Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/87/97f49a-7a95-4dd5-8c74-55369cf507ee/1/C9sbfhDESaJbCi8dCT0yGrL21IM.roa
File:                     C9sbfhDESaJbCi8dCT0yGrL21IM.roa (raw, json)
Hash identifier:          o5jmWj6djUefiqmNbWpLUICSwWxf7ScsuzRJdLDOCmU=
Subject key identifier:   0B:DB:1B:7E:10:C4:49:A2:5B:0A:2F:1D:09:3D:32:1A:B2:F6:D4:83
Certificate issuer:       /CN=b37e215a415ed7b5de4b6dc12f2f7b7750c3d66f
Certificate serial:       A4765C
Authority key identifier: B3:7E:21:5A:41:5E:D7:B5:DE:4B:6D:C1:2F:2F:7B:77:50:C3:D6:6F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/s34hWkFe17XeS23BLy97d1DD1m8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/87/97f49a-7a95-4dd5-8c74-55369cf507ee/1/C9sbfhDESaJbCi8dCT0yGrL21IM.roa
Signing time:             Sun 05 Jun 2022 01:17:20 +0000
ROA not before:           Sun 05 Jun 2022 01:17:20 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     211350
IP address blocks:        2a12:bec0:74ef::/48 maxlen: 48

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 10778204 (0xa4765c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b37e215a415ed7b5de4b6dc12f2f7b7750c3d66f
        Validity
            Not Before: Jun  5 01:17:20 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=0bdb1b7e10c449a25b0a2f1d093d321ab2f6d483
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:44:25:64:a2:a8:48:09:34:21:a4:69:68:22:
                    ab:02:07:af:ec:b1:36:07:92:fb:32:5b:d1:aa:05:
                    fc:e6:21:c1:18:5a:0c:73:62:4b:c8:f0:24:1f:c7:
                    13:31:f0:35:90:62:3a:1a:4d:40:92:00:19:80:b2:
                    a5:6f:bd:b9:1b:5a:da:9e:7c:d2:18:7c:b0:07:ef:
                    4e:f2:a0:ff:ea:a1:60:f2:95:a9:f4:f5:c8:1c:87:
                    6f:a3:fb:2a:6b:4e:22:ef:af:73:9f:0a:ec:2c:00:
                    96:2c:36:37:77:e0:d4:88:99:24:a0:93:a9:d7:2e:
                    9f:14:b9:06:0a:f9:28:6f:d7:67:67:2e:bc:cf:18:
                    1e:c2:91:2d:a0:b7:ab:57:c4:aa:b5:ac:81:86:46:
                    a4:9d:96:b0:24:cc:99:60:d7:2e:a6:24:73:34:b3:
                    12:40:9c:07:6d:7f:07:54:24:39:2d:4b:86:75:5a:
                    3d:e2:d7:14:cd:ae:dc:42:6d:8b:a6:6c:d6:ca:f3:
                    09:8d:4a:fc:af:81:a8:f7:f1:6f:31:51:2b:03:11:
                    dc:4e:43:06:a9:7d:4a:c7:b1:d7:ee:59:6a:e0:6c:
                    75:b8:05:1d:ce:28:c8:6c:41:5e:28:87:a5:83:69:
                    89:7b:d8:32:d0:32:5a:f3:52:f7:59:39:15:e7:9b:
                    54:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0B:DB:1B:7E:10:C4:49:A2:5B:0A:2F:1D:09:3D:32:1A:B2:F6:D4:83
            X509v3 Authority Key Identifier:
                keyid:B3:7E:21:5A:41:5E:D7:B5:DE:4B:6D:C1:2F:2F:7B:77:50:C3:D6:6F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/s34hWkFe17XeS23BLy97d1DD1m8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/87/97f49a-7a95-4dd5-8c74-55369cf507ee/1/C9sbfhDESaJbCi8dCT0yGrL21IM.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/87/97f49a-7a95-4dd5-8c74-55369cf507ee/1/s34hWkFe17XeS23BLy97d1DD1m8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a12:bec0:74ef::/48

    Signature Algorithm: sha256WithRSAEncryption
         14:46:6b:42:6e:bc:cb:8d:f4:22:f7:10:49:34:75:5a:35:d1:
         92:e7:f9:2f:d7:a9:9d:03:b3:3e:e4:0b:2a:d8:bb:1c:fe:b9:
         ca:a0:fc:a7:91:db:b5:6c:a8:34:70:4b:12:68:15:a9:a5:bb:
         7a:b5:eb:8a:ce:cb:42:a6:63:10:bb:b9:12:69:c8:16:0a:f2:
         52:0a:7c:fd:0f:8f:a4:a2:dc:7c:72:ac:30:0a:8d:17:64:21:
         0e:be:8e:ab:a1:72:fd:e8:28:29:c4:36:eb:ab:55:e8:e2:ad:
         af:64:6d:8e:2b:f2:26:2a:76:54:53:8a:c4:7b:4e:96:e6:3c:
         ab:8b:bb:ad:d7:eb:40:81:be:67:b5:e3:d1:72:73:83:fa:3c:
         95:77:d7:e1:8d:6c:ce:9a:42:3a:90:8e:92:43:4d:41:69:77:
         d4:49:a8:21:13:1b:c1:ba:49:5d:0f:f3:57:4d:ea:49:17:99:
         0a:85:18:17:c8:8d:05:d3:dd:48:4b:d9:00:5b:51:3d:65:99:
         1f:20:99:75:51:88:e5:06:9e:86:c5:d6:a9:eb:d3:5e:b1:33:
         04:ff:d7:49:6f:eb:eb:16:2b:cf:1b:b5:99:b8:c1:10:01:3e:
         39:32:f0:b2:51:4c:d6:a0:b3:c1:d2:84:5c:30:42:b6:2a:ea:
         ad:da:55:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----