Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/fa77d3-cedb-459d-95cf-dc7e126ca234/1/V6GG8Xk349fpzIqREszGiV9Zk6c.roa
File:                     V6GG8Xk349fpzIqREszGiV9Zk6c.roa (raw, json)
Hash identifier:          nXibj9WPlwA6bZbYtqwPSvhRmqflyyemv5mXIPIi1aI=
Subject key identifier:   57:A1:86:F1:79:37:E3:D7:E9:CC:8A:91:12:CC:C6:89:5F:59:93:A7
Certificate issuer:       /CN=d447813ce52a823ea1efc9a0f4933c5d3353ee2b
Certificate serial:       C7A74D
Authority key identifier: D4:47:81:3C:E5:2A:82:3E:A1:EF:C9:A0:F4:93:3C:5D:33:53:EE:2B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1EeBPOUqgj6h78mg9JM8XTNT7is.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d3/fa77d3-cedb-459d-95cf-dc7e126ca234/1/V6GG8Xk349fpzIqREszGiV9Zk6c.roa
Signing time:             Mon 13 Jun 2022 07:20:28 +0000
ROA not before:           Mon 13 Jun 2022 07:20:28 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     208976
IP address blocks:        2a12:66c7::/48 maxlen: 48
                          2a12:66c0::/32 maxlen: 32

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 13084493 (0xc7a74d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d447813ce52a823ea1efc9a0f4933c5d3353ee2b
        Validity
            Not Before: Jun 13 07:20:28 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=57a186f17937e3d7e9cc8a9112ccc6895f5993a7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:7a:0c:26:3c:be:70:8e:b7:3d:6d:d2:1a:e6:
                    15:57:5b:29:fa:97:08:40:15:24:e0:c0:95:f0:b8:
                    92:33:e6:50:1b:3a:40:1e:db:37:ef:e4:64:36:07:
                    8f:63:55:ca:92:34:ec:66:28:13:22:1f:e7:d0:6c:
                    e8:08:9f:d1:c0:d7:1a:88:df:d7:ed:d2:e0:6c:e2:
                    75:c2:ed:31:5a:30:e1:9b:92:f2:45:ed:4d:62:0c:
                    8f:1d:d2:f7:5b:5c:b0:d0:86:51:4e:b3:a2:b6:40:
                    2a:1e:ec:ad:c5:f7:d7:20:ef:e6:97:84:9e:8a:a1:
                    2f:4f:2a:7b:cf:9e:40:5b:a8:f5:a6:2c:72:5e:f7:
                    53:cd:85:fe:3a:68:a2:a6:46:7a:93:b2:1d:80:f1:
                    43:6a:fc:4a:54:1c:86:a9:66:83:97:af:71:c0:2c:
                    a7:90:10:0a:ef:d8:11:c2:0d:39:25:aa:c7:61:e5:
                    2c:12:49:aa:ec:7d:8f:8d:10:ed:71:b5:7b:6e:52:
                    72:48:3a:1b:d8:f5:3a:1a:c3:84:17:7a:ca:f0:04:
                    7c:b6:a6:9c:b0:ca:0d:89:1d:b4:59:bf:0c:0b:ad:
                    17:09:c0:1c:9e:c2:5d:b0:17:53:b4:22:72:95:04:
                    f9:a8:dc:16:06:de:ec:23:b7:bd:4e:c8:d9:f5:18:
                    61:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                57:A1:86:F1:79:37:E3:D7:E9:CC:8A:91:12:CC:C6:89:5F:59:93:A7
            X509v3 Authority Key Identifier:
                keyid:D4:47:81:3C:E5:2A:82:3E:A1:EF:C9:A0:F4:93:3C:5D:33:53:EE:2B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1EeBPOUqgj6h78mg9JM8XTNT7is.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/fa77d3-cedb-459d-95cf-dc7e126ca234/1/V6GG8Xk349fpzIqREszGiV9Zk6c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/fa77d3-cedb-459d-95cf-dc7e126ca234/1/1EeBPOUqgj6h78mg9JM8XTNT7is.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a12:66c0::/32
                  2a12:66c7::/48

    Signature Algorithm: sha256WithRSAEncryption
         3d:df:46:47:5a:6f:61:91:c8:4f:80:b2:60:92:93:a8:25:f0:
         e1:5e:f7:7a:bd:ff:e1:e3:52:ff:31:c1:71:6f:2b:eb:e2:3c:
         08:0d:79:55:a8:04:d5:d6:f0:37:30:04:5b:95:44:28:9c:a6:
         d0:e6:1f:a1:f1:f7:ec:4a:61:83:11:d2:77:3b:d3:4f:2e:c1:
         3d:8a:4a:fc:9f:1b:b7:bf:10:9c:97:0a:df:3c:a7:c3:38:20:
         02:59:59:9a:7e:8c:3f:5b:af:e6:52:11:99:40:0b:ce:cd:39:
         34:8a:1e:90:ea:2d:8c:7a:c8:4f:c9:fb:82:38:68:dc:2f:85:
         b5:45:97:fc:af:cd:33:8a:38:52:28:0e:c5:c8:52:8e:87:5d:
         16:e5:9e:2f:2a:86:4f:05:f0:de:93:00:ba:d1:7a:c0:11:bc:
         7b:13:a5:84:a3:d7:0e:c9:a8:1b:10:60:18:92:65:00:92:b2:
         5d:27:a2:45:8d:0d:68:b7:46:a6:be:fa:37:88:2e:17:ed:a9:
         e3:d4:4f:a6:2a:cc:a9:c5:42:67:39:a4:92:aa:5f:26:85:ef:
         09:00:86:60:6c:08:58:b7:1a:6d:f1:d1:6c:c3:17:16:39:05:
         84:0b:8a:aa:dd:cf:7c:0e:69:95:af:e8:80:1f:0c:90:35:bf:
         4f:40:b5:7c
-----BEGIN CERTIFICATE-----
MIIE+TCCA+GgAwIBAgIEAMenTTANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyhk
NDQ3ODEzY2U1MmE4MjNlYTFlZmM5YTBmNDkzM2M1ZDMzNTNlZTJiMB4XDTIyMDYx
MzA3MjAyOFoXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoNTdhMTg2ZjE3OTM3
ZTNkN2U5Y2M4YTkxMTJjY2M2ODk1ZjU5OTNhNzCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAJ16DCY8vnCOtz1t0hrmFVdbKfqXCEAVJODAlfC4kjPmUBs6
QB7bN+/kZDYHj2NVypI07GYoEyIf59Bs6Aif0cDXGojf1+3S4GzidcLtMVow4ZuS
8kXtTWIMjx3S91tcsNCGUU6zorZAKh7srcX31yDv5peEnoqhL08qe8+eQFuo9aYs
cl73U82F/jpooqZGepOyHYDxQ2r8SlQchqlmg5evccAsp5AQCu/YEcINOSWqx2Hl
LBJJqux9j40Q7XG1e25Sckg6G9j1OhrDhBd6yvAEfLamnLDKDYkdtFm/DAutFwnA
HJ7CXbAXU7QicpUE+ajcFgbe7CO3vU7I2fUYYbECAwEAAaOCAhMwggIPMB0GA1Ud
DgQWBBRXoYbxeTfj1+nMipESzMaJX1mTpzAfBgNVHSMEGDAWgBTUR4E85SqCPqHv
yaD0kzxdM1PuKzAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
LzFFZUJQT1VxZ2o2aDc4bWc5Sk04WFROVDdpcy5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvZDMvZmE3N2QzLWNlZGItNDU5ZC05NWNmLWRjN2UxMjZjYTIzNC8x
L1Y2R0c4WGszNDlmcHpJcVJFc3pHaVY5Wms2Yy5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZDMv
ZmE3N2QzLWNlZGItNDU5ZC05NWNmLWRjN2UxMjZjYTIzNC8xLzFFZUJQT1VxZ2o2
aDc4bWc5Sk04WFROVDdpcy5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAp
BggrBgEFBQcBBwEB/wQaMBgwFgQCAAIwEAMFACoSZsADBwAqEmbHAAAwDQYJKoZI
hvcNAQELBQADggEBAD3fRkdab2GRyE+AsmCSk6gl8OFe93q9/+HjUv8xwXFvK+vi
PAgNeVWoBNXW8DcwBFuVRCicptDmH6Hx9+xKYYMR0nc7008uwT2KSvyfG7e/EJyX
Ct88p8M4IAJZWZp+jD9br+ZSEZlAC87NOTSKHpDqLYx6yE/J+4I4aNwvhbVFl/yv
zTOKOFIoDsXIUo6HXRblni8qhk8F8N6TALrResARvHsTpYSj1w7JqBsQYBiSZQCS
sl0nokWNDWi3Rqa++jeILhftqePUT6YqzKnFQmc5pJKqXyaF7wkAhmBsCFi3Gm3x
0WzDFxY5BYQLiqrdz3wOaZWv6IAfDJA1v09AtXw=
-----END CERTIFICATE-----