Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ff/49424a-aa5f-4b9f-a627-24654e941c12/1/1-4PakOI7Zd3m3cPx6nOzjNspwkY.roa
File:                     1-4PakOI7Zd3m3cPx6nOzjNspwkY.roa (raw, json)
Hash identifier:          5F0vgHMvEkX+HtarD7h1Rj7G0Qa8AA2+MZeHq9Of3VM=
Subject key identifier:   FB:83:DA:90:E2:3B:65:DD:E6:DD:C3:F1:EA:73:B3:8C:DB:29:C2:46
Certificate issuer:       /CN=dac32632aa9154253c6dcd2331e9ad6920b6bdcc
Certificate serial:       CBA725
Authority key identifier: DA:C3:26:32:AA:91:54:25:3C:6D:CD:23:31:E9:AD:69:20:B6:BD:CC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/2sMmMqqRVCU8bc0jMemtaSC2vcw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ff/49424a-aa5f-4b9f-a627-24654e941c12/1/1-4PakOI7Zd3m3cPx6nOzjNspwkY.roa
Signing time:             Fri 03 Jun 2022 20:55:20 +0000
ROA not before:           Fri 03 Jun 2022 20:55:20 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     20473
IP address blocks:        2a12:fc0:10::/48 maxlen: 48

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 13346597 (0xcba725)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=dac32632aa9154253c6dcd2331e9ad6920b6bdcc
        Validity
            Not Before: Jun  3 20:55:20 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=fb83da90e23b65dde6ddc3f1ea73b38cdb29c246
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:9e:77:a9:f5:1f:dd:2a:8f:70:b5:44:53:c6:
                    93:6d:a1:00:2d:ac:5a:19:e3:bf:ce:a6:10:af:03:
                    c4:3b:f7:e8:ec:a8:b2:f6:4e:10:3b:cd:23:72:6e:
                    d9:86:88:84:b5:fa:14:49:04:a5:88:09:9f:c1:f0:
                    73:49:f8:2a:18:4d:26:f6:8f:da:ee:b6:6d:cb:78:
                    a7:75:b6:bb:29:5e:fb:67:12:08:d8:9f:af:6d:a9:
                    7a:d9:0d:ac:86:0f:b2:ab:85:aa:55:d5:17:a2:27:
                    64:e0:b9:43:86:fd:46:46:3d:38:53:6f:7b:1e:ce:
                    31:7d:d3:65:51:43:18:80:96:95:29:6e:d0:81:52:
                    da:9c:a2:8b:98:79:51:83:dc:59:1a:19:50:b8:57:
                    09:68:b4:c7:c8:48:14:d5:c6:bd:30:fa:f2:0a:07:
                    17:a3:e5:90:b1:b3:81:9a:41:ee:7d:5d:d4:54:dc:
                    92:65:59:39:b8:76:0f:54:bb:14:70:3d:cb:cf:5a:
                    41:ac:de:f4:36:51:32:e2:d6:d2:77:1c:09:89:c9:
                    bd:6e:cd:42:20:67:0c:82:34:c8:13:b3:49:b7:01:
                    ac:8e:2e:f5:b1:a5:b5:67:4a:eb:a3:1a:f3:25:83:
                    c1:17:af:04:bb:69:4f:d6:ac:28:a2:b1:2b:05:8f:
                    86:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FB:83:DA:90:E2:3B:65:DD:E6:DD:C3:F1:EA:73:B3:8C:DB:29:C2:46
            X509v3 Authority Key Identifier:
                keyid:DA:C3:26:32:AA:91:54:25:3C:6D:CD:23:31:E9:AD:69:20:B6:BD:CC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2sMmMqqRVCU8bc0jMemtaSC2vcw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/49424a-aa5f-4b9f-a627-24654e941c12/1/1-4PakOI7Zd3m3cPx6nOzjNspwkY.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/49424a-aa5f-4b9f-a627-24654e941c12/1/2sMmMqqRVCU8bc0jMemtaSC2vcw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a12:fc0:10::/48

    Signature Algorithm: sha256WithRSAEncryption
         6f:36:15:a3:8c:e8:b6:19:83:2f:4b:2f:16:c3:1b:13:27:da:
         2f:18:12:50:f1:d7:55:d8:ce:b3:b4:1d:b1:45:78:90:e5:25:
         08:6d:9b:05:c9:1e:05:f2:90:cd:3b:b3:18:69:fe:ac:dc:61:
         ff:44:bd:92:93:06:7a:d7:c8:1c:f1:ef:e5:fe:06:1b:fd:2f:
         90:1d:cb:63:08:5d:da:33:eb:01:cc:e2:fa:ea:33:c8:86:53:
         70:37:72:75:4b:26:c6:4a:45:79:e0:5a:e0:25:06:df:2b:3e:
         e4:05:6e:4f:6a:f1:ec:9f:21:f5:6d:fa:cb:83:57:27:a7:7d:
         e0:85:73:fd:53:b8:c2:d8:34:97:03:dc:42:8e:ab:42:dd:53:
         fb:bf:7f:d2:2b:26:6e:f0:0f:4b:a2:3c:9f:3d:fd:b0:02:ef:
         f1:93:1e:09:f9:de:4a:8a:95:0c:8f:a6:bc:bf:f2:56:00:ef:
         eb:c2:25:75:e0:0c:2e:4c:ce:90:67:3d:b8:b8:b6:d0:4e:47:
         f4:d4:87:48:7e:3f:2d:6e:4a:1d:c8:0f:fd:33:34:b2:85:14:
         14:0f:4c:4d:e2:19:1c:e1:1b:24:d8:57:c7:97:d1:38:41:62:
         df:bb:7a:31:54:03:ff:0e:82:3b:30:3a:1a:48:96:25:79:ab:
         9a:6d:8d:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----