Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/01/a2c386-d5e9-4ad9-938a-0d1d174c4351/1/FRUIH0nqQObf0enN8XguJSFahuA.roa
File:                     FRUIH0nqQObf0enN8XguJSFahuA.roa (raw, json)
Hash identifier:          ZzxZjyonArsuvbcrIY+QSSi4bMPRxSF1giqx8UrMWj8=
Subject key identifier:   15:15:08:1F:49:EA:40:E6:DF:D1:E9:CD:F1:78:2E:25:21:5A:86:E0
Certificate issuer:       /CN=6c1a761795f0f66bff2478b468cde0d851ed1887
Certificate serial:       0181F208C51DE37DFB6BC9B517BFA347D421
Authority key identifier: 6C:1A:76:17:95:F0:F6:6B:FF:24:78:B4:68:CD:E0:D8:51:ED:18:87
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/bBp2F5Xw9mv_JHi0aM3g2FHtGIc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/01/a2c386-d5e9-4ad9-938a-0d1d174c4351/1/FRUIH0nqQObf0enN8XguJSFahuA.roa
Signing time:             Tue 12 Jul 2022 10:51:09 +0000
ROA not before:           Tue 12 Jul 2022 10:51:09 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     51704
IP address blocks:        2a03:c500::/32 maxlen: 48

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:81:f2:08:c5:1d:e3:7d:fb:6b:c9:b5:17:bf:a3:47:d4:21
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6c1a761795f0f66bff2478b468cde0d851ed1887
        Validity
            Not Before: Jul 12 10:51:09 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=1515081f49ea40e6dfd1e9cdf1782e25215a86e0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:5e:2e:f5:78:88:f0:5b:69:58:bb:f2:5e:18:
                    11:70:00:9f:0f:1a:1d:e6:3d:e9:c0:0c:13:54:98:
                    18:dd:af:3d:48:88:58:de:0d:62:83:c1:c1:b2:7a:
                    92:57:b4:75:17:62:f7:cf:03:d4:5f:9c:f7:37:4d:
                    92:e1:23:5e:b9:82:59:bf:0d:49:ab:ee:9a:83:bc:
                    58:bf:0b:13:5d:b0:85:1c:fe:89:7c:81:40:17:f4:
                    3b:0a:2f:c7:9e:1d:e9:60:2e:11:ca:e4:49:d9:e6:
                    70:8f:ae:4e:71:5f:c2:ee:de:b3:42:a1:af:66:d4:
                    41:cb:01:68:8c:5d:1e:d2:3e:34:e1:39:c4:1c:f6:
                    a2:3c:f5:56:77:00:5c:57:38:b0:87:a8:74:dc:14:
                    78:07:4f:df:d8:6a:21:5a:2c:da:63:d2:f6:02:5a:
                    e8:64:03:37:b9:e9:d7:37:0c:50:e6:2d:cc:13:46:
                    9d:5d:4e:ee:0f:46:34:d2:90:b3:c8:3d:fb:26:77:
                    51:2d:92:46:ce:5b:ff:a9:fc:6d:95:c2:fc:8e:b3:
                    11:8b:5f:ba:fa:cf:57:fc:52:0e:24:a1:f3:6e:4a:
                    17:48:4c:a4:1f:d8:4e:bb:d7:e1:d2:1c:0f:0c:36:
                    eb:9c:da:b0:4f:ed:3f:ff:d9:04:45:77:c1:24:05:
                    85:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                15:15:08:1F:49:EA:40:E6:DF:D1:E9:CD:F1:78:2E:25:21:5A:86:E0
            X509v3 Authority Key Identifier:
                keyid:6C:1A:76:17:95:F0:F6:6B:FF:24:78:B4:68:CD:E0:D8:51:ED:18:87

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bBp2F5Xw9mv_JHi0aM3g2FHtGIc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/01/a2c386-d5e9-4ad9-938a-0d1d174c4351/1/FRUIH0nqQObf0enN8XguJSFahuA.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/01/a2c386-d5e9-4ad9-938a-0d1d174c4351/1/bBp2F5Xw9mv_JHi0aM3g2FHtGIc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a03:c500::/32

    Signature Algorithm: sha256WithRSAEncryption
         0b:3b:fd:2a:47:63:d0:13:d6:92:2b:59:4b:3a:83:46:77:39:
         0a:9f:4f:91:39:1a:65:ba:fd:bc:65:f4:65:e3:7d:a8:3a:80:
         8f:24:56:9d:d7:6a:83:f9:8c:ba:64:e8:59:6c:09:b1:75:c0:
         4d:e1:59:37:5d:ad:3b:2f:d6:a3:6a:ea:fd:ca:4a:fa:88:7e:
         09:48:fc:0c:dc:7c:c0:58:91:15:af:e0:99:64:f2:da:62:9e:
         7e:eb:55:69:09:33:16:0f:e5:16:72:92:a4:e2:36:73:75:78:
         8a:f9:65:47:71:e9:5a:74:1a:bf:42:b0:3d:44:65:ed:17:6a:
         60:11:d1:4d:7a:e0:64:f5:96:7d:70:9e:1c:0f:24:75:bb:e8:
         ad:a0:28:cb:0b:d8:52:d7:e5:64:e5:07:0f:27:5e:4f:83:44:
         c7:ee:2f:5a:e4:b4:9a:c1:86:9f:07:20:19:25:9d:82:0b:87:
         6a:18:4f:ab:de:f7:90:1d:22:5d:18:e6:5f:05:49:0d:e0:87:
         e6:73:03:07:f0:0d:cb:18:57:54:58:6a:c4:8d:1f:18:04:0b:
         09:bc:bb:50:4c:71:4e:bc:ad:54:0f:ab:d5:04:c9:ec:30:6f:
         1a:08:e7:8f:f6:bc:b1:fa:5d:44:3c:88:df:bf:be:ae:0e:2e:
         14:f1:b7:d8
-----BEGIN CERTIFICATE-----
MIIE/jCCA+agAwIBAgISAYHyCMUd4337a8m1F7+jR9QhMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDZjMWE3NjE3OTVmMGY2NmJmZjI0NzhiNDY4Y2RlMGQ4NTFl
ZDE4ODcwHhcNMjIwNzEyMTA1MTA5WhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygxNTE1MDgxZjQ5ZWE0MGU2ZGZkMWU5Y2RmMTc4MmUyNTIxNWE4NmUwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0l4u9XiI8FtpWLvyXhgRcACfDxod
5j3pwAwTVJgY3a89SIhY3g1ig8HBsnqSV7R1F2L3zwPUX5z3N02S4SNeuYJZvw1J
q+6ag7xYvwsTXbCFHP6JfIFAF/Q7Ci/Hnh3pYC4RyuRJ2eZwj65OcV/C7t6zQqGv
ZtRBywFojF0e0j404TnEHPaiPPVWdwBcVziwh6h03BR4B0/f2GohWizaY9L2Alro
ZAM3uenXNwxQ5i3ME0adXU7uD0Y00pCzyD37JndRLZJGzlv/qfxtlcL8jrMRi1+6
+s9X/FIOJKHzbkoXSEykH9hOu9fh0hwPDDbrnNqwT+0//9kERXfBJAWFJwIDAQAB
o4ICCjCCAgYwHQYDVR0OBBYEFBUVCB9J6kDm39HpzfF4LiUhWobgMB8GA1UdIwQY
MBaAFGwadheV8PZr/yR4tGjN4NhR7RiHMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYkJwMkY1WHc5bXZfSkhpMGFNM2cyRkh0R0ljLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMS9hMmMzODYtZDVlOS00YWQ5LTkzOGEt
MGQxZDE3NGM0MzUxLzEvRlJVSUgwbnFRT2JmMGVuTjhYZ3VKU0ZhaHVBLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wMS9hMmMzODYtZDVlOS00YWQ5LTkzOGEtMGQxZDE3NGM0MzUx
LzEvYkJwMkY1WHc5bXZfSkhpMGFNM2cyRkh0R0ljLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAKgPFADAN
BgkqhkiG9w0BAQsFAAOCAQEACzv9Kkdj0BPWkitZSzqDRnc5Cp9PkTkaZbr9vGX0
ZeN9qDqAjyRWnddqg/mMumToWWwJsXXATeFZN12tOy/Wo2rq/cpK+oh+CUj8DNx8
wFiRFa/gmWTy2mKefutVaQkzFg/lFnKSpOI2c3V4ivllR3HpWnQav0KwPURl7Rdq
YBHRTXrgZPWWfXCeHA8kdbvoraAoywvYUtflZOUHDydeT4NEx+4vWuS0msGGnwcg
GSWdgguHahhPq973kB0iXRjmXwVJDeCH5nMDB/ANyxhXVFhqxI0fGAQLCby7UExx
TrytVA+r1QTJ7DBvGgjnj/a8sfpdRDyI37++rg4uFPG32A==
-----END CERTIFICATE-----