Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/62/9e2351-8dd0-4b70-a5fc-fb774abdfac2/1/TExxUrgXrqSZ_59c95zpM5hNMjI.roa
File:                     TExxUrgXrqSZ_59c95zpM5hNMjI.roa (raw, json)
Hash identifier:          URSkq+Ym23NBCo1S6b01gp/XRo7JfCQ86D+iSLV/MRg=
Subject key identifier:   4C:4C:71:52:B8:17:AE:A4:99:FF:9F:5C:F7:9C:E9:33:98:4D:32:32
Certificate issuer:       /CN=746395c12672ad958921b62b9dc9b2bcd8a68a9f
Certificate serial:       2975E1
Authority key identifier: 74:63:95:C1:26:72:AD:95:89:21:B6:2B:9D:C9:B2:BC:D8:A6:8A:9F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/dGOVwSZyrZWJIbYrncmyvNimip8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/62/9e2351-8dd0-4b70-a5fc-fb774abdfac2/1/TExxUrgXrqSZ_59c95zpM5hNMjI.roa
Signing time:             Fri 14 Jan 2022 13:55:52 +0000
ROA not before:           Fri 14 Jan 2022 13:55:52 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     211088
IP address blocks:        2a12:4946:a000::/40 maxlen: 48

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2717153 (0x2975e1)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=746395c12672ad958921b62b9dc9b2bcd8a68a9f
        Validity
            Not Before: Jan 14 13:55:52 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=4c4c7152b817aea499ff9f5cf79ce933984d3232
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:ae:1e:91:36:7e:91:65:b2:50:9c:34:eb:2f:
                    6a:9a:f4:9e:e7:3c:76:10:68:34:42:d6:5b:50:c0:
                    f6:1f:0d:bd:cc:f3:00:0b:84:23:b0:19:9c:66:82:
                    7a:94:1b:23:27:e0:90:39:06:a5:83:e5:0c:03:75:
                    1c:13:6d:5f:5e:f6:5d:a7:cf:6e:14:60:7d:48:92:
                    2c:4a:60:96:46:0e:44:d6:6b:fd:67:ec:5a:11:c7:
                    52:c2:9c:ab:43:2e:11:bc:16:5e:73:d7:7a:dc:25:
                    78:4e:aa:7b:23:2c:a1:b5:ff:1c:df:ff:bc:59:c1:
                    f4:b9:76:4a:32:00:f7:16:56:98:8c:df:61:ca:28:
                    1b:2f:17:26:b3:b1:15:e0:f4:96:f6:d3:fd:da:eb:
                    a3:c4:98:dc:6c:17:4f:61:f3:fe:27:eb:87:8f:82:
                    19:48:05:75:94:d4:9b:d1:81:8e:13:77:89:f8:ff:
                    30:28:8c:a4:63:7c:d8:d4:dd:81:40:f8:e4:ef:27:
                    ef:0f:8c:a7:cb:76:2d:b9:99:67:fb:49:ef:b9:6f:
                    f7:e2:eb:b1:ec:ca:17:f8:e4:fb:e2:a2:04:b3:40:
                    ff:d9:1d:f9:71:1b:ab:ce:1e:ac:4f:14:2f:6d:c3:
                    d2:a1:7f:40:ca:33:d2:77:1b:1d:e8:9c:ab:d0:67:
                    ff:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4C:4C:71:52:B8:17:AE:A4:99:FF:9F:5C:F7:9C:E9:33:98:4D:32:32
            X509v3 Authority Key Identifier:
                keyid:74:63:95:C1:26:72:AD:95:89:21:B6:2B:9D:C9:B2:BC:D8:A6:8A:9F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dGOVwSZyrZWJIbYrncmyvNimip8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/9e2351-8dd0-4b70-a5fc-fb774abdfac2/1/TExxUrgXrqSZ_59c95zpM5hNMjI.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/62/9e2351-8dd0-4b70-a5fc-fb774abdfac2/1/dGOVwSZyrZWJIbYrncmyvNimip8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a12:4946:a000::/40

    Signature Algorithm: sha256WithRSAEncryption
         35:a2:18:63:30:b2:ca:aa:d3:73:38:e6:08:0c:e2:bb:2e:70:
         40:58:b6:7e:66:28:a5:28:7a:18:3d:7b:b0:6c:e5:dc:57:82:
         77:e1:54:ed:0d:3d:1c:ce:66:fb:89:02:06:8f:80:f1:6b:47:
         54:a9:43:7f:9d:67:2c:5a:17:e3:95:6a:60:8d:02:14:3d:bd:
         f0:38:48:2e:9b:4e:85:0a:14:db:63:b1:88:8b:7b:9c:d3:31:
         e0:5b:9d:51:f0:f7:a6:dc:a8:5b:49:00:11:d1:e3:14:66:fa:
         38:c4:02:93:49:b0:b0:df:21:da:ea:50:24:2e:88:f0:c9:2a:
         f4:59:d7:e3:43:3f:e0:cf:2a:07:e2:cb:9f:73:3c:57:8f:17:
         e8:d0:1d:74:80:2a:11:24:52:45:ba:f7:32:f2:4f:ff:10:6d:
         f0:69:3e:d3:14:52:c1:fa:43:a3:f6:47:ce:90:a4:41:f3:a9:
         55:9e:fd:c9:81:d4:41:e0:12:ea:14:3f:a1:93:80:9b:e0:46:
         40:c2:9a:70:9e:16:c0:5f:b5:ca:04:bb:2e:67:f7:df:d5:8a:
         e6:b6:1f:05:9f:84:66:ac:81:64:d3:06:3b:b7:71:8f:69:7e:
         f5:11:41:e4:e6:7e:a7:74:d8:b3:7e:60:0b:00:8a:f9:f2:9e:
         07:a7:db:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----