Route Origin Authorization

$ rpki-client -vvf rsync.rp.ki/repo/misakaio/2/326130623a343334303a61303a3a2f34382d3438203d3e20323035353332.roa
File:                     326130623a343334303a61303a3a2f34382d3438203d3e20323035353332.roa (raw, json)
Hash identifier:          UKfKgg3OH4XZMKJLn4NUOPGOKyEzZR2F3yuVe7CRFGw=
Subject key identifier:   F6:C9:84:38:CF:4C:6E:A6:61:75:20:CB:73:E0:A5:21:6E:0D:FF:34
Certificate issuer:       /CN=e36a3cbcb6635d140f694b0cd99d1cd62456de2e
Certificate serial:       489B2924CF281F9D58B18891ACAEA36FE9B113E2
Authority key identifier: E3:6A:3C:BC:B6:63:5D:14:0F:69:4B:0C:D9:9D:1C:D6:24:56:DE:2E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/42o8vLZjXRQPaUsM2Z0c1iRW3i4.cer
Subject info access:      rsync://rsync.rp.ki/repo/misakaio/2/326130623a343334303a61303a3a2f34382d3438203d3e20323035353332.roa
Signing time:             Tue 14 Jun 2022 23:15:04 +0000
ROA not before:           Tue 14 Jun 2022 23:10:04 +0000
ROA not after:            Tue 13 Jun 2023 23:15:04 +0000
asID:                     205532
IP address blocks:        2a0b:4340:a0::/48 maxlen: 48

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            48:9b:29:24:cf:28:1f:9d:58:b1:88:91:ac:ae:a3:6f:e9:b1:13:e2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e36a3cbcb6635d140f694b0cd99d1cd62456de2e
        Validity
            Not Before: Jun 14 23:10:04 2022 GMT
            Not After : Jun 13 23:15:04 2023 GMT
        Subject: CN=F6C98438CF4C6EA6617520CB73E0A5216E0DFF34
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:c2:5e:91:1c:57:65:d2:79:77:14:69:70:fa:
                    71:6d:75:c0:c4:47:35:ff:97:40:91:57:eb:42:68:
                    b8:c2:f1:3f:a4:21:86:c8:53:5c:f6:85:4c:4f:a7:
                    17:60:c7:e2:fe:fa:ad:7f:0b:71:0d:24:6f:08:e1:
                    10:16:56:7b:c5:9d:20:0e:04:0e:ab:4d:b9:69:d2:
                    a7:6a:09:da:a0:79:f7:5c:57:1a:ad:7b:c8:d6:ad:
                    a6:d4:8d:78:e3:61:87:f9:dd:4c:8c:f2:10:0e:5a:
                    67:96:f9:c3:86:53:5b:b5:b0:84:60:9c:b8:51:0a:
                    99:82:34:1e:91:03:96:88:23:fd:f9:0a:45:6d:2f:
                    4f:1e:58:4d:15:63:47:d0:b2:29:59:2a:a8:3f:44:
                    70:8a:25:df:5f:38:d8:7a:30:64:af:01:3c:f3:e1:
                    b9:2f:ee:f7:82:e8:b3:b9:ef:85:a3:a4:a8:18:10:
                    58:e6:5b:46:8d:1c:64:80:f4:1c:50:67:65:e5:27:
                    a7:41:e0:74:ac:0c:a5:ba:28:27:62:fc:8b:3f:d8:
                    1e:4a:d6:28:dd:60:57:b7:9e:75:78:26:af:74:f9:
                    03:f1:de:38:ba:49:a8:b3:6f:d0:c3:59:ef:84:10:
                    17:ab:3a:19:f9:f0:6c:95:99:9b:34:6e:fc:8a:7d:
                    7e:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F6:C9:84:38:CF:4C:6E:A6:61:75:20:CB:73:E0:A5:21:6E:0D:FF:34
            X509v3 Authority Key Identifier:
                keyid:E3:6A:3C:BC:B6:63:5D:14:0F:69:4B:0C:D9:9D:1C:D6:24:56:DE:2E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.rp.ki/repo/misakaio/2/E36A3CBCB6635D140F694B0CD99D1CD62456DE2E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/42o8vLZjXRQPaUsM2Z0c1iRW3i4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.rp.ki/repo/misakaio/2/326130623a343334303a61303a3a2f34382d3438203d3e20323035353332.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a0b:4340:a0::/48

    Signature Algorithm: sha256WithRSAEncryption
         95:0a:49:68:2a:9c:bb:1b:6f:be:fc:d4:82:75:cc:b7:67:3f:
         e1:5a:bd:d3:cb:ce:1f:86:dd:59:36:9a:9c:33:6f:38:db:9d:
         48:1d:db:e3:b2:23:f3:92:22:a7:43:3a:c2:1b:04:5b:a0:ef:
         dd:43:65:4f:d5:10:01:0b:b2:33:8f:d6:45:ea:1c:64:7e:02:
         e3:6f:eb:e8:a6:d2:83:c0:be:84:d1:31:7e:5f:9e:d3:1f:77:
         cb:54:ff:d3:7c:03:f8:16:42:f8:24:2f:30:2b:24:f1:d2:c3:
         ab:cb:35:d8:ae:41:fc:e0:26:43:5d:64:10:26:31:89:a0:e8:
         76:dc:6f:ec:bc:f9:43:24:91:ec:34:5c:0a:44:ab:63:04:aa:
         34:56:2f:cc:cd:27:e5:1f:3d:67:8e:15:56:00:39:ea:06:61:
         35:49:6b:d9:82:36:45:2d:95:ab:2f:76:f6:6e:64:f1:1f:1e:
         62:c8:96:f4:78:db:e1:13:69:2f:62:9e:7d:31:e1:55:c0:01:
         eb:e0:f3:41:a5:3b:3a:7a:a1:0b:e8:d9:6a:be:00:0c:ca:80:
         ec:0a:fa:c3:b6:5f:f7:b2:62:29:38:73:3d:9f:69:7a:17:22:
         42:7c:20:88:bd:41:97:84:f5:8e:cc:bf:eb:b2:04:21:96:94:
         5c:7d:35:3d
-----BEGIN CERTIFICATE-----
MIIE1DCCA7ygAwIBAgIUSJspJM8oH51YsYiRrK6jb+mxE+IwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoZTM2YTNjYmNiNjYzNWQxNDBmNjk0YjBjZDk5ZDFjZDYy
NDU2ZGUyZTAeFw0yMjA2MTQyMzEwMDRaFw0yMzA2MTMyMzE1MDRaMDMxMTAvBgNV
BAMTKEY2Qzk4NDM4Q0Y0QzZFQTY2MTc1MjBDQjczRTBBNTIxNkUwREZGMzQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCtwl6RHFdl0nl3FGlw+nFtdcDE
RzX/l0CRV+tCaLjC8T+kIYbIU1z2hUxPpxdgx+L++q1/C3ENJG8I4RAWVnvFnSAO
BA6rTblp0qdqCdqgefdcVxqte8jWrabUjXjjYYf53UyM8hAOWmeW+cOGU1u1sIRg
nLhRCpmCNB6RA5aII/35CkVtL08eWE0VY0fQsilZKqg/RHCKJd9fONh6MGSvATzz
4bkv7veC6LO574WjpKgYEFjmW0aNHGSA9BxQZ2XlJ6dB4HSsDKW6KCdi/Is/2B5K
1ijdYFe3nnV4Jq90+QPx3ji6Saizb9DDWe+EEBerOhn58GyVmZs0bvyKfX5jAgMB
AAGjggHeMIIB2jAdBgNVHQ4EFgQU9smEOM9MbqZhdSDLc+ClIW4N/zQwHwYDVR0j
BBgwFoAU42o8vLZjXRQPaUsM2Z0c1iRW3i4wDgYDVR0PAQH/BAQDAgeAMGEGA1Ud
HwRaMFgwVqBUoFKGUHJzeW5jOi8vcnN5bmMucnAua2kvcmVwby9taXNha2Fpby8y
L0UzNkEzQ0JDQjY2MzVEMTQwRjY5NEIwQ0Q5OUQxQ0Q2MjQ1NkRFMkUuY3JsMGQG
CCsGAQUFBwEBBFgwVjBUBggrBgEFBQcwAoZIcnN5bmM6Ly9ycGtpLnJpcGUubmV0
L3JlcG9zaXRvcnkvREVGQVVMVC80Mm84dkxaalhSUVBhVXNNMlowYzFpUlczaTQu
Y2VyMIGABggrBgEFBQcBCwR0MHIwcAYIKwYBBQUHMAuGZHJzeW5jOi8vcnN5bmMu
cnAua2kvcmVwby9taXNha2Fpby8yLzMyNjEzMDYyM2EzNDMzMzQzMDNhNjEzMDNh
M2EyZjM0MzgyZDM0MzgyMDNkM2UyMDMyMzAzNTM1MzMzMi5yb2EwGAYDVR0gAQH/
BA4wDDAKBggrBgEFBQcOAjAiBggrBgEFBQcBBwEB/wQTMBEwDwQCAAIwCQMHACoL
Q0AAoDANBgkqhkiG9w0BAQsFAAOCAQEAlQpJaCqcuxtvvvzUgnXMt2c/4Vq908vO
H4bdWTaanDNvONudSB3b47Ij85Iip0M6whsEW6Dv3UNlT9UQAQuyM4/WReocZH4C
42/r6KbSg8C+hNExfl+e0x93y1T/03wD+BZC+CQvMCsk8dLDq8s12K5B/OAmQ11k
ECYxiaDodtxv7Lz5QySR7DRcCkSrYwSqNFYvzM0n5R89Z44VVgA56gZhNUlr2YI2
RS2Vqy929m5k8R8eYsiW9Hjb4RNpL2KefTHhVcAB6+DzQaU7OnqhC+jZar4ADMqA
7Ar6w7Zf97JiKThzPZ9pehciQnwgiL1Bl4T1jsy/67IEIZaUXH01PQ==
-----END CERTIFICATE-----