Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e3/d6088c-3110-41e1-b996-32d4ad8f56de/1/xlvugw4nfPB3C90BJXLoZJAL18k.roa
File:                     xlvugw4nfPB3C90BJXLoZJAL18k.roa (raw, json)
Hash identifier:          RDdAxeQfEoZwZ/9/hfsr8Swg4I7J/llmumgCjCKGzRg=
Subject key identifier:   C6:5B:EE:83:0E:27:7C:F0:77:0B:DD:01:25:72:E8:64:90:0B:D7:C9
Certificate issuer:       /CN=4fa5cde524f7810d5868bc49ab0bf6621f44dc21
Certificate serial:       0320FF
Authority key identifier: 4F:A5:CD:E5:24:F7:81:0D:58:68:BC:49:AB:0B:F6:62:1F:44:DC:21
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/T6XN5ST3gQ1YaLxJqwv2Yh9E3CE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e3/d6088c-3110-41e1-b996-32d4ad8f56de/1/xlvugw4nfPB3C90BJXLoZJAL18k.roa
Signing time:             Sat 19 Feb 2022 00:21:25 +0000
ROA not before:           Sat 19 Feb 2022 00:21:25 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     8283
IP address blocks:        2a12:4440::/32 maxlen: 32

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 205055 (0x320ff)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4fa5cde524f7810d5868bc49ab0bf6621f44dc21
        Validity
            Not Before: Feb 19 00:21:25 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=c65bee830e277cf0770bdd012572e864900bd7c9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e6:9e:57:20:91:e4:15:d5:3c:16:ee:9d:e9:24:
                    12:78:71:b7:59:e2:4e:df:41:3a:f7:7d:6f:85:e2:
                    52:d8:6e:dd:f4:86:1b:33:79:b0:d8:cd:09:1b:9b:
                    1d:65:2b:1c:35:c8:7b:77:71:d8:29:85:69:11:54:
                    25:43:d2:5c:0a:47:f5:1f:40:42:aa:58:69:59:25:
                    a5:b8:d1:80:1c:cf:b7:0b:ba:67:a5:68:f7:2d:9d:
                    14:06:17:a0:7f:43:25:a4:98:65:df:bc:72:70:f7:
                    ee:90:e4:2a:f0:29:01:2a:aa:ca:50:e1:2b:6d:10:
                    90:9a:05:a0:e1:20:35:c3:ef:7f:14:00:46:e8:72:
                    24:d4:64:07:03:82:46:69:ca:9a:69:2a:76:97:ba:
                    82:1e:d4:b4:84:3e:d5:7b:dd:31:b4:99:94:f4:9d:
                    56:33:1c:bd:a9:77:fb:5b:ce:ab:ae:f2:c5:21:08:
                    5d:4d:4a:7c:78:cb:ea:2a:ad:27:db:0e:9d:5f:3c:
                    cb:50:b6:4b:99:40:cc:ed:bd:d0:92:be:4f:80:ce:
                    cc:e3:35:b0:ad:37:83:db:32:fb:f8:95:a8:89:b3:
                    32:4a:be:95:ed:be:59:9d:6c:60:b6:6a:dd:c0:0d:
                    32:b1:f3:08:23:bf:89:d0:f5:84:3f:db:00:f5:1e:
                    20:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C6:5B:EE:83:0E:27:7C:F0:77:0B:DD:01:25:72:E8:64:90:0B:D7:C9
            X509v3 Authority Key Identifier:
                keyid:4F:A5:CD:E5:24:F7:81:0D:58:68:BC:49:AB:0B:F6:62:1F:44:DC:21

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T6XN5ST3gQ1YaLxJqwv2Yh9E3CE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/d6088c-3110-41e1-b996-32d4ad8f56de/1/xlvugw4nfPB3C90BJXLoZJAL18k.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/d6088c-3110-41e1-b996-32d4ad8f56de/1/T6XN5ST3gQ1YaLxJqwv2Yh9E3CE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a12:4440::/32

    Signature Algorithm: sha256WithRSAEncryption
         1d:ae:62:35:98:25:f5:90:4b:a0:eb:d1:bb:e8:97:c5:4e:b8:
         00:4b:38:68:08:d5:3c:55:ec:cd:2e:82:ab:46:05:b2:e4:4e:
         2a:98:91:42:fa:19:89:f7:80:63:a8:c4:74:38:fd:25:7e:2a:
         a8:c9:98:9c:73:52:f3:59:aa:da:0b:d8:c7:98:d2:c4:17:bc:
         2f:72:dc:89:ff:e7:e6:74:28:ce:ea:7c:bd:03:3f:58:23:0d:
         13:37:db:4b:89:22:46:66:87:c7:5b:75:09:50:2e:39:9c:c0:
         54:19:27:65:bf:1f:23:71:a9:74:d3:e9:1b:6b:4e:34:0e:a3:
         05:26:5d:53:2b:43:f1:4c:8f:79:7e:ab:a8:10:71:3b:9f:58:
         db:ad:d6:34:a9:83:6f:c1:ed:04:68:6c:9c:42:e6:4d:16:2f:
         1a:f9:64:8b:bd:fc:21:c8:a9:e5:88:49:87:0a:d5:42:d0:cb:
         a8:f7:47:4a:c0:52:88:83:fc:93:e0:3d:0c:25:63:f9:52:06:
         f8:70:ef:86:25:06:cb:59:e4:08:07:8f:d5:2c:3b:5f:d6:2b:
         33:2b:5e:61:1f:7c:56:c5:07:1e:85:91:b7:cf:df:f8:7c:a7:
         a8:b4:9d:d2:8b:9b:b5:ee:f3:be:39:6c:59:45:c4:7d:92:3a:
         8b:0f:d9:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----