Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/bk2SP_8dfuOlndbbYTzbGsBN5_s.roa
File:                     bk2SP_8dfuOlndbbYTzbGsBN5_s.roa (raw, json)
Hash identifier:          24u+iXtpxF394uz147zh8VI4BybV4/u29af67+gdhbo=
Subject key identifier:   6E:4D:92:3F:FF:1D:7E:E3:A5:9D:D6:DB:61:3C:DB:1A:C0:4D:E7:FB
Certificate issuer:       /CN=9e95a361fe2b2c5292626ba4c56a65a814e48008
Certificate serial:       0BDD6D8C
Authority key identifier: 9E:95:A3:61:FE:2B:2C:52:92:62:6B:A4:C5:6A:65:A8:14:E4:80:08
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/npWjYf4rLFKSYmukxWplqBTkgAg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/bk2SP_8dfuOlndbbYTzbGsBN5_s.roa
Signing time:             Sat 01 Jan 2022 12:54:58 +0000
ROA not before:           Sat 01 Jan 2022 12:54:58 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     0
IP address blocks:        2a0c:9a44:cf::/48 maxlen: 48

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 199060876 (0xbdd6d8c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9e95a361fe2b2c5292626ba4c56a65a814e48008
        Validity
            Not Before: Jan  1 12:54:58 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=6e4d923fff1d7ee3a59dd6db613cdb1ac04de7fb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:98:a4:06:db:df:7d:02:8e:12:2d:0b:d0:a4:
                    cc:09:5d:97:f2:c6:9d:a8:ed:ea:10:9c:a8:47:f9:
                    d6:60:13:5e:ec:5e:dd:30:72:32:1a:c1:69:68:a4:
                    52:6c:bb:76:70:48:89:d6:49:06:43:71:9d:e4:63:
                    c4:c9:1c:5b:0e:32:08:d3:af:44:b8:f8:fc:5b:8c:
                    ad:5d:c0:e7:fc:d7:71:c4:41:e4:4d:74:4a:bb:09:
                    2a:83:7a:39:0f:38:ee:e0:78:40:fe:75:c4:63:c7:
                    7c:4f:e9:be:78:ab:53:be:32:85:e6:36:6b:c5:53:
                    db:f5:f5:22:35:17:be:ed:cb:8f:a7:66:09:89:db:
                    b2:a3:f1:d8:f2:62:c5:82:92:e8:09:e3:39:90:37:
                    f5:23:de:ec:bf:40:f5:3a:12:1e:0a:26:c9:9f:20:
                    00:9a:62:46:29:3d:02:e0:1e:02:e7:2e:a7:97:0c:
                    61:21:ae:86:a1:63:7a:6d:ab:fa:8c:53:4d:9e:28:
                    af:2f:54:56:07:82:2c:ee:32:32:35:ba:1d:da:e1:
                    df:35:e3:05:cd:ea:94:03:2a:ed:d4:e2:b4:cb:39:
                    79:81:91:bd:61:8c:13:ee:f2:04:1e:bf:bb:da:98:
                    e3:e3:2b:35:f1:a9:25:6f:70:62:10:b1:ff:e9:28:
                    e9:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6E:4D:92:3F:FF:1D:7E:E3:A5:9D:D6:DB:61:3C:DB:1A:C0:4D:E7:FB
            X509v3 Authority Key Identifier:
                keyid:9E:95:A3:61:FE:2B:2C:52:92:62:6B:A4:C5:6A:65:A8:14:E4:80:08

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/npWjYf4rLFKSYmukxWplqBTkgAg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/bk2SP_8dfuOlndbbYTzbGsBN5_s.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/npWjYf4rLFKSYmukxWplqBTkgAg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a0c:9a44:cf::/48

    Signature Algorithm: sha256WithRSAEncryption
         35:5c:98:c0:49:90:af:dc:70:74:7d:52:11:a1:17:3f:1a:f8:
         70:c2:63:90:e2:48:79:fa:29:e2:ba:89:20:74:4e:30:29:1d:
         bd:45:27:56:8c:a1:ce:8b:63:d4:da:6a:5c:ff:fc:53:fa:f1:
         5c:f6:07:1f:68:6d:ea:ea:1b:91:3a:ad:5b:45:c9:cc:35:21:
         23:9b:03:a5:ef:f1:5f:4b:89:c8:f1:92:2e:5c:9e:42:f3:20:
         83:ec:41:c4:b7:7f:3b:25:a7:b5:64:1b:c7:e6:5f:e2:45:51:
         c2:2a:a7:94:d3:a9:50:f8:27:b6:bf:41:e1:d6:97:25:12:86:
         45:6a:26:68:0c:69:4f:3f:86:63:8a:92:2a:04:98:4f:8d:1c:
         82:2a:35:94:94:5c:e0:a5:73:9d:01:61:ab:37:28:cb:49:c6:
         ff:5b:b9:46:1f:14:80:d5:ad:6b:7f:eb:f1:e2:58:c2:fd:30:
         71:fb:e0:2b:99:b8:db:87:5d:be:d0:a9:e2:53:bf:51:81:41:
         8d:07:cd:75:b3:12:e7:b1:84:ac:af:3a:e6:03:70:6f:1f:f5:
         a8:12:c8:f9:24:bf:db:f1:38:96:c0:5b:59:c0:b2:c8:44:c4:
         77:3f:23:8f:dd:e6:19:91:cc:0a:cc:30:3d:c1:d2:65:86:70:
         ab:e0:d5:ac
-----BEGIN CERTIFICATE-----
MIIE8jCCA9qgAwIBAgIEC91tjDANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg5
ZTk1YTM2MWZlMmIyYzUyOTI2MjZiYTRjNTZhNjVhODE0ZTQ4MDA4MB4XDTIyMDEw
MTEyNTQ1OFoXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoNmU0ZDkyM2ZmZjFk
N2VlM2E1OWRkNmRiNjEzY2RiMWFjMDRkZTdmYjCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAMaYpAbb330CjhItC9CkzAldl/LGnajt6hCcqEf51mATXuxe
3TByMhrBaWikUmy7dnBIidZJBkNxneRjxMkcWw4yCNOvRLj4/FuMrV3A5/zXccRB
5E10SrsJKoN6OQ847uB4QP51xGPHfE/pvnirU74yheY2a8VT2/X1IjUXvu3Lj6dm
CYnbsqPx2PJixYKS6AnjOZA39SPe7L9A9ToSHgomyZ8gAJpiRik9AuAeAucup5cM
YSGuhqFjem2r+oxTTZ4ory9UVgeCLO4yMjW6Hdrh3zXjBc3qlAMq7dTitMs5eYGR
vWGME+7yBB6/u9qY4+MrNfGpJW9wYhCx/+ko6R0CAwEAAaOCAgwwggIIMB0GA1Ud
DgQWBBRuTZI//x1+46Wd1tthPNsawE3n+zAfBgNVHSMEGDAWgBSelaNh/issUpJi
a6TFamWoFOSACDAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L25wV2pZZjRyTEZLU1ltdWt4V3BscUJUa2dBZy5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvMDIvZjk2ZjczLTY2ODYtNDE2NC1iMjNmLWJmNGU1MjdiOWZhOC8x
L2JrMlNQXzhkZnVPbG5kYmJZVHpiR3NCTjVfcy5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMDIv
Zjk2ZjczLTY2ODYtNDE2NC1iMjNmLWJmNGU1MjdiOWZhOC8xL25wV2pZZjRyTEZL
U1ltdWt4V3BscUJUa2dBZy5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAi
BggrBgEFBQcBBwEB/wQTMBEwDwQCAAIwCQMHACoMmkQAzzANBgkqhkiG9w0BAQsF
AAOCAQEANVyYwEmQr9xwdH1SEaEXPxr4cMJjkOJIefop4rqJIHROMCkdvUUnVoyh
zotj1NpqXP/8U/rxXPYHH2ht6uobkTqtW0XJzDUhI5sDpe/xX0uJyPGSLlyeQvMg
g+xBxLd/OyWntWQbx+Zf4kVRwiqnlNOpUPgntr9B4daXJRKGRWomaAxpTz+GY4qS
KgSYT40cgio1lJRc4KVznQFhqzcoy0nG/1u5Rh8UgNWta3/r8eJYwv0wcfvgK5m4
24ddvtCp4lO/UYFBjQfNdbMS57GErK865gNwbx/1qBLI+SS/2/E4lsBbWcCyyETE
dz8jj93mGZHMCswwPcHSZYZwq+DVrA==
-----END CERTIFICATE-----