Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/81/2a5623-f5c6-4315-8b7b-25f9336f9c77/1/3iX_p_fLBnyHJEfgwMl_-CDbBoo.roa
File:                     3iX_p_fLBnyHJEfgwMl_-CDbBoo.roa (raw, json)
Hash identifier:          NIHxGSrkxq0iuEIkkZm/OM471JwbnrlyqWNppYuxrDc=
Subject key identifier:   DE:25:FF:A7:F7:CB:06:7C:87:24:47:E0:C0:C9:7F:F8:20:DB:06:8A
Certificate issuer:       /CN=119109f0ef595ea8b68586483dbc6fb3cfe56f2b
Certificate serial:       0104A301
Authority key identifier: 11:91:09:F0:EF:59:5E:A8:B6:85:86:48:3D:BC:6F:B3:CF:E5:6F:2B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/EZEJ8O9ZXqi2hYZIPbxvs8_lbys.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/81/2a5623-f5c6-4315-8b7b-25f9336f9c77/1/3iX_p_fLBnyHJEfgwMl_-CDbBoo.roa
Signing time:             Tue 24 May 2022 14:49:13 +0000
ROA not before:           Tue 24 May 2022 14:49:13 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     25369
IP address blocks:        2a12:6980::/29 maxlen: 29

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 17081089 (0x104a301)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=119109f0ef595ea8b68586483dbc6fb3cfe56f2b
        Validity
            Not Before: May 24 14:49:13 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=de25ffa7f7cb067c872447e0c0c97ff820db068a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f9:8e:fd:4d:dc:00:b0:89:be:eb:66:00:d2:d9:
                    88:e5:37:60:d7:95:68:5b:f6:08:cb:65:7c:2c:ab:
                    e5:cd:8b:f9:e1:1f:93:16:06:b5:d8:fb:08:e1:81:
                    59:df:55:56:1a:42:47:ed:1f:f0:98:fb:ec:9c:ea:
                    d2:26:8b:bd:48:9e:0e:07:05:3f:18:53:7f:7f:95:
                    77:55:51:36:ed:c7:1c:42:03:0f:25:e6:27:81:75:
                    c3:c4:85:92:32:ca:04:d8:a3:28:80:35:45:ed:48:
                    74:c1:96:13:68:10:05:27:cf:3f:29:37:ab:5e:74:
                    9a:1d:5f:28:c5:d3:0c:dd:a5:fa:52:7d:7c:66:8a:
                    d2:ca:3c:74:91:b4:e8:7c:a6:75:ff:ed:12:51:29:
                    ba:31:fa:38:d1:67:73:79:ad:7c:d7:45:c7:b8:38:
                    a0:74:d0:16:78:7d:fa:c4:11:13:60:0d:f6:bd:ab:
                    3a:4d:9b:78:81:3b:98:d7:43:cc:9b:83:64:f7:a2:
                    fa:8d:49:d3:49:9e:41:db:e8:d0:d3:88:5e:37:5d:
                    39:34:7c:7c:94:f6:44:ed:ed:c8:62:ac:39:62:a2:
                    79:e8:73:12:1c:1c:f3:07:03:1b:26:29:51:de:04:
                    3c:f3:f0:1f:60:22:55:93:eb:28:3c:59:a5:34:d8:
                    f6:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DE:25:FF:A7:F7:CB:06:7C:87:24:47:E0:C0:C9:7F:F8:20:DB:06:8A
            X509v3 Authority Key Identifier:
                keyid:11:91:09:F0:EF:59:5E:A8:B6:85:86:48:3D:BC:6F:B3:CF:E5:6F:2B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EZEJ8O9ZXqi2hYZIPbxvs8_lbys.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/81/2a5623-f5c6-4315-8b7b-25f9336f9c77/1/3iX_p_fLBnyHJEfgwMl_-CDbBoo.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/81/2a5623-f5c6-4315-8b7b-25f9336f9c77/1/EZEJ8O9ZXqi2hYZIPbxvs8_lbys.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a12:6980::/29

    Signature Algorithm: sha256WithRSAEncryption
         90:4e:ff:d4:35:fa:8c:45:6d:05:88:9b:40:76:76:7a:39:39:
         64:17:c6:5d:1e:89:b5:f4:d5:51:dc:c7:1b:0d:f2:92:35:e5:
         a2:5c:ff:70:ae:fc:94:67:b9:de:c8:ac:1f:d9:7e:2a:03:ca:
         5e:32:79:15:e9:a1:0d:31:5c:0a:87:a9:2d:19:17:61:4f:55:
         fc:d8:04:ba:6f:7f:bc:40:9e:ef:fb:ae:6b:c7:4c:92:5b:7d:
         e5:08:4d:36:4b:c2:6c:26:6f:a8:a7:ec:62:55:20:32:a9:63:
         27:21:f7:f4:d8:cb:75:de:a1:c9:c5:2b:ae:1e:ee:ab:e3:27:
         92:11:cf:30:12:ee:5a:ea:62:a1:d7:50:29:c4:5a:0c:3e:38:
         63:4b:a0:d5:8e:a4:66:bb:d3:8d:c5:e9:9b:43:d5:84:43:80:
         9f:2d:a4:12:9c:05:dc:4b:5f:80:11:99:cd:75:31:25:d1:ab:
         a1:fe:ce:08:13:b6:97:95:52:d8:dd:4a:47:1d:8e:18:be:ca:
         6b:37:78:a4:5d:d4:19:c6:1e:14:5b:c0:28:cb:05:5f:76:1e:
         e7:2a:f5:7e:ef:10:94:dc:b0:cc:19:5c:c2:d2:17:29:87:fd:
         f9:8a:4d:ca:74:11:04:29:ba:04:47:47:0a:77:9e:c1:82:7a:
         e5:eb:78:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----