Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/nwvWlaAilEBU3wAQcO7w6e941Rc.roa
File:                     nwvWlaAilEBU3wAQcO7w6e941Rc.roa (raw, json)
Hash identifier:          XeVOy51iYadRixEiIYAM1eAym0CIU5pmhsuqXCk5+Mc=
Subject key identifier:   9F:0B:D6:95:A0:22:94:40:54:DF:00:10:70:EE:F0:E9:EF:78:D5:17
Certificate issuer:       /CN=05976801363d375786152e4d061e75c8beb35058
Certificate serial:       01560CCE
Authority key identifier: 05:97:68:01:36:3D:37:57:86:15:2E:4D:06:1E:75:C8:BE:B3:50:58
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/BZdoATY9N1eGFS5NBh51yL6zUFg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/nwvWlaAilEBU3wAQcO7w6e941Rc.roa
Signing time:             Sat 01 Jan 2022 01:00:26 +0000
ROA not before:           Sat 01 Jan 2022 01:00:26 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     212832
IP address blocks:        2a0c:b641:5f0::/44 maxlen: 48

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 22416590 (0x1560cce)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=05976801363d375786152e4d061e75c8beb35058
        Validity
            Not Before: Jan  1 01:00:26 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=9f0bd695a022944054df001070eef0e9ef78d517
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:2c:a2:0a:95:ed:e1:f6:b2:3d:1b:70:fa:53:
                    1a:85:13:05:f6:99:9a:ed:3a:be:53:5b:00:d1:9e:
                    ea:9e:80:9d:e5:2f:aa:53:b4:21:aa:9e:c8:46:ca:
                    f8:fe:e8:cd:8a:be:ab:55:58:1e:3c:80:e2:f9:ed:
                    8f:07:07:30:8e:3c:b7:95:e7:ed:c2:03:dc:cd:29:
                    95:a1:99:1f:41:70:b8:86:0f:42:16:2e:ec:17:3f:
                    c8:44:38:fb:2b:52:19:aa:94:15:e0:3e:84:bb:d8:
                    3d:a1:d6:a0:c7:2a:be:bc:ec:20:05:b3:33:50:34:
                    08:49:7a:c4:e9:f8:21:e3:77:65:4e:92:7b:d3:25:
                    32:ee:a5:85:45:3f:47:cf:ca:f4:6e:fb:ff:68:6f:
                    cb:9d:39:25:3a:67:56:e6:e2:fd:f8:c9:a9:b2:98:
                    17:c6:f1:67:b8:27:de:cb:44:ba:44:ff:20:e9:e2:
                    a4:10:0e:f3:b0:f6:a3:5c:7a:08:cb:b1:af:1c:08:
                    32:4f:e9:35:76:78:b8:ea:c3:78:ae:c9:0f:11:fe:
                    6a:96:6d:96:6c:8b:48:9f:04:79:7a:b7:a4:d2:f7:
                    89:aa:a9:c2:33:4c:c4:e2:6f:4a:82:a2:aa:13:f2:
                    7d:3f:b5:1b:52:e6:4e:9d:e2:83:9a:62:8f:93:25:
                    1c:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9F:0B:D6:95:A0:22:94:40:54:DF:00:10:70:EE:F0:E9:EF:78:D5:17
            X509v3 Authority Key Identifier:
                keyid:05:97:68:01:36:3D:37:57:86:15:2E:4D:06:1E:75:C8:BE:B3:50:58

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BZdoATY9N1eGFS5NBh51yL6zUFg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/nwvWlaAilEBU3wAQcO7w6e941Rc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/BZdoATY9N1eGFS5NBh51yL6zUFg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a0c:b641:5f0::/44

    Signature Algorithm: sha256WithRSAEncryption
         65:59:df:0a:50:7b:43:14:8e:2e:98:44:c6:83:17:ba:d6:51:
         71:a4:34:4b:18:f0:5a:2e:b2:07:36:98:9b:9a:5e:9d:eb:18:
         3a:d1:ce:3c:e6:df:03:8b:2e:a2:22:3a:f2:fc:4d:ee:36:ac:
         35:69:75:88:73:9a:30:48:a5:95:8f:00:75:45:3d:2b:43:9e:
         c0:74:78:c9:51:f0:95:74:93:61:47:c0:67:4b:b3:02:25:ed:
         9a:ea:65:78:39:2b:19:61:0f:62:bc:c8:73:4f:3a:27:34:7a:
         56:b0:2c:59:21:72:a8:3f:c5:0d:e8:33:37:3b:4d:57:a7:fe:
         f8:1e:d2:a4:b3:f6:dc:82:5d:2f:75:7c:21:d7:a3:94:8f:29:
         54:e6:ee:68:65:e2:07:49:86:d1:44:5f:d9:c2:9c:3d:16:5e:
         09:c6:7f:86:37:c6:a9:69:b2:c3:c6:b9:9e:8d:74:8a:fb:df:
         1d:58:99:70:09:df:c9:03:e5:58:65:ae:eb:9d:26:82:a2:fe:
         8e:81:6e:c6:69:78:7f:9d:93:22:71:ac:8d:70:c1:fa:f0:a3:
         f1:96:00:af:3e:46:31:c8:26:99:a3:e1:7a:fb:3a:e6:c8:b6:
         12:0b:d0:59:b1:c2:09:38:d8:c4:bb:29:c8:6e:c2:0a:60:19:
         d2:64:0a:9b
-----BEGIN CERTIFICATE-----
MIIE8jCCA9qgAwIBAgIEAVYMzjANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEygw
NTk3NjgwMTM2M2QzNzU3ODYxNTJlNGQwNjFlNzVjOGJlYjM1MDU4MB4XDTIyMDEw
MTAxMDAyNloXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoOWYwYmQ2OTVhMDIy
OTQ0MDU0ZGYwMDEwNzBlZWYwZTllZjc4ZDUxNzCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAJgsogqV7eH2sj0bcPpTGoUTBfaZmu06vlNbANGe6p6AneUv
qlO0IaqeyEbK+P7ozYq+q1VYHjyA4vntjwcHMI48t5Xn7cID3M0plaGZH0FwuIYP
QhYu7Bc/yEQ4+ytSGaqUFeA+hLvYPaHWoMcqvrzsIAWzM1A0CEl6xOn4IeN3ZU6S
e9MlMu6lhUU/R8/K9G77/2hvy505JTpnVubi/fjJqbKYF8bxZ7gn3stEukT/IOni
pBAO87D2o1x6CMuxrxwIMk/pNXZ4uOrDeK7JDxH+apZtlmyLSJ8EeXq3pNL3iaqp
wjNMxOJvSoKiqhPyfT+1G1LmTp3ig5pij5MlHK0CAwEAAaOCAgwwggIIMB0GA1Ud
DgQWBBSfC9aVoCKUQFTfABBw7vDp73jVFzAfBgNVHSMEGDAWgBQFl2gBNj03V4YV
Lk0GHnXIvrNQWDAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L0JaZG9BVFk5TjFlR0ZTNU5CaDUxeUw2elVGZy5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvMjkvMmJhYWRjLTJiN2EtNGVjMC05NWNhLTVlYzhjOGVkNjBmZC8x
L253dldsYUFpbEVCVTN3QVFjTzd3NmU5NDFSYy5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMjkv
MmJhYWRjLTJiN2EtNGVjMC05NWNhLTVlYzhjOGVkNjBmZC8xL0JaZG9BVFk5TjFl
R0ZTNU5CaDUxeUw2elVGZy5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAi
BggrBgEFBQcBBwEB/wQTMBEwDwQCAAIwCQMHBCoMtkEF8DANBgkqhkiG9w0BAQsF
AAOCAQEAZVnfClB7QxSOLphExoMXutZRcaQ0SxjwWi6yBzaYm5penesYOtHOPObf
A4suoiI68vxN7jasNWl1iHOaMEillY8AdUU9K0OewHR4yVHwlXSTYUfAZ0uzAiXt
mupleDkrGWEPYrzIc086JzR6VrAsWSFyqD/FDegzNztNV6f++B7SpLP23IJdL3V8
IdejlI8pVObuaGXiB0mG0URf2cKcPRZeCcZ/hjfGqWmyw8a5no10ivvfHViZcAnf
yQPlWGWu650mgqL+joFuxml4f52TInGsjXDB+vCj8ZYArz5GMcgmmaPhevs65si2
EgvQWbHCCTjYxLspyG7CCmAZ0mQKmw==
-----END CERTIFICATE-----