Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cc/e4a7ac-1b5b-4bac-8557-63f6202e4bf4/1/4XFkTAAhsT-XdAhO7KIJPL0Vqak.roa
File:                     4XFkTAAhsT-XdAhO7KIJPL0Vqak.roa (raw, json)
Hash identifier:          jw+nyz960JRcAwLRZv93B+i69DgPdbG2YngFocCKMQQ=
Subject key identifier:   E1:71:64:4C:00:21:B1:3F:97:74:08:4E:EC:A2:09:3C:BD:15:A9:A9
Certificate issuer:       /CN=210f7948f5e7dccbb62ba8f53c35ba5525631b70
Certificate serial:       02CF7FB2
Authority key identifier: 21:0F:79:48:F5:E7:DC:CB:B6:2B:A8:F5:3C:35:BA:55:25:63:1B:70
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/IQ95SPXn3Mu2K6j1PDW6VSVjG3A.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/cc/e4a7ac-1b5b-4bac-8557-63f6202e4bf4/1/4XFkTAAhsT-XdAhO7KIJPL0Vqak.roa
Signing time:             Sat 01 Jan 2022 07:00:00 +0000
ROA not before:           Sat 01 Jan 2022 07:00:00 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     196816
IP address blocks:        2a0f:1100::/29 maxlen: 29

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 47153074 (0x2cf7fb2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=210f7948f5e7dccbb62ba8f53c35ba5525631b70
        Validity
            Not Before: Jan  1 07:00:00 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=e171644c0021b13f9774084eeca2093cbd15a9a9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:b8:13:d7:90:4e:a1:eb:74:b0:fc:69:93:96:
                    f1:d4:57:8e:cd:3f:a0:63:5c:9c:33:19:eb:ae:da:
                    80:b2:33:05:11:e0:fa:43:3e:a9:65:8b:48:67:5f:
                    e3:2a:a8:81:28:15:9d:e0:dd:44:44:69:61:da:a1:
                    98:65:80:ab:58:ca:0a:01:80:ec:4f:53:61:c0:be:
                    9a:01:be:f2:b0:34:4f:4a:cd:5b:e8:5d:65:55:a6:
                    fe:96:54:57:25:d5:d8:12:a8:8a:31:a4:d0:a3:60:
                    b4:f6:59:70:6e:cc:02:66:25:04:9c:81:53:63:26:
                    81:b4:f3:ba:ea:65:08:f8:78:f5:6a:20:74:65:a7:
                    ac:59:49:a5:6e:9e:01:42:d7:6e:c6:3c:07:7c:42:
                    01:4a:42:89:42:8d:32:b7:b2:83:1f:a4:44:51:39:
                    ec:8b:02:b3:ea:48:83:b2:1d:f9:af:2b:48:2c:3c:
                    72:87:d9:7d:dd:19:a2:a5:15:1c:7f:ce:c5:37:f9:
                    3c:53:44:16:a5:ec:9c:9b:60:6c:b5:b8:17:0d:ae:
                    b1:3a:33:d9:89:d9:92:c0:b6:5c:98:d2:36:63:86:
                    e6:09:80:b8:39:77:3f:ec:e4:36:1d:07:0a:77:a6:
                    da:12:43:8d:ba:07:b9:09:32:3a:73:f2:f6:84:2c:
                    14:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E1:71:64:4C:00:21:B1:3F:97:74:08:4E:EC:A2:09:3C:BD:15:A9:A9
            X509v3 Authority Key Identifier:
                keyid:21:0F:79:48:F5:E7:DC:CB:B6:2B:A8:F5:3C:35:BA:55:25:63:1B:70

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IQ95SPXn3Mu2K6j1PDW6VSVjG3A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/e4a7ac-1b5b-4bac-8557-63f6202e4bf4/1/4XFkTAAhsT-XdAhO7KIJPL0Vqak.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/e4a7ac-1b5b-4bac-8557-63f6202e4bf4/1/IQ95SPXn3Mu2K6j1PDW6VSVjG3A.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a0f:1100::/29

    Signature Algorithm: sha256WithRSAEncryption
         5b:2a:48:f2:72:12:71:68:1a:12:74:38:2b:6f:48:4b:7b:c2:
         8f:5f:65:82:1e:26:47:91:85:d1:63:5a:8c:0d:2e:35:5f:5f:
         2b:82:c0:2f:3e:35:cd:fd:41:b5:45:ee:d4:b1:68:17:56:39:
         8c:8d:3c:2b:3c:fd:aa:63:ac:88:81:c6:8e:10:92:b4:70:d2:
         a5:80:11:c6:a7:0c:56:5c:13:bb:ae:8a:c5:72:64:50:a1:b0:
         93:e0:0d:af:4a:04:0f:a8:c2:dd:a1:9a:db:1a:36:74:17:a9:
         19:2c:ec:0d:49:4e:58:37:dc:a0:8e:4b:32:4d:ce:34:d9:3d:
         06:18:ba:21:8e:b0:06:2a:97:84:8b:d7:6e:c9:da:17:a5:82:
         46:44:ed:85:32:70:e4:db:40:1f:75:15:2c:b8:63:e1:87:21:
         c1:95:c4:e3:7a:76:72:8a:47:84:1f:e1:af:2d:97:06:25:7a:
         9f:13:61:1e:b5:e9:39:64:1d:79:ef:42:90:29:73:f5:af:3c:
         68:05:ca:ca:26:9b:aa:ee:c7:e3:8d:71:de:6a:af:e0:32:06:
         2e:ff:5d:a9:5b:20:28:6e:b2:0d:a9:a6:52:41:3d:07:7a:7a:
         be:ad:6c:9b:7d:4c:36:74:f6:15:dc:f0:15:2d:b1:bb:b2:a7:
         e7:91:c4:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----