Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9f/c66bc8-f206-43d0-94be-18aadd659566/1/vhHTeWjasgyKzfCTo88Z8_LrTGE.roa
File:                     vhHTeWjasgyKzfCTo88Z8_LrTGE.roa (raw, json)
Hash identifier:          aXfSjQB5/7s14hCBMJm9PFhKWUakxyUm+S4rELFJP+g=
Subject key identifier:   BE:11:D3:79:68:DA:B2:0C:8A:CD:F0:93:A3:CF:19:F3:F2:EB:4C:61
Certificate issuer:       /CN=320e7c0ceb4ba2a6f4b96fc4bae1abb853035aba
Certificate serial:       0A5E3AD2
Authority key identifier: 32:0E:7C:0C:EB:4B:A2:A6:F4:B9:6F:C4:BA:E1:AB:B8:53:03:5A:BA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Mg58DOtLoqb0uW_EuuGruFMDWro.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/9f/c66bc8-f206-43d0-94be-18aadd659566/1/vhHTeWjasgyKzfCTo88Z8_LrTGE.roa
Signing time:             Sat 01 Jan 2022 08:53:36 +0000
ROA not before:           Sat 01 Jan 2022 08:53:36 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     56510
IP address blocks:        2001:67c:648::/48 maxlen: 48

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 173947602 (0xa5e3ad2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=320e7c0ceb4ba2a6f4b96fc4bae1abb853035aba
        Validity
            Not Before: Jan  1 08:53:36 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=be11d37968dab20c8acdf093a3cf19f3f2eb4c61
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:61:ce:fc:68:69:c2:b7:9e:88:1b:2f:96:55:
                    b7:3a:e6:08:f4:3e:14:42:fc:3b:fa:73:b6:d8:f2:
                    11:c7:f8:5e:ee:10:4f:c0:1f:c6:f7:87:98:c2:bc:
                    c2:00:13:5f:e5:02:c1:c1:3b:61:98:31:3e:f2:50:
                    4d:d8:16:0b:fb:32:c1:9f:00:70:7d:cd:bf:ba:56:
                    9f:2e:63:77:28:5c:31:bf:9c:40:f4:69:e5:dc:02:
                    18:e3:5c:64:93:9b:46:bd:ac:6d:49:52:1d:5f:37:
                    e8:92:fc:b2:24:11:42:02:b6:b0:58:38:c0:cb:68:
                    b7:27:ef:4c:ea:ef:07:b8:17:48:53:1a:69:dd:e1:
                    c6:4a:a0:35:6b:98:3a:a3:88:49:24:8f:e6:e8:9b:
                    53:34:5c:42:3e:fc:9f:de:0f:da:d5:12:e6:99:10:
                    fc:6b:d2:64:ae:82:a1:1c:1a:6e:d7:6b:76:32:7f:
                    54:13:03:c2:03:80:3c:a1:5e:94:23:68:da:ae:b6:
                    6d:e8:96:ac:fd:84:0a:7a:3a:68:4c:99:9e:19:b1:
                    3b:83:ae:c7:f5:8d:a6:5f:b5:c7:cf:38:65:d2:46:
                    df:fa:ff:23:db:17:af:48:94:17:a6:53:0c:18:f8:
                    2b:d5:4b:b1:d6:b5:05:ba:9f:79:ae:f1:77:20:59:
                    0b:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BE:11:D3:79:68:DA:B2:0C:8A:CD:F0:93:A3:CF:19:F3:F2:EB:4C:61
            X509v3 Authority Key Identifier:
                keyid:32:0E:7C:0C:EB:4B:A2:A6:F4:B9:6F:C4:BA:E1:AB:B8:53:03:5A:BA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Mg58DOtLoqb0uW_EuuGruFMDWro.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/c66bc8-f206-43d0-94be-18aadd659566/1/vhHTeWjasgyKzfCTo88Z8_LrTGE.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/c66bc8-f206-43d0-94be-18aadd659566/1/Mg58DOtLoqb0uW_EuuGruFMDWro.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:67c:648::/48

    Signature Algorithm: sha256WithRSAEncryption
         d4:41:ce:43:51:22:89:49:be:f0:85:e1:eb:a4:f2:a4:4e:55:
         11:4a:d3:39:db:d9:f9:3f:41:66:54:0c:f1:8c:6b:22:7f:c1:
         67:c8:5f:cb:b9:03:7d:9e:d1:28:bb:11:62:5f:c6:8d:9f:95:
         4c:95:cf:6d:d3:02:85:78:78:7c:c1:1d:11:34:31:63:6c:ab:
         a0:2f:31:45:ad:f1:df:bb:1a:60:92:5c:c5:6a:d1:7b:d4:1f:
         3c:1e:98:1f:5f:37:c5:61:48:3e:39:b7:01:4f:c2:06:f2:f7:
         f7:1d:10:a2:9d:d4:22:9d:d1:cf:2f:24:7a:84:ae:46:43:be:
         3d:11:29:56:b5:29:a6:6a:13:26:79:7e:2c:8c:74:09:6d:86:
         99:c5:de:1a:26:93:2d:46:a3:50:fb:0d:ed:32:d5:54:75:fc:
         8a:6f:6b:47:52:89:2e:e8:11:e6:30:df:a6:44:26:3f:2d:45:
         26:42:6e:81:9d:da:c1:14:76:33:2d:f0:0c:74:5d:6e:8e:40:
         ff:bf:3e:02:83:36:cc:b7:4a:91:df:4d:13:f8:f3:2b:94:b6:
         e7:63:a8:2e:7f:39:cf:87:7c:44:64:65:30:b3:5c:b0:ee:82:
         f3:15:64:8d:31:35:10:3b:36:2a:a2:01:3f:2e:98:02:cf:79:
         2d:78:b0:60
-----BEGIN CERTIFICATE-----
MIIE8jCCA9qgAwIBAgIECl460jANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEygz
MjBlN2MwY2ViNGJhMmE2ZjRiOTZmYzRiYWUxYWJiODUzMDM1YWJhMB4XDTIyMDEw
MTA4NTMzNloXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoYmUxMWQzNzk2OGRh
YjIwYzhhY2RmMDkzYTNjZjE5ZjNmMmViNGM2MTCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAMdhzvxoacK3nogbL5ZVtzrmCPQ+FEL8O/pzttjyEcf4Xu4Q
T8AfxveHmMK8wgATX+UCwcE7YZgxPvJQTdgWC/sywZ8AcH3Nv7pWny5jdyhcMb+c
QPRp5dwCGONcZJObRr2sbUlSHV836JL8siQRQgK2sFg4wMtotyfvTOrvB7gXSFMa
ad3hxkqgNWuYOqOISSSP5uibUzRcQj78n94P2tUS5pkQ/GvSZK6CoRwabtdrdjJ/
VBMDwgOAPKFelCNo2q62beiWrP2ECno6aEyZnhmxO4Oux/WNpl+1x884ZdJG3/r/
I9sXr0iUF6ZTDBj4K9VLsda1Bbqfea7xdyBZC9sCAwEAAaOCAgwwggIIMB0GA1Ud
DgQWBBS+EdN5aNqyDIrN8JOjzxnz8utMYTAfBgNVHSMEGDAWgBQyDnwM60uipvS5
b8S64au4UwNaujAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L01nNThET3RMb3FiMHVXX0V1dUdydUZNRFdyby5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvOWYvYzY2YmM4LWYyMDYtNDNkMC05NGJlLTE4YWFkZDY1OTU2Ni8x
L3ZoSFRlV2phc2d5S3pmQ1RvODhaOF9MclRHRS5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvOWYv
YzY2YmM4LWYyMDYtNDNkMC05NGJlLTE4YWFkZDY1OTU2Ni8xL01nNThET3RMb3Fi
MHVXX0V1dUdydUZNRFdyby5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAi
BggrBgEFBQcBBwEB/wQTMBEwDwQCAAIwCQMHACABBnwGSDANBgkqhkiG9w0BAQsF
AAOCAQEA1EHOQ1EiiUm+8IXh66TypE5VEUrTOdvZ+T9BZlQM8YxrIn/BZ8hfy7kD
fZ7RKLsRYl/GjZ+VTJXPbdMChXh4fMEdETQxY2yroC8xRa3x37saYJJcxWrRe9Qf
PB6YH183xWFIPjm3AU/CBvL39x0Qop3UIp3Rzy8keoSuRkO+PREpVrUppmoTJnl+
LIx0CW2GmcXeGiaTLUajUPsN7TLVVHX8im9rR1KJLugR5jDfpkQmPy1FJkJugZ3a
wRR2My3wDHRdbo5A/78+AoM2zLdKkd9NE/jzK5S252OoLn85z4d8RGRlMLNcsO6C
8xVkjTE1EDs2KqIBPy6YAs95LXiwYA==
-----END CERTIFICATE-----