Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/19455b-d2cf-4e5f-bf58-21df55ba9ebf/1/C-qrsWRUHy4MVjwjSOnAXX8UTuc.roa
File:                     C-qrsWRUHy4MVjwjSOnAXX8UTuc.roa (raw, json)
Hash identifier:          DZJGIhfdwyHI5csqdC/kZleg82HfZqvtg24hlK122ek=
Subject key identifier:   0B:EA:AB:B1:64:54:1F:2E:0C:56:3C:23:48:E9:C0:5D:7F:14:4E:E7
Certificate issuer:       /CN=bea649ef6030fc80848fdfe21d4321ac8011fd10
Certificate serial:       084151AA
Authority key identifier: BE:A6:49:EF:60:30:FC:80:84:8F:DF:E2:1D:43:21:AC:80:11:FD:10
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/vqZJ72Aw_ICEj9_iHUMhrIAR_RA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c5/19455b-d2cf-4e5f-bf58-21df55ba9ebf/1/C-qrsWRUHy4MVjwjSOnAXX8UTuc.roa
Signing time:             Sat 01 Jan 2022 11:00:28 +0000
ROA not before:           Sat 01 Jan 2022 11:00:28 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     211935
IP address blocks:        2a0e:f43::/48 maxlen: 48

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 138498474 (0x84151aa)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bea649ef6030fc80848fdfe21d4321ac8011fd10
        Validity
            Not Before: Jan  1 11:00:28 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=0beaabb164541f2e0c563c2348e9c05d7f144ee7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:f6:be:04:50:38:39:95:3d:7c:8d:50:8b:90:
                    7c:b6:2a:26:2d:47:36:86:20:ec:09:ff:cc:7f:76:
                    2d:ef:73:41:50:a2:11:d0:ad:ec:c4:da:d3:a3:02:
                    c2:44:6b:27:1c:89:79:ad:c6:42:8d:c3:09:94:e0:
                    4d:57:36:51:0d:6d:cb:3c:b2:c5:24:3e:f7:92:53:
                    20:d0:e7:b8:42:a8:46:ad:cd:8e:e0:2b:9c:49:c6:
                    b2:f1:ff:b3:54:58:48:55:be:c3:66:24:3c:5c:a6:
                    19:21:98:33:63:66:dc:4e:45:e4:9b:0e:8e:10:f2:
                    ab:a3:b9:03:13:07:65:e6:d0:3e:60:92:48:42:9f:
                    02:7c:24:40:9a:9a:45:3c:a2:75:e3:d5:6b:f2:fd:
                    bb:98:d5:2a:7e:17:db:e2:b7:08:55:fd:75:3e:9c:
                    ca:be:45:61:ff:a7:f5:25:ad:0a:ac:c8:11:c9:82:
                    d3:b5:5d:fb:12:34:9a:a2:7d:07:ff:83:b7:3c:be:
                    46:57:a6:9c:86:ff:bc:0e:6d:7f:0f:d6:02:29:81:
                    6d:e0:08:07:9d:a8:dd:0e:d7:6f:fe:db:86:18:e8:
                    9a:97:47:73:94:91:8b:61:75:6d:9b:c3:16:87:9a:
                    1d:5e:1b:c6:c3:6a:0b:a3:a4:7a:cc:9c:cc:5c:e5:
                    68:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0B:EA:AB:B1:64:54:1F:2E:0C:56:3C:23:48:E9:C0:5D:7F:14:4E:E7
            X509v3 Authority Key Identifier:
                keyid:BE:A6:49:EF:60:30:FC:80:84:8F:DF:E2:1D:43:21:AC:80:11:FD:10

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vqZJ72Aw_ICEj9_iHUMhrIAR_RA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/19455b-d2cf-4e5f-bf58-21df55ba9ebf/1/C-qrsWRUHy4MVjwjSOnAXX8UTuc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/19455b-d2cf-4e5f-bf58-21df55ba9ebf/1/vqZJ72Aw_ICEj9_iHUMhrIAR_RA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a0e:f43::/48

    Signature Algorithm: sha256WithRSAEncryption
         62:a5:f1:55:35:97:66:7c:4b:59:3e:48:48:b5:68:39:64:33:
         94:43:39:24:77:ab:3b:a3:62:35:0d:98:c2:c3:75:ee:47:37:
         df:bf:12:64:c5:79:4c:ce:06:20:54:b5:20:6c:d5:72:86:22:
         5d:43:1c:7e:4d:d6:61:bd:61:8d:c6:42:e7:3d:b1:3c:2b:78:
         06:d1:7f:65:90:29:39:be:ce:5c:88:ad:b6:ba:50:ab:f4:6c:
         73:68:7f:08:20:bc:26:ca:1f:a2:40:dc:ac:63:9c:4f:05:8e:
         9f:1c:ed:15:5c:3a:c4:93:e7:46:32:f6:d1:c2:75:f6:80:d5:
         54:f3:0c:39:94:11:fc:05:2f:b6:e6:5b:6c:5b:d1:c7:f4:8e:
         aa:97:f8:be:9b:bf:12:ce:56:6f:b5:f4:ac:4b:da:14:02:6c:
         62:92:5b:b7:07:0a:f4:68:e5:74:8c:b7:f3:64:df:c8:c6:81:
         b8:51:e0:e3:3a:12:06:ff:94:38:6f:13:0e:c0:f3:a1:84:e2:
         da:9f:eb:20:d8:a3:b7:dc:28:6c:ad:f3:34:03:f2:cf:8e:c7:
         7c:f9:2c:97:d5:42:92:86:4d:1b:bd:84:4a:c9:16:4c:61:0d:
         bf:9b:1e:32:1f:56:77:4e:0b:a7:1a:9c:31:e2:e3:15:6b:f9:
         e1:63:a3:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----