Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/54/8f90a5-c878-4dd4-b2db-4e5861187c4f/1/lEdw3901-SABnVgy0EBlIvCDDWo.roa
File:                     lEdw3901-SABnVgy0EBlIvCDDWo.roa (raw, json)
Hash identifier:          sije6QgPvZnPFLU22DBXSpYKbMi3IrHZqKRCi7LexOo=
Subject key identifier:   94:47:70:DF:DD:35:F9:20:01:9D:58:32:D0:40:65:22:F0:83:0D:6A
Certificate issuer:       /CN=e1ff625f4a18d04d590a5b9d73b2551a435b7172
Certificate serial:       011ECB06
Authority key identifier: E1:FF:62:5F:4A:18:D0:4D:59:0A:5B:9D:73:B2:55:1A:43:5B:71:72
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/4f9iX0oY0E1ZCludc7JVGkNbcXI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/54/8f90a5-c878-4dd4-b2db-4e5861187c4f/1/lEdw3901-SABnVgy0EBlIvCDDWo.roa
Signing time:             Sat 01 Jan 2022 01:59:42 +0000
ROA not before:           Sat 01 Jan 2022 01:59:42 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     210887
IP address blocks:        2001:67c:864::/48 maxlen: 48

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 18795270 (0x11ecb06)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e1ff625f4a18d04d590a5b9d73b2551a435b7172
        Validity
            Not Before: Jan  1 01:59:42 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=944770dfdd35f920019d5832d0406522f0830d6a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e7:43:9e:66:1a:6a:82:ec:8e:c9:93:22:88:0c:
                    4a:9e:1a:98:41:f2:d0:b3:e2:e2:a1:4f:27:04:2a:
                    60:49:47:69:8a:24:8d:13:75:ce:c4:c8:5e:e2:0b:
                    89:77:8c:20:8d:32:3d:7c:4b:92:46:53:87:d8:1b:
                    0c:5b:27:52:f9:84:64:9e:ff:79:3f:b3:b4:10:32:
                    07:44:55:20:f9:a2:3a:88:d1:7d:33:d3:cf:c5:89:
                    d1:ff:e5:e4:fd:dc:01:82:b0:f3:42:e1:75:dc:00:
                    cb:db:3c:10:0f:d5:63:ec:9a:23:86:4f:62:fb:36:
                    8f:d9:79:a3:e4:53:93:0b:17:93:59:27:1f:b8:43:
                    cd:51:f1:8a:fc:93:83:fb:30:f3:20:a2:58:f2:74:
                    31:56:95:58:33:87:26:de:1d:ac:8c:be:67:5b:3c:
                    49:2f:92:1e:49:cb:2a:2d:19:bb:d5:7d:c5:28:87:
                    e3:45:e0:26:33:8d:59:c5:08:1c:7e:e2:8a:7f:fd:
                    23:2b:b7:13:59:a1:a6:99:c1:04:1c:e4:30:e2:d6:
                    09:0b:77:7a:ed:c0:a2:9f:cb:3f:9f:6f:67:9b:96:
                    62:f9:a0:f6:61:f1:a0:79:99:3e:24:96:16:03:3c:
                    5e:7c:5c:d7:d9:68:00:19:78:d7:81:7d:17:01:9c:
                    37:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                94:47:70:DF:DD:35:F9:20:01:9D:58:32:D0:40:65:22:F0:83:0D:6A
            X509v3 Authority Key Identifier:
                keyid:E1:FF:62:5F:4A:18:D0:4D:59:0A:5B:9D:73:B2:55:1A:43:5B:71:72

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4f9iX0oY0E1ZCludc7JVGkNbcXI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/8f90a5-c878-4dd4-b2db-4e5861187c4f/1/lEdw3901-SABnVgy0EBlIvCDDWo.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/54/8f90a5-c878-4dd4-b2db-4e5861187c4f/1/4f9iX0oY0E1ZCludc7JVGkNbcXI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:67c:864::/48

    Signature Algorithm: sha256WithRSAEncryption
         7e:23:88:c8:37:65:f7:d4:84:7a:61:36:1f:af:be:cc:86:1b:
         f7:65:c6:f4:91:c8:0a:93:80:43:98:0e:ed:86:dd:c2:53:70:
         8f:f1:09:ad:3e:d6:ec:61:ad:57:e4:10:ec:0e:ef:aa:85:48:
         4f:c0:ca:31:8e:60:f8:4e:0c:05:5f:ba:f4:eb:90:e7:3b:0a:
         1a:22:16:70:27:51:52:e7:d0:15:74:1c:8b:82:c2:69:82:a5:
         d5:90:2b:fc:be:15:15:f8:b9:38:44:5b:d7:9f:2f:1f:de:70:
         50:f8:34:37:f3:ff:fd:c5:fa:33:d9:cc:4c:8c:8c:44:d6:40:
         09:d1:26:12:d7:fe:ef:72:a9:0a:00:51:4d:f1:f5:e3:04:86:
         f7:85:a9:3c:dc:32:d3:d8:ee:7a:fa:05:12:f4:da:9b:18:c7:
         24:e0:b7:29:96:06:5a:dc:d0:19:56:cf:18:68:e9:40:84:3d:
         e1:dd:a1:34:1a:77:e3:30:32:d5:c0:3b:07:1c:88:25:fa:84:
         50:d1:07:96:73:25:9b:75:f9:bf:58:28:06:ed:7a:3a:42:63:
         be:15:5b:ed:cb:4e:d3:90:d1:c6:ce:5d:20:df:59:81:17:a3:
         58:1e:c5:ae:6c:05:e8:05:df:4c:ae:dd:7c:7a:d9:0c:72:79:
         48:0c:65:8f
-----BEGIN CERTIFICATE-----
MIIE8jCCA9qgAwIBAgIEAR7LBjANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyhl
MWZmNjI1ZjRhMThkMDRkNTkwYTViOWQ3M2IyNTUxYTQzNWI3MTcyMB4XDTIyMDEw
MTAxNTk0MloXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoOTQ0NzcwZGZkZDM1
ZjkyMDAxOWQ1ODMyZDA0MDY1MjJmMDgzMGQ2YTCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAOdDnmYaaoLsjsmTIogMSp4amEHy0LPi4qFPJwQqYElHaYok
jRN1zsTIXuILiXeMII0yPXxLkkZTh9gbDFsnUvmEZJ7/eT+ztBAyB0RVIPmiOojR
fTPTz8WJ0f/l5P3cAYKw80LhddwAy9s8EA/VY+yaI4ZPYvs2j9l5o+RTkwsXk1kn
H7hDzVHxivyTg/sw8yCiWPJ0MVaVWDOHJt4drIy+Z1s8SS+SHknLKi0Zu9V9xSiH
40XgJjONWcUIHH7iin/9Iyu3E1mhppnBBBzkMOLWCQt3eu3Aop/LP59vZ5uWYvmg
9mHxoHmZPiSWFgM8Xnxc19loABl414F9FwGcNzMCAwEAAaOCAgwwggIIMB0GA1Ud
DgQWBBSUR3Df3TX5IAGdWDLQQGUi8IMNajAfBgNVHSMEGDAWgBTh/2JfShjQTVkK
W51zslUaQ1txcjAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
LzRmOWlYMG9ZMEUxWkNsdWRjN0pWR2tOYmNYSS5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvNTQvOGY5MGE1LWM4NzgtNGRkNC1iMmRiLTRlNTg2MTE4N2M0Zi8x
L2xFZHczOTAxLVNBQm5WZ3kwRUJsSXZDRERXby5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNTQv
OGY5MGE1LWM4NzgtNGRkNC1iMmRiLTRlNTg2MTE4N2M0Zi8xLzRmOWlYMG9ZMEUx
WkNsdWRjN0pWR2tOYmNYSS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAi
BggrBgEFBQcBBwEB/wQTMBEwDwQCAAIwCQMHACABBnwIZDANBgkqhkiG9w0BAQsF
AAOCAQEAfiOIyDdl99SEemE2H6++zIYb92XG9JHICpOAQ5gO7YbdwlNwj/EJrT7W
7GGtV+QQ7A7vqoVIT8DKMY5g+E4MBV+69OuQ5zsKGiIWcCdRUufQFXQci4LCaYKl
1ZAr/L4VFfi5OERb158vH95wUPg0N/P//cX6M9nMTIyMRNZACdEmEtf+73KpCgBR
TfH14wSG94WpPNwy09juevoFEvTamxjHJOC3KZYGWtzQGVbPGGjpQIQ94d2hNBp3
4zAy1cA7BxyIJfqEUNEHlnMlm3X5v1goBu16OkJjvhVb7ctO05DRxs5dIN9ZgRej
WB7FrmwF6AXfTK7dfHrZDHJ5SAxljw==
-----END CERTIFICATE-----