Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9c/b8e5c4-38eb-445f-b036-c37790e6d482/1/hUY3hEmI0ag45gz87kZjLDzbjro.roa
File:                     hUY3hEmI0ag45gz87kZjLDzbjro.roa (raw, json)
Hash identifier:          wvPG+jGXODmnB8n3ZoePE5LtoqYetWJppy29RMcMXlY=
Subject key identifier:   85:46:37:84:49:88:D1:A8:38:E6:0C:FC:EE:46:63:2C:3C:DB:8E:BA
Certificate issuer:       /CN=4eef6aae6fba5c61a61739afcab55a62266e89ee
Certificate serial:       05E4CD92
Authority key identifier: 4E:EF:6A:AE:6F:BA:5C:61:A6:17:39:AF:CA:B5:5A:62:26:6E:89:EE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Tu9qrm-6XGGmFzmvyrVaYiZuie4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/9c/b8e5c4-38eb-445f-b036-c37790e6d482/1/hUY3hEmI0ag45gz87kZjLDzbjro.roa
Signing time:             Sat 01 Jan 2022 14:07:18 +0000
ROA not before:           Sat 01 Jan 2022 14:07:18 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     212461
IP address blocks:        2a0b:6900:1ad::/48 maxlen: 48
                          2a0b:6903:1ad::/48 maxlen: 48

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 98880914 (0x5e4cd92)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4eef6aae6fba5c61a61739afcab55a62266e89ee
        Validity
            Not Before: Jan  1 14:07:18 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=854637844988d1a838e60cfcee46632c3cdb8eba
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:1a:b1:b0:4c:0a:26:6e:6e:2a:b3:40:ce:cf:
                    12:0d:a6:43:89:cd:43:49:b0:36:d4:b0:6e:00:83:
                    cf:54:48:cd:c7:45:bf:fb:37:42:9d:68:55:7b:d3:
                    09:88:1c:f2:6f:e1:6a:d5:75:65:3b:b0:cf:4e:38:
                    df:5d:13:17:99:58:c7:a1:8c:1d:9b:8c:01:85:10:
                    a8:ca:f7:0d:a3:7e:63:aa:71:e9:22:e5:e2:40:fa:
                    8f:b0:90:b2:64:8e:ba:f5:20:f5:7b:a1:46:82:63:
                    34:9c:c5:ce:0c:11:71:3d:2f:b2:2b:4e:4b:35:36:
                    ab:0c:03:5b:dd:aa:33:b0:e4:89:6d:0d:69:94:21:
                    e2:b7:cc:32:a9:91:e1:2d:3c:32:28:8d:51:80:f7:
                    39:b2:e6:0e:87:86:ad:b1:75:52:fa:3b:d3:a4:1a:
                    82:28:67:b3:91:32:a9:2c:bc:ec:c1:c6:05:85:e0:
                    f7:93:2d:c1:a7:10:ae:a5:79:51:f4:a9:71:3e:5c:
                    6c:05:3d:7f:23:7a:ab:80:df:b2:fd:48:57:f7:f7:
                    d6:f7:14:73:d5:c3:86:2b:29:d1:ae:1b:a9:94:29:
                    c9:a1:cf:25:d3:b2:a1:b3:ab:57:9c:af:9f:80:af:
                    bc:74:b5:fe:4e:bc:ef:24:fb:e8:3b:80:96:21:61:
                    be:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                85:46:37:84:49:88:D1:A8:38:E6:0C:FC:EE:46:63:2C:3C:DB:8E:BA
            X509v3 Authority Key Identifier:
                keyid:4E:EF:6A:AE:6F:BA:5C:61:A6:17:39:AF:CA:B5:5A:62:26:6E:89:EE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Tu9qrm-6XGGmFzmvyrVaYiZuie4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/b8e5c4-38eb-445f-b036-c37790e6d482/1/hUY3hEmI0ag45gz87kZjLDzbjro.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/b8e5c4-38eb-445f-b036-c37790e6d482/1/Tu9qrm-6XGGmFzmvyrVaYiZuie4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a0b:6900:1ad::/48
                  2a0b:6903:1ad::/48

    Signature Algorithm: sha256WithRSAEncryption
         9c:56:17:7c:03:06:d0:6b:27:60:77:23:4e:84:66:1a:a1:85:
         ad:0a:f0:54:4d:df:4a:ed:fc:5e:29:34:3d:d9:8f:6c:58:33:
         a7:db:b0:c9:9a:39:ec:9c:f6:33:08:ab:03:f1:5d:7c:fe:cb:
         53:0f:a8:ec:6d:b5:2c:92:0c:c1:3a:6c:96:b8:b1:b6:a1:53:
         78:ab:85:35:e3:7b:7a:c1:fb:da:84:6c:88:ab:bc:53:37:61:
         27:b2:c3:e4:b0:a5:31:d6:5f:e5:12:d9:bd:ef:e0:52:e1:63:
         36:ef:95:ec:dc:ef:79:b6:fb:43:6e:3f:87:38:4c:f5:39:34:
         30:b9:58:70:37:17:03:2e:68:22:c4:c1:bf:f7:53:ae:54:10:
         3d:35:45:23:68:54:74:83:a0:49:07:fc:77:b1:02:70:d6:60:
         a0:bc:60:27:cc:7d:7d:2a:a9:f6:a5:a5:4c:bb:a8:92:e4:0e:
         79:80:94:e5:66:5c:c4:5f:d4:8b:35:b6:a1:0b:3e:63:7e:ee:
         0f:ba:5c:04:35:db:f0:9e:ba:4a:c0:e4:17:11:38:cd:88:91:
         78:71:c7:ed:a0:ed:d5:d6:27:2e:d6:d5:f9:a2:83:2a:7e:a7:
         8e:ba:dc:ef:88:3f:96:d8:d6:31:d5:26:7b:3a:a1:ab:df:45:
         29:85:3b:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----