Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/6046a6-decb-49a3-a3b4-3087f86a63ab/1/_-UTnpLox06D7RIoYuLn3OuCYdQ.roa
File:                     _-UTnpLox06D7RIoYuLn3OuCYdQ.roa (raw, json)
Hash identifier:          y3OaqTF+XnSb1fyrTA2toJlID/GkuqRIsZXes8kQKJ4=
Subject key identifier:   FF:E5:13:9E:92:E8:C7:4E:83:ED:12:28:62:E2:E7:DC:EB:82:61:D4
Certificate issuer:       /CN=c605871889b9dcafe7ec3136aed1ddfee2dfbc7d
Certificate serial:       1565FD39
Authority key identifier: C6:05:87:18:89:B9:DC:AF:E7:EC:31:36:AE:D1:DD:FE:E2:DF:BC:7D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/xgWHGIm53K_n7DE2rtHd_uLfvH0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c7/6046a6-decb-49a3-a3b4-3087f86a63ab/1/_-UTnpLox06D7RIoYuLn3OuCYdQ.roa
Signing time:             Sat 01 Jan 2022 12:03:26 +0000
ROA not before:           Sat 01 Jan 2022 12:03:26 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     61385
IP address blocks:        2a05:9281::/32 maxlen: 32

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 359005497 (0x1565fd39)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c605871889b9dcafe7ec3136aed1ddfee2dfbc7d
        Validity
            Not Before: Jan  1 12:03:26 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=ffe5139e92e8c74e83ed122862e2e7dceb8261d4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e5:00:d1:63:a1:90:e9:a4:09:6e:dc:44:2b:90:
                    b9:56:ae:a9:be:23:5a:2e:83:6b:d2:af:80:03:d6:
                    b2:66:50:ce:aa:f5:fd:3c:2c:90:40:d3:b3:ed:e1:
                    2e:b3:4c:c9:ea:35:ef:89:3b:28:93:25:81:76:1b:
                    74:79:1b:a8:43:4d:d6:35:d6:cd:6d:5f:47:0a:94:
                    a4:03:a7:08:09:21:76:2d:0e:b7:1a:81:4f:28:f6:
                    a9:27:0f:fb:21:d2:0a:6f:e1:97:87:95:7c:35:34:
                    a2:34:df:6f:b2:7b:68:c2:82:e2:2c:34:cb:e6:04:
                    8b:a2:c5:a6:93:14:04:e0:c3:12:88:76:a3:d6:29:
                    ce:f7:55:7e:2b:df:25:f9:94:fd:6e:e3:fc:b6:9e:
                    8c:07:67:21:9c:03:98:80:a7:d7:46:2d:86:4c:7e:
                    fe:36:2f:f6:1f:36:50:cf:be:e7:99:45:1f:b4:23:
                    b8:60:55:08:7e:11:d5:2a:d6:11:d2:0f:62:38:10:
                    00:0f:42:e9:01:85:07:71:c2:fe:f6:ee:50:36:38:
                    dc:fc:59:0e:85:6b:16:18:fa:f1:59:48:03:f9:8f:
                    ad:f0:2c:c4:68:b2:a3:e3:fe:1e:20:b9:bb:05:52:
                    51:fa:62:63:64:4e:7c:a4:b2:37:1e:22:e5:e4:2c:
                    e9:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FF:E5:13:9E:92:E8:C7:4E:83:ED:12:28:62:E2:E7:DC:EB:82:61:D4
            X509v3 Authority Key Identifier:
                keyid:C6:05:87:18:89:B9:DC:AF:E7:EC:31:36:AE:D1:DD:FE:E2:DF:BC:7D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xgWHGIm53K_n7DE2rtHd_uLfvH0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/6046a6-decb-49a3-a3b4-3087f86a63ab/1/_-UTnpLox06D7RIoYuLn3OuCYdQ.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/6046a6-decb-49a3-a3b4-3087f86a63ab/1/xgWHGIm53K_n7DE2rtHd_uLfvH0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a05:9281::/32

    Signature Algorithm: sha256WithRSAEncryption
         2b:ab:e5:aa:d1:23:51:44:58:3a:68:05:b3:98:e3:18:1f:0c:
         ff:d8:5b:81:aa:f0:9a:ee:34:5a:f7:25:10:75:dd:96:c1:d6:
         89:ae:8b:15:47:2f:d9:ba:a1:d0:8e:5d:a6:1b:cc:18:c1:f7:
         cb:fb:b3:2c:a0:d1:ff:4f:61:a7:43:56:be:3d:6a:ff:d7:ec:
         71:0a:4b:c3:e3:c8:16:6a:45:12:be:01:29:e5:03:6c:c1:51:
         2a:95:68:54:9c:d6:88:e5:4e:d4:13:c1:98:34:0b:ae:10:bf:
         31:fd:f3:f0:53:e7:e8:88:4d:b6:f4:ae:69:f3:a2:65:7d:7c:
         8b:90:1b:11:80:45:83:8b:13:e7:ed:34:a8:6a:d4:32:3c:28:
         85:bd:b1:ff:a0:d4:ca:d5:42:fd:b9:53:b4:20:47:f7:ef:2b:
         78:d3:40:ce:91:65:64:7e:49:66:a5:b4:d7:c5:78:bb:c2:a1:
         66:fc:1e:69:fd:a1:1a:44:5d:4d:15:10:4e:ef:44:24:72:04:
         e3:db:9c:c4:48:92:4e:fe:3b:73:35:97:2f:4f:fb:f9:a2:02:
         bd:21:d5:1a:2a:40:e7:22:e1:dc:06:22:13:47:f8:7c:48:93:
         93:85:34:56:90:86:6d:8f:38:67:fa:27:09:70:9d:66:78:4f:
         52:23:65:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----