Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/62/9e2351-8dd0-4b70-a5fc-fb774abdfac2/1/m18pypu2kiAekbUS3PNjDj1cKnQ.roa
File:                     m18pypu2kiAekbUS3PNjDj1cKnQ.roa (raw, json)
Hash identifier:          I/5AAJlq251S8CSoZ6yZFmFM9ywGsMVK+g3aTvsEjTo=
Subject key identifier:   9B:5F:29:CA:9B:B6:92:20:1E:91:B5:12:DC:F3:63:0E:3D:5C:2A:74
Certificate issuer:       /CN=746395c12672ad958921b62b9dc9b2bcd8a68a9f
Certificate serial:       5F30E9
Authority key identifier: 74:63:95:C1:26:72:AD:95:89:21:B6:2B:9D:C9:B2:BC:D8:A6:8A:9F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/dGOVwSZyrZWJIbYrncmyvNimip8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/62/9e2351-8dd0-4b70-a5fc-fb774abdfac2/1/m18pypu2kiAekbUS3PNjDj1cKnQ.roa
Signing time:             Wed 02 Feb 2022 03:27:31 +0000
ROA not before:           Wed 02 Feb 2022 03:27:31 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     211398
IP address blocks:        2a12:4940::/32 maxlen: 48
                          2a12:4946:46::/48 maxlen: 48
                          2a12:4942::/31 maxlen: 48
                          2a12:4946:6960::/44 maxlen: 48
                          2a12:4946:1600::/48 maxlen: 48
                          2a12:4946:1700::/48 maxlen: 48
                          2a12:4946:1800::/48 maxlen: 48
                          2a12:4946:1900::/48 maxlen: 48

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 6238441 (0x5f30e9)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=746395c12672ad958921b62b9dc9b2bcd8a68a9f
        Validity
            Not Before: Feb  2 03:27:31 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=9b5f29ca9bb692201e91b512dcf3630e3d5c2a74
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:bd:6e:9a:63:60:41:66:4e:67:1d:11:5d:b7:
                    18:3f:5e:ca:40:b2:8a:18:03:fa:cc:38:5f:34:7f:
                    d6:44:0c:4f:0f:fe:0b:8a:9e:e3:b8:20:6b:de:38:
                    61:48:0e:bd:a4:73:db:de:36:8b:4b:0f:51:e0:a4:
                    9d:43:0d:42:ca:a2:0d:85:b0:3d:51:1c:11:9e:86:
                    89:bd:f5:84:62:b0:7a:ef:07:c8:e9:1d:06:51:cc:
                    9f:9b:66:75:47:f4:8e:14:db:c7:84:c9:47:54:c3:
                    40:32:f5:c6:dc:16:fa:87:ce:80:3b:2e:bf:76:2e:
                    46:07:00:7f:55:8c:d7:24:c5:7c:fc:1c:64:43:e9:
                    0e:6d:37:60:98:2c:bc:8b:4f:4a:2a:95:d1:01:f1:
                    3c:c2:11:b4:34:dc:15:a2:e1:ce:98:cf:dd:0e:e8:
                    88:53:19:f2:39:46:97:36:8d:9b:c2:2e:73:1b:5c:
                    a1:1b:84:48:ca:1b:69:57:28:55:90:28:e3:30:f2:
                    0d:07:ac:62:f5:83:3c:97:54:36:dc:95:32:f9:5b:
                    34:4a:5f:01:63:db:06:cf:d7:ce:04:6c:71:0d:c0:
                    eb:dd:73:15:72:91:18:80:18:f4:8e:3e:63:fd:df:
                    12:3c:5b:4a:5e:06:52:d3:40:bc:b5:dc:86:29:5d:
                    0d:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9B:5F:29:CA:9B:B6:92:20:1E:91:B5:12:DC:F3:63:0E:3D:5C:2A:74
            X509v3 Authority Key Identifier:
                keyid:74:63:95:C1:26:72:AD:95:89:21:B6:2B:9D:C9:B2:BC:D8:A6:8A:9F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dGOVwSZyrZWJIbYrncmyvNimip8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/9e2351-8dd0-4b70-a5fc-fb774abdfac2/1/m18pypu2kiAekbUS3PNjDj1cKnQ.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/62/9e2351-8dd0-4b70-a5fc-fb774abdfac2/1/dGOVwSZyrZWJIbYrncmyvNimip8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a12:4940::/32
                  2a12:4942::/31
                  2a12:4946:46::/48
                  2a12:4946:1600::/48
                  2a12:4946:1700::/48
                  2a12:4946:1800::/48
                  2a12:4946:1900::/48
                  2a12:4946:6960::/44

    Signature Algorithm: sha256WithRSAEncryption
         24:91:54:6a:63:79:b9:0a:9a:a5:f9:55:cf:73:a5:91:12:52:
         39:21:45:17:a5:f7:cb:c3:32:0b:48:e2:e1:ab:86:ea:83:03:
         0a:ed:c5:c5:02:bf:fc:b7:45:14:fd:5f:cf:b4:30:50:68:62:
         74:68:38:07:1c:a9:5a:23:86:09:e3:5f:51:8e:45:14:0b:8e:
         64:26:49:5b:0d:21:91:0d:f9:de:e6:3c:23:12:7a:61:bd:3d:
         69:ae:56:67:6f:16:6d:4e:97:88:cf:fb:82:c6:5b:41:c8:dd:
         66:8d:71:3f:43:3c:21:62:43:b1:87:e3:d2:69:17:d7:be:c5:
         6e:f0:ec:ba:6a:2d:f3:7a:ad:27:12:b2:cf:53:9f:64:1b:98:
         47:9a:41:50:e7:77:25:29:cc:54:01:99:b6:bb:8d:30:1c:c7:
         4c:f6:a2:b7:cf:c1:4b:3c:e3:ca:ae:a3:3f:ac:fc:71:d4:4d:
         ea:9f:48:73:18:cb:97:24:6c:dd:ad:92:a0:37:0d:c7:8c:4e:
         fa:cc:d8:09:35:19:35:7c:79:2c:1d:6c:bb:f3:bf:f0:d0:09:
         aa:fb:d8:63:b0:c0:ac:2c:eb:86:e2:59:3d:fd:b6:c1:2f:54:
         a1:57:93:0d:67:f0:be:f3:4d:39:f9:41:fa:4c:55:f6:9d:36:
         b1:b9:3d:c7
-----BEGIN CERTIFICATE-----
MIIFLDCCBBSgAwIBAgIDXzDpMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKDc0
NjM5NWMxMjY3MmFkOTU4OTIxYjYyYjlkYzliMmJjZDhhNjhhOWYwHhcNMjIwMjAy
MDMyNzMxWhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQDEyg5YjVmMjljYTliYjY5
MjIwMWU5MWI1MTJkY2YzNjMwZTNkNWMyYTc0MIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEAn71ummNgQWZOZx0RXbcYP17KQLKKGAP6zDhfNH/WRAxPD/4L
ip7juCBr3jhhSA69pHPb3jaLSw9R4KSdQw1CyqINhbA9URwRnoaJvfWEYrB67wfI
6R0GUcyfm2Z1R/SOFNvHhMlHVMNAMvXG3Bb6h86AOy6/di5GBwB/VYzXJMV8/Bxk
Q+kObTdgmCy8i09KKpXRAfE8whG0NNwVouHOmM/dDuiIUxnyOUaXNo2bwi5zG1yh
G4RIyhtpVyhVkCjjMPINB6xi9YM8l1Q23JUy+Vs0Sl8BY9sGz9fOBGxxDcDr3XMV
cpEYgBj0jj5j/d8SPFtKXgZS00C8tdyGKV0NowIDAQABo4ICRzCCAkMwHQYDVR0O
BBYEFJtfKcqbtpIgHpG1EtzzYw49XCp0MB8GA1UdIwQYMBaAFHRjlcEmcq2ViSG2
K53JsrzYpoqfMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEFBQcBAQRYMFYwVAYIKwYB
BQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQv
ZEdPVndTWnlyWldKSWJZcm5jbXl2TmltaXA4LmNlcjCBjQYIKwYBBQUHAQsEgYAw
fjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkv
REVGQVVMVC82Mi85ZTIzNTEtOGRkMC00YjcwLWE1ZmMtZmI3NzRhYmRmYWMyLzEv
bTE4cHlwdTJraUFla2JVUzNQTmpEajFjS25RLnJvYTCBgQYDVR0fBHoweDB2oHSg
coZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Mi85
ZTIzNTEtOGRkMC00YjcwLWE1ZmMtZmI3NzRhYmRmYWMyLzEvZEdPVndTWnlyWldK
SWJZcm5jbXl2TmltaXA4LmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMF0G
CCsGAQUFBwEHAQH/BE4wTDBKBAIAAjBEAwUAKhJJQAMFASoSSUIDBwAqEklGAEYD
BwAqEklGFgADBwAqEklGFwADBwAqEklGGAADBwAqEklGGQADBwQqEklGaWAwDQYJ
KoZIhvcNAQELBQADggEBACSRVGpjebkKmqX5Vc9zpZESUjkhRRel98vDMgtI4uGr
huqDAwrtxcUCv/y3RRT9X8+0MFBoYnRoOAccqVojhgnjX1GORRQLjmQmSVsNIZEN
+d7mPCMSemG9PWmuVmdvFm1Ol4jP+4LGW0HI3WaNcT9DPCFiQ7GH49JpF9e+xW7w
7LpqLfN6rScSss9Tn2QbmEeaQVDndyUpzFQBmba7jTAcx0z2orfPwUs848quoz+s
/HHUTeqfSHMYy5ckbN2tkqA3DceMTvrM2Ak1GTV8eSwdbLvzv/DQCar72GOwwKws
64biWT39tsEvVKFXkw1n8L7zTTn5QfpMVfadNrG5Pcc=
-----END CERTIFICATE-----