Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/40/4393e8-5f59-4d57-8198-5c0c46d04ee1/1/Eo0liiBcRlGd-HVVKkdBvpNtAM4.roa
File:                     Eo0liiBcRlGd-HVVKkdBvpNtAM4.roa (raw, json)
Hash identifier:          516af61k0sJ4+gFeMfpXma1rEXVfOhIW/KVJT36zLpw=
Subject key identifier:   12:8D:25:8A:20:5C:46:51:9D:F8:75:55:2A:47:41:BE:93:6D:00:CE
Certificate issuer:       /CN=e4ff5bbf540c65954b9913a68c24d174de97d829
Certificate serial:       08FB86
Authority key identifier: E4:FF:5B:BF:54:0C:65:95:4B:99:13:A6:8C:24:D1:74:DE:97:D8:29
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/5P9bv1QMZZVLmROmjCTRdN6X2Ck.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/40/4393e8-5f59-4d57-8198-5c0c46d04ee1/1/Eo0liiBcRlGd-HVVKkdBvpNtAM4.roa
Signing time:             Thu 10 Mar 2022 13:08:58 +0000
ROA not before:           Thu 10 Mar 2022 13:08:58 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     49910
IP address blocks:        2a12:9944::/32 maxlen: 32
                          2a12:9942::/32 maxlen: 32
                          2a12:9940::/32 maxlen: 32
                          2a12:9946::/32 maxlen: 32
                          2a12:9943::/32 maxlen: 32
                          2a12:9947::/32 maxlen: 32
                          2a12:9945::/32 maxlen: 32
                          2a12:9941::/32 maxlen: 32
                          2a12:9940::/29 maxlen: 29

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 588678 (0x8fb86)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e4ff5bbf540c65954b9913a68c24d174de97d829
        Validity
            Not Before: Mar 10 13:08:58 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=128d258a205c46519df875552a4741be936d00ce
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:a8:5a:8b:9e:58:9b:2c:c4:0f:48:78:d9:5e:
                    b7:05:b8:77:9c:c8:8d:c9:87:7b:53:50:75:08:20:
                    a3:2c:87:fe:89:e0:c3:bb:24:17:7b:9b:39:78:f9:
                    a4:d8:eb:9e:25:79:f0:17:a3:29:a0:22:61:3f:1b:
                    3e:29:e3:ec:a8:86:e8:ff:ad:7b:27:cb:5e:d7:60:
                    ec:de:e4:57:c5:3c:ff:74:bf:ae:64:92:2c:b2:89:
                    47:53:ee:b1:b2:0f:28:f8:bb:ee:40:f2:73:8a:bc:
                    e9:79:13:eb:ed:21:b9:dd:da:a3:bb:dc:9e:db:e9:
                    83:8e:44:9f:75:7a:63:c7:9e:85:38:4a:37:1c:4b:
                    32:10:36:4d:38:2e:82:44:9d:6f:b0:5d:c2:46:a8:
                    39:ef:0b:27:36:7d:6c:35:3c:88:eb:ba:e7:b6:2d:
                    09:78:25:c8:99:b1:5c:c3:a1:fe:50:88:7f:fe:5e:
                    39:29:30:8c:c4:fc:4e:25:43:31:d8:12:41:4f:a8:
                    07:da:79:18:fe:4d:7d:6f:18:5c:61:b2:f0:9c:fc:
                    00:43:70:f9:f3:f3:8a:e3:67:41:cf:9e:7a:08:41:
                    93:6e:3d:91:35:50:15:92:5c:bb:a0:d6:8d:7f:fa:
                    99:f7:c3:41:ce:60:e3:0d:05:12:0f:92:71:c9:4b:
                    2c:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                12:8D:25:8A:20:5C:46:51:9D:F8:75:55:2A:47:41:BE:93:6D:00:CE
            X509v3 Authority Key Identifier:
                keyid:E4:FF:5B:BF:54:0C:65:95:4B:99:13:A6:8C:24:D1:74:DE:97:D8:29

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5P9bv1QMZZVLmROmjCTRdN6X2Ck.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/4393e8-5f59-4d57-8198-5c0c46d04ee1/1/Eo0liiBcRlGd-HVVKkdBvpNtAM4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/40/4393e8-5f59-4d57-8198-5c0c46d04ee1/1/5P9bv1QMZZVLmROmjCTRdN6X2Ck.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a12:9940::/29

    Signature Algorithm: sha256WithRSAEncryption
         ae:10:cd:81:64:fd:dc:05:3d:db:d3:c1:85:10:b5:5e:b1:0d:
         84:04:99:3c:6f:b0:a8:f0:48:6d:4b:65:f5:4a:ae:9b:b6:55:
         aa:81:93:f1:c1:b1:80:2d:08:48:39:ec:8f:28:34:1a:94:ec:
         11:5b:42:40:f8:b0:da:e5:ef:9d:e9:f5:30:ee:89:76:b5:60:
         d4:ee:21:63:46:3e:dd:ff:80:40:7f:fd:b9:a7:ce:6a:2d:05:
         46:77:df:d0:c9:ad:4e:64:61:8e:5e:91:d0:ad:8a:ff:71:6d:
         43:53:72:04:30:fe:50:48:55:f1:54:d0:a2:e3:87:cc:c7:6b:
         a0:46:4c:41:75:60:c4:ad:d0:0d:91:44:e3:e0:0a:40:7b:a2:
         6a:11:8f:be:a7:33:1e:5f:2f:5c:b9:1b:43:b7:4a:66:b1:b6:
         fe:ec:55:1c:a4:0d:cb:7e:4a:9d:a1:76:46:fd:01:f4:f5:0c:
         0e:45:d2:26:69:3e:0c:3f:bd:60:b8:1a:82:56:c9:a9:49:11:
         20:95:6c:fe:ff:eb:d2:42:9d:25:7e:2f:28:40:29:94:f9:e4:
         0d:69:c6:0b:fd:e6:3a:be:a8:22:4d:ec:ac:16:fd:83:30:68:
         fe:99:e6:41:65:51:81:1a:b2:49:c8:c2:40:cd:1d:b8:8f:91:
         0c:f1:b7:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----