Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3f/2b2878-5b79-40f7-b4b5-356c4d7bb452/1/D-Vkzf6d_FY22KJE6P7w9Q6yXoE.roa
File:                     D-Vkzf6d_FY22KJE6P7w9Q6yXoE.roa (raw, json)
Hash identifier:          5w9MdmXyF6lQU/7gF/LkiwtkfbiAcO2zWnw/lRoZlLw=
Subject key identifier:   0F:E5:64:CD:FE:9D:FC:56:36:D8:A2:44:E8:FE:F0:F5:0E:B2:5E:81
Certificate issuer:       /CN=f6c3e027d2d1c2d36d7c954867226c83b65eb56f
Certificate serial:       018481F679C51B635134915BE0BA3F8D9219
Authority key identifier: F6:C3:E0:27:D2:D1:C2:D3:6D:7C:95:48:67:22:6C:83:B6:5E:B5:6F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/9sPgJ9LRwtNtfJVIZyJsg7ZetW8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/3f/2b2878-5b79-40f7-b4b5-356c4d7bb452/1/D-Vkzf6d_FY22KJE6P7w9Q6yXoE.roa
Signing time:             Wed 16 Nov 2022 19:42:04 +0000
ROA not before:           Wed 16 Nov 2022 19:42:04 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     209768
IP address blocks:        176.105.246.0/24 maxlen: 24
                          2a12:5844:1212::/48 maxlen: 48
                          2a12:5840:1f2::/48 maxlen: 48
                          2a12:5844:100::/48 maxlen: 48
                          2a12:5840:1f0::/48 maxlen: 48
                          2a12:5840:2113::/48 maxlen: 48
                          2a12:5840:1f1::/48 maxlen: 48
                          2a12:5840:2111::/48 maxlen: 48

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:84:81:f6:79:c5:1b:63:51:34:91:5b:e0:ba:3f:8d:92:19
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f6c3e027d2d1c2d36d7c954867226c83b65eb56f
        Validity
            Not Before: Nov 16 19:42:04 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=0fe564cdfe9dfc5636d8a244e8fef0f50eb25e81
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:69:25:2d:75:74:5f:04:03:88:55:c8:0d:0a:
                    3c:9e:8d:f2:fd:2c:8c:fa:5c:97:b7:c3:90:0a:18:
                    f5:03:39:69:73:54:5c:f2:0b:7d:ff:90:76:6a:b0:
                    16:e6:05:c3:95:a7:c1:ff:59:03:a5:aa:d3:79:04:
                    22:4d:83:96:1a:f8:94:27:be:51:0d:d6:dd:6f:3d:
                    10:ad:1e:8f:85:7f:cd:9b:4e:94:d7:0f:26:85:e2:
                    5a:59:f6:a9:23:4f:ce:e9:62:a4:6e:ac:28:4d:20:
                    6c:37:a1:2b:18:5b:ba:06:92:7d:2d:fa:5b:27:4f:
                    7c:a9:d3:ed:6a:41:4f:52:a5:50:50:70:09:b3:9e:
                    42:a4:78:ce:df:89:32:5f:4b:b5:e7:57:0f:19:e8:
                    eb:8b:d8:f9:4a:a3:b2:78:70:63:1a:b1:d3:68:de:
                    4e:6b:13:f1:40:ab:6a:05:ba:b4:e3:28:02:21:db:
                    15:8c:bc:60:4c:65:ae:0f:38:f8:a7:e3:cd:04:5c:
                    3e:aa:be:fb:85:0b:d3:36:a7:ca:c9:3f:df:88:b3:
                    9b:99:c0:6c:6d:0d:61:01:91:ee:c8:ea:2d:34:a7:
                    ef:29:7a:8e:f7:4f:66:17:48:76:9e:39:d0:a2:a7:
                    9b:a5:15:7c:7d:7e:82:4d:81:13:63:05:96:83:c0:
                    17:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0F:E5:64:CD:FE:9D:FC:56:36:D8:A2:44:E8:FE:F0:F5:0E:B2:5E:81
            X509v3 Authority Key Identifier:
                keyid:F6:C3:E0:27:D2:D1:C2:D3:6D:7C:95:48:67:22:6C:83:B6:5E:B5:6F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9sPgJ9LRwtNtfJVIZyJsg7ZetW8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/2b2878-5b79-40f7-b4b5-356c4d7bb452/1/D-Vkzf6d_FY22KJE6P7w9Q6yXoE.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/2b2878-5b79-40f7-b4b5-356c4d7bb452/1/9sPgJ9LRwtNtfJVIZyJsg7ZetW8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  176.105.246.0/24
                IPv6:
                  2a12:5840:1f0::-2a12:5840:1f2:ffff:ffff:ffff:ffff:ffff
                  2a12:5840:2111::/48
                  2a12:5840:2113::/48
                  2a12:5844:100::/48
                  2a12:5844:1212::/48

    Signature Algorithm: sha256WithRSAEncryption
         71:09:a5:ce:00:08:01:ad:0c:30:b4:05:dd:29:f5:fc:e0:c4:
         ca:ec:2b:3b:bb:82:41:1a:23:02:65:97:dc:55:e9:ce:5e:55:
         47:4a:52:02:54:f0:02:db:ad:a7:ef:08:15:35:86:96:35:2c:
         f7:51:8a:61:c9:14:df:a2:a0:53:cb:c9:2b:b1:18:9a:e4:c4:
         a4:16:46:ab:31:17:93:c5:c7:03:54:d8:a5:03:b7:06:39:6f:
         64:c2:b7:be:d2:6f:0f:13:8b:77:7d:f0:3b:c0:c5:fc:c5:54:
         73:28:cb:8a:c0:cf:a3:e6:ed:fc:78:6d:28:56:b5:d9:91:8d:
         fb:e9:f6:f8:cf:e5:3e:3f:c0:de:74:29:db:a9:63:7f:7e:9f:
         6c:ec:99:71:9c:8a:50:3d:44:0d:60:51:b0:43:44:07:00:2a:
         c7:a5:fe:fd:a9:a0:98:3f:3d:13:ad:83:74:99:4a:41:cb:d2:
         1d:ee:77:26:42:a1:92:2a:47:65:15:5d:f8:0c:a9:b5:01:f1:
         b3:fc:54:f3:18:a3:6b:2b:67:d9:ee:7c:af:a4:ba:16:15:9c:
         89:cf:53:f0:01:a3:f7:4f:e9:6f:3e:74:b8:6d:b8:08:19:15:
         c7:53:5a:0d:87:59:2b:f2:07:ee:0b:70:59:4a:c4:16:97:0c:
         ad:cc:f8:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----