Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/80/fb42ec-10b4-4dcf-bef0-2d143d7b853c/1/Srdby5f6F5SpRieibvoRaC6wgYE.roa
File:                     Srdby5f6F5SpRieibvoRaC6wgYE.roa (raw, json)
Hash identifier:          6eWjFWripxF/ym3Oj0m1XKDikfK9ixqcdfbVTR+w9pc=
Subject key identifier:   4A:B7:5B:CB:97:FA:17:94:A9:46:27:A2:6E:FA:11:68:2E:B0:81:81
Certificate issuer:       /CN=f5fb32d2266b1f9bce57cac98bc0247f2c9197f2
Certificate serial:       0198B2AA
Authority key identifier: F5:FB:32:D2:26:6B:1F:9B:CE:57:CA:C9:8B:C0:24:7F:2C:91:97:F2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/9fsy0iZrH5vOV8rJi8AkfyyRl_I.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/80/fb42ec-10b4-4dcf-bef0-2d143d7b853c/1/Srdby5f6F5SpRieibvoRaC6wgYE.roa
Signing time:             Fri 11 Mar 2022 15:04:02 +0000
ROA not before:           Fri 11 Mar 2022 15:04:02 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     212144
IP address blocks:        2a12:7700::/29 maxlen: 29

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 26784426 (0x198b2aa)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f5fb32d2266b1f9bce57cac98bc0247f2c9197f2
        Validity
            Not Before: Mar 11 15:04:02 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=4ab75bcb97fa1794a94627a26efa11682eb08181
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:41:6a:ec:27:fe:71:02:d9:d5:9e:00:c0:0b:
                    d5:22:e5:26:db:8f:e0:10:cb:90:89:31:a2:fb:d4:
                    1b:57:67:76:d6:ef:91:2c:11:44:81:61:02:cc:74:
                    28:e4:12:31:9a:70:fc:52:a6:91:7e:68:7b:bd:a6:
                    62:da:50:95:92:0a:99:6b:15:8b:04:b1:1e:2b:04:
                    37:4c:67:a0:1b:f3:68:37:14:aa:c1:f4:fa:95:dc:
                    74:02:48:8d:e3:d5:cf:ee:0c:59:f0:4d:60:0c:22:
                    ef:24:f3:0f:4d:50:3d:57:06:a3:34:09:11:04:59:
                    a4:79:38:4f:4c:d9:c4:8d:3a:ba:93:25:ae:64:2c:
                    4e:e3:c0:26:11:07:f8:e9:c1:05:a9:8c:fa:e8:14:
                    df:3b:d3:21:7f:40:ed:22:a7:05:7c:09:18:61:7f:
                    66:42:a8:49:f6:cf:18:4a:bd:57:07:ca:3d:e9:a6:
                    e3:4c:99:e0:39:f5:e9:b1:34:b3:93:a9:8b:f0:24:
                    37:8f:53:68:11:9a:5c:0e:b3:cb:a0:85:a1:46:19:
                    76:64:fe:78:b9:ab:1a:72:a9:aa:5e:1e:8d:75:7a:
                    e4:bb:1f:79:94:f0:f7:86:ec:06:81:16:9a:7a:18:
                    ee:96:0d:95:2b:8a:13:ac:81:a4:7b:dd:9d:6e:26:
                    ea:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4A:B7:5B:CB:97:FA:17:94:A9:46:27:A2:6E:FA:11:68:2E:B0:81:81
            X509v3 Authority Key Identifier:
                keyid:F5:FB:32:D2:26:6B:1F:9B:CE:57:CA:C9:8B:C0:24:7F:2C:91:97:F2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9fsy0iZrH5vOV8rJi8AkfyyRl_I.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/fb42ec-10b4-4dcf-bef0-2d143d7b853c/1/Srdby5f6F5SpRieibvoRaC6wgYE.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/80/fb42ec-10b4-4dcf-bef0-2d143d7b853c/1/9fsy0iZrH5vOV8rJi8AkfyyRl_I.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a12:7700::/29

    Signature Algorithm: sha256WithRSAEncryption
         41:7e:05:d2:6c:e4:a5:94:04:da:bb:43:6b:5a:ba:4c:f5:9c:
         21:2d:c6:58:76:1c:02:97:bb:0f:ac:5c:eb:9e:2f:bd:70:f5:
         39:7c:a3:5e:12:89:30:2a:e8:fc:d1:52:4d:b2:18:89:ab:58:
         20:2f:1b:06:7f:77:42:6c:17:ad:a9:ed:de:44:a9:d5:43:ad:
         f7:4d:bc:70:f0:14:8f:30:4f:44:15:4c:81:4e:b1:51:c3:ca:
         8d:ff:0f:c9:f7:16:65:28:72:5e:87:d9:a1:44:66:6e:14:ca:
         30:b0:0a:76:0c:72:3d:cc:f5:d3:98:78:f9:89:07:b5:03:58:
         f5:1b:9e:81:04:42:66:86:6c:22:dd:a5:6c:5a:31:ff:73:52:
         f0:6a:48:5f:a7:dd:9d:11:26:69:85:99:16:cf:da:8c:67:28:
         5d:0d:35:b1:20:ce:37:d9:0f:af:d5:a3:3c:57:20:6c:28:10:
         9f:73:6f:81:94:c0:66:bf:ed:ea:d8:0d:56:2a:68:e8:54:4d:
         a8:89:eb:87:75:5a:d4:09:1d:14:ee:8c:92:28:fd:dd:f9:95:
         75:60:53:20:27:a1:1b:78:fa:7a:64:7c:39:38:43:95:23:14:
         15:82:4a:ca:71:71:b1:35:ae:81:76:26:de:1d:45:00:07:b8:
         e8:10:01:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----