Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/41d6e1-5cad-40db-9773-58b38f5ac80b/1/NSwp5N46z0MmNF8n7YATx98EOKw.roa
File:                     NSwp5N46z0MmNF8n7YATx98EOKw.roa (raw, json)
Hash identifier:          5eT/RNBehjtTq2bXzQus/K3DBnl9BE+nI6yRktRyMu0=
Subject key identifier:   35:2C:29:E4:DE:3A:CF:43:26:34:5F:27:ED:80:13:C7:DF:04:38:AC
Certificate issuer:       /CN=b4253c4f233ce9847699ae68ecbf5d7514b0fadb
Certificate serial:       17A2AFDD
Authority key identifier: B4:25:3C:4F:23:3C:E9:84:76:99:AE:68:EC:BF:5D:75:14:B0:FA:DB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/tCU8TyM86YR2ma5o7L9ddRSw-ts.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d0/41d6e1-5cad-40db-9773-58b38f5ac80b/1/NSwp5N46z0MmNF8n7YATx98EOKw.roa
Signing time:             Sat 01 Jan 2022 13:03:29 +0000
ROA not before:           Sat 01 Jan 2022 13:03:29 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     210311
IP address blocks:        2a09:e1c1:eff0::/44 maxlen: 48

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 396537821 (0x17a2afdd)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b4253c4f233ce9847699ae68ecbf5d7514b0fadb
        Validity
            Not Before: Jan  1 13:03:29 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=352c29e4de3acf4326345f27ed8013c7df0438ac
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:ca:12:a9:14:cf:d0:88:7b:53:d7:29:58:59:
                    d3:0f:1a:5d:2f:9f:5d:96:b4:af:27:5d:6c:02:42:
                    46:a8:b2:a2:fe:15:56:84:92:9a:bd:78:4a:5e:c0:
                    06:20:5a:0a:80:71:a2:bd:32:63:55:a5:f8:10:e7:
                    d5:73:bc:1b:f5:b0:c3:f4:d7:47:08:ef:c2:57:3b:
                    07:36:8c:ae:48:6e:8b:47:da:e1:f8:97:09:fb:c5:
                    3c:45:de:fe:ba:52:0a:b9:6b:3d:d6:01:29:bc:00:
                    d6:d8:38:80:dc:d9:6d:a7:5d:c5:aa:0e:bf:46:73:
                    f2:71:b2:90:d1:b3:79:7f:91:68:39:c6:ea:47:7d:
                    f7:af:ac:73:2a:93:20:83:60:6c:eb:05:99:92:3f:
                    21:a1:92:67:12:41:ab:2b:5b:34:9c:80:3f:90:67:
                    85:38:e6:04:8f:c3:3e:7d:ba:b0:e8:f5:0b:5f:be:
                    dd:16:3d:27:35:80:6d:cc:1e:04:f0:2c:ee:c5:c1:
                    be:ce:03:be:e1:6d:32:95:8e:f2:a1:3f:07:10:df:
                    e7:15:44:c0:91:36:83:b6:a7:51:82:7e:d7:2e:14:
                    67:5d:8a:79:8d:87:99:4b:d4:8b:79:03:f7:11:3f:
                    4c:02:b8:25:0d:ba:28:3a:fb:e2:7b:c5:80:7e:5a:
                    6e:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                35:2C:29:E4:DE:3A:CF:43:26:34:5F:27:ED:80:13:C7:DF:04:38:AC
            X509v3 Authority Key Identifier:
                keyid:B4:25:3C:4F:23:3C:E9:84:76:99:AE:68:EC:BF:5D:75:14:B0:FA:DB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tCU8TyM86YR2ma5o7L9ddRSw-ts.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/41d6e1-5cad-40db-9773-58b38f5ac80b/1/NSwp5N46z0MmNF8n7YATx98EOKw.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/41d6e1-5cad-40db-9773-58b38f5ac80b/1/tCU8TyM86YR2ma5o7L9ddRSw-ts.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a09:e1c1:eff0::/44

    Signature Algorithm: sha256WithRSAEncryption
         86:8c:99:7e:6a:c9:64:d2:49:04:7a:13:e8:d5:7f:cf:5f:d0:
         4c:cf:fc:d9:50:62:91:ee:87:f0:f1:5f:a7:c0:fb:1b:20:6f:
         a3:ce:e3:d5:e1:e4:31:0d:bc:a8:31:11:af:e6:1b:a9:b1:5d:
         97:05:3f:61:cb:7e:4f:31:76:a4:38:12:ea:9b:dd:f1:e4:3f:
         b9:de:b5:7e:79:9b:a5:9b:76:1e:8b:55:9d:d1:a3:81:63:f9:
         01:27:4a:cd:b4:10:af:9e:d8:17:4f:5b:96:fb:8b:f4:f0:a0:
         e1:a8:0a:82:f4:7e:44:4e:bd:f5:62:ed:d5:c0:36:8f:a7:72:
         75:2d:5a:3e:63:fd:cd:97:c0:1c:d2:cf:1e:ad:8f:5b:9b:a2:
         15:f4:ef:f9:d3:7c:4f:a8:e2:cb:93:d6:ce:ec:de:ff:40:6b:
         8a:70:45:c1:4b:96:5f:48:94:3a:d3:52:b5:78:09:8e:20:2a:
         2b:ba:43:45:21:fe:74:ef:56:9f:4e:75:95:83:95:70:fd:1a:
         20:65:af:01:a1:42:f9:61:a4:1b:d9:02:ff:5f:62:0a:f0:6d:
         d2:4a:59:6b:2f:af:04:25:7c:b8:db:3c:ff:ab:26:ee:01:e3:
         d2:be:db:54:88:72:03:1b:5d:1a:ca:9a:85:f8:1e:db:f6:60:
         05:52:54:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----