Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c1/32491b-4fc6-4033-9bda-2510ad32c2b4/1/V_Fayeh7ssVbBQXX9G-NwLr7u8A.roa
File:                     V_Fayeh7ssVbBQXX9G-NwLr7u8A.roa (raw, json)
Hash identifier:          5xpAHsw5u63TPnoebigzyqMxnBhdCMV+RP6VKnExxGg=
Subject key identifier:   57:F1:5A:C9:E8:7B:B2:C5:5B:05:05:D7:F4:6F:8D:C0:BA:FB:BB:C0
Certificate issuer:       /CN=81413f5afc6443e8d2343518ac0b19fd30ba3c12
Certificate serial:       056AB0C3
Authority key identifier: 81:41:3F:5A:FC:64:43:E8:D2:34:35:18:AC:0B:19:FD:30:BA:3C:12
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/gUE_WvxkQ-jSNDUYrAsZ_TC6PBI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c1/32491b-4fc6-4033-9bda-2510ad32c2b4/1/V_Fayeh7ssVbBQXX9G-NwLr7u8A.roa
Signing time:             Sat 01 Jan 2022 03:54:53 +0000
ROA not before:           Sat 01 Jan 2022 03:54:53 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     0
IP address blocks:        2001:678:d44:300::/64 maxlen: 64
                          2001:678:d44:200::/64 maxlen: 64
                          2001:678:d44::/64 maxlen: 64

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 90878147 (0x56ab0c3)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=81413f5afc6443e8d2343518ac0b19fd30ba3c12
        Validity
            Not Before: Jan  1 03:54:53 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=57f15ac9e87bb2c55b0505d7f46f8dc0bafbbbc0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:a4:6a:13:4a:c2:fb:86:dc:f6:cc:e0:a6:56:
                    94:a6:29:75:16:c3:f5:90:4b:47:a8:06:91:19:21:
                    e8:83:74:d6:a6:67:12:41:0f:18:14:ff:13:bd:26:
                    df:ba:6d:1c:93:af:da:9f:c9:91:ec:70:01:7b:fb:
                    b4:06:3b:af:26:61:34:56:57:b6:6f:2a:02:95:cb:
                    3c:7d:f0:21:15:09:1e:62:81:30:b7:d2:7b:0e:cd:
                    89:d2:5f:08:26:3b:04:0f:0b:fa:0d:c1:01:9f:29:
                    9f:22:60:57:bd:72:bb:06:ef:16:14:c4:86:8f:3b:
                    10:cf:e6:1d:c5:3d:17:83:30:16:d8:01:8d:dc:95:
                    8c:a7:bf:b3:71:ad:44:c1:6b:5b:9b:b7:ea:03:1f:
                    1c:b7:e4:07:a1:f6:d8:f9:18:b4:65:db:a5:d8:c2:
                    ee:09:b2:5c:c7:3d:6f:f4:d1:52:fc:36:a6:16:19:
                    01:b4:55:ee:a7:bf:ed:82:2c:18:d4:0c:eb:89:be:
                    4f:de:07:6c:55:94:91:71:38:e8:ec:ec:a0:d4:e0:
                    e3:b4:a9:50:15:cc:34:50:71:e9:c4:5d:bd:8c:b7:
                    1e:cb:b5:61:35:4c:0b:32:37:a6:09:cb:92:73:91:
                    cd:84:d1:a7:ab:e1:b4:98:5a:b1:38:f6:34:43:7f:
                    eb:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                57:F1:5A:C9:E8:7B:B2:C5:5B:05:05:D7:F4:6F:8D:C0:BA:FB:BB:C0
            X509v3 Authority Key Identifier:
                keyid:81:41:3F:5A:FC:64:43:E8:D2:34:35:18:AC:0B:19:FD:30:BA:3C:12

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gUE_WvxkQ-jSNDUYrAsZ_TC6PBI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/32491b-4fc6-4033-9bda-2510ad32c2b4/1/V_Fayeh7ssVbBQXX9G-NwLr7u8A.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/32491b-4fc6-4033-9bda-2510ad32c2b4/1/gUE_WvxkQ-jSNDUYrAsZ_TC6PBI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:678:d44::/64
                  2001:678:d44:200::/64
                  2001:678:d44:300::/64

    Signature Algorithm: sha256WithRSAEncryption
         10:64:aa:45:aa:51:a6:88:04:39:65:c9:eb:d2:a9:29:2a:93:
         75:52:a7:bb:b1:1c:d5:06:63:2d:8f:08:00:d7:ac:c7:b0:ce:
         a9:cb:43:94:bf:5d:4f:27:08:d7:e7:4a:2c:b0:cd:9a:0d:2a:
         14:4b:f3:72:a9:8c:67:eb:5e:97:ad:5b:44:bf:aa:c4:f7:d1:
         1f:8f:6d:eb:3c:ac:cb:b4:3d:11:c9:7e:77:ed:3e:43:20:0e:
         e0:82:c5:20:9e:d4:7c:1d:c2:0c:b8:b9:32:e1:8f:ab:75:b0:
         41:d1:7e:90:34:06:7e:29:6b:21:75:1b:ec:54:8d:40:f9:1a:
         b0:e9:48:93:d5:99:af:73:12:76:a3:36:c6:fe:d6:20:5a:96:
         56:de:69:ee:5f:d1:c2:62:88:eb:d9:90:8f:5c:21:73:24:c1:
         be:65:01:31:cd:ba:b8:7b:aa:f5:c3:ee:04:1b:7a:6e:01:e9:
         08:0a:0f:c5:aa:ff:d6:22:c0:00:d3:82:2f:50:0a:39:c9:f1:
         aa:69:67:76:d1:98:98:ee:eb:42:51:83:75:0c:1e:60:33:c2:
         7d:00:74:3c:11:cb:e9:44:46:db:3f:53:4c:98:ef:14:b9:84:
         1f:8c:d0:4f:19:2f:4c:45:cd:0f:b2:a8:f5:61:71:4a:56:b0:
         60:e0:ad:ec
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----