Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a9/554c35-a83c-4329-a08d-2d46d30dacbf/1/s6OYu78hZaNGRPRsEjhqmczX_oE.roa
File:                     s6OYu78hZaNGRPRsEjhqmczX_oE.roa (raw, json)
Hash identifier:          EGsq3vn49kaQWAP6FTa2ZuwS3ENnXwHwrAMPVCl8uLE=
Subject key identifier:   B3:A3:98:BB:BF:21:65:A3:46:44:F4:6C:12:38:6A:99:CC:D7:FE:81
Certificate issuer:       /CN=a5a56ebf01e00349f673019180560c9a31aea871
Certificate serial:       0183DD437F18AD008A5AFF8DB40B33040C28
Authority key identifier: A5:A5:6E:BF:01:E0:03:49:F6:73:01:91:80:56:0C:9A:31:AE:A8:71
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/paVuvwHgA0n2cwGRgFYMmjGuqHE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a9/554c35-a83c-4329-a08d-2d46d30dacbf/1/s6OYu78hZaNGRPRsEjhqmczX_oE.roa
Signing time:             Sat 15 Oct 2022 20:08:51 +0000
ROA not before:           Sat 15 Oct 2022 20:08:51 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     399976
IP address blocks:        2a12:c6c4::/32 maxlen: 48
                          2a12:c6c7::/32 maxlen: 48
                          2a12:c6c6::/32 maxlen: 48

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:83:dd:43:7f:18:ad:00:8a:5a:ff:8d:b4:0b:33:04:0c:28
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a5a56ebf01e00349f673019180560c9a31aea871
        Validity
            Not Before: Oct 15 20:08:51 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=b3a398bbbf2165a34644f46c12386a99ccd7fe81
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:5b:a2:72:5c:c1:70:f1:72:6e:f6:53:74:2b:
                    d2:bb:fc:ce:02:29:69:e8:be:cf:34:ea:f2:01:4f:
                    da:63:e4:61:5a:b4:82:25:9d:4c:40:b6:ab:37:f9:
                    93:bd:4e:d0:2b:9c:c6:d4:bd:ec:ac:7c:af:15:e1:
                    2c:7e:8f:64:e9:ea:1b:82:78:78:14:f7:df:14:42:
                    35:b4:52:24:67:d9:1a:cf:64:50:66:92:e8:a3:3c:
                    16:15:ff:e7:f5:25:74:a5:2f:ff:93:3a:86:09:f7:
                    f6:8a:70:a5:35:d1:b6:95:c8:11:26:af:fd:3d:e0:
                    0f:08:a6:f9:ac:2c:88:57:3f:5b:73:eb:01:2c:e7:
                    54:91:47:ff:a8:1c:74:9b:49:5d:9b:09:40:ee:fd:
                    03:66:26:72:cf:28:e4:36:eb:af:bd:52:43:6c:cb:
                    e6:19:f5:72:4a:73:5c:df:b7:b7:fe:03:d4:72:4a:
                    58:02:c9:39:f7:9b:f5:15:aa:8d:2b:fd:58:13:bf:
                    4a:83:76:b0:dc:3e:36:a0:35:47:3b:65:71:5c:fa:
                    b7:eb:be:46:e7:75:af:a0:f7:0a:3f:c3:a4:af:ef:
                    8f:4a:26:ba:c8:c3:c7:19:c7:c9:d8:cd:5a:17:42:
                    63:d7:7a:d2:ea:13:ea:dd:bb:44:6f:8e:ea:aa:ff:
                    b5:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B3:A3:98:BB:BF:21:65:A3:46:44:F4:6C:12:38:6A:99:CC:D7:FE:81
            X509v3 Authority Key Identifier:
                keyid:A5:A5:6E:BF:01:E0:03:49:F6:73:01:91:80:56:0C:9A:31:AE:A8:71

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/paVuvwHgA0n2cwGRgFYMmjGuqHE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/554c35-a83c-4329-a08d-2d46d30dacbf/1/s6OYu78hZaNGRPRsEjhqmczX_oE.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/554c35-a83c-4329-a08d-2d46d30dacbf/1/paVuvwHgA0n2cwGRgFYMmjGuqHE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a12:c6c4::/32
                  2a12:c6c6::/31

    Signature Algorithm: sha256WithRSAEncryption
         aa:58:46:d4:f4:99:ad:98:a5:d9:c3:58:a6:21:d0:88:f2:95:
         5e:63:aa:9a:6c:8a:1a:98:02:97:0a:ff:d2:00:ac:f3:26:e9:
         86:46:e3:d3:cb:0b:b1:4e:f6:37:7f:08:a6:fc:b5:9f:dd:22:
         9b:94:eb:c2:a0:20:64:6e:b6:21:ee:41:f5:f9:3e:ea:b4:ac:
         44:9e:4c:36:17:58:64:47:33:0b:f1:7b:15:1e:d6:99:b6:a3:
         7e:92:12:80:0f:a0:5f:af:0b:42:a3:d1:b0:ea:94:16:47:64:
         65:c3:71:2d:96:cf:cc:96:48:60:0e:ce:0e:86:22:d6:ba:ec:
         cf:61:a7:51:ec:6f:a5:f7:66:b7:67:12:6a:5a:b9:fb:26:82:
         f6:f6:8b:09:4c:33:38:a4:f7:ef:f8:8d:89:3f:3f:55:4b:83:
         e7:92:43:c6:36:00:64:e2:2d:30:33:3a:de:58:04:97:d4:a4:
         0e:0b:9d:b2:60:27:74:d7:bc:35:56:5a:67:af:7d:a8:93:07:
         bf:61:a8:7a:ac:c1:e5:5a:ee:93:91:8b:d3:76:f4:ac:82:b6:
         6e:1a:a3:be:22:a1:55:dc:12:07:6c:2b:83:f9:01:6d:73:ca:
         32:e7:bb:f9:b9:33:ac:20:c5:a4:0c:2f:a6:ee:18:bb:4d:77:
         dc:a9:3c:07
-----BEGIN CERTIFICATE-----
MIIFBTCCA+2gAwIBAgISAYPdQ38YrQCKWv+NtAszBAwoMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGE1YTU2ZWJmMDFlMDAzNDlmNjczMDE5MTgwNTYwYzlhMzFh
ZWE4NzEwHhcNMjIxMDE1MjAwODUxWhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhiM2EzOThiYmJmMjE2NWEzNDY0NGY0NmMxMjM4NmE5OWNjZDdmZTgxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiluiclzBcPFybvZTdCvSu/zOAilp
6L7PNOryAU/aY+RhWrSCJZ1MQLarN/mTvU7QK5zG1L3srHyvFeEsfo9k6eobgnh4
FPffFEI1tFIkZ9kaz2RQZpLoozwWFf/n9SV0pS//kzqGCff2inClNdG2lcgRJq/9
PeAPCKb5rCyIVz9bc+sBLOdUkUf/qBx0m0ldmwlA7v0DZiZyzyjkNuuvvVJDbMvm
GfVySnNc37e3/gPUckpYAsk595v1FaqNK/1YE79Kg3aw3D42oDVHO2VxXPq3675G
53WvoPcKP8Okr++PSia6yMPHGcfJ2M1aF0Jj13rS6hPq3btEb47qqv+11wIDAQAB
o4ICETCCAg0wHQYDVR0OBBYEFLOjmLu/IWWjRkT0bBI4apnM1/6BMB8GA1UdIwQY
MBaAFKWlbr8B4ANJ9nMBkYBWDJoxrqhxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcGFWdXZ3SGdBMG4yY3dHUmdGWU1takd1cUhFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hOS81NTRjMzUtYTgzYy00MzI5LWEwOGQt
MmQ0NmQzMGRhY2JmLzEvczZPWXU3OGhaYU5HUlBSc0VqaHFtY3pYX29FLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hOS81NTRjMzUtYTgzYy00MzI5LWEwOGQtMmQ0NmQzMGRhY2Jm
LzEvcGFWdXZ3SGdBMG4yY3dHUmdGWU1takd1cUhFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCcGCCsGAQUFBwEHAQH/BBgwFjAUBAIAAjAOAwUAKhLGxAMF
ASoSxsYwDQYJKoZIhvcNAQELBQADggEBAKpYRtT0ma2YpdnDWKYh0IjylV5jqpps
ihqYApcK/9IArPMm6YZG49PLC7FO9jd/CKb8tZ/dIpuU68KgIGRutiHuQfX5Puq0
rESeTDYXWGRHMwvxexUe1pm2o36SEoAPoF+vC0Kj0bDqlBZHZGXDcS2Wz8yWSGAO
zg6GIta67M9hp1Hsb6X3ZrdnEmpaufsmgvb2iwlMMzik9+/4jYk/P1VLg+eSQ8Y2
AGTiLTAzOt5YBJfUpA4LnbJgJ3TXvDVWWmevfaiTB79hqHqsweVa7pORi9N29KyC
tm4ao74ioVXcEgdsK4P5AW1zyjLnu/m5M6wgxaQML6buGLtNd9ypPAc=
-----END CERTIFICATE-----