Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/62/9e2351-8dd0-4b70-a5fc-fb774abdfac2/1/jFuJFUeww78bBJuHPc10L6S5VBc.roa
File:                     jFuJFUeww78bBJuHPc10L6S5VBc.roa (raw, json)
Hash identifier:          j2q2980Lmiky+bhx6LYv0e0xNycY4AqjGFYDiNjKVTM=
Subject key identifier:   8C:5B:89:15:47:B0:C3:BF:1B:04:9B:87:3D:CD:74:2F:A4:B9:54:17
Certificate issuer:       /CN=746395c12672ad958921b62b9dc9b2bcd8a68a9f
Certificate serial:       5E44C9
Authority key identifier: 74:63:95:C1:26:72:AD:95:89:21:B6:2B:9D:C9:B2:BC:D8:A6:8A:9F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/dGOVwSZyrZWJIbYrncmyvNimip8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/62/9e2351-8dd0-4b70-a5fc-fb774abdfac2/1/jFuJFUeww78bBJuHPc10L6S5VBc.roa
Signing time:             Wed 02 Feb 2022 03:27:31 +0000
ROA not before:           Wed 02 Feb 2022 03:27:31 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     209958
IP address blocks:        2a12:4940::/32 maxlen: 48
                          2a12:4946:4940::/44 maxlen: 48
                          2a12:4946:6960::/44 maxlen: 48

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 6177993 (0x5e44c9)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=746395c12672ad958921b62b9dc9b2bcd8a68a9f
        Validity
            Not Before: Feb  2 03:27:31 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=8c5b891547b0c3bf1b049b873dcd742fa4b95417
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:f7:94:d1:bf:95:63:f0:10:eb:90:65:58:b7:
                    03:4b:26:c9:72:97:14:e9:8a:f4:0a:bb:97:33:a6:
                    96:60:75:c3:f1:fd:8a:e5:c0:95:f4:1d:45:07:50:
                    78:52:c1:26:54:b5:e7:d3:f5:27:17:02:cb:e3:e6:
                    8b:01:1a:27:73:a5:c3:86:0d:26:c8:10:26:db:0f:
                    3e:ad:c2:0e:70:09:0b:88:da:2a:dc:22:8c:4c:1e:
                    a8:d3:cc:26:aa:ac:75:f7:b7:22:d3:8a:b8:71:d8:
                    6b:5a:47:53:07:3f:d2:29:72:c0:8d:b1:86:ea:78:
                    4c:5a:04:f3:b0:22:14:ed:81:b4:22:ac:67:ba:54:
                    fa:99:44:f5:34:f3:21:b4:d1:21:0e:20:1c:45:0b:
                    eb:a8:a7:a8:5c:76:b7:96:71:f8:4d:02:92:56:8e:
                    ba:01:e3:a2:28:45:62:9e:ff:0c:ff:f3:1c:96:f4:
                    38:f8:b6:74:ab:8c:57:ea:18:13:c6:03:52:40:52:
                    27:dd:fa:9c:1b:66:90:b4:4f:ab:14:03:20:25:10:
                    27:09:6f:e1:bd:3c:0d:bf:48:a0:20:9d:47:3c:d6:
                    04:db:b5:00:9e:75:c2:7b:ed:b5:0b:9f:54:5f:54:
                    85:e0:90:7f:2a:ac:2d:0a:1c:5b:a0:31:bf:f7:ff:
                    d4:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8C:5B:89:15:47:B0:C3:BF:1B:04:9B:87:3D:CD:74:2F:A4:B9:54:17
            X509v3 Authority Key Identifier:
                keyid:74:63:95:C1:26:72:AD:95:89:21:B6:2B:9D:C9:B2:BC:D8:A6:8A:9F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dGOVwSZyrZWJIbYrncmyvNimip8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/9e2351-8dd0-4b70-a5fc-fb774abdfac2/1/jFuJFUeww78bBJuHPc10L6S5VBc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/62/9e2351-8dd0-4b70-a5fc-fb774abdfac2/1/dGOVwSZyrZWJIbYrncmyvNimip8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a12:4940::/32
                  2a12:4946:4940::/44
                  2a12:4946:6960::/44

    Signature Algorithm: sha256WithRSAEncryption
         a8:79:7e:1a:9e:22:26:30:77:f2:b5:36:19:8a:78:34:38:39:
         0a:9d:d1:1d:54:15:39:b6:3e:94:af:85:80:a8:34:b1:0d:4f:
         5c:c3:15:13:54:76:c3:aa:bd:3d:b3:00:e3:d0:13:62:eb:39:
         2a:02:6b:53:09:dc:42:34:bc:47:e9:cb:7a:86:86:5e:b5:74:
         8e:00:5c:6b:3c:b6:39:f8:1f:64:29:05:e2:8c:ca:0e:94:87:
         99:56:f2:30:97:9f:34:df:c8:6e:44:55:b9:8c:91:fc:7d:93:
         ad:19:38:bd:77:60:56:5b:19:ba:2e:d7:29:27:72:80:48:54:
         57:a6:d0:77:e7:4f:4b:96:09:9e:eb:6a:b2:b4:63:ce:f9:7f:
         23:38:c6:20:9c:99:37:15:6b:fb:bb:4d:a3:79:54:6b:0c:75:
         b2:48:c3:d4:4c:77:72:88:fb:b7:c9:20:d8:84:0c:8d:fc:a8:
         bf:a7:83:9c:d6:86:e6:96:03:96:f5:ff:de:b2:d5:9d:b5:fa:
         1b:ab:7a:51:67:3f:8f:86:ec:40:f0:eb:77:b0:19:38:61:2f:
         4b:5a:ae:9a:91:70:23:0b:46:ab:16:3f:cc:3e:0a:1c:a5:75:
         0a:e5:cb:d1:eb:7d:1b:2a:10:31:85:ad:87:18:4f:97:a0:cd:
         5a:dc:b6:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----