Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f3/7ca61a-ce3d-4bac-9110-c0f3bad99a40/1/K26dwkNSuyAGGxg5f_-GRWnb8WE.roa
File:                     K26dwkNSuyAGGxg5f_-GRWnb8WE.roa (raw, json)
Hash identifier:          I/mUjpzcVsxJINE184CaMkq1ID26u7THJoyuCuzqorc=
Subject key identifier:   2B:6E:9D:C2:43:52:BB:20:06:1B:18:39:7F:FF:86:45:69:DB:F1:61
Certificate issuer:       /CN=b689299bc49584a645940c1dd87df0afc8aaa0fd
Certificate serial:       029A2EC3
Authority key identifier: B6:89:29:9B:C4:95:84:A6:45:94:0C:1D:D8:7D:F0:AF:C8:AA:A0:FD
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/tokpm8SVhKZFlAwd2H3wr8iqoP0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f3/7ca61a-ce3d-4bac-9110-c0f3bad99a40/1/K26dwkNSuyAGGxg5f_-GRWnb8WE.roa
Signing time:             Wed 05 Jan 2022 17:51:37 +0000
ROA not before:           Wed 05 Jan 2022 17:51:37 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     5607
IP address blocks:        2a0c:93c0:8002::/48 maxlen: 48
                          2a0c:93c0:c002::/48 maxlen: 48
                          2a0c:93c0:8000::/48 maxlen: 48

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 43658947 (0x29a2ec3)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b689299bc49584a645940c1dd87df0afc8aaa0fd
        Validity
            Not Before: Jan  5 17:51:37 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=2b6e9dc24352bb20061b18397fff864569dbf161
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:ad:22:d6:83:a0:16:6d:b5:7a:bd:2b:9d:f8:
                    ef:4a:a6:5f:ac:6c:10:6a:07:c9:9e:f5:25:0e:dd:
                    04:96:71:aa:c4:7a:12:e7:2c:6a:84:64:1b:d2:de:
                    7e:43:5b:e0:c0:7d:b2:cb:30:96:fd:46:5b:8e:c5:
                    47:2f:cb:4b:0a:dd:c6:69:d8:d1:b8:7e:ea:18:03:
                    70:c4:9e:0b:b0:79:50:18:5f:a0:2b:21:5d:7e:4c:
                    e0:c9:a9:e2:4c:cb:19:ba:3a:27:30:4a:a8:21:b3:
                    61:db:b9:30:35:6a:e1:75:b9:6b:8c:70:98:76:fe:
                    40:3a:da:a4:60:d7:62:cf:56:28:60:d9:79:38:8e:
                    2a:ad:25:11:71:a5:4d:26:01:52:e9:a0:21:d7:df:
                    0b:9e:4a:8c:9b:f2:2d:d4:5b:8c:d2:e9:ab:a9:70:
                    97:ca:01:56:94:40:cd:c1:7c:3a:cc:c6:cf:1a:36:
                    56:78:3f:49:6c:8a:d8:7c:79:06:89:b2:f3:9b:3f:
                    9e:93:a8:83:73:20:15:25:6b:ee:82:2e:6d:99:cc:
                    ce:e0:49:0f:40:70:0b:0f:7a:5f:27:2e:99:c9:61:
                    06:d8:b3:a9:30:c9:1c:b3:ee:e3:45:c8:82:0b:ee:
                    96:4e:4a:58:41:9c:e5:d2:ca:fc:6a:3e:8c:c3:b2:
                    7f:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2B:6E:9D:C2:43:52:BB:20:06:1B:18:39:7F:FF:86:45:69:DB:F1:61
            X509v3 Authority Key Identifier:
                keyid:B6:89:29:9B:C4:95:84:A6:45:94:0C:1D:D8:7D:F0:AF:C8:AA:A0:FD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tokpm8SVhKZFlAwd2H3wr8iqoP0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/7ca61a-ce3d-4bac-9110-c0f3bad99a40/1/K26dwkNSuyAGGxg5f_-GRWnb8WE.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/7ca61a-ce3d-4bac-9110-c0f3bad99a40/1/tokpm8SVhKZFlAwd2H3wr8iqoP0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a0c:93c0:8000::/48
                  2a0c:93c0:8002::/48
                  2a0c:93c0:c002::/48

    Signature Algorithm: sha256WithRSAEncryption
         a1:d8:51:a2:82:dc:cd:ec:1b:72:77:3f:c2:af:86:f0:46:9e:
         b8:b6:58:5f:81:a4:9e:d0:e8:cc:67:a0:d2:da:a9:87:a2:ce:
         d0:fe:9f:c5:0d:e2:20:93:a7:d1:9d:55:63:a9:b7:81:55:58:
         c2:3b:a2:78:23:77:ea:c6:67:67:4d:e6:79:b4:20:d4:d9:01:
         76:77:05:a3:e4:77:47:6a:7e:e0:2b:84:9c:8c:bb:b4:25:46:
         68:84:ba:e9:0f:83:b8:8c:be:c2:d9:27:c4:9f:e1:cf:8f:7b:
         6f:01:f4:fb:30:05:cc:79:01:c0:b6:01:94:a0:fd:21:37:d9:
         85:48:fc:6c:8c:0e:b1:8f:04:67:ca:83:ad:b3:95:2e:20:66:
         72:ad:58:82:1d:5c:2f:1e:77:89:57:cf:bb:08:4e:f3:f6:b1:
         f6:af:85:40:74:19:89:12:63:36:60:62:ef:0c:8a:92:9c:d8:
         ff:07:5c:43:e3:a0:09:d5:a8:21:dc:bd:50:f8:56:5f:76:ab:
         6d:28:5c:25:2a:a7:ff:e3:c3:85:bf:8a:bb:5d:86:c5:9f:52:
         a9:a7:04:e7:0a:5e:d3:8d:65:a3:5b:3a:ea:d5:81:08:3b:38:
         14:65:2e:fc:e3:77:36:e7:30:dc:d8:ec:a2:57:61:36:4a:9f:
         9d:90:5e:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----