgc.roa
File:                     0nf_5ZCdJ94LpBpvBNRv4QKixgc.roa (raw, json)
Hash identifier:          +GpMSboHzRoY8SDV70BcMZ+IlzhtE9VTTPSLtP6MFh0=
Subject key identifier:   D2:77:FF:E5:90:9D:27:DE:0B:A4:1A:6F:04:D4:6F:E1:02:A2:C6:07
Certificate issuer:       /CN=9361b5cd696825b74fccba7d97c3d0a2724ef3aa
Certificate serial:       0A477056
Authority key identifier: 93:61:B5:CD:69:68:25:B7:4F:CC:BA:7D:97:C3:D0:A2:72:4E:F3:AA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/k2G1zWloJbdPzLp9l8PQonJO86o.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/7f/72bf2f-8e34-48a2-849a-a541d1bcee19/1/0nf_5ZCdJ94LpBpvBNRv4QKixgc.roa
Signing time:             Tue 29 Mar 2022 06:07:28 +0000
ROA not before:           Tue 29 Mar 2022 06:07:28 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     38136
IP address blocks:        2a0e:aa07:e011::/48 maxlen: 48

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 172453974 (0xa477056)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9361b5cd696825b74fccba7d97c3d0a2724ef3aa
        Validity
            Not Before: Mar 29 06:07:28 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=d277ffe5909d27de0ba41a6f04d46fe102a2c607
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:61:57:c6:46:b3:73:6d:ca:ec:0b:3c:d7:45:
                    dd:ff:f1:8e:fd:a2:60:71:3d:96:3f:a1:80:ef:49:
                    b0:c3:9f:8e:a3:cc:00:11:2c:29:0f:34:e6:9a:42:
                    fa:e2:5d:25:43:d3:8a:3f:c2:f6:76:d8:90:07:fb:
                    8d:25:be:aa:be:b1:c1:a9:7f:e8:94:4b:28:77:7f:
                    4b:e5:19:41:ac:56:fa:54:17:39:55:fe:ea:88:3b:
                    d6:99:63:d1:44:be:e7:8e:05:3a:11:95:02:69:fc:
                    2f:ef:86:13:55:f8:17:8d:7b:c3:11:81:91:6e:19:
                    c2:07:53:99:65:6e:e4:17:ad:58:ed:dc:f1:56:28:
                    1b:b8:8e:a7:0b:87:3b:40:8e:ce:3b:b3:11:00:e6:
                    6d:8d:20:b8:15:d8:46:8a:91:40:17:4e:00:3e:b8:
                    ad:44:6e:99:8f:66:e4:f4:07:b1:eb:84:8f:13:20:
                    1c:ea:36:f7:ab:9d:10:ff:8d:b7:12:9f:03:39:71:
                    cc:59:eb:1c:e0:fd:ca:66:50:4b:d0:c9:d5:41:ab:
                    d2:7f:ef:05:e5:7b:6b:29:fe:58:df:9a:cf:ea:a6:
                    2a:c7:36:22:4c:ec:0e:da:fe:59:ba:7f:e5:19:20:
                    78:d6:f0:c4:5e:74:7a:cf:be:93:f5:14:f9:f1:d1:
                    97:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D2:77:FF:E5:90:9D:27:DE:0B:A4:1A:6F:04:D4:6F:E1:02:A2:C6:07
            X509v3 Authority Key Identifier:
                keyid:93:61:B5:CD:69:68:25:B7:4F:CC:BA:7D:97:C3:D0:A2:72:4E:F3:AA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/k2G1zWloJbdPzLp9l8PQonJO86o.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/72bf2f-8e34-48a2-849a-a541d1bcee19/1/0nf_5ZCdJ94LpBpvBNRv4QKixgc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/72bf2f-8e34-48a2-849a-a541d1bcee19/1/k2G1zWloJbdPzLp9l8PQonJO86o.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a0e:aa07:e011::/48

    Signature Algorithm: sha256WithRSAEncryption
         9d:2e:24:f7:94:f0:02:36:f2:a6:82:b9:f4:8c:c7:d1:81:9f:
         6c:58:90:fa:11:be:8d:dc:9f:e6:cb:63:18:5e:a7:96:d2:d4:
         11:08:c9:ab:26:4e:ce:ee:d7:fd:39:ac:03:48:b1:9c:f4:1a:
         0a:df:f9:2f:16:c8:77:96:00:d7:88:83:e2:22:a1:69:87:45:
         7d:99:ac:b9:7b:3c:de:a7:70:09:77:97:45:32:f7:c6:c3:91:
         9a:7d:af:6f:5a:4c:5c:88:6e:f1:0e:d6:6b:6b:44:b2:78:0e:
         a5:cf:c6:d3:a8:37:bd:61:41:74:b8:a4:38:2a:e2:b4:4c:b7:
         7c:4d:12:01:b7:fd:50:33:49:23:14:dc:69:5d:54:af:74:eb:
         34:93:68:1c:cf:11:38:fd:15:5b:77:d7:d3:df:75:8d:8e:12:
         7a:7f:07:75:cc:35:e6:9b:80:ab:38:ad:48:72:1a:ae:f2:4e:
         2a:5d:57:df:a4:e8:46:c8:15:6f:ab:d7:19:3b:23:b0:1c:eb:
         d8:e6:54:a0:42:a1:cb:42:fa:55:39:f5:33:92:21:ce:90:4d:
         a7:5b:43:94:f9:8d:0e:a7:c7:37:8f:da:c8:bf:9b:de:47:c1:
         c4:4f:89:25:c7:6a:0d:64:a6:f9:e9:fd:77:35:20:1f:87:d6:
         6a:fc:b7:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----