Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/99/2ece62-1d8c-450c-91e8-8eeb757cf545/1/l-rLWXZ9if2VGFxqrVCi6O05EUo.roa
File:                     l-rLWXZ9if2VGFxqrVCi6O05EUo.roa (raw, json)
Hash identifier:          E2yeKceUcg0/bQ1/qodEpDJTyR55F3fx63eJ645KJEY=
Subject key identifier:   97:EA:CB:59:76:7D:89:FD:95:18:5C:6A:AD:50:A2:E8:ED:39:11:4A
Certificate issuer:       /CN=d673d849b7d5047376d57e6f796f0018b70b4506
Certificate serial:       08A3086A
Authority key identifier: D6:73:D8:49:B7:D5:04:73:76:D5:7E:6F:79:6F:00:18:B7:0B:45:06
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1nPYSbfVBHN21X5veW8AGLcLRQY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/99/2ece62-1d8c-450c-91e8-8eeb757cf545/1/l-rLWXZ9if2VGFxqrVCi6O05EUo.roa
Signing time:             Sat 01 Jan 2022 02:51:51 +0000
ROA not before:           Sat 01 Jan 2022 02:51:51 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     206159
IP address blocks:        2a01:190:1500::/48 maxlen: 48

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 144902250 (0x8a3086a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d673d849b7d5047376d57e6f796f0018b70b4506
        Validity
            Not Before: Jan  1 02:51:51 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=97eacb59767d89fd95185c6aad50a2e8ed39114a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:b4:40:18:23:7b:0d:db:df:d7:7c:18:8e:5f:
                    8f:77:ca:94:9d:e4:ef:dd:f2:2b:a2:a7:3a:0f:5d:
                    41:cf:87:e9:e3:51:18:9f:ec:07:1f:d4:41:c1:9a:
                    bf:72:3b:9b:50:b2:93:3b:86:72:3f:eb:81:2b:d4:
                    5e:2b:d4:81:b1:c5:3b:e0:55:15:39:ba:c2:dc:69:
                    4f:16:9f:a2:84:d0:69:39:ef:b1:d9:c7:21:9f:47:
                    8f:62:25:54:f8:75:a3:c7:6e:6a:dd:eb:5e:e0:97:
                    f7:8e:82:86:d0:2f:00:0e:6c:47:23:02:69:49:da:
                    71:d0:48:81:cb:a7:0f:e1:8c:81:37:57:39:5a:4a:
                    22:dc:72:5a:51:34:e3:7c:43:e0:b4:27:d5:b4:e5:
                    d4:d9:60:8b:62:92:04:6c:d0:6c:ad:eb:35:02:37:
                    6b:cd:9c:f1:90:aa:bc:6d:d6:0d:4c:b4:45:73:12:
                    f5:e3:9a:f9:49:03:99:78:29:f7:3d:78:46:e1:e1:
                    4b:38:2d:96:5c:c0:25:9c:30:9e:e5:9e:a3:53:eb:
                    52:50:9c:ab:76:b4:fc:d1:32:fa:f6:93:f8:9b:60:
                    0d:be:4f:18:44:ec:7b:27:10:3f:f2:35:cb:42:85:
                    7b:5e:a9:5a:7c:c0:06:e2:d8:a8:10:bd:ca:76:ee:
                    19:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                97:EA:CB:59:76:7D:89:FD:95:18:5C:6A:AD:50:A2:E8:ED:39:11:4A
            X509v3 Authority Key Identifier:
                keyid:D6:73:D8:49:B7:D5:04:73:76:D5:7E:6F:79:6F:00:18:B7:0B:45:06

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1nPYSbfVBHN21X5veW8AGLcLRQY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/99/2ece62-1d8c-450c-91e8-8eeb757cf545/1/l-rLWXZ9if2VGFxqrVCi6O05EUo.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/99/2ece62-1d8c-450c-91e8-8eeb757cf545/1/1nPYSbfVBHN21X5veW8AGLcLRQY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a01:190:1500::/48

    Signature Algorithm: sha256WithRSAEncryption
         d4:75:04:02:d5:bd:ec:97:f9:2c:a6:66:24:b4:97:c0:77:52:
         15:04:c3:94:b6:93:3f:ae:ef:74:09:1c:ec:b2:d8:3b:06:8a:
         b7:18:be:cc:99:f7:5a:36:6e:e5:25:df:b5:2e:cb:89:e6:d0:
         00:d3:64:e5:c6:27:e4:04:79:79:5e:63:57:68:e5:db:5b:c5:
         bd:10:c9:b2:2c:51:aa:38:a3:48:6e:c1:f8:28:b6:a5:4f:0e:
         c4:bc:64:ba:8b:b4:a6:1c:ab:d5:2d:41:1a:22:34:c3:a5:06:
         97:47:40:49:72:06:c7:59:db:15:14:d5:ac:a5:2b:4e:72:61:
         70:78:5f:ae:cf:41:a1:7a:64:74:65:3c:c8:61:1f:cd:c0:57:
         f3:61:dc:a4:28:fe:d5:cc:9d:9b:a0:73:9e:79:e0:b0:7f:3d:
         0c:33:bf:23:02:d8:6a:4a:b5:50:2f:ea:1b:54:61:0b:fc:d9:
         14:f1:36:88:1f:15:9b:92:7b:7b:8c:e6:cd:24:47:11:91:c9:
         70:13:9d:2f:8f:b0:0a:eb:b1:36:ee:e1:04:b9:df:63:ff:11:
         fc:ec:14:bb:63:1f:13:eb:19:9f:63:18:d3:e6:da:75:f3:3a:
         30:c0:e4:3f:1b:6f:17:4e:bb:3d:37:02:a1:e8:6b:d9:02:73:
         b9:f9:54:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----