Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/kEjky8bAFxqUNPUbUfSJMoJbATA.roa
File:                     kEjky8bAFxqUNPUbUfSJMoJbATA.roa (raw, json)
Hash identifier:          WNZ84oXHc9LKknYUn76jYgBs1/UBppUoGZeIVM4ytao=
Subject key identifier:   90:48:E4:CB:C6:C0:17:1A:94:34:F5:1B:51:F4:89:32:82:5B:01:30
Certificate issuer:       /CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Certificate serial:       01FE5876
Authority key identifier: 7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/kEjky8bAFxqUNPUbUfSJMoJbATA.roa
Signing time:             Sat 19 Feb 2022 01:10:53 +0000
ROA not before:           Sat 19 Feb 2022 01:10:53 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     49981
IP address blocks:        2a0f:dfc4::/32 maxlen: 32
Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 33446006 (0x1fe5876)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
        Validity
            Not Before: Feb 19 01:10:53 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=9048e4cbc6c0171a9434f51b51f48932825b0130
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:99:59:ca:e3:bc:a1:db:0e:de:96:db:c0:d5:
                    13:3c:69:71:4d:01:5d:27:32:96:1b:e0:f6:fa:cd:
                    98:ce:6a:a6:81:4a:e8:b9:1b:8e:64:ca:51:0f:b2:
                    7c:3e:8e:25:b6:69:22:04:64:14:4a:0f:2e:32:7b:
                    a7:65:be:1d:2b:99:83:93:0f:89:4f:e9:55:18:82:
                    ed:99:93:58:71:b9:df:fa:48:02:6c:03:cb:50:12:
                    d1:96:39:1c:75:0c:2c:30:05:43:75:1f:67:09:52:
                    dc:c4:52:40:c0:95:30:9c:c3:dc:78:0d:83:92:56:
                    69:0a:ab:38:8a:ee:59:7e:1a:61:1a:e9:59:c9:e9:
                    0b:35:f4:ce:4f:dd:98:c4:cf:bc:eb:d5:f4:70:19:
                    5b:da:c4:e8:b0:75:cd:e4:d1:50:06:50:4e:8c:a6:
                    e2:c8:5a:8c:6a:c0:ee:d2:ef:57:33:50:69:28:ce:
                    1d:a3:96:50:ff:68:28:a5:0b:f1:dd:33:d0:29:a3:
                    b4:f9:b5:2d:b1:ff:98:c6:4a:0f:b0:27:61:77:e3:
                    90:0e:17:25:21:69:cd:bf:8e:85:9c:10:e7:56:90:
                    3c:cd:86:4e:78:8f:d5:b4:fc:91:a3:82:d2:f3:e3:
                    76:cb:73:80:6c:62:c3:91:a2:e7:3f:bc:dc:e9:29:
                    0d:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                90:48:E4:CB:C6:C0:17:1A:94:34:F5:1B:51:F4:89:32:82:5B:01:30
            X509v3 Authority Key Identifier:
                keyid:7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/kEjky8bAFxqUNPUbUfSJMoJbATA.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a0f:dfc4::/32

    Signature Algorithm: sha256WithRSAEncryption
         99:4c:bc:95:1a:d3:e8:6b:1e:5d:af:4f:ab:1f:d7:d6:26:d2:
         ca:11:65:da:96:5f:6f:69:c6:92:53:00:cc:32:cc:d7:af:02:
         cc:29:00:63:df:be:44:8f:f8:10:ad:da:f1:e5:10:ca:5e:ae:
         e7:60:0d:62:f6:28:47:fd:81:7b:b1:e1:5d:f2:c2:d1:68:a1:
         68:00:2e:e2:74:9c:60:32:6f:96:04:28:70:ce:c9:b2:b8:40:
         9e:46:2c:d3:4e:05:a8:99:11:e4:f5:95:55:f1:95:a0:ed:0e:
         6c:f3:40:2e:5e:55:7a:bb:f0:5f:dc:4d:f7:f4:df:7e:06:fb:
         08:63:5b:7e:e6:4f:01:3c:71:b4:90:4e:dd:ca:93:19:39:8c:
         1a:f7:14:d2:ba:ab:09:8b:b0:83:71:9c:dc:3e:10:38:3b:a1:
         33:33:e0:a3:fb:76:a6:d8:36:e7:a9:aa:74:da:f4:99:97:92:
         82:60:a4:7b:69:00:ad:43:11:16:8f:df:de:1a:5f:d6:5f:53:
         ab:c5:d2:41:f8:87:6e:6d:b1:39:54:b4:43:3f:33:7d:ce:17:
         25:ce:4c:04:48:1e:97:2b:0f:24:01:26:23:1f:09:f3:68:bd:
         e8:d1:05:48:67:f5:b8:2e:e5:09:22:6e:07:40:1b:10:be:f0:
         c0:75:36:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----