Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ab/84eb44-bbdf-46c1-b043-b42f23d828c3/1/gCFvaMnkjgonE8VlnKiFcF_akq0.roa
File:                     gCFvaMnkjgonE8VlnKiFcF_akq0.roa (raw, json)
Hash identifier:          S8JEqDw5GSB+ERk8WsW6IV46tcx8ReZN1YrW35YI9Uk=
Subject key identifier:   80:21:6F:68:C9:E4:8E:0A:27:13:C5:65:9C:A8:85:70:5F:DA:92:AD
Certificate issuer:       /CN=f1d46e0e3e8caaaed4a529bd7d7308bd1ef01c1d
Certificate serial:       36621163
Authority key identifier: F1:D4:6E:0E:3E:8C:AA:AE:D4:A5:29:BD:7D:73:08:BD:1E:F0:1C:1D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/8dRuDj6Mqq7UpSm9fXMIvR7wHB0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ab/84eb44-bbdf-46c1-b043-b42f23d828c3/1/gCFvaMnkjgonE8VlnKiFcF_akq0.roa
Signing time:             Sat 01 Jan 2022 13:57:22 +0000
ROA not before:           Sat 01 Jan 2022 13:57:22 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     47427
IP address blocks:        86.105.32.0/21 maxlen: 21

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 912396643 (0x36621163)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f1d46e0e3e8caaaed4a529bd7d7308bd1ef01c1d
        Validity
            Not Before: Jan  1 13:57:22 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=80216f68c9e48e0a2713c5659ca885705fda92ad
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:9c:9f:98:31:d5:bc:ec:b6:e0:cd:41:5e:33:
                    4f:af:1a:5c:fa:6b:f0:47:bb:fb:1f:94:20:16:94:
                    64:b3:de:82:91:6d:8a:36:e5:92:44:a2:cb:5e:ea:
                    6c:31:b8:5f:08:bf:d0:1c:4e:5c:f9:86:c7:24:ca:
                    a2:9f:b5:7f:f2:52:e6:7d:10:18:33:ae:ce:b3:5c:
                    a3:68:0d:f5:2f:bb:44:22:3b:f3:0c:c1:59:1d:7e:
                    69:1c:0e:c9:aa:5b:57:aa:b2:cf:c4:bd:c1:18:02:
                    d1:89:c6:de:00:ae:f1:23:e4:98:0c:3e:68:10:e3:
                    ce:fa:9c:25:dc:42:df:ae:6b:f3:2b:0c:f2:a0:5d:
                    91:1d:67:ee:c1:6f:a7:80:4f:17:df:3c:f1:86:88:
                    4f:48:03:4a:e9:88:18:3c:dc:d6:1e:7a:f4:8a:fa:
                    30:58:91:87:13:11:11:07:64:36:bb:d5:d2:19:ba:
                    fe:ee:91:6a:13:ba:f6:38:15:d7:ac:28:aa:40:11:
                    6a:bc:39:8e:5c:b8:02:4c:3c:04:a2:7a:12:ae:bc:
                    d0:5c:26:b9:16:a5:42:92:fc:1d:30:24:09:37:b5:
                    8a:53:c5:ad:d0:37:3a:f3:88:55:d4:0c:bd:de:f8:
                    d6:69:37:08:28:54:07:67:0e:71:94:cc:c6:b2:81:
                    a3:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                80:21:6F:68:C9:E4:8E:0A:27:13:C5:65:9C:A8:85:70:5F:DA:92:AD
            X509v3 Authority Key Identifier:
                keyid:F1:D4:6E:0E:3E:8C:AA:AE:D4:A5:29:BD:7D:73:08:BD:1E:F0:1C:1D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8dRuDj6Mqq7UpSm9fXMIvR7wHB0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/84eb44-bbdf-46c1-b043-b42f23d828c3/1/gCFvaMnkjgonE8VlnKiFcF_akq0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/84eb44-bbdf-46c1-b043-b42f23d828c3/1/8dRuDj6Mqq7UpSm9fXMIvR7wHB0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  86.105.32.0/21

    Signature Algorithm: sha256WithRSAEncryption
         29:7a:52:e7:9e:e6:2d:c3:3b:ef:6f:30:89:f6:9c:4f:ea:bf:
         ff:1f:cd:85:76:2d:77:55:e4:89:33:6a:90:d2:45:fe:9a:2a:
         fd:63:98:d5:32:60:eb:83:28:2d:a1:5f:87:c8:1c:d4:50:df:
         f0:fe:2a:41:cb:2d:84:ff:10:e8:58:52:0e:a3:c9:ae:b2:81:
         b0:eb:ed:8e:f3:00:ed:63:1c:26:b9:18:7f:29:fa:72:fe:0a:
         77:91:92:db:71:f2:4f:a3:cf:a3:9c:01:54:b3:38:03:45:c1:
         57:7a:09:c7:fc:2b:d5:8b:d0:5d:bf:d6:ba:e9:c8:fb:2b:e1:
         f7:58:57:08:6c:e7:ee:9d:56:d3:49:56:96:e3:5c:6f:9e:65:
         26:3e:bc:13:4a:6d:75:41:c5:36:64:06:3b:be:d8:ed:ea:d7:
         6a:c3:09:5c:82:d9:f2:db:28:75:7f:40:b3:2c:5a:00:41:cf:
         1e:2b:b7:e6:dc:e4:5e:9a:2a:cf:5e:72:77:c8:05:5e:06:83:
         8d:54:fd:de:0b:46:84:05:44:35:15:ec:0a:4f:9a:a5:c4:78:
         58:62:25:e0:bc:2e:9e:fc:b3:7e:49:ec:1b:37:b6:a1:26:48:
         d2:0e:e9:15:bb:81:1d:db:e1:60:27:54:67:48:14:ad:ba:51:
         81:bd:fd:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----