Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/97/212dd2-da8d-4048-916a-45a8fed3a2a5/1/GH2wHDh5vr6vreLAbg81-A4yjsE.roa
File:                     GH2wHDh5vr6vreLAbg81-A4yjsE.roa (raw, json)
Hash identifier:          WBpArIJTGBd+7ASCVTdENyzEOoszHaYB+N3Fi/RIYMI=
Subject key identifier:   18:7D:B0:1C:38:79:BE:BE:AF:AD:E2:C0:6E:0F:35:F8:0E:32:8E:C1
Certificate issuer:       /CN=a6562d0869480dc11b74a552cd167b6f6339c8ba
Certificate serial:       0182C65BB717B98C7A40A1F302674E69D63E
Authority key identifier: A6:56:2D:08:69:48:0D:C1:1B:74:A5:52:CD:16:7B:6F:63:39:C8:BA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/plYtCGlIDcEbdKVSzRZ7b2M5yLo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/97/212dd2-da8d-4048-916a-45a8fed3a2a5/1/GH2wHDh5vr6vreLAbg81-A4yjsE.roa
Signing time:             Mon 22 Aug 2022 16:21:15 +0000
ROA not before:           Mon 22 Aug 2022 16:21:15 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     843
IP address blocks:        2a0f:b100:400::/40 maxlen: 40

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:82:c6:5b:b7:17:b9:8c:7a:40:a1:f3:02:67:4e:69:d6:3e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a6562d0869480dc11b74a552cd167b6f6339c8ba
        Validity
            Not Before: Aug 22 16:21:15 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=187db01c3879bebeafade2c06e0f35f80e328ec1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:86:da:e6:f7:b5:c5:d9:85:12:eb:8d:e7:7b:
                    0e:b5:24:7a:4c:88:e4:c1:8c:dd:0d:09:ae:28:1c:
                    de:1c:c2:3e:47:a8:64:07:a9:0a:ce:bb:c8:85:44:
                    0a:65:73:83:02:31:86:7c:bb:b6:79:40:f3:c3:68:
                    c2:b4:ec:b3:9e:5a:64:45:6c:2c:a0:43:ac:82:42:
                    4b:93:62:e4:5e:ba:bf:ca:6a:df:c8:cb:a2:ea:65:
                    81:f9:31:9b:47:b9:d6:c3:ff:b9:fb:3d:bc:da:4d:
                    35:3c:c2:ee:7c:c0:fb:6b:49:ce:fc:d0:26:6a:3c:
                    b9:28:f3:89:d2:08:72:75:fd:d4:e3:6b:35:5d:34:
                    b9:57:2d:30:de:eb:b5:dc:85:dd:d5:b1:b3:6d:b4:
                    50:72:15:2a:6b:3d:48:03:d3:42:e2:4a:a9:fd:64:
                    38:19:fd:4f:7c:56:b7:07:ac:16:a5:da:58:d3:81:
                    b3:d5:d2:e4:96:23:87:92:e2:dd:7d:2d:c3:96:be:
                    4a:3f:03:47:1d:5f:71:e3:ca:2b:05:4f:e3:16:78:
                    4f:98:72:1b:b7:3b:f4:a7:e2:d8:33:19:1c:13:5f:
                    16:b2:96:03:3f:27:df:b7:62:42:a8:35:20:0a:3c:
                    65:a9:1b:a3:fb:07:ce:ee:cd:e8:ac:32:b4:ad:27:
                    48:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                18:7D:B0:1C:38:79:BE:BE:AF:AD:E2:C0:6E:0F:35:F8:0E:32:8E:C1
            X509v3 Authority Key Identifier:
                keyid:A6:56:2D:08:69:48:0D:C1:1B:74:A5:52:CD:16:7B:6F:63:39:C8:BA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/plYtCGlIDcEbdKVSzRZ7b2M5yLo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/97/212dd2-da8d-4048-916a-45a8fed3a2a5/1/GH2wHDh5vr6vreLAbg81-A4yjsE.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/97/212dd2-da8d-4048-916a-45a8fed3a2a5/1/plYtCGlIDcEbdKVSzRZ7b2M5yLo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a0f:b100:400::/40

    Signature Algorithm: sha256WithRSAEncryption
         00:5c:52:bd:28:2e:e6:bd:a7:0d:9c:18:74:2a:48:f3:2e:d6:
         36:da:8d:a2:cb:c9:4d:71:25:58:6e:25:c9:80:ed:88:a1:7b:
         74:09:ae:2a:d9:51:69:63:d7:9d:9e:8f:79:02:45:a3:9c:43:
         f5:f9:81:92:2a:1c:73:d5:84:2d:2b:4d:e6:b3:76:e4:05:4b:
         d6:dd:96:d0:be:69:0e:47:b0:f1:09:67:23:a9:83:18:07:c7:
         8e:50:e8:26:12:1b:c6:bc:78:3c:26:7f:31:72:37:34:b8:c4:
         96:31:4a:ae:79:a7:00:20:b2:77:b8:e2:a8:17:d5:47:d8:1b:
         cc:e5:52:28:f1:4e:ad:9a:e9:0a:53:fc:23:bd:47:f2:ca:14:
         86:f6:c4:40:ff:b1:e4:60:bb:e6:29:ec:2f:e4:8e:67:73:44:
         53:b2:8c:1f:d2:df:f4:72:d4:af:e6:94:f5:b2:50:01:6b:47:
         fe:42:cd:ba:bc:18:dc:38:58:47:ce:18:f5:39:a3:75:e9:ec:
         7f:47:f7:d6:19:2a:31:df:20:98:f1:b0:3f:20:de:00:36:5f:
         2a:41:4a:7e:09:33:53:f1:77:1c:a4:a6:7f:76:6f:f3:fa:b6:
         e7:86:2d:10:d0:9f:0f:13:9f:af:98:82:4c:10:36:e8:0f:cf:
         c4:0e:38:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----