Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/8E8hOKADzndJPdSA1c94ig1Ezvg.roa
File:                     8E8hOKADzndJPdSA1c94ig1Ezvg.roa (raw, json)
Hash identifier:          FYJSN6GFkPXUwzNHYPdtcAHGcuebRgZWrWPTXExaFuY=
Subject key identifier:   F0:4F:21:38:A0:03:CE:77:49:3D:D4:80:D5:CF:78:8A:0D:44:CE:F8
Certificate issuer:       /CN=05976801363d375786152e4d061e75c8beb35058
Certificate serial:       F700EA
Authority key identifier: 05:97:68:01:36:3D:37:57:86:15:2E:4D:06:1E:75:C8:BE:B3:50:58
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/BZdoATY9N1eGFS5NBh51yL6zUFg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/8E8hOKADzndJPdSA1c94ig1Ezvg.roa
Signing time:             Sat 01 Jan 2022 00:59:20 +0000
ROA not before:           Sat 01 Jan 2022 00:59:20 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     7489
IP address blocks:        2a0c:b642:1a07::/48 maxlen: 48

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 16187626 (0xf700ea)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=05976801363d375786152e4d061e75c8beb35058
        Validity
            Not Before: Jan  1 00:59:20 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=f04f2138a003ce77493dd480d5cf788a0d44cef8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:2b:88:7e:64:52:fc:92:04:d1:f6:7d:b1:c7:
                    09:56:fa:a2:e5:01:c1:ec:95:70:4d:e9:74:5e:8b:
                    d4:a2:f2:0c:a8:05:55:6f:fd:ae:1e:ca:b7:d4:05:
                    00:28:9f:d0:83:f6:ad:aa:41:f7:eb:5d:f6:ef:d2:
                    36:06:50:a2:7c:17:b9:b6:25:c2:94:24:32:4e:13:
                    ad:bf:53:38:6b:76:57:3a:07:b5:55:dd:4f:6a:73:
                    33:2f:c5:42:5f:83:c6:d9:66:cb:64:83:f3:c1:80:
                    a7:36:ba:f5:fe:9a:10:8d:f0:66:f8:4a:d5:57:b0:
                    68:48:27:66:41:6a:c8:a3:9c:0f:c1:7e:0f:7c:56:
                    95:3c:b0:35:8b:82:aa:73:19:36:f1:90:e5:3b:cb:
                    40:71:22:83:8c:87:e4:59:83:54:c0:1a:8a:03:37:
                    24:c9:ea:39:30:a0:fd:98:6a:c4:a5:84:73:2b:ea:
                    cb:5a:2a:ce:d0:ac:91:bd:27:ac:09:1e:2e:ff:66:
                    31:86:e8:ce:a1:67:42:70:86:10:aa:d4:bc:b5:73:
                    fd:bd:8d:67:20:2e:f6:4e:b2:c0:aa:22:09:fe:17:
                    28:79:9a:16:67:7b:c8:80:e1:e2:c2:ec:c2:0c:aa:
                    1d:96:9e:03:9f:03:e4:b9:e2:eb:0e:30:b4:22:e3:
                    9b:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F0:4F:21:38:A0:03:CE:77:49:3D:D4:80:D5:CF:78:8A:0D:44:CE:F8
            X509v3 Authority Key Identifier:
                keyid:05:97:68:01:36:3D:37:57:86:15:2E:4D:06:1E:75:C8:BE:B3:50:58

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BZdoATY9N1eGFS5NBh51yL6zUFg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/8E8hOKADzndJPdSA1c94ig1Ezvg.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/BZdoATY9N1eGFS5NBh51yL6zUFg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a0c:b642:1a07::/48

    Signature Algorithm: sha256WithRSAEncryption
         56:78:38:bc:e8:8c:53:4b:27:31:af:fe:01:ce:20:a0:75:e2:
         89:85:da:16:8b:51:58:15:83:47:f2:b8:8c:70:60:a8:8c:7f:
         b9:0f:8c:c9:dc:8b:de:8d:2c:4d:5b:9e:91:78:e6:1f:04:48:
         fc:56:bc:5a:df:cc:15:ed:aa:5e:e0:f1:db:61:41:6e:85:11:
         f0:b5:f4:41:92:3f:32:7e:b5:89:d9:cc:f4:ba:73:e1:17:45:
         26:4d:c7:9b:5c:bf:d9:7a:26:3a:d9:cc:05:9f:bb:e3:b2:93:
         8d:68:cf:96:a0:bb:e7:69:fd:68:e7:ff:dc:cb:53:fc:d6:0a:
         07:6b:f5:e9:ce:8b:b1:9e:02:2d:5c:78:38:d8:1d:25:bc:4d:
         b4:bb:94:90:4f:73:bd:c1:df:a0:be:4f:0c:08:72:80:56:20:
         92:03:b9:71:c9:42:4e:7a:32:ff:be:76:7a:17:88:39:2a:f7:
         3c:1b:70:2d:12:94:4e:66:c7:38:f0:2c:43:15:28:0a:c8:ad:
         f2:af:d8:90:20:7c:ee:bc:e2:d5:39:ef:4d:e4:d3:1b:54:31:
         ff:66:64:81:8e:b8:55:f4:08:7a:16:67:04:de:44:e9:6d:e9:
         f1:d2:f0:5c:e0:3d:89:19:0b:93:0a:a9:0f:f9:88:94:8b:b7:
         8e:ba:ae:3c
-----BEGIN CERTIFICATE-----
MIIE8jCCA9qgAwIBAgIEAPcA6jANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEygw
NTk3NjgwMTM2M2QzNzU3ODYxNTJlNGQwNjFlNzVjOGJlYjM1MDU4MB4XDTIyMDEw
MTAwNTkyMFoXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoZjA0ZjIxMzhhMDAz
Y2U3NzQ5M2RkNDgwZDVjZjc4OGEwZDQ0Y2VmODCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBANwriH5kUvySBNH2fbHHCVb6ouUBweyVcE3pdF6L1KLyDKgF
VW/9rh7Kt9QFACif0IP2rapB9+td9u/SNgZQonwXubYlwpQkMk4Trb9TOGt2VzoH
tVXdT2pzMy/FQl+Dxtlmy2SD88GApza69f6aEI3wZvhK1VewaEgnZkFqyKOcD8F+
D3xWlTywNYuCqnMZNvGQ5TvLQHEig4yH5FmDVMAaigM3JMnqOTCg/ZhqxKWEcyvq
y1oqztCskb0nrAkeLv9mMYbozqFnQnCGEKrUvLVz/b2NZyAu9k6ywKoiCf4XKHma
Fmd7yIDh4sLswgyqHZaeA58D5Lni6w4wtCLjm2UCAwEAAaOCAgwwggIIMB0GA1Ud
DgQWBBTwTyE4oAPOd0k91IDVz3iKDUTO+DAfBgNVHSMEGDAWgBQFl2gBNj03V4YV
Lk0GHnXIvrNQWDAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L0JaZG9BVFk5TjFlR0ZTNU5CaDUxeUw2elVGZy5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvMjkvMmJhYWRjLTJiN2EtNGVjMC05NWNhLTVlYzhjOGVkNjBmZC8x
LzhFOGhPS0FEem5kSlBkU0ExYzk0aWcxRXp2Zy5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMjkv
MmJhYWRjLTJiN2EtNGVjMC05NWNhLTVlYzhjOGVkNjBmZC8xL0JaZG9BVFk5TjFl
R0ZTNU5CaDUxeUw2elVGZy5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAi
BggrBgEFBQcBBwEB/wQTMBEwDwQCAAIwCQMHACoMtkIaBzANBgkqhkiG9w0BAQsF
AAOCAQEAVng4vOiMU0snMa/+Ac4goHXiiYXaFotRWBWDR/K4jHBgqIx/uQ+MydyL
3o0sTVuekXjmHwRI/Fa8Wt/MFe2qXuDx22FBboUR8LX0QZI/Mn61idnM9Lpz4RdF
Jk3Hm1y/2XomOtnMBZ+747KTjWjPlqC752n9aOf/3MtT/NYKB2v16c6LsZ4CLVx4
ONgdJbxNtLuUkE9zvcHfoL5PDAhygFYgkgO5cclCTnoy/752eheIOSr3PBtwLRKU
TmbHOPAsQxUoCsit8q/YkCB87rzi1TnvTeTTG1Qx/2ZkgY64VfQIehZnBN5E6W3p
8dLwXOA9iRkLkwqpD/mIlIu3jrquPA==
-----END CERTIFICATE-----