Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/43/c8406d-a564-4795-98b0-868160668382/1/g_p6CpDSOuGORS1nmAriMocAEeg.roa
File:                     g_p6CpDSOuGORS1nmAriMocAEeg.roa (raw, json)
Hash identifier:          s6smlMr/Dn1a7KF6G2AXlbklf47kWKqa8IvA6yXdEBs=
Subject key identifier:   83:FA:7A:0A:90:D2:3A:E1:8E:45:2D:67:98:0A:E2:32:87:00:11:E8
Certificate issuer:       /CN=1cadfb9cfcda8426212dd7d8873b5fe48b412f2a
Certificate serial:       02267434
Authority key identifier: 1C:AD:FB:9C:FC:DA:84:26:21:2D:D7:D8:87:3B:5F:E4:8B:41:2F:2A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/HK37nPzahCYhLdfYhztf5ItBLyo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/43/c8406d-a564-4795-98b0-868160668382/1/g_p6CpDSOuGORS1nmAriMocAEeg.roa
Signing time:             Sat 01 Jan 2022 10:04:56 +0000
ROA not before:           Sat 01 Jan 2022 10:04:56 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     211551
IP address blocks:        2001:678:f20::/48 maxlen: 48

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 36074548 (0x2267434)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1cadfb9cfcda8426212dd7d8873b5fe48b412f2a
        Validity
            Not Before: Jan  1 10:04:56 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=83fa7a0a90d23ae18e452d67980ae232870011e8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:15:b2:4d:7e:99:c4:45:78:3a:d2:20:60:5f:
                    23:ed:c4:58:3d:f8:ca:e0:40:27:0b:70:34:f1:42:
                    a0:3d:ed:d2:a4:51:5a:18:82:2a:4c:d1:79:58:49:
                    0a:04:23:41:54:a1:e4:47:ec:bf:21:0c:c5:49:bf:
                    69:ee:d1:c0:53:b3:fc:f7:9b:07:2d:1b:d9:01:6e:
                    29:ad:30:b4:5c:d6:7d:1b:9a:8d:3a:46:27:1a:f6:
                    92:51:aa:e4:a0:71:43:62:7b:4e:3d:7a:da:88:b8:
                    3c:a0:8f:61:13:56:ef:b6:32:b6:08:72:b2:b6:18:
                    3c:d4:59:50:22:c1:46:f8:9e:24:ca:91:39:fd:2e:
                    3e:df:5b:11:58:d0:f8:14:59:28:08:9c:fa:25:a4:
                    bd:67:68:3b:9f:ed:d9:d1:50:8c:7b:2e:5a:64:ac:
                    3c:e9:d0:98:2f:93:a2:74:fe:c5:b3:71:de:61:44:
                    b1:03:db:cb:5c:91:db:4e:41:ae:95:7f:dc:02:ad:
                    66:c0:91:f6:8a:a2:8c:d2:e2:54:e3:49:a1:b6:b9:
                    ad:91:61:f3:9a:97:b8:6d:6a:3c:2f:43:88:c2:49:
                    3d:49:8a:e4:6c:d0:a6:78:8c:c4:9c:04:0e:52:0f:
                    d9:f1:e7:df:b2:b7:41:f2:f1:d2:6c:3f:b7:c1:69:
                    03:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                83:FA:7A:0A:90:D2:3A:E1:8E:45:2D:67:98:0A:E2:32:87:00:11:E8
            X509v3 Authority Key Identifier:
                keyid:1C:AD:FB:9C:FC:DA:84:26:21:2D:D7:D8:87:3B:5F:E4:8B:41:2F:2A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HK37nPzahCYhLdfYhztf5ItBLyo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/43/c8406d-a564-4795-98b0-868160668382/1/g_p6CpDSOuGORS1nmAriMocAEeg.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/43/c8406d-a564-4795-98b0-868160668382/1/HK37nPzahCYhLdfYhztf5ItBLyo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:678:f20::/48

    Signature Algorithm: sha256WithRSAEncryption
         90:28:92:d5:ee:a5:0b:e3:a5:49:1c:49:35:11:7f:76:23:67:
         f9:3b:e8:9a:71:7d:e8:b8:bf:d6:12:58:b9:12:ab:bf:ce:43:
         5f:e6:a8:b9:17:9b:df:65:06:c2:bc:e2:89:d6:71:ee:55:9e:
         84:87:b4:f7:8c:9f:5b:12:ec:64:11:3c:58:16:cf:be:76:88:
         b7:86:8c:8d:ce:f5:e0:ce:65:be:d6:20:b1:42:04:24:8d:08:
         14:a8:31:64:aa:84:e1:74:12:28:fd:5a:29:21:ff:21:e6:87:
         7b:fc:a6:fa:00:2c:ed:d9:1d:f3:ea:ae:61:e4:52:03:ae:e3:
         94:66:4a:92:a3:5f:ff:df:8e:d0:3d:bd:54:3a:4e:23:29:da:
         60:56:17:b0:4e:8b:f1:01:aa:93:f6:b3:c9:ac:a9:87:83:8a:
         05:97:44:db:24:8c:37:bd:e5:25:aa:cc:09:3b:6c:5d:be:f3:
         7f:67:fb:5b:79:62:00:83:e6:3e:6a:49:ac:51:1b:ad:0b:48:
         5b:e1:86:c2:eb:93:f1:6d:5d:70:5f:13:f7:31:44:03:ea:b1:
         99:e1:6e:66:4e:ef:e1:b3:0c:de:9d:d4:bf:a1:ce:61:1c:38:
         ad:07:40:8c:c4:22:1d:13:4b:a7:16:18:74:2a:58:89:3d:8e:
         46:36:e8:8c
-----BEGIN CERTIFICATE-----
MIIE8jCCA9qgAwIBAgIEAiZ0NDANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEygx
Y2FkZmI5Y2ZjZGE4NDI2MjEyZGQ3ZDg4NzNiNWZlNDhiNDEyZjJhMB4XDTIyMDEw
MTEwMDQ1NloXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoODNmYTdhMGE5MGQy
M2FlMThlNDUyZDY3OTgwYWUyMzI4NzAwMTFlODCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBANYVsk1+mcRFeDrSIGBfI+3EWD34yuBAJwtwNPFCoD3t0qRR
WhiCKkzReVhJCgQjQVSh5EfsvyEMxUm/ae7RwFOz/PebBy0b2QFuKa0wtFzWfRua
jTpGJxr2klGq5KBxQ2J7Tj162oi4PKCPYRNW77YytghysrYYPNRZUCLBRvieJMqR
Of0uPt9bEVjQ+BRZKAic+iWkvWdoO5/t2dFQjHsuWmSsPOnQmC+TonT+xbNx3mFE
sQPby1yR205BrpV/3AKtZsCR9oqijNLiVONJoba5rZFh85qXuG1qPC9DiMJJPUmK
5GzQpniMxJwEDlIP2fHn37K3QfLx0mw/t8FpA9cCAwEAAaOCAgwwggIIMB0GA1Ud
DgQWBBSD+noKkNI64Y5FLWeYCuIyhwAR6DAfBgNVHSMEGDAWgBQcrfuc/NqEJiEt
19iHO1/ki0EvKjAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L0hLMzduUHphaENZaExkZlloenRmNUl0Qkx5by5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvNDMvYzg0MDZkLWE1NjQtNDc5NS05OGIwLTg2ODE2MDY2ODM4Mi8x
L2dfcDZDcERTT3VHT1JTMW5tQXJpTW9jQUVlZy5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNDMv
Yzg0MDZkLWE1NjQtNDc5NS05OGIwLTg2ODE2MDY2ODM4Mi8xL0hLMzduUHphaENZ
aExkZlloenRmNUl0Qkx5by5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAi
BggrBgEFBQcBBwEB/wQTMBEwDwQCAAIwCQMHACABBngPIDANBgkqhkiG9w0BAQsF
AAOCAQEAkCiS1e6lC+OlSRxJNRF/diNn+TvomnF96Li/1hJYuRKrv85DX+aouReb
32UGwrziidZx7lWehIe094yfWxLsZBE8WBbPvnaIt4aMjc714M5lvtYgsUIEJI0I
FKgxZKqE4XQSKP1aKSH/IeaHe/ym+gAs7dkd8+quYeRSA67jlGZKkqNf/9+O0D29
VDpOIynaYFYXsE6L8QGqk/azyayph4OKBZdE2ySMN73lJarMCTtsXb7zf2f7W3li
AIPmPmpJrFEbrQtIW+GGwuuT8W1dcF8T9zFEA+qxmeFuZk7v4bMM3p3Uv6HOYRw4
rQdAjMQiHRNLpxYYdCpYiT2ORjbojA==
-----END CERTIFICATE-----