Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/4XgRuq_c871nproLBG-2AHlgWqM.roa
File:                     4XgRuq_c871nproLBG-2AHlgWqM.roa (raw, json)
Hash identifier:          DIlD/zSgwVYoG6MyfTeNF5VmZDXbrNNDuLsWfMOkENk=
Subject key identifier:   E1:78:11:BA:AF:DC:F3:BD:67:A6:BA:0B:04:6F:B6:00:79:60:5A:A3
Certificate issuer:       /CN=9e95a361fe2b2c5292626ba4c56a65a814e48008
Certificate serial:       0BF184B9
Authority key identifier: 9E:95:A3:61:FE:2B:2C:52:92:62:6B:A4:C5:6A:65:A8:14:E4:80:08
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/npWjYf4rLFKSYmukxWplqBTkgAg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/4XgRuq_c871nproLBG-2AHlgWqM.roa
Signing time:             Sat 01 Jan 2022 12:55:08 +0000
ROA not before:           Sat 01 Jan 2022 12:55:08 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     213253
IP address blocks:        2a0c:9a40:81fb::/48 maxlen: 48

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 200377529 (0xbf184b9)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9e95a361fe2b2c5292626ba4c56a65a814e48008
        Validity
            Not Before: Jan  1 12:55:08 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=e17811baafdcf3bd67a6ba0b046fb60079605aa3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:47:43:95:c0:ba:43:13:6b:3f:c4:1c:73:05:
                    aa:97:c9:93:fb:e3:c5:a5:fb:1c:0e:99:ce:43:ea:
                    55:9a:d3:dd:51:eb:d7:b1:2a:c4:f3:89:96:09:97:
                    68:64:c5:1c:71:6f:e6:e6:82:55:44:a7:d5:27:54:
                    f1:06:52:7a:0a:77:f2:3f:be:dd:62:1b:dd:0c:32:
                    24:d2:a9:c0:cd:af:01:e2:9a:c9:e9:8b:8d:70:95:
                    bb:a7:21:c2:cf:75:4d:67:8e:22:59:65:a2:f1:e6:
                    01:24:e1:45:15:e8:df:bb:7d:97:85:78:bc:fc:92:
                    e4:19:a5:9f:a3:5d:ff:31:e2:15:9a:06:ec:74:6c:
                    b1:1f:7d:ec:bf:7b:01:11:da:47:30:47:a3:15:1e:
                    1f:1e:7c:bd:86:72:d4:f1:40:87:96:07:87:02:f4:
                    32:47:50:2b:18:de:da:4e:3f:d9:5d:e1:09:a0:ae:
                    52:7b:97:0e:2f:e7:04:02:38:42:18:75:e8:af:2f:
                    a9:29:90:73:6b:a1:27:c5:ef:84:ea:88:54:6a:7b:
                    fe:37:a2:57:be:39:46:94:3f:6d:1a:7f:b0:89:d7:
                    80:f7:6c:06:c2:11:0c:3a:51:7c:7d:ac:78:16:8a:
                    44:ad:8e:58:c1:52:3c:80:3a:7c:35:9e:f0:6f:c0:
                    3b:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E1:78:11:BA:AF:DC:F3:BD:67:A6:BA:0B:04:6F:B6:00:79:60:5A:A3
            X509v3 Authority Key Identifier:
                keyid:9E:95:A3:61:FE:2B:2C:52:92:62:6B:A4:C5:6A:65:A8:14:E4:80:08

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/npWjYf4rLFKSYmukxWplqBTkgAg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/4XgRuq_c871nproLBG-2AHlgWqM.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/npWjYf4rLFKSYmukxWplqBTkgAg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a0c:9a40:81fb::/48

    Signature Algorithm: sha256WithRSAEncryption
         93:cc:c5:8b:99:04:aa:23:79:18:f3:15:4a:9e:21:54:3e:b4:
         ac:3b:38:3b:fa:fa:cc:66:af:90:29:85:92:11:83:02:0a:bc:
         6d:aa:5a:47:5f:17:8c:7a:34:10:ba:eb:73:e8:14:42:7d:07:
         54:cb:ff:8a:e1:24:99:7d:df:6d:18:5d:5d:ff:69:9c:e0:10:
         26:2a:dc:33:17:9c:a6:0b:14:b2:23:bc:c4:7b:45:b8:e6:ec:
         f2:55:81:f3:61:8c:3c:5e:9b:c9:06:bb:0c:c0:1b:90:5e:d2:
         1a:60:cb:a0:a3:6b:84:df:f9:a9:82:c8:21:bd:04:d8:0c:68:
         d2:1e:17:b4:ab:58:d7:07:1d:99:15:9a:98:8f:ad:ed:06:79:
         2a:72:0c:c2:d2:69:f5:be:0b:0d:0c:7a:5f:2a:e9:cb:73:56:
         ff:3c:64:ec:fa:5b:f7:8d:20:cf:a8:c3:d7:a5:21:36:cc:a4:
         f1:92:08:5e:5d:66:1f:83:e9:52:82:31:aa:3e:2b:aa:55:6e:
         01:af:67:c5:e4:8e:20:5b:24:b2:b9:21:a4:86:1e:4a:5a:21:
         13:a1:ac:1d:58:4e:cf:68:cc:af:b9:f3:e8:b7:47:09:e7:c3:
         d7:85:df:bb:85:85:3e:7a:8e:56:90:30:b8:e6:48:4d:18:9c:
         95:02:e5:94
-----BEGIN CERTIFICATE-----
MIIE8jCCA9qgAwIBAgIEC/GEuTANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg5
ZTk1YTM2MWZlMmIyYzUyOTI2MjZiYTRjNTZhNjVhODE0ZTQ4MDA4MB4XDTIyMDEw
MTEyNTUwOFoXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoZTE3ODExYmFhZmRj
ZjNiZDY3YTZiYTBiMDQ2ZmI2MDA3OTYwNWFhMzCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAMVHQ5XAukMTaz/EHHMFqpfJk/vjxaX7HA6ZzkPqVZrT3VHr
17EqxPOJlgmXaGTFHHFv5uaCVUSn1SdU8QZSegp38j++3WIb3QwyJNKpwM2vAeKa
yemLjXCVu6chws91TWeOIlllovHmASThRRXo37t9l4V4vPyS5Bmln6Nd/zHiFZoG
7HRssR997L97ARHaRzBHoxUeHx58vYZy1PFAh5YHhwL0MkdQKxje2k4/2V3hCaCu
UnuXDi/nBAI4Qhh16K8vqSmQc2uhJ8XvhOqIVGp7/jeiV745RpQ/bRp/sInXgPds
BsIRDDpRfH2seBaKRK2OWMFSPIA6fDWe8G/AO6sCAwEAAaOCAgwwggIIMB0GA1Ud
DgQWBBTheBG6r9zzvWemugsEb7YAeWBaozAfBgNVHSMEGDAWgBSelaNh/issUpJi
a6TFamWoFOSACDAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L25wV2pZZjRyTEZLU1ltdWt4V3BscUJUa2dBZy5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvMDIvZjk2ZjczLTY2ODYtNDE2NC1iMjNmLWJmNGU1MjdiOWZhOC8x
LzRYZ1J1cV9jODcxbnByb0xCRy0yQUhsZ1dxTS5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMDIv
Zjk2ZjczLTY2ODYtNDE2NC1iMjNmLWJmNGU1MjdiOWZhOC8xL25wV2pZZjRyTEZL
U1ltdWt4V3BscUJUa2dBZy5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAi
BggrBgEFBQcBBwEB/wQTMBEwDwQCAAIwCQMHACoMmkCB+zANBgkqhkiG9w0BAQsF
AAOCAQEAk8zFi5kEqiN5GPMVSp4hVD60rDs4O/r6zGavkCmFkhGDAgq8bapaR18X
jHo0ELrrc+gUQn0HVMv/iuEkmX3fbRhdXf9pnOAQJircMxecpgsUsiO8xHtFuObs
8lWB82GMPF6byQa7DMAbkF7SGmDLoKNrhN/5qYLIIb0E2Axo0h4XtKtY1wcdmRWa
mI+t7QZ5KnIMwtJp9b4LDQx6Xyrpy3NW/zxk7Ppb940gz6jD16UhNsyk8ZIIXl1m
H4PpUoIxqj4rqlVuAa9nxeSOIFsksrkhpIYeSlohE6GsHVhOz2jMr7nz6LdHCefD
14Xfu4WFPnqOVpAwuOZITRiclQLllA==
-----END CERTIFICATE-----