Route Origin Authorization

$ rpki-client -vvf rsync.rp.ki/repo/misakaio/2/326130623a343334303a61303a3a2f34342d3434203d3e20323035353332.roa
File:                     326130623a343334303a61303a3a2f34342d3434203d3e20323035353332.roa (raw, json)
Hash identifier:          0JBQ9H5F+eehUVwo9KZaDga+lHKLJJE9/FlaKbcyBvg=
Subject key identifier:   00:0D:AE:25:87:A5:8E:3C:49:67:01:35:FC:B4:2E:3E:47:3E:A3:75
Certificate issuer:       /CN=e36a3cbcb6635d140f694b0cd99d1cd62456de2e
Certificate serial:       4F4B306234842EB317515562699C05D31813A8C1
Authority key identifier: E3:6A:3C:BC:B6:63:5D:14:0F:69:4B:0C:D9:9D:1C:D6:24:56:DE:2E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/42o8vLZjXRQPaUsM2Z0c1iRW3i4.cer
Subject info access:      rsync://rsync.rp.ki/repo/misakaio/2/326130623a343334303a61303a3a2f34342d3434203d3e20323035353332.roa
Signing time:             Tue 14 Jun 2022 23:14:57 +0000
ROA not before:           Tue 14 Jun 2022 23:09:57 +0000
ROA not after:            Tue 13 Jun 2023 23:14:57 +0000
asID:                     205532
IP address blocks:        2a0b:4340:a0::/44 maxlen: 44

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4f:4b:30:62:34:84:2e:b3:17:51:55:62:69:9c:05:d3:18:13:a8:c1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e36a3cbcb6635d140f694b0cd99d1cd62456de2e
        Validity
            Not Before: Jun 14 23:09:57 2022 GMT
            Not After : Jun 13 23:14:57 2023 GMT
        Subject: CN=000DAE2587A58E3C49670135FCB42E3E473EA375
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:05:9f:a2:61:f4:c0:29:8e:0f:27:cd:70:f5:
                    2b:da:f2:7f:91:b9:e7:13:ea:45:34:ee:7f:e4:0a:
                    db:76:91:f0:7b:3e:48:3a:0c:fd:0d:a3:4a:b6:5c:
                    15:90:f1:93:ed:21:07:6d:76:e7:90:8a:3c:9c:70:
                    ad:59:f6:1a:0e:51:53:3d:f8:e5:41:3c:94:06:ba:
                    10:97:f8:10:67:53:f8:0b:0b:70:d3:c3:78:46:03:
                    78:74:12:a4:4f:cc:15:fa:48:e4:f2:7e:eb:2f:de:
                    4a:9f:8f:44:1b:5e:fd:a0:2b:5e:9b:a9:91:a1:c9:
                    7b:b2:20:35:4c:78:d2:10:2e:08:1e:f5:68:1f:1c:
                    a0:9c:41:82:fb:24:c1:2a:71:a1:7a:96:db:f7:1d:
                    9e:37:ff:e8:df:d0:3b:cf:42:d0:2f:8d:8e:3e:42:
                    e6:a5:24:68:2a:10:89:0a:e4:8d:cb:f8:6a:f6:bd:
                    bf:f2:fe:5c:4e:6c:52:63:44:88:fe:a9:f5:c1:96:
                    c1:3b:21:0e:80:66:3c:62:b7:68:73:5f:93:8d:69:
                    41:70:8e:30:e4:5f:13:2f:f4:6b:7f:ed:ff:48:32:
                    42:48:ad:b7:b4:dd:3d:ff:34:cb:e1:0c:31:39:e8:
                    0d:a7:29:55:a9:a3:90:c7:04:85:29:ac:1e:99:b4:
                    45:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                00:0D:AE:25:87:A5:8E:3C:49:67:01:35:FC:B4:2E:3E:47:3E:A3:75
            X509v3 Authority Key Identifier:
                keyid:E3:6A:3C:BC:B6:63:5D:14:0F:69:4B:0C:D9:9D:1C:D6:24:56:DE:2E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.rp.ki/repo/misakaio/2/E36A3CBCB6635D140F694B0CD99D1CD62456DE2E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/42o8vLZjXRQPaUsM2Z0c1iRW3i4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.rp.ki/repo/misakaio/2/326130623a343334303a61303a3a2f34342d3434203d3e20323035353332.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a0b:4340:a0::/44

    Signature Algorithm: sha256WithRSAEncryption
         87:78:d2:c4:70:57:b7:14:ad:07:c1:91:e2:ca:cb:29:5b:b6:
         2d:a7:70:1c:ff:8d:a7:02:9c:2c:de:ea:b7:fe:52:d7:b1:c6:
         17:3f:45:51:aa:a2:79:c3:2a:e4:f7:ce:56:a1:c8:22:d2:a1:
         ba:3a:d7:58:a2:71:18:43:bd:66:4e:1c:6a:70:ed:96:22:e4:
         09:c7:41:8b:75:46:d7:1e:c4:47:7c:4f:45:78:75:14:dd:cc:
         35:85:9c:20:d9:7b:81:fe:67:a9:0c:e3:41:3a:3d:2e:9a:c0:
         92:8b:cc:8c:5d:16:e5:a1:0e:e8:fa:08:d0:d5:20:af:6f:f1:
         26:dc:eb:c9:e4:5d:f4:9e:44:32:d6:a4:60:6b:b6:10:b0:00:
         22:aa:7c:3d:07:dc:8f:52:8d:44:7e:61:df:a5:ad:2f:61:ca:
         aa:90:c3:31:36:c7:da:6a:b3:69:57:b9:6f:f8:4b:7a:ec:67:
         48:0c:8b:29:be:a5:5d:1d:16:b0:64:02:b2:f5:ef:f4:a9:27:
         1b:78:70:02:8b:a6:c3:9c:4b:03:16:1e:30:60:0d:c4:9a:fb:
         be:5e:9f:0e:da:f6:9d:db:61:ad:da:3f:8b:1a:4e:99:96:50:
         48:b5:75:15:b5:a8:1c:05:6b:4a:cb:13:3a:be:7b:1f:de:77:
         12:94:66:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----