Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/9ab42a-df92-4e42-9e33-5c5892afa487/1/rzA7eag9Zun8tOau63nnaDjWohs.roa
File:                     rzA7eag9Zun8tOau63nnaDjWohs.roa (raw, json)
Hash identifier:          W3PmVQKGcvB2prgeC/PTekpnM1oCfK003HyOb5pWWJ8=
Subject key identifier:   AF:30:3B:79:A8:3D:66:E9:FC:B4:E6:AE:EB:79:E7:68:38:D6:A2:1B
Certificate issuer:       /CN=f04eb204f358004788224e2fb18e4d5e74bebf8d
Certificate serial:       01531540
Authority key identifier: F0:4E:B2:04:F3:58:00:47:88:22:4E:2F:B1:8E:4D:5E:74:BE:BF:8D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/8E6yBPNYAEeIIk4vsY5NXnS-v40.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c5/9ab42a-df92-4e42-9e33-5c5892afa487/1/rzA7eag9Zun8tOau63nnaDjWohs.roa
Signing time:             Sat 01 Jan 2022 03:56:32 +0000
ROA not before:           Sat 01 Jan 2022 03:56:32 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     209844
IP address blocks:        2001:67c:2960::/48 maxlen: 48
Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 22222144 (0x1531540)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f04eb204f358004788224e2fb18e4d5e74bebf8d
        Validity
            Not Before: Jan  1 03:56:32 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=af303b79a83d66e9fcb4e6aeeb79e76838d6a21b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:66:ca:8e:c8:81:1d:a6:04:a2:93:f9:ac:0e:
                    63:3c:43:8c:17:57:f7:c5:ed:c5:9e:6a:28:de:42:
                    2e:92:3c:7a:74:94:5a:38:2f:0f:92:c2:b1:9b:66:
                    c0:b8:18:12:60:54:da:78:a7:0a:16:e0:71:6d:1d:
                    51:b2:7d:ce:b9:61:9a:f8:af:2e:c8:74:44:58:44:
                    fe:69:4c:3f:9d:f6:3b:14:f3:48:37:29:71:e1:29:
                    00:72:5f:c8:4b:28:9f:34:91:59:9c:2d:a4:60:2e:
                    1c:96:30:8e:c0:ac:ab:62:ad:b3:b4:1a:5d:0f:d9:
                    95:83:77:5e:e3:bc:f0:c1:8f:81:ef:0b:dd:55:6c:
                    3b:40:e7:d3:5e:4a:56:e9:77:24:fb:c4:57:ed:9d:
                    ed:f6:c2:3a:3a:40:b1:2b:60:f1:81:ce:97:61:f0:
                    c4:54:e1:be:df:95:5f:89:47:a6:7d:72:a3:c0:73:
                    30:fd:0f:bf:d4:ee:ae:70:dd:dc:33:0c:76:87:df:
                    9e:82:01:74:13:f8:9a:1b:42:15:53:8e:fe:4f:a0:
                    4f:d1:03:07:33:66:38:2d:04:de:cc:69:f5:8b:87:
                    06:a8:a0:17:80:1b:96:81:2b:46:04:79:0f:db:0f:
                    31:1f:2f:05:1e:44:bf:4b:cf:b9:59:fd:2b:db:8c:
                    77:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AF:30:3B:79:A8:3D:66:E9:FC:B4:E6:AE:EB:79:E7:68:38:D6:A2:1B
            X509v3 Authority Key Identifier:
                keyid:F0:4E:B2:04:F3:58:00:47:88:22:4E:2F:B1:8E:4D:5E:74:BE:BF:8D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8E6yBPNYAEeIIk4vsY5NXnS-v40.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/9ab42a-df92-4e42-9e33-5c5892afa487/1/rzA7eag9Zun8tOau63nnaDjWohs.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/9ab42a-df92-4e42-9e33-5c5892afa487/1/8E6yBPNYAEeIIk4vsY5NXnS-v40.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:67c:2960::/48

    Signature Algorithm: sha256WithRSAEncryption
         90:30:a4:d1:f7:37:46:d3:6a:cd:0f:12:39:ce:07:23:51:d6:
         e0:1a:40:4d:ad:73:8c:8b:f2:a4:ff:b8:ad:d3:68:5a:31:13:
         81:dd:2a:d3:92:6f:8f:0f:65:2f:e8:4d:22:be:a4:35:66:1f:
         3d:93:0a:c4:ff:e8:70:ae:29:12:b3:ac:a9:02:5f:54:73:f9:
         76:0b:15:17:6b:72:39:03:b0:2d:39:6a:7f:08:de:6f:d8:84:
         5d:f2:b4:27:63:23:94:6f:5e:cf:e3:6b:76:23:22:b1:27:60:
         39:83:a4:3b:20:7f:a4:b2:ec:8b:1d:4a:20:b9:2e:56:01:7a:
         a6:1c:b0:b6:8f:5e:c3:46:0d:5c:17:75:11:19:90:c0:24:33:
         ba:40:49:7f:6c:9f:8b:d0:a0:7a:3d:f2:08:6a:86:e3:e8:85:
         29:ca:16:08:14:d9:12:52:6e:2c:75:22:98:29:9d:b9:39:44:
         e6:19:5d:a1:63:f9:33:b2:19:81:3e:71:af:47:9d:44:e2:95:
         b5:ba:86:b4:38:f2:60:48:8e:cb:f6:c1:6d:85:25:c1:1d:ac:
         11:d7:49:a9:3f:b9:a9:26:14:19:80:f3:71:73:28:1b:ca:3e:
         e5:fa:f5:3b:6e:2f:f8:48:f0:90:b0:4a:6f:21:18:c5:03:14:
         f7:bd:33:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----