Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/492590-a02f-443e-aaa3-feac26eaecc2/1/5rbd_JzfSEztla7LUZXkoF2W_YQ.roa
File:                     5rbd_JzfSEztla7LUZXkoF2W_YQ.roa (raw, json)
Hash identifier:          YamLcl2AJQPE9MRDFH0MyNHTVP3+HLXfPFoKLtgtBNM=
Subject key identifier:   E6:B6:DD:FC:9C:DF:48:4C:ED:95:AE:CB:51:95:E4:A0:5D:96:FD:84
Certificate issuer:       /CN=6c8fd1a8ae5996c1e5692c1a8c42bfe9c3ba5745
Certificate serial:       01825678A5C625C52FE236235F4F66908C95
Authority key identifier: 6C:8F:D1:A8:AE:59:96:C1:E5:69:2C:1A:8C:42:BF:E9:C3:BA:57:45
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/bI_RqK5ZlsHlaSwajEK_6cO6V0U.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d0/492590-a02f-443e-aaa3-feac26eaecc2/1/5rbd_JzfSEztla7LUZXkoF2W_YQ.roa
Signing time:             Sun 31 Jul 2022 22:55:23 +0000
ROA not before:           Sun 31 Jul 2022 22:55:23 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     202986
IP address blocks:        2a06:7245::/48 maxlen: 48

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:82:56:78:a5:c6:25:c5:2f:e2:36:23:5f:4f:66:90:8c:95
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6c8fd1a8ae5996c1e5692c1a8c42bfe9c3ba5745
        Validity
            Not Before: Jul 31 22:55:23 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=e6b6ddfc9cdf484ced95aecb5195e4a05d96fd84
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:0b:56:be:ce:3b:5c:b6:b0:79:ef:09:8e:1b:
                    73:82:82:b1:cd:3b:aa:72:ee:f7:70:a1:12:f1:a5:
                    bf:1c:e5:1c:88:df:46:dc:4e:a4:69:45:fc:2c:e4:
                    22:99:9b:f1:1b:0f:cb:2d:04:b2:20:ae:9e:ff:2a:
                    01:7d:92:8f:dc:8d:20:bd:09:56:74:9f:ce:da:fe:
                    c5:8b:93:20:24:70:42:72:a1:c0:29:31:ae:b1:b3:
                    1e:0c:e0:4d:c9:40:f6:f9:54:fb:73:30:37:93:7e:
                    e1:b1:0c:20:4a:5d:13:54:6d:93:88:a2:b1:eb:1c:
                    f1:9b:82:f6:66:a5:08:7a:c3:3d:42:6e:82:7d:c0:
                    ba:6a:e3:1d:11:75:7d:fd:24:cc:8a:a4:ce:b1:06:
                    0d:70:1c:8d:01:8c:dd:2c:4a:c4:7f:6a:87:97:4c:
                    29:3d:34:20:58:7a:f4:c9:f5:ad:b1:95:4d:86:ed:
                    40:7a:62:a9:b7:ba:2c:d5:e1:21:01:1b:88:52:5e:
                    a1:95:35:9c:21:b5:90:70:cf:19:24:76:ce:67:23:
                    da:bf:8c:fc:fd:79:4e:9f:fd:70:47:9a:67:ca:47:
                    8c:1f:f0:95:e6:bb:44:ad:67:f0:2e:a9:79:94:2d:
                    4f:a8:84:60:1a:bb:61:4a:e5:85:14:1c:e5:50:95:
                    7d:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E6:B6:DD:FC:9C:DF:48:4C:ED:95:AE:CB:51:95:E4:A0:5D:96:FD:84
            X509v3 Authority Key Identifier:
                keyid:6C:8F:D1:A8:AE:59:96:C1:E5:69:2C:1A:8C:42:BF:E9:C3:BA:57:45

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bI_RqK5ZlsHlaSwajEK_6cO6V0U.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/492590-a02f-443e-aaa3-feac26eaecc2/1/5rbd_JzfSEztla7LUZXkoF2W_YQ.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/492590-a02f-443e-aaa3-feac26eaecc2/1/bI_RqK5ZlsHlaSwajEK_6cO6V0U.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a06:7245::/48

    Signature Algorithm: sha256WithRSAEncryption
         a8:f0:ab:19:be:8e:95:a4:de:f2:49:9a:72:6d:d3:64:d4:27:
         be:ce:96:46:a6:86:c8:75:35:e7:c2:e8:89:74:b7:06:13:18:
         c6:22:ef:e9:3c:6d:07:0c:11:11:41:fd:19:61:7d:a8:4f:4a:
         d8:de:19:e5:da:cd:e5:f5:15:40:95:02:5e:54:2b:f6:41:3a:
         cb:67:c9:22:61:85:fa:fb:56:5a:5b:17:4c:a4:08:c9:94:ce:
         3f:0d:97:2a:12:00:53:6e:17:27:e4:86:32:dd:ed:71:53:1e:
         1d:55:3f:db:cc:f8:10:2b:94:46:22:11:ab:e8:8e:db:9c:f1:
         bb:26:7f:50:20:16:3e:0e:d7:ed:64:62:e9:d2:86:20:f5:6b:
         fd:87:e0:ac:f3:f7:bf:69:85:6e:31:6e:8f:0e:bf:8d:25:d8:
         57:12:4f:95:5d:4f:63:d4:8b:f6:7a:dc:b9:ab:85:63:d8:58:
         d9:ec:f3:83:dc:8a:58:1a:47:2c:8a:d8:cb:3a:70:a5:27:85:
         5d:93:98:74:c9:b2:ec:93:08:b7:65:a6:f1:f7:0e:7b:32:8b:
         7e:7b:96:9b:cb:73:f1:e2:0b:35:38:1e:0a:40:15:59:72:3e:
         c7:31:5b:73:84:dc:91:52:21:b3:86:9b:b1:f4:08:28:7e:81:
         f2:e6:dc:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----