Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/78/6f6ce2-e6ee-4e2a-905d-f9cb0a7b206c/1/QPS5Op4SU8HOYwYqQ0xeA1Nr8Ls.roa
File:                     QPS5Op4SU8HOYwYqQ0xeA1Nr8Ls.roa (raw, json)
Hash identifier:          +trkC8OcLb+a0n4aqBlyYcmtwVh7QJjmKo7SU9fxoVc=
Subject key identifier:   40:F4:B9:3A:9E:12:53:C1:CE:63:06:2A:43:4C:5E:03:53:6B:F0:BB
Certificate issuer:       /CN=73c69d04583500c5ef81136831237593e0bb86ce
Certificate serial:       05978981
Authority key identifier: 73:C6:9D:04:58:35:00:C5:EF:81:13:68:31:23:75:93:E0:BB:86:CE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/c8adBFg1AMXvgRNoMSN1k-C7hs4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/78/6f6ce2-e6ee-4e2a-905d-f9cb0a7b206c/1/QPS5Op4SU8HOYwYqQ0xeA1Nr8Ls.roa
Signing time:             Sat 01 Jan 2022 05:01:32 +0000
ROA not before:           Sat 01 Jan 2022 05:01:32 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     211481
IP address blocks:        2a0d:2686::/32 maxlen: 48

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 93817217 (0x5978981)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73c69d04583500c5ef81136831237593e0bb86ce
        Validity
            Not Before: Jan  1 05:01:32 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=40f4b93a9e1253c1ce63062a434c5e03536bf0bb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:3e:84:cd:c7:5b:62:87:89:16:74:ff:85:7b:
                    ac:8f:fe:86:84:8e:35:94:96:18:2d:71:b5:9f:1b:
                    eb:33:60:9d:b1:65:08:ee:c2:d3:fe:2d:e2:80:63:
                    0a:b6:33:90:cb:d0:a4:52:5d:89:54:76:5d:fc:f5:
                    c6:59:74:e0:f7:84:28:a8:95:74:ed:f2:24:d5:4a:
                    cd:5f:35:a3:7a:42:82:d3:12:78:57:62:84:af:3e:
                    11:2d:1c:aa:03:87:a9:5c:af:37:3f:c9:f3:35:4b:
                    e9:6c:4d:b2:fb:ca:3d:ca:49:57:9e:da:e2:1a:59:
                    8c:62:36:b8:a5:7e:7c:7b:b6:07:7f:27:cb:63:8c:
                    00:01:38:61:31:b7:da:c2:d6:7b:4d:91:a0:4b:e5:
                    08:27:0d:74:55:6c:56:bf:db:80:9d:38:64:e3:a8:
                    22:97:4f:27:d8:7d:89:ac:4c:9d:79:12:44:df:72:
                    0a:1e:5b:57:ed:ab:21:ad:4e:79:2b:bf:e7:4c:01:
                    b6:a8:96:8e:6c:c3:2c:b1:f5:27:60:6d:7a:fb:63:
                    c0:42:52:39:e6:6d:09:da:1a:b4:d7:bd:ab:81:b4:
                    22:e3:53:ec:c7:44:65:65:a9:c4:b0:47:e0:23:f1:
                    ef:f3:f6:42:42:d6:33:f1:38:4b:d2:37:6c:86:54:
                    82:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                40:F4:B9:3A:9E:12:53:C1:CE:63:06:2A:43:4C:5E:03:53:6B:F0:BB
            X509v3 Authority Key Identifier:
                keyid:73:C6:9D:04:58:35:00:C5:EF:81:13:68:31:23:75:93:E0:BB:86:CE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8adBFg1AMXvgRNoMSN1k-C7hs4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/6f6ce2-e6ee-4e2a-905d-f9cb0a7b206c/1/QPS5Op4SU8HOYwYqQ0xeA1Nr8Ls.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/78/6f6ce2-e6ee-4e2a-905d-f9cb0a7b206c/1/c8adBFg1AMXvgRNoMSN1k-C7hs4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a0d:2686::/32

    Signature Algorithm: sha256WithRSAEncryption
         2e:17:58:fb:6d:88:be:fb:e6:d7:9a:d8:e6:c7:0e:1f:a1:c1:
         5b:e9:ca:98:72:63:73:1f:d1:be:00:ca:c8:76:79:19:cd:7b:
         fa:53:ef:e1:6a:2a:76:ed:df:a1:f3:1a:f9:e9:68:39:5f:e2:
         01:66:ec:b2:aa:8b:f6:9d:a3:77:6c:aa:3e:a8:7a:7f:ab:0b:
         e2:76:93:e4:6d:72:29:8d:e6:3e:7e:7c:7d:eb:6b:ff:5f:b5:
         e5:ba:84:21:e5:e5:b1:3b:e2:65:74:f0:d7:8f:b9:a5:8f:b3:
         61:60:83:d2:fe:cf:04:46:6b:f2:7a:3a:95:9e:12:f0:88:0d:
         d2:33:c6:04:43:1d:b5:bc:29:65:07:3f:0e:f6:24:20:96:90:
         93:37:9b:3c:f8:79:09:b9:ec:5d:3b:c7:ae:28:ac:4f:e9:b0:
         d1:31:c1:61:d5:a0:36:d0:b7:32:49:8d:3b:6f:f7:09:5f:d8:
         1b:13:d8:51:7e:c9:98:53:b7:7c:99:ef:c7:2e:30:ed:22:1e:
         1c:6b:bd:96:cc:ae:24:df:3a:1d:95:2f:dd:fd:ba:51:9c:e2:
         77:ca:57:08:79:c0:d5:c6:f1:9e:90:b8:f2:c7:bd:92:9c:21:
         4b:c1:66:3f:93:97:aa:f1:da:1e:86:b8:6f:f3:da:42:86:da:
         16:47:57:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----