Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/cz1k_2V9tpswcOHAnjpmtV1a28I.roa
File:                     cz1k_2V9tpswcOHAnjpmtV1a28I.roa (raw, json)
Hash identifier:          SKZr/+x0PNujpHGL9T7kgAkuUzeJkoV/ibqcNgkwQ04=
Subject key identifier:   73:3D:64:FF:65:7D:B6:9B:30:70:E1:C0:9E:3A:66:B5:5D:5A:DB:C2
Certificate issuer:       /CN=9e95a361fe2b2c5292626ba4c56a65a814e48008
Certificate serial:       0BE9F838
Authority key identifier: 9E:95:A3:61:FE:2B:2C:52:92:62:6B:A4:C5:6A:65:A8:14:E4:80:08
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/npWjYf4rLFKSYmukxWplqBTkgAg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/cz1k_2V9tpswcOHAnjpmtV1a28I.roa
Signing time:             Sat 01 Jan 2022 12:55:04 +0000
ROA not before:           Sat 01 Jan 2022 12:55:04 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     209533
IP address blocks:        2a0c:9a47::/44 maxlen: 44

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 199882808 (0xbe9f838)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9e95a361fe2b2c5292626ba4c56a65a814e48008
        Validity
            Not Before: Jan  1 12:55:04 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=733d64ff657db69b3070e1c09e3a66b55d5adbc2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:f1:b1:60:e0:e0:8e:00:d5:fb:63:50:03:69:
                    ed:fe:d4:62:8a:22:54:6d:8f:fe:c5:a2:a2:6a:16:
                    d6:c5:67:72:61:43:f8:a8:2b:41:1c:8d:96:0a:78:
                    05:bf:5c:ac:8a:47:c8:bf:37:e5:04:a3:57:ad:5d:
                    21:cf:f1:d6:87:28:54:50:3d:e8:bf:7a:99:74:68:
                    58:15:a6:26:72:41:71:03:eb:d8:ef:26:cd:86:fe:
                    15:e9:b1:26:18:0a:8a:ca:df:14:40:98:bf:1e:1f:
                    68:0b:75:03:e4:b4:29:42:f2:b2:0b:aa:4b:cb:aa:
                    cb:96:5e:85:4f:33:80:f5:1b:a5:cb:43:51:97:5d:
                    22:f9:7d:9b:48:2a:e6:7a:b4:4a:65:e8:68:52:b5:
                    8f:bf:cb:f3:0d:9c:31:d4:3d:66:6e:89:14:ac:dc:
                    c8:43:86:5a:df:ff:09:b8:6d:30:bc:ba:8b:f6:8e:
                    5e:71:15:c7:cd:64:ba:5d:99:8a:e3:54:ce:d1:a2:
                    70:58:04:09:49:c6:0f:f7:f5:77:4a:73:3c:fb:49:
                    d2:d5:6d:06:bf:6a:41:55:bb:a7:07:90:26:74:ef:
                    a6:88:c1:8d:f1:e2:fa:d2:8f:63:b0:4d:c4:90:30:
                    df:c4:f0:15:f7:af:e2:c8:96:5d:6a:ca:f3:7b:e3:
                    d7:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                73:3D:64:FF:65:7D:B6:9B:30:70:E1:C0:9E:3A:66:B5:5D:5A:DB:C2
            X509v3 Authority Key Identifier:
                keyid:9E:95:A3:61:FE:2B:2C:52:92:62:6B:A4:C5:6A:65:A8:14:E4:80:08

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/npWjYf4rLFKSYmukxWplqBTkgAg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/cz1k_2V9tpswcOHAnjpmtV1a28I.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/npWjYf4rLFKSYmukxWplqBTkgAg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a0c:9a47::/44

    Signature Algorithm: sha256WithRSAEncryption
         9d:59:5d:d4:61:d3:7b:95:fd:ef:6f:4a:86:3a:e7:1c:29:36:
         9a:99:0d:19:eb:ce:1e:3b:1e:7c:4d:8c:1a:f4:bd:e8:4c:c2:
         21:2f:e2:63:d7:46:2e:e4:1e:d2:2b:0c:3f:b5:e0:59:76:c6:
         c3:6f:23:07:8d:e1:c2:8e:c7:f5:2c:28:f5:52:35:40:a6:df:
         a8:79:96:58:8a:4f:01:37:10:ef:ee:19:95:ec:f4:5e:2f:73:
         56:33:90:e4:5a:9e:76:4f:24:19:bc:a0:95:d2:0a:af:9b:85:
         4f:85:dc:47:32:dd:e2:e6:c0:00:a5:e3:9d:43:8b:d7:5d:51:
         3e:07:fc:c0:d5:9f:bf:3f:c3:0d:c0:ed:5a:47:b5:5c:cd:51:
         32:9d:5a:17:54:0d:11:70:f1:84:5e:bc:50:95:76:89:89:ea:
         e3:11:9d:77:f3:14:a1:cb:dc:f0:0f:9e:9d:4c:d4:1d:2e:11:
         ac:2b:0b:78:97:ff:e3:b3:c7:68:f1:db:24:3b:a9:9f:fe:cc:
         72:6e:5c:45:91:b3:89:4c:c4:21:f4:eb:ce:7a:b1:bd:1b:56:
         06:cc:1e:41:f0:dc:57:f6:88:c6:a7:55:d3:5e:c8:17:11:57:
         68:f1:dd:42:d9:16:64:c0:12:9f:f6:a2:02:68:1a:32:41:3d:
         af:d7:83:8b
-----BEGIN CERTIFICATE-----
MIIE8jCCA9qgAwIBAgIEC+n4ODANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg5
ZTk1YTM2MWZlMmIyYzUyOTI2MjZiYTRjNTZhNjVhODE0ZTQ4MDA4MB4XDTIyMDEw
MTEyNTUwNFoXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoNzMzZDY0ZmY2NTdk
YjY5YjMwNzBlMWMwOWUzYTY2YjU1ZDVhZGJjMjCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAIrxsWDg4I4A1ftjUANp7f7UYooiVG2P/sWiomoW1sVncmFD
+KgrQRyNlgp4Bb9crIpHyL835QSjV61dIc/x1ocoVFA96L96mXRoWBWmJnJBcQPr
2O8mzYb+FemxJhgKisrfFECYvx4faAt1A+S0KULysguqS8uqy5ZehU8zgPUbpctD
UZddIvl9m0gq5nq0SmXoaFK1j7/L8w2cMdQ9Zm6JFKzcyEOGWt//CbhtMLy6i/aO
XnEVx81kul2ZiuNUztGicFgECUnGD/f1d0pzPPtJ0tVtBr9qQVW7pweQJnTvpojB
jfHi+tKPY7BNxJAw38TwFfev4siWXWrK83vj120CAwEAAaOCAgwwggIIMB0GA1Ud
DgQWBBRzPWT/ZX22mzBw4cCeOma1XVrbwjAfBgNVHSMEGDAWgBSelaNh/issUpJi
a6TFamWoFOSACDAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L25wV2pZZjRyTEZLU1ltdWt4V3BscUJUa2dBZy5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvMDIvZjk2ZjczLTY2ODYtNDE2NC1iMjNmLWJmNGU1MjdiOWZhOC8x
L2N6MWtfMlY5dHBzd2NPSEFuanBtdFYxYTI4SS5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMDIv
Zjk2ZjczLTY2ODYtNDE2NC1iMjNmLWJmNGU1MjdiOWZhOC8xL25wV2pZZjRyTEZL
U1ltdWt4V3BscUJUa2dBZy5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAi
BggrBgEFBQcBBwEB/wQTMBEwDwQCAAIwCQMHBCoMmkcAADANBgkqhkiG9w0BAQsF
AAOCAQEAnVld1GHTe5X9729KhjrnHCk2mpkNGevOHjsefE2MGvS96EzCIS/iY9dG
LuQe0isMP7XgWXbGw28jB43hwo7H9Swo9VI1QKbfqHmWWIpPATcQ7+4Zlez0Xi9z
VjOQ5Fqedk8kGbygldIKr5uFT4XcRzLd4ubAAKXjnUOL111RPgf8wNWfvz/DDcDt
Wke1XM1RMp1aF1QNEXDxhF68UJV2iYnq4xGdd/MUocvc8A+enUzUHS4RrCsLeJf/
47PHaPHbJDupn/7Mcm5cRZGziUzEIfTrznqxvRtWBsweQfDcV/aIxqdV017IFxFX
aPHdQtkWZMASn/aiAmgaMkE9r9eDiw==
-----END CERTIFICATE-----