Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/5786ab-067e-440c-b276-1b06d1c704c1/1/UcDStMbNVwjlHB0XD1mpBWhGsrs.roa
File:                     UcDStMbNVwjlHB0XD1mpBWhGsrs.roa (raw, json)
Hash identifier:          vIYfkqofrygJwPSVq/2lYb+G7j2nfkflUCVom7Cg0TQ=
Subject key identifier:   51:C0:D2:B4:C6:CD:57:08:E5:1C:1D:17:0F:59:A9:05:68:46:B2:BB
Certificate issuer:       /CN=d3d56f07be184cba52f6fdc049e8114d2616c32a
Certificate serial:       0A46D341
Authority key identifier: D3:D5:6F:07:BE:18:4C:BA:52:F6:FD:C0:49:E8:11:4D:26:16:C3:2A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/09VvB74YTLpS9v3ASegRTSYWwyo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/fd/5786ab-067e-440c-b276-1b06d1c704c1/1/UcDStMbNVwjlHB0XD1mpBWhGsrs.roa
Signing time:             Sat 01 Jan 2022 15:03:27 +0000
ROA not before:           Sat 01 Jan 2022 15:03:27 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     206186
IP address blocks:        2001:678:3b0::/48 maxlen: 48

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 172413761 (0xa46d341)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d3d56f07be184cba52f6fdc049e8114d2616c32a
        Validity
            Not Before: Jan  1 15:03:27 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=51c0d2b4c6cd5708e51c1d170f59a9056846b2bb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:9a:e4:5b:aa:8b:83:f1:3d:4f:d3:34:90:32:
                    aa:76:8c:37:54:96:bb:32:c7:11:8e:63:e2:7d:7a:
                    f2:07:26:e6:f3:9b:ba:6c:bc:29:21:95:9a:f3:87:
                    b6:2f:22:7b:c0:64:a0:8e:76:e7:bd:16:56:14:ed:
                    5c:85:65:03:71:e4:3e:b2:78:4f:2c:a9:6b:88:a3:
                    b8:92:39:6a:f1:a0:af:41:a5:65:94:f5:0b:4f:25:
                    81:9f:23:fc:cb:3d:6a:be:c5:22:c5:0b:ab:30:4b:
                    27:e5:b6:74:5b:55:f0:67:9f:cd:4b:d0:56:e2:6b:
                    7b:75:bd:77:bb:0f:03:26:00:07:3a:a9:9e:cd:08:
                    8f:3e:af:db:f0:61:a3:bf:f0:32:dc:8a:5d:1f:75:
                    29:c7:3a:af:89:27:8b:76:d1:99:67:cd:ed:e2:07:
                    84:01:59:24:96:0f:f6:b8:a4:a7:06:22:fb:83:8f:
                    7c:29:a9:ec:4f:93:f2:ef:49:87:19:43:2d:51:e1:
                    d0:59:82:a6:ef:e4:43:41:88:18:66:09:2b:a4:96:
                    65:a1:4f:43:65:97:96:5e:c2:17:69:c8:67:57:c4:
                    a5:e8:0d:62:5f:5b:e2:16:a8:f1:5e:ee:3f:c7:db:
                    da:2f:a2:a1:10:a9:30:e7:4b:a1:df:a3:cc:7a:37:
                    2c:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                51:C0:D2:B4:C6:CD:57:08:E5:1C:1D:17:0F:59:A9:05:68:46:B2:BB
            X509v3 Authority Key Identifier:
                keyid:D3:D5:6F:07:BE:18:4C:BA:52:F6:FD:C0:49:E8:11:4D:26:16:C3:2A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/09VvB74YTLpS9v3ASegRTSYWwyo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/5786ab-067e-440c-b276-1b06d1c704c1/1/UcDStMbNVwjlHB0XD1mpBWhGsrs.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/5786ab-067e-440c-b276-1b06d1c704c1/1/09VvB74YTLpS9v3ASegRTSYWwyo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:678:3b0::/48

    Signature Algorithm: sha256WithRSAEncryption
         ac:76:9e:d7:5d:70:0b:1c:23:5d:28:3b:46:22:8d:87:42:c6:
         bb:fd:37:85:5d:63:5e:52:aa:6c:01:d1:be:72:8f:00:91:83:
         2e:69:d1:b0:5e:3f:8f:75:45:f5:df:87:28:c9:42:80:45:31:
         29:dd:61:5b:96:8e:47:d7:ad:b9:c2:94:21:60:b4:0d:8d:ef:
         40:6e:76:52:ad:4b:bd:d7:a8:55:fc:36:ae:9c:c5:f4:1c:4a:
         73:36:7f:ab:5a:09:aa:72:5d:e5:26:d2:8a:23:66:85:28:bd:
         71:29:e5:ff:0c:ef:cb:0f:fb:e6:2c:81:bb:6a:c3:d7:01:c8:
         b5:85:b4:fe:22:d0:68:43:15:44:e7:d0:01:e8:e8:f4:98:a1:
         82:b0:a4:f9:a1:04:ed:90:15:ec:0d:c3:fa:d5:40:9f:15:f3:
         0e:79:3e:2c:0f:e8:79:1f:a6:94:29:8a:90:50:d2:bb:3f:3c:
         da:44:24:a5:81:90:a4:1a:f1:e8:3e:b6:80:2a:9e:b9:07:22:
         14:d7:f9:be:be:6c:9b:dd:88:9c:cb:88:61:22:87:50:40:da:
         2a:c5:b4:ab:51:5c:1c:d6:00:10:48:e8:95:48:94:e4:9e:3d:
         d8:54:b8:49:1f:20:8d:33:3b:ab:74:25:5f:d1:f7:20:39:e7:
         ad:f9:74:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----