Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/11/eff67f-40a9-4775-a9c2-ad28fa966b51/1/URmH_3QxeV8EuTb5tXdQ0tMYuv0.roa
File:                     URmH_3QxeV8EuTb5tXdQ0tMYuv0.roa (raw, json)
Hash identifier:          4woA57+B9efF0fqZuI7Zbt4PTf7bWnyhleOpIJmEz/U=
Subject key identifier:   51:19:87:FF:74:31:79:5F:04:B9:36:F9:B5:77:50:D2:D3:18:BA:FD
Certificate issuer:       /CN=0bb3e73aa8b7f0af3bd8400572dae72b0d46f55c
Certificate serial:       018424DF180AE83825F131E9343233B60829
Authority key identifier: 0B:B3:E7:3A:A8:B7:F0:AF:3B:D8:40:05:72:DA:E7:2B:0D:46:F5:5C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/C7PnOqi38K872EAFctrnKw1G9Vw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/11/eff67f-40a9-4775-a9c2-ad28fa966b51/1/URmH_3QxeV8EuTb5tXdQ0tMYuv0.roa
Signing time:             Sat 29 Oct 2022 17:51:51 +0000
ROA not before:           Sat 29 Oct 2022 17:51:51 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     209968
IP address blocks:        2a0e:48c0::/32 maxlen: 48
                          2a0e:48c2::/32 maxlen: 48
                          2a0e:48c3::/32 maxlen: 48
                          2a0e:48c1::/32 maxlen: 48

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:84:24:df:18:0a:e8:38:25:f1:31:e9:34:32:33:b6:08:29
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0bb3e73aa8b7f0af3bd8400572dae72b0d46f55c
        Validity
            Not Before: Oct 29 17:51:51 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=511987ff7431795f04b936f9b57750d2d318bafd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:e7:ce:40:fb:bc:e1:1e:66:9c:58:f6:e2:af:
                    25:70:49:42:9d:8a:c9:db:7d:2b:50:b3:99:14:58:
                    19:5e:ee:e8:af:0e:25:08:2b:89:3e:ee:ea:12:e8:
                    04:2c:9c:85:07:ee:43:c9:f0:01:54:e4:a0:f6:33:
                    37:aa:7d:0b:47:2e:2c:9d:a7:3e:8c:90:88:f4:c1:
                    6b:6f:55:0c:bd:a6:09:2e:0a:57:18:35:67:9f:f2:
                    86:04:63:31:2c:c8:8e:07:a8:e1:ac:74:75:0c:9a:
                    14:b3:d9:b1:8f:40:8d:c4:e0:a6:9f:27:97:67:8a:
                    cb:a5:42:a4:3a:b8:02:1e:3f:1c:6b:e8:bc:dc:ff:
                    e8:23:1f:1e:00:94:8a:27:b1:b0:80:9c:6e:e9:60:
                    ae:0d:f6:64:d5:b3:b9:5f:6b:80:fe:00:d7:42:f4:
                    5f:f1:9e:53:35:30:3f:d3:d7:fd:5d:a8:e4:ec:bb:
                    01:a3:67:4b:8e:72:0c:34:5c:bb:a8:0c:b7:ac:bd:
                    87:bc:c5:8d:a4:f3:4a:5e:f7:5d:ba:73:26:92:13:
                    3b:fd:03:0d:4e:74:47:81:c4:26:68:3b:93:cc:1b:
                    7f:de:0a:70:63:a1:4b:a4:14:0d:9f:a6:28:6b:a2:
                    9b:1b:7d:e6:c9:cb:19:58:7a:bd:02:bc:ea:4a:56:
                    72:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                51:19:87:FF:74:31:79:5F:04:B9:36:F9:B5:77:50:D2:D3:18:BA:FD
            X509v3 Authority Key Identifier:
                keyid:0B:B3:E7:3A:A8:B7:F0:AF:3B:D8:40:05:72:DA:E7:2B:0D:46:F5:5C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/C7PnOqi38K872EAFctrnKw1G9Vw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/eff67f-40a9-4775-a9c2-ad28fa966b51/1/URmH_3QxeV8EuTb5tXdQ0tMYuv0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/11/eff67f-40a9-4775-a9c2-ad28fa966b51/1/C7PnOqi38K872EAFctrnKw1G9Vw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a0e:48c0::/30

    Signature Algorithm: sha256WithRSAEncryption
         b9:0f:08:26:b4:21:cb:2b:66:5d:e5:48:22:1e:aa:91:3f:a4:
         df:04:8f:11:58:9f:c6:1c:75:f5:73:d9:ba:f3:4d:7b:fb:26:
         71:5b:ef:e3:87:0e:83:35:94:bd:4f:a6:16:d4:96:0a:ec:80:
         58:5e:10:c6:07:f2:82:eb:ac:af:fe:58:ed:e8:9c:b3:11:41:
         6b:a5:eb:fd:fe:79:47:ee:78:7b:4e:d9:02:60:c6:95:9e:d9:
         62:77:29:6b:03:72:16:2f:52:57:21:b1:86:ea:8d:59:86:5e:
         83:b6:ac:02:53:56:96:1d:e9:96:e1:e9:91:b7:ba:85:8c:60:
         1e:c0:98:ef:41:3d:07:88:1f:bd:3b:17:a4:f6:a1:90:ec:ef:
         c2:c8:34:f1:7e:7a:65:79:c8:fb:d3:5d:ea:ea:8d:9f:d4:07:
         7e:94:6d:23:95:0a:31:bd:4b:8c:1b:a0:72:88:cf:07:25:e8:
         aa:e3:26:54:c4:82:62:90:05:c3:8f:9a:4e:4a:a9:36:ea:0b:
         79:f2:bb:e7:5f:ce:97:88:8c:21:ad:40:8f:a7:3b:5e:05:3e:
         5e:63:a9:be:0b:6c:bc:b8:5b:25:1e:ee:88:d0:01:b1:79:c1:
         69:a9:61:d2:a8:ea:8a:c6:a7:19:7e:62:c6:57:12:f0:ed:83:
         b0:55:2b:ab
-----BEGIN CERTIFICATE-----
MIIE/jCCA+agAwIBAgISAYQk3xgK6Dgl8THpNDIztggpMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBiYjNlNzNhYThiN2YwYWYzYmQ4NDAwNTcyZGFlNzJiMGQ0
NmY1NWMwHhcNMjIxMDI5MTc1MTUxWhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg1MTE5ODdmZjc0MzE3OTVmMDRiOTM2ZjliNTc3NTBkMmQzMThiYWZkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw+fOQPu84R5mnFj24q8lcElCnYrJ
230rULOZFFgZXu7orw4lCCuJPu7qEugELJyFB+5DyfABVOSg9jM3qn0LRy4snac+
jJCI9MFrb1UMvaYJLgpXGDVnn/KGBGMxLMiOB6jhrHR1DJoUs9mxj0CNxOCmnyeX
Z4rLpUKkOrgCHj8ca+i83P/oIx8eAJSKJ7GwgJxu6WCuDfZk1bO5X2uA/gDXQvRf
8Z5TNTA/09f9Xajk7LsBo2dLjnIMNFy7qAy3rL2HvMWNpPNKXvddunMmkhM7/QMN
TnRHgcQmaDuTzBt/3gpwY6FLpBQNn6Yoa6KbG33mycsZWHq9ArzqSlZyQwIDAQAB
o4ICCjCCAgYwHQYDVR0OBBYEFFEZh/90MXlfBLk2+bV3UNLTGLr9MB8GA1UdIwQY
MBaAFAuz5zqot/CvO9hABXLa5ysNRvVcMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQzdQbk9xaTM4Szg3MkVBRmN0cm5LdzFHOVZ3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMS9lZmY2N2YtNDBhOS00Nzc1LWE5YzIt
YWQyOGZhOTY2YjUxLzEvVVJtSF8zUXhlVjhFdVRiNXRYZFEwdE1ZdXYwLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xMS9lZmY2N2YtNDBhOS00Nzc1LWE5YzItYWQyOGZhOTY2YjUx
LzEvQzdQbk9xaTM4Szg3MkVBRmN0cm5LdzFHOVZ3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUCKg5IwDAN
BgkqhkiG9w0BAQsFAAOCAQEAuQ8IJrQhyytmXeVIIh6qkT+k3wSPEVifxhx19XPZ
uvNNe/smcVvv44cOgzWUvU+mFtSWCuyAWF4Qxgfyguusr/5Y7eicsxFBa6Xr/f55
R+54e07ZAmDGlZ7ZYncpawNyFi9SVyGxhuqNWYZeg7asAlNWlh3pluHpkbe6hYxg
HsCY70E9B4gfvTsXpPahkOzvwsg08X56ZXnI+9Nd6uqNn9QHfpRtI5UKMb1LjBug
cojPByXoquMmVMSCYpAFw4+aTkqpNuoLefK751/Ol4iMIa1Aj6c7XgU+XmOpvgts
vLhbJR7uiNABsXnBaalh0qjqisanGX5ixlcS8O2DsFUrqw==
-----END CERTIFICATE-----