Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/20/9488c7-849c-4ff1-ab4c-ae9283e7964e/1/IM-IkhZDtLjN8CpVB78OcO6L0B4.roa
File:                     IM-IkhZDtLjN8CpVB78OcO6L0B4.roa (raw, json)
Hash identifier:          ApGssssC6JVosBxM2FFMS1ylb/ZMivwnp24oKuPz7Wo=
Subject key identifier:   20:CF:88:92:16:43:B4:B8:CD:F0:2A:55:07:BF:0E:70:EE:8B:D0:1E
Certificate issuer:       /CN=4a6d2817491dd2cd0678068e35a9efc68667df02
Certificate serial:       01855D3F0E42C46F94FB869C24CC5AE48BAB
Authority key identifier: 4A:6D:28:17:49:1D:D2:CD:06:78:06:8E:35:A9:EF:C6:86:67:DF:02
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Sm0oF0kd0s0GeAaONanvxoZn3wI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/20/9488c7-849c-4ff1-ab4c-ae9283e7964e/1/IM-IkhZDtLjN8CpVB78OcO6L0B4.roa
Signing time:             Thu 29 Dec 2022 09:38:11 +0000
ROA not before:           Thu 29 Dec 2022 09:38:11 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     47157
IP address blocks:        2a10:4646:12::/48 maxlen: 48

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:5d:3f:0e:42:c4:6f:94:fb:86:9c:24:cc:5a:e4:8b:ab
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4a6d2817491dd2cd0678068e35a9efc68667df02
        Validity
            Not Before: Dec 29 09:38:11 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=20cf88921643b4b8cdf02a5507bf0e70ee8bd01e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:75:f8:65:bc:cc:8d:00:f4:23:11:db:2a:25:
                    f2:e5:fa:c5:a8:10:0c:45:27:96:6b:1e:65:b4:cd:
                    5b:1a:2f:83:9c:68:94:03:93:4e:b4:76:26:40:4c:
                    73:e2:4d:49:88:6f:f3:8d:ed:07:c0:a3:6e:7d:4a:
                    79:49:4a:e9:5d:13:3d:d5:1b:41:d2:d0:28:96:37:
                    78:a5:1a:76:a7:e7:92:96:fe:33:94:fb:a9:b6:87:
                    22:9d:13:20:55:f5:b8:54:6d:a6:ca:b9:4b:49:9e:
                    d4:0a:ba:65:bd:17:e1:04:de:a0:a4:44:8f:72:33:
                    ad:3f:40:85:62:51:30:29:f1:96:be:4f:d4:9e:c7:
                    ea:39:18:76:f9:67:87:20:13:78:27:ff:0a:bb:74:
                    1e:04:bd:5d:6a:3a:70:b3:43:55:45:ef:3c:bb:1f:
                    95:99:b7:aa:b1:ed:d5:53:4f:f4:ad:49:a5:18:af:
                    22:fa:48:c2:7f:70:0e:1e:38:6f:53:98:de:ed:fb:
                    56:8c:c4:8a:d8:fd:a8:a7:03:2b:38:b8:02:cc:94:
                    9a:9a:83:ca:80:26:57:ca:32:c4:01:22:01:6b:ff:
                    d1:a4:0c:23:91:71:81:b4:9f:ec:ac:5e:96:bf:95:
                    4d:db:a6:c2:90:c0:d3:de:a8:75:83:40:7a:e2:db:
                    b8:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                20:CF:88:92:16:43:B4:B8:CD:F0:2A:55:07:BF:0E:70:EE:8B:D0:1E
            X509v3 Authority Key Identifier:
                keyid:4A:6D:28:17:49:1D:D2:CD:06:78:06:8E:35:A9:EF:C6:86:67:DF:02

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Sm0oF0kd0s0GeAaONanvxoZn3wI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/20/9488c7-849c-4ff1-ab4c-ae9283e7964e/1/IM-IkhZDtLjN8CpVB78OcO6L0B4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/20/9488c7-849c-4ff1-ab4c-ae9283e7964e/1/Sm0oF0kd0s0GeAaONanvxoZn3wI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a10:4646:12::/48

    Signature Algorithm: sha256WithRSAEncryption
         4c:66:71:c2:44:b6:c1:c4:e5:1b:f6:c5:a6:7e:fd:e6:a0:1c:
         4a:58:e0:6b:3e:bd:39:f0:85:d6:fe:db:ae:d9:16:7e:f0:01:
         a4:0f:4f:38:5a:30:8a:37:62:3b:ca:65:76:79:05:19:68:28:
         7a:95:7c:3f:3b:f6:95:11:1d:e4:ba:fb:0a:04:d8:5e:b0:74:
         70:2e:d0:8f:17:ee:8c:e8:81:67:69:db:40:bf:37:c5:bd:21:
         17:f1:72:c2:4d:8c:57:8f:87:a7:2a:97:a6:ef:9d:ca:b5:13:
         8a:09:58:eb:8b:62:ed:fc:fd:c3:3f:bd:cb:ac:87:20:9b:95:
         8f:3d:8a:68:44:b3:86:e7:8c:ed:25:79:fd:41:29:c6:35:f4:
         c5:0b:0d:79:32:47:de:9e:d0:da:5b:00:0f:d3:60:2c:36:3a:
         42:0f:47:b4:6b:9b:73:e8:46:ff:aa:7f:20:a4:13:3d:67:97:
         71:67:44:0b:c0:8d:25:4d:c4:ca:1e:1b:c8:61:61:78:56:b3:
         98:7d:d2:90:c5:b9:96:85:b7:d9:e3:aa:bf:37:39:1d:7e:2b:
         f2:97:38:3c:ef:f6:a5:de:4b:77:61:1a:8a:80:17:b1:bd:94:
         ad:ad:5e:67:76:5a:53:22:0d:24:28:7c:bc:68:43:81:e2:0b:
         06:1f:ee:87
-----BEGIN CERTIFICATE-----
MIIFADCCA+igAwIBAgISAYVdPw5CxG+U+4acJMxa5IurMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRhNmQyODE3NDkxZGQyY2QwNjc4MDY4ZTM1YTllZmM2ODY2
N2RmMDIwHhcNMjIxMjI5MDkzODExWhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygyMGNmODg5MjE2NDNiNGI4Y2RmMDJhNTUwN2JmMGU3MGVlOGJkMDFlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo3X4ZbzMjQD0IxHbKiXy5frFqBAM
RSeWax5ltM1bGi+DnGiUA5NOtHYmQExz4k1JiG/zje0HwKNufUp5SUrpXRM91RtB
0tAoljd4pRp2p+eSlv4zlPuptocinRMgVfW4VG2myrlLSZ7UCrplvRfhBN6gpESP
cjOtP0CFYlEwKfGWvk/UnsfqORh2+WeHIBN4J/8Ku3QeBL1dajpws0NVRe88ux+V
mbeqse3VU0/0rUmlGK8i+kjCf3AOHjhvU5je7ftWjMSK2P2opwMrOLgCzJSamoPK
gCZXyjLEASIBa//RpAwjkXGBtJ/srF6Wv5VN26bCkMDT3qh1g0B64tu4VwIDAQAB
o4ICDDCCAggwHQYDVR0OBBYEFCDPiJIWQ7S4zfAqVQe/DnDui9AeMB8GA1UdIwQY
MBaAFEptKBdJHdLNBngGjjWp78aGZ98CMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvU20wb0Ywa2QwczBHZUFhT05hbnZ4b1puM3dJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yMC85NDg4YzctODQ5Yy00ZmYxLWFiNGMt
YWU5MjgzZTc5NjRlLzEvSU0tSWtoWkR0TGpOOENwVkI3OE9jTzZMMEI0LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yMC85NDg4YzctODQ5Yy00ZmYxLWFiNGMtYWU5MjgzZTc5NjRl
LzEvU20wb0Ywa2QwczBHZUFhT05hbnZ4b1puM3dJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAKhBGRgAS
MA0GCSqGSIb3DQEBCwUAA4IBAQBMZnHCRLbBxOUb9sWmfv3moBxKWOBrPr058IXW
/tuu2RZ+8AGkD084WjCKN2I7ymV2eQUZaCh6lXw/O/aVER3kuvsKBNhesHRwLtCP
F+6M6IFnadtAvzfFvSEX8XLCTYxXj4enKpem753KtROKCVjri2Lt/P3DP73LrIcg
m5WPPYpoRLOG54ztJXn9QSnGNfTFCw15MkfentDaWwAP02AsNjpCD0e0a5tz6Eb/
qn8gpBM9Z5dxZ0QLwI0lTcTKHhvIYWF4VrOYfdKQxbmWhbfZ46q/Nzkdfivylzg8
7/al3kt3YRqKgBexvZStrV5ndlpTIg0kKHy8aEOB4gsGH+6H
-----END CERTIFICATE-----