Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/OVOpdv7o0yRZMXp6kP2aWRQZL0o.roa
File:                     OVOpdv7o0yRZMXp6kP2aWRQZL0o.roa (raw, json)
Hash identifier:          2FFbvRQ/RnrtfyZPqJM085OPuzS4aiZ/E5Xr3xlLYu4=
Subject key identifier:   39:53:A9:76:FE:E8:D3:24:59:31:7A:7A:90:FD:9A:59:14:19:2F:4A
Certificate issuer:       /CN=05976801363d375786152e4d061e75c8beb35058
Certificate serial:       014ABDF8
Authority key identifier: 05:97:68:01:36:3D:37:57:86:15:2E:4D:06:1E:75:C8:BE:B3:50:58
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/BZdoATY9N1eGFS5NBh51yL6zUFg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/OVOpdv7o0yRZMXp6kP2aWRQZL0o.roa
Signing time:             Sat 01 Jan 2022 01:00:19 +0000
ROA not before:           Sat 01 Jan 2022 01:00:19 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     212007
IP address blocks:        2a0c:b641:110::/44 maxlen: 48

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 21675512 (0x14abdf8)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=05976801363d375786152e4d061e75c8beb35058
        Validity
            Not Before: Jan  1 01:00:19 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=3953a976fee8d32459317a7a90fd9a5914192f4a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:7f:9a:4f:b8:96:56:4b:b9:23:79:a9:c3:3f:
                    7c:c2:f4:bd:df:8b:a1:04:d1:4e:e3:44:00:f6:ba:
                    cf:2c:a9:0c:6d:cb:df:9b:9d:c4:08:ce:f8:84:59:
                    00:2c:5a:79:74:b2:b0:7b:23:b0:67:2b:68:fb:7d:
                    70:8c:30:84:49:2a:e5:e2:06:e6:3e:ef:3a:bf:86:
                    09:c4:61:e8:bc:5c:f2:f6:1b:81:09:fc:e5:31:91:
                    92:df:c1:c4:b7:62:18:ba:ab:3b:9c:52:2e:dc:1b:
                    32:b3:a2:69:aa:00:81:0d:6e:50:0e:90:f5:7a:a1:
                    75:0c:24:dd:f3:59:c3:56:ac:84:a4:bc:b9:94:1a:
                    99:58:0e:48:ac:f6:44:8f:0b:76:46:46:e3:85:1b:
                    a1:3c:fa:9f:fe:b5:6f:47:99:d6:23:24:ba:de:93:
                    dd:23:7e:65:c2:b7:5b:79:a3:f7:5f:c6:fa:62:28:
                    0a:79:ed:b9:1f:17:63:b4:74:61:6d:84:8f:66:f0:
                    29:1b:27:7b:8d:19:08:2d:09:e7:82:08:8e:fb:87:
                    3d:44:4c:f4:68:0c:b2:09:86:c7:ed:53:d8:32:61:
                    b4:68:5e:7c:70:68:ff:05:59:a7:b2:04:6a:90:b0:
                    ff:53:da:50:85:37:18:26:cc:48:90:3c:34:54:20:
                    d6:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                39:53:A9:76:FE:E8:D3:24:59:31:7A:7A:90:FD:9A:59:14:19:2F:4A
            X509v3 Authority Key Identifier:
                keyid:05:97:68:01:36:3D:37:57:86:15:2E:4D:06:1E:75:C8:BE:B3:50:58

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BZdoATY9N1eGFS5NBh51yL6zUFg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/OVOpdv7o0yRZMXp6kP2aWRQZL0o.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/BZdoATY9N1eGFS5NBh51yL6zUFg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a0c:b641:110::/44

    Signature Algorithm: sha256WithRSAEncryption
         5c:cc:dd:21:75:90:80:7a:50:88:45:88:7e:a5:5d:10:91:47:
         dc:32:4a:22:42:42:09:ea:63:53:f3:d3:dc:1a:7c:46:e8:91:
         e7:3f:95:ea:f2:76:23:48:b4:9c:78:82:92:1b:94:e0:df:1a:
         53:f7:21:4b:58:9f:6c:22:3c:2d:bf:37:5f:d7:32:aa:da:56:
         3f:14:72:da:c3:cc:1e:52:70:42:95:61:17:c5:2d:39:e2:a0:
         2a:9a:21:f1:0a:19:4f:b8:f6:98:f9:06:19:5c:c1:e4:b3:4b:
         eb:c2:d9:72:38:7c:e0:d2:ce:70:ba:47:65:2a:41:00:a6:d3:
         d1:1b:cb:fa:c6:d9:b6:8e:e8:70:0f:37:65:c7:9e:81:2c:7e:
         31:07:b8:34:41:90:d3:5f:ee:78:f5:94:4f:be:8f:28:4c:91:
         20:06:ed:cc:5e:ba:0d:53:5f:3f:c4:a2:d0:28:6e:68:53:4b:
         33:c6:be:1f:08:76:23:ff:ae:a3:08:4a:96:bb:f4:e5:9c:dd:
         e3:28:8a:11:cf:0e:ec:62:12:65:bc:f0:07:cc:86:47:ac:0f:
         cf:e1:a8:4c:fb:82:54:0d:7e:24:74:20:35:8f:ff:87:30:b8:
         fd:d4:ac:a1:17:ad:a2:5f:e1:18:5d:d8:98:b5:20:2b:2f:df:
         eb:1b:72:06
-----BEGIN CERTIFICATE-----
MIIE8jCCA9qgAwIBAgIEAUq9+DANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEygw
NTk3NjgwMTM2M2QzNzU3ODYxNTJlNGQwNjFlNzVjOGJlYjM1MDU4MB4XDTIyMDEw
MTAxMDAxOVoXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoMzk1M2E5NzZmZWU4
ZDMyNDU5MzE3YTdhOTBmZDlhNTkxNDE5MmY0YTCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAMd/mk+4llZLuSN5qcM/fML0vd+LoQTRTuNEAPa6zyypDG3L
35udxAjO+IRZACxaeXSysHsjsGcraPt9cIwwhEkq5eIG5j7vOr+GCcRh6Lxc8vYb
gQn85TGRkt/BxLdiGLqrO5xSLtwbMrOiaaoAgQ1uUA6Q9XqhdQwk3fNZw1ashKS8
uZQamVgOSKz2RI8LdkZG44UboTz6n/61b0eZ1iMkut6T3SN+ZcK3W3mj91/G+mIo
CnntuR8XY7R0YW2Ej2bwKRsne40ZCC0J54IIjvuHPURM9GgMsgmGx+1T2DJhtGhe
fHBo/wVZp7IEapCw/1PaUIU3GCbMSJA8NFQg1lECAwEAAaOCAgwwggIIMB0GA1Ud
DgQWBBQ5U6l2/ujTJFkxenqQ/ZpZFBkvSjAfBgNVHSMEGDAWgBQFl2gBNj03V4YV
Lk0GHnXIvrNQWDAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L0JaZG9BVFk5TjFlR0ZTNU5CaDUxeUw2elVGZy5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvMjkvMmJhYWRjLTJiN2EtNGVjMC05NWNhLTVlYzhjOGVkNjBmZC8x
L09WT3BkdjdvMHlSWk1YcDZrUDJhV1JRWkwwby5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMjkv
MmJhYWRjLTJiN2EtNGVjMC05NWNhLTVlYzhjOGVkNjBmZC8xL0JaZG9BVFk5TjFl
R0ZTNU5CaDUxeUw2elVGZy5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAi
BggrBgEFBQcBBwEB/wQTMBEwDwQCAAIwCQMHBCoMtkEBEDANBgkqhkiG9w0BAQsF
AAOCAQEAXMzdIXWQgHpQiEWIfqVdEJFH3DJKIkJCCepjU/PT3Bp8RuiR5z+V6vJ2
I0i0nHiCkhuU4N8aU/chS1ifbCI8Lb83X9cyqtpWPxRy2sPMHlJwQpVhF8UtOeKg
Kpoh8QoZT7j2mPkGGVzB5LNL68LZcjh84NLOcLpHZSpBAKbT0RvL+sbZto7ocA83
ZceegSx+MQe4NEGQ01/uePWUT76PKEyRIAbtzF66DVNfP8Si0ChuaFNLM8a+Hwh2
I/+uowhKlrv05Zzd4yiKEc8O7GISZbzwB8yGR6wPz+GoTPuCVA1+JHQgNY//hzC4
/dSsoRetol/hGF3YmLUgKy/f6xtyBg==
-----END CERTIFICATE-----