Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/26/8cdd49-c094-4c6a-918c-0aa463cdfca0/1/em4a4XcSCQ18kUvAbAtw2n0o9X4.roa
File:                     em4a4XcSCQ18kUvAbAtw2n0o9X4.roa (raw, json)
Hash identifier:          Jrmr1d+oCu9kUyRkej/Hq87/4TQHNlg7ddSFGeADIDg=
Subject key identifier:   7A:6E:1A:E1:77:12:09:0D:7C:91:4B:C0:6C:0B:70:DA:7D:28:F5:7E
Certificate issuer:       /CN=e7c07db9880133c5cdce005bca111b552cd14c53
Certificate serial:       01843F7346A2DD02D6E4351CED858BA1DEC2
Authority key identifier: E7:C0:7D:B9:88:01:33:C5:CD:CE:00:5B:CA:11:1B:55:2C:D1:4C:53
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/58B9uYgBM8XNzgBbyhEbVSzRTFM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/26/8cdd49-c094-4c6a-918c-0aa463cdfca0/1/em4a4XcSCQ18kUvAbAtw2n0o9X4.roa
Signing time:             Thu 03 Nov 2022 21:43:50 +0000
ROA not before:           Thu 03 Nov 2022 21:43:50 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     205154
IP address blocks:        2a12:efc0::/29 maxlen: 29

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:84:3f:73:46:a2:dd:02:d6:e4:35:1c:ed:85:8b:a1:de:c2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e7c07db9880133c5cdce005bca111b552cd14c53
        Validity
            Not Before: Nov  3 21:43:50 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=7a6e1ae17712090d7c914bc06c0b70da7d28f57e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:18:9a:b1:b2:a4:3c:0c:30:a1:97:36:a6:cf:
                    58:5c:96:00:86:3f:f9:29:53:32:fd:56:8c:d2:29:
                    00:d9:d6:a4:ec:68:31:e5:68:9d:7b:13:39:9e:c1:
                    e6:5c:a8:01:88:51:74:9f:e8:32:10:68:fe:6d:b4:
                    86:6f:68:7b:93:94:fb:0a:de:76:a0:77:33:e1:88:
                    aa:48:54:01:60:9b:a0:ac:57:bd:50:6f:e1:71:c6:
                    e7:f4:ec:dc:b5:45:92:ee:fb:33:af:ab:02:a2:11:
                    a6:b1:80:6b:b6:12:9f:16:56:db:9e:d4:e4:07:3e:
                    c2:70:9b:7e:52:a4:b1:22:22:79:67:7a:08:db:2d:
                    cf:64:bc:51:b3:bc:b4:9b:87:84:b1:d3:fd:d3:95:
                    5e:47:17:f3:8b:60:c7:2b:58:6f:0a:6a:38:11:71:
                    72:c3:56:5f:83:b6:a6:60:3d:86:f3:e8:a3:0d:d0:
                    22:1d:d1:3e:d1:56:a9:dc:e8:1c:4e:34:85:0b:05:
                    f5:8f:f7:b1:64:6c:e5:2b:44:29:91:b3:b2:b4:f9:
                    30:bd:60:8d:30:15:7f:04:16:91:56:10:d4:bf:bf:
                    07:02:cb:36:d4:48:2d:c6:a1:86:d8:c5:35:b2:f9:
                    d8:f0:f7:bb:7a:95:2c:4a:07:8c:6f:bd:d8:5d:7b:
                    29:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7A:6E:1A:E1:77:12:09:0D:7C:91:4B:C0:6C:0B:70:DA:7D:28:F5:7E
            X509v3 Authority Key Identifier:
                keyid:E7:C0:7D:B9:88:01:33:C5:CD:CE:00:5B:CA:11:1B:55:2C:D1:4C:53

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/58B9uYgBM8XNzgBbyhEbVSzRTFM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/26/8cdd49-c094-4c6a-918c-0aa463cdfca0/1/em4a4XcSCQ18kUvAbAtw2n0o9X4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/26/8cdd49-c094-4c6a-918c-0aa463cdfca0/1/58B9uYgBM8XNzgBbyhEbVSzRTFM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a12:efc0::/29

    Signature Algorithm: sha256WithRSAEncryption
         9e:d0:de:89:ad:d0:1a:32:f1:0c:79:99:38:19:9b:f3:0a:52:
         2b:f1:0e:cb:6c:a3:49:38:2b:dc:c5:f3:9a:eb:92:dd:7f:cb:
         90:fb:97:49:e9:11:0f:c6:d5:e5:c3:38:be:d2:53:8d:f0:83:
         29:c5:00:ce:fb:41:3a:0a:bf:c4:df:66:5b:62:4b:fb:f8:0c:
         38:0f:12:44:40:fa:36:58:4a:06:3e:82:27:90:83:ca:22:86:
         a6:aa:c0:0c:3a:8a:ed:9d:ae:15:39:20:7e:10:99:8c:8e:e9:
         6e:ea:d1:de:24:07:26:37:63:cb:da:20:b3:54:be:07:3f:fe:
         f1:85:1d:4e:f6:0d:3a:ed:bf:01:9c:f8:70:8e:c2:1b:94:cc:
         65:34:37:a0:89:5c:c1:af:dd:6c:d5:11:81:02:69:41:7a:d8:
         59:f1:1c:c6:6f:6e:84:9c:2d:26:b0:e6:9b:dd:17:b6:31:65:
         81:cd:f7:cf:90:b3:e6:c4:c2:9a:ee:f8:d4:81:00:01:b7:54:
         45:5d:c9:c0:f5:79:6c:80:98:b8:c4:73:14:8f:0a:e0:eb:e6:
         dd:f2:59:c0:65:ba:5a:73:ab:46:c1:12:b0:51:3a:81:52:ae:
         cc:51:1b:5f:85:d1:07:8e:fd:b1:73:ad:4d:ac:1e:d1:f3:94:
         b8:e5:13:73
-----BEGIN CERTIFICATE-----
MIIE/jCCA+agAwIBAgISAYQ/c0ai3QLW5DUc7YWLod7CMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGU3YzA3ZGI5ODgwMTMzYzVjZGNlMDA1YmNhMTExYjU1MmNk
MTRjNTMwHhcNMjIxMTAzMjE0MzUwWhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg3YTZlMWFlMTc3MTIwOTBkN2M5MTRiYzA2YzBiNzBkYTdkMjhmNTdlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlBiasbKkPAwwoZc2ps9YXJYAhj/5
KVMy/VaM0ikA2dak7Ggx5WidexM5nsHmXKgBiFF0n+gyEGj+bbSGb2h7k5T7Ct52
oHcz4YiqSFQBYJugrFe9UG/hccbn9OzctUWS7vszr6sCohGmsYBrthKfFlbbntTk
Bz7CcJt+UqSxIiJ5Z3oI2y3PZLxRs7y0m4eEsdP905VeRxfzi2DHK1hvCmo4EXFy
w1Zfg7amYD2G8+ijDdAiHdE+0Vap3OgcTjSFCwX1j/exZGzlK0QpkbOytPkwvWCN
MBV/BBaRVhDUv78HAss21EgtxqGG2MU1svnY8Pe7epUsSgeMb73YXXspIwIDAQAB
o4ICCjCCAgYwHQYDVR0OBBYEFHpuGuF3EgkNfJFLwGwLcNp9KPV+MB8GA1UdIwQY
MBaAFOfAfbmIATPFzc4AW8oRG1Us0UxTMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNThCOXVZZ0JNOFhOemdCYnloRWJWU3pSVEZNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNi84Y2RkNDktYzA5NC00YzZhLTkxOGMt
MGFhNDYzY2RmY2EwLzEvZW00YTRYY1NDUTE4a1V2QWJBdHcybjBvOVg0LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yNi84Y2RkNDktYzA5NC00YzZhLTkxOGMtMGFhNDYzY2RmY2Ew
LzEvNThCOXVZZ0JNOFhOemdCYnloRWJWU3pSVEZNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUDKhLvwDAN
BgkqhkiG9w0BAQsFAAOCAQEAntDeia3QGjLxDHmZOBmb8wpSK/EOy2yjSTgr3MXz
muuS3X/LkPuXSekRD8bV5cM4vtJTjfCDKcUAzvtBOgq/xN9mW2JL+/gMOA8SRED6
NlhKBj6CJ5CDyiKGpqrADDqK7Z2uFTkgfhCZjI7pburR3iQHJjdjy9ogs1S+Bz/+
8YUdTvYNOu2/AZz4cI7CG5TMZTQ3oIlcwa/dbNURgQJpQXrYWfEcxm9uhJwtJrDm
m90XtjFlgc33z5Cz5sTCmu741IEAAbdURV3JwPV5bICYuMRzFI8K4Ovm3fJZwGW6
WnOrRsESsFE6gVKuzFEbX4XRB479sXOtTawe0fOUuOUTcw==
-----END CERTIFICATE-----