Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a6/2f833f-a7e8-4f9d-a383-123fa2ab9408/1/CMHvrNgXTf8JYd3O9CCGPk-eGJo.roa
File:                     CMHvrNgXTf8JYd3O9CCGPk-eGJo.roa (raw, json)
Hash identifier:          XfcBVccdB4EUjoEwfHEtBoIxAL0cT8TQTjP5niX0z+Y=
Subject key identifier:   08:C1:EF:AC:D8:17:4D:FF:09:61:DD:CE:F4:20:86:3E:4F:9E:18:9A
Certificate issuer:       /CN=72b25d859ff06be1ebc97add5dec05d36fcdca2d
Certificate serial:       05E896BF
Authority key identifier: 72:B2:5D:85:9F:F0:6B:E1:EB:C9:7A:DD:5D:EC:05:D3:6F:CD:CA:2D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/crJdhZ_wa-HryXrdXewF02_Nyi0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a6/2f833f-a7e8-4f9d-a383-123fa2ab9408/1/CMHvrNgXTf8JYd3O9CCGPk-eGJo.roa
Signing time:             Sat 01 Jan 2022 15:04:53 +0000
ROA not before:           Sat 01 Jan 2022 15:04:53 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     35675
IP address blocks:        2001:678:980::/48 maxlen: 48

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 99129023 (0x5e896bf)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=72b25d859ff06be1ebc97add5dec05d36fcdca2d
        Validity
            Not Before: Jan  1 15:04:53 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=08c1efacd8174dff0961ddcef420863e4f9e189a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:a4:0a:5d:00:12:f7:81:2a:29:98:53:23:d2:
                    8b:d4:9e:20:cb:af:d9:0e:af:ec:16:15:8c:8f:db:
                    69:b5:46:77:67:6f:53:a6:14:ab:f8:3f:cb:6e:04:
                    b9:61:32:75:f1:02:f7:8b:e8:23:63:69:28:50:c3:
                    ce:2e:ff:a4:96:d7:a9:c2:af:bc:37:ac:7a:54:7b:
                    b2:ad:30:22:86:75:6d:ae:24:c8:81:4f:e5:7a:75:
                    68:c6:1e:8e:a2:e3:e3:d0:f4:f1:c4:bd:12:79:2a:
                    17:5d:ce:92:db:cf:58:7e:74:4d:f5:ad:9f:78:a3:
                    0e:bc:60:75:d4:d7:3c:53:1b:9f:bc:9a:4c:25:48:
                    7b:3d:70:87:c5:1b:73:bc:0c:76:eb:21:a2:ad:cf:
                    1b:aa:9b:7b:ff:1e:8e:15:16:ea:9f:05:e4:4b:3a:
                    b5:76:62:fe:d9:8b:52:fa:4e:c4:9e:96:5e:75:f9:
                    2c:c0:36:34:40:91:6c:2f:f6:60:ab:f9:39:cd:ff:
                    29:f0:64:c6:25:90:c5:64:c1:60:6a:23:fb:f8:f1:
                    fa:22:9b:51:a8:10:48:d7:c8:7e:11:6b:3e:36:df:
                    33:41:76:18:dd:08:3c:13:1d:2b:6b:5d:4e:b4:a1:
                    18:6d:f0:82:e1:0b:f1:62:16:71:cc:0b:f8:75:57:
                    0f:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                08:C1:EF:AC:D8:17:4D:FF:09:61:DD:CE:F4:20:86:3E:4F:9E:18:9A
            X509v3 Authority Key Identifier:
                keyid:72:B2:5D:85:9F:F0:6B:E1:EB:C9:7A:DD:5D:EC:05:D3:6F:CD:CA:2D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/crJdhZ_wa-HryXrdXewF02_Nyi0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/2f833f-a7e8-4f9d-a383-123fa2ab9408/1/CMHvrNgXTf8JYd3O9CCGPk-eGJo.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/2f833f-a7e8-4f9d-a383-123fa2ab9408/1/crJdhZ_wa-HryXrdXewF02_Nyi0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:678:980::/48

    Signature Algorithm: sha256WithRSAEncryption
         af:18:30:bd:24:a7:88:3c:45:6e:b8:4f:e9:97:bb:c5:c6:0d:
         df:d2:49:10:ef:01:da:43:23:ad:50:9c:6d:c4:83:16:e3:f3:
         c6:7f:0d:40:04:8b:7c:2f:35:d8:63:51:36:4a:27:7a:6d:d6:
         e3:1f:28:73:1e:d0:cb:47:d4:b3:89:66:c4:f6:bf:45:ea:da:
         07:cd:6c:1a:59:78:b8:53:e8:45:a0:72:7f:df:d5:c8:ac:ff:
         1e:29:81:4a:f1:34:a3:c1:38:15:22:43:a0:59:d4:e3:e4:53:
         bf:fc:99:30:8d:30:52:49:79:13:1f:bb:e1:87:a6:aa:3c:f9:
         f6:90:20:5e:15:57:43:6a:9e:db:6f:52:05:27:46:f6:d8:82:
         d8:2a:7f:f3:53:b5:cc:82:b8:a9:c1:1b:ba:53:dc:ea:75:e0:
         cf:d2:26:9e:5f:5e:7d:c6:dc:f4:30:8d:6c:e4:16:6b:67:31:
         03:76:04:34:23:bd:1a:31:27:8f:a9:b1:b3:e6:c6:44:16:ac:
         ed:5f:94:5c:6a:96:f3:de:88:fc:a1:ee:01:42:fd:ad:1b:7f:
         5a:92:af:43:6c:6a:7c:57:f2:cf:61:2d:b7:11:3f:15:6d:c5:
         60:13:f3:15:d8:1e:bb:03:ce:3b:c1:11:5f:78:08:d1:57:8f:
         e6:ad:28:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----