Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9b/1e43e4-d06e-4a55-bdb6-3d91ede5b2b1/1/2Ag-EhozgkiBoC9YyYfS1iJOd3A.roa
File:                     2Ag-EhozgkiBoC9YyYfS1iJOd3A.roa (raw, json)
Hash identifier:          vURrUlnjDLBDhatRhwMZk2Pj0vklM+mrtlKU9bEcIrc=
Subject key identifier:   D8:08:3E:12:1A:33:82:48:81:A0:2F:58:C9:87:D2:D6:22:4E:77:70
Certificate issuer:       /CN=b8074b419ead4cefea2f2ad2c259d978c5ed7954
Certificate serial:       0FD8B78B
Authority key identifier: B8:07:4B:41:9E:AD:4C:EF:EA:2F:2A:D2:C2:59:D9:78:C5:ED:79:54
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/uAdLQZ6tTO_qLyrSwlnZeMXteVQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/9b/1e43e4-d06e-4a55-bdb6-3d91ede5b2b1/1/2Ag-EhozgkiBoC9YyYfS1iJOd3A.roa
Signing time:             Sat 01 Jan 2022 14:59:37 +0000
ROA not before:           Sat 01 Jan 2022 14:59:37 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     14618
IP address blocks:        2a06:e881:73ff::/48 maxlen: 48

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 265861003 (0xfd8b78b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b8074b419ead4cefea2f2ad2c259d978c5ed7954
        Validity
            Not Before: Jan  1 14:59:37 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=d8083e121a33824881a02f58c987d2d6224e7770
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:3c:22:07:91:ad:f0:e6:44:a1:d4:6d:4a:14:
                    50:c3:dc:17:7d:cb:8d:a1:62:68:aa:78:93:7c:91:
                    05:f7:6a:f7:51:39:71:14:b4:78:2b:50:cb:c8:88:
                    0b:d3:6f:a1:f0:74:1c:3a:b1:b2:6a:46:64:9e:22:
                    3e:89:28:5c:12:03:b0:7c:9e:5c:9f:38:73:11:76:
                    bb:76:62:32:d0:76:3a:49:bb:b3:f2:e7:e7:cc:7a:
                    d9:df:1f:c0:38:49:64:04:51:41:d4:c0:aa:25:76:
                    be:ed:f4:00:16:54:74:d9:48:7b:ae:f1:5d:70:2e:
                    3d:23:f5:6b:bd:32:9b:85:e0:99:63:c0:b5:67:f3:
                    82:7e:e0:e8:5d:37:59:35:a1:21:db:df:3b:05:84:
                    f3:ee:7a:fe:a7:ea:63:7a:00:d4:49:2f:18:3a:75:
                    1c:ab:a8:0a:60:a4:cb:93:14:ce:77:36:c8:5b:87:
                    73:61:95:d4:8d:de:dc:e8:48:af:0b:9e:35:ed:a0:
                    66:ba:e1:e5:d8:a3:08:f3:85:92:c4:0b:4b:1a:eb:
                    f0:dd:dc:98:e1:ab:34:f7:1e:b1:15:13:c9:78:ca:
                    a4:ba:96:73:3a:0e:b5:83:aa:21:f5:82:83:df:4c:
                    5b:a7:6e:2f:f8:09:80:63:b7:d2:4a:5e:42:3d:d5:
                    d0:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D8:08:3E:12:1A:33:82:48:81:A0:2F:58:C9:87:D2:D6:22:4E:77:70
            X509v3 Authority Key Identifier:
                keyid:B8:07:4B:41:9E:AD:4C:EF:EA:2F:2A:D2:C2:59:D9:78:C5:ED:79:54

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uAdLQZ6tTO_qLyrSwlnZeMXteVQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/1e43e4-d06e-4a55-bdb6-3d91ede5b2b1/1/2Ag-EhozgkiBoC9YyYfS1iJOd3A.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/1e43e4-d06e-4a55-bdb6-3d91ede5b2b1/1/uAdLQZ6tTO_qLyrSwlnZeMXteVQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a06:e881:73ff::/48

    Signature Algorithm: sha256WithRSAEncryption
         c1:fa:05:ce:2b:8f:a0:c3:c6:cc:a1:8b:0f:18:77:45:9f:48:
         57:d3:99:fc:b8:97:6c:c8:b1:e2:10:ad:1c:4d:da:54:42:e4:
         6e:bc:91:c6:b9:f6:d9:18:76:3e:af:2d:f8:34:a4:ec:1f:f9:
         27:94:ac:b8:da:2b:79:5d:7b:bc:29:16:76:25:01:70:18:51:
         fe:e5:e6:6c:a5:b7:3f:6f:f5:78:f8:2d:c1:03:be:a3:6f:23:
         ee:6c:b0:4a:c0:b8:97:8a:17:ce:e8:8d:c1:e2:df:36:9b:79:
         b8:b9:b3:13:e0:fc:ad:f6:90:1b:42:40:b6:dc:8f:fc:3c:84:
         36:fd:95:a2:e5:63:71:5b:af:c0:88:e5:d6:e2:ab:3a:dc:26:
         20:b9:be:50:4e:1c:51:9e:91:c6:f8:65:ef:8d:47:ac:82:3a:
         50:48:a7:2a:e7:0d:c3:88:c4:07:6c:bb:5b:c4:29:5e:65:7f:
         d2:c3:cc:e9:54:ab:1e:61:85:f2:e5:ce:42:ee:20:c6:43:d8:
         ef:d1:d9:ad:7d:fb:c5:76:89:d2:74:ed:10:6b:c9:c9:db:37:
         a3:e6:07:e6:ab:de:21:94:b6:6f:9c:5f:81:dd:d9:a6:8d:11:
         82:74:48:c2:8c:e0:a6:a1:07:d5:9f:39:9d:64:66:cf:f2:01:
         88:6c:5a:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----