Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/sbobBUOSf-negyucTd21v4nsm5c.roa
File:                     sbobBUOSf-negyucTd21v4nsm5c.roa (raw, json)
Hash identifier:          0r9Qe+daGna2m8hlrlpYNmDIYdYjL4y2oTRw2j63KdM=
Subject key identifier:   B1:BA:1B:05:43:92:7F:E9:DE:83:2B:9C:4D:DD:B5:BF:89:EC:9B:97
Certificate issuer:       /CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Certificate serial:       01598994
Authority key identifier: 7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/sbobBUOSf-negyucTd21v4nsm5c.roa
Signing time:             Sat 01 Jan 2022 05:55:11 +0000
ROA not before:           Sat 01 Jan 2022 05:55:11 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     399797
IP address blocks:        2a0f:a01:5::/48 maxlen: 48

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 22645140 (0x1598994)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
        Validity
            Not Before: Jan  1 05:55:11 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=b1ba1b0543927fe9de832b9c4dddb5bf89ec9b97
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:1a:e0:ba:fc:cd:ae:47:20:e5:b7:97:b1:9b:
                    ea:19:b7:e6:a0:18:cf:08:2f:72:9b:e0:ca:61:74:
                    26:13:7d:d7:a0:5e:1b:4e:5d:60:99:9f:a6:9c:2e:
                    85:89:3f:77:97:8f:3a:f8:5a:2c:21:c1:c6:0d:b1:
                    c8:c4:e7:a3:cd:15:82:8e:51:0b:dd:ea:0e:ec:c3:
                    ec:97:95:b0:b6:9f:48:b5:8b:71:9f:39:a0:b6:5a:
                    cd:d0:51:98:db:8a:37:3a:58:cd:00:90:52:bd:81:
                    8a:5f:bf:a1:21:60:77:64:0f:d1:42:d1:a6:2f:ed:
                    da:37:a1:22:3b:67:8f:c1:3f:82:0a:0b:86:4c:c5:
                    27:b6:16:6c:72:16:99:9b:78:03:96:a3:c5:d7:db:
                    0c:bc:2e:09:8f:7a:ef:ba:3c:94:76:9c:3a:62:16:
                    b3:af:fa:71:27:3f:1c:48:94:16:e0:8e:c7:d1:7a:
                    a0:ed:50:26:b0:ab:90:7c:c9:a9:99:bb:24:74:56:
                    cf:37:02:00:a0:d6:73:37:45:82:6d:7d:4c:53:1a:
                    47:14:9a:09:74:fa:9f:f9:ca:75:77:8d:6c:8a:48:
                    80:d9:03:4c:75:3f:fe:56:d0:4b:fd:83:c3:f0:1e:
                    b5:01:2b:82:1f:fb:4a:1e:a4:9c:54:b4:18:32:83:
                    05:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B1:BA:1B:05:43:92:7F:E9:DE:83:2B:9C:4D:DD:B5:BF:89:EC:9B:97
            X509v3 Authority Key Identifier:
                keyid:7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/sbobBUOSf-negyucTd21v4nsm5c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a0f:a01:5::/48

    Signature Algorithm: sha256WithRSAEncryption
         aa:d0:aa:e2:fe:2d:49:9c:e9:f7:c3:e0:34:0f:6a:dc:e9:72:
         f9:18:0a:36:95:a3:c6:c7:47:66:05:99:56:38:bf:cc:66:b3:
         4e:d3:02:6a:22:6e:bc:ca:2d:71:7e:4a:4a:c1:52:0a:fe:79:
         38:69:86:82:8a:cc:5f:fa:b8:85:42:ef:06:b7:4b:4a:1a:ce:
         6c:7b:5e:72:cd:04:11:58:f5:6b:1a:31:30:94:7f:ff:54:d5:
         fb:ef:37:d8:6c:d8:d1:42:2d:da:9e:75:33:86:54:7d:88:11:
         28:19:93:3e:17:e5:61:ed:ae:03:b8:45:b1:a1:77:3b:02:18:
         57:10:49:f7:7a:80:95:b8:8d:fc:d9:7f:5e:cf:9b:00:e6:a8:
         89:96:64:2a:eb:db:b3:18:fa:1e:cd:47:84:11:02:93:03:1e:
         7e:a5:84:eb:6c:83:35:e2:89:92:9f:1c:03:10:66:1d:30:68:
         d9:26:69:6e:e2:9e:d8:6c:00:47:b8:75:0b:09:c8:c6:d8:c2:
         9e:e2:63:bf:76:88:56:98:00:76:84:2e:5b:08:bb:23:55:06:
         31:1b:ae:47:7b:36:0e:15:e5:9e:4d:2e:30:d0:49:c2:dd:07:
         4a:e5:45:21:18:12:6c:45:3f:72:0d:45:4f:20:db:07:13:d8:
         78:01:69:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----