Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3a/e6b77f-40e6-4c93-ac32-3db961703ea9/1/L7hJbRNdYCQPFYiAVriQaChTA0c.roa
File:                     L7hJbRNdYCQPFYiAVriQaChTA0c.roa (raw, json)
Hash identifier:          KX3G/6Lqy18JdIB4Pb9f4CMm9flXoOjCF0K9lkVhVlo=
Subject key identifier:   2F:B8:49:6D:13:5D:60:24:0F:15:88:80:56:B8:90:68:28:53:03:47
Certificate issuer:       /CN=b2ccda1c5487cb938d57ea61cc2d62d31070db51
Certificate serial:       0181EF87E6C1D2A2962998D648BC83B62D7E
Authority key identifier: B2:CC:DA:1C:54:87:CB:93:8D:57:EA:61:CC:2D:62:D3:10:70:DB:51
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/sszaHFSHy5ONV-phzC1i0xBw21E.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/3a/e6b77f-40e6-4c93-ac32-3db961703ea9/1/L7hJbRNdYCQPFYiAVriQaChTA0c.roa
Signing time:             Mon 11 Jul 2022 23:11:09 +0000
ROA not before:           Mon 11 Jul 2022 23:11:09 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     204186
IP address blocks:        2001:67c:a38::/48 maxlen: 48

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:81:ef:87:e6:c1:d2:a2:96:29:98:d6:48:bc:83:b6:2d:7e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b2ccda1c5487cb938d57ea61cc2d62d31070db51
        Validity
            Not Before: Jul 11 23:11:09 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=2fb8496d135d60240f15888056b8906828530347
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:5f:5d:50:2e:3b:0e:77:cc:99:3d:30:16:dc:
                    70:c9:a3:fb:8d:32:41:8e:a4:73:29:98:4f:54:63:
                    73:84:81:c4:46:7a:9c:9a:87:ef:03:fa:3a:f3:f1:
                    f6:89:04:20:bd:5a:70:71:6c:8c:22:46:64:4c:d1:
                    82:2a:e4:0f:54:fa:5c:79:2b:c3:be:5b:36:0d:1a:
                    ca:54:f0:48:09:6b:c2:3f:70:f0:4b:45:ee:46:51:
                    8e:80:1e:8b:c8:37:15:0f:d7:c9:68:50:95:20:1b:
                    89:db:73:9e:8f:af:2b:37:66:0d:2c:63:0b:be:8c:
                    ff:b0:57:97:92:1c:24:ba:81:72:b7:b5:ed:7b:20:
                    7a:be:07:30:cf:d3:8a:9e:2a:9c:6f:48:1c:48:c4:
                    c1:f8:70:76:92:62:f5:c9:53:24:a2:8a:67:41:e6:
                    95:34:fb:f2:c2:57:97:15:a8:c3:8c:2f:25:dc:9f:
                    a3:ef:01:09:aa:fa:da:65:d0:96:3f:8a:ff:f9:6e:
                    9a:ce:15:9f:21:de:0c:0a:1d:77:db:51:f6:80:9b:
                    65:86:dc:b7:00:ec:01:f4:c2:7d:fd:70:d7:da:11:
                    9c:7a:37:4b:78:bb:a4:96:57:88:c0:cf:58:9a:64:
                    08:61:61:64:a8:5b:1c:29:d5:56:fd:98:d2:d8:aa:
                    4d:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2F:B8:49:6D:13:5D:60:24:0F:15:88:80:56:B8:90:68:28:53:03:47
            X509v3 Authority Key Identifier:
                keyid:B2:CC:DA:1C:54:87:CB:93:8D:57:EA:61:CC:2D:62:D3:10:70:DB:51

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sszaHFSHy5ONV-phzC1i0xBw21E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/e6b77f-40e6-4c93-ac32-3db961703ea9/1/L7hJbRNdYCQPFYiAVriQaChTA0c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/e6b77f-40e6-4c93-ac32-3db961703ea9/1/sszaHFSHy5ONV-phzC1i0xBw21E.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:67c:a38::/48

    Signature Algorithm: sha256WithRSAEncryption
         1f:0f:a7:01:f8:79:43:f9:1a:30:cf:6d:64:ce:11:39:28:c6:
         76:a6:5d:20:eb:e7:68:6e:54:ca:33:58:7c:b7:7c:ae:b5:3b:
         ae:d4:dc:3e:b5:d4:85:36:6f:60:f2:d4:d8:a9:b3:35:45:82:
         e2:f5:d2:a7:84:4c:76:b1:1f:61:57:9d:5e:3f:b9:99:30:01:
         50:68:a3:89:a1:85:64:a3:f8:35:01:73:45:0d:a8:be:b0:4c:
         ee:7c:49:0a:d1:5f:cf:4b:c8:bc:30:48:9a:37:4d:8d:1d:ab:
         53:1a:ec:47:f9:e0:f5:e0:f2:83:b6:ac:b3:2b:9f:5c:c2:a8:
         85:75:0d:69:3f:3b:73:ca:86:e1:ac:b3:8d:28:4b:13:e0:ac:
         92:79:52:48:01:01:e1:70:60:e4:e6:b8:24:69:c0:66:7a:ab:
         59:98:81:07:a6:e6:3d:73:f1:6e:9e:e3:3f:32:10:09:a1:8d:
         72:07:85:c7:82:43:95:cc:e1:a1:15:ec:98:ee:bf:c5:6a:e6:
         23:c6:30:74:88:2a:f9:9e:98:dd:51:08:40:19:c9:b2:a3:0f:
         71:2e:00:0f:f8:10:52:42:a9:d8:b2:97:ea:4f:c6:cf:ae:52:
         59:25:22:11:1d:39:83:ff:1f:5e:d7:11:7e:e1:46:a2:27:83:
         b3:1d:ff:c5
-----BEGIN CERTIFICATE-----
MIIFADCCA+igAwIBAgISAYHvh+bB0qKWKZjWSLyDti1+MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGIyY2NkYTFjNTQ4N2NiOTM4ZDU3ZWE2MWNjMmQ2MmQzMTA3
MGRiNTEwHhcNMjIwNzExMjMxMTA5WhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygyZmI4NDk2ZDEzNWQ2MDI0MGYxNTg4ODA1NmI4OTA2ODI4NTMwMzQ3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu19dUC47DnfMmT0wFtxwyaP7jTJB
jqRzKZhPVGNzhIHERnqcmofvA/o68/H2iQQgvVpwcWyMIkZkTNGCKuQPVPpceSvD
vls2DRrKVPBICWvCP3DwS0XuRlGOgB6LyDcVD9fJaFCVIBuJ23Oej68rN2YNLGML
voz/sFeXkhwkuoFyt7XteyB6vgcwz9OKniqcb0gcSMTB+HB2kmL1yVMkoopnQeaV
NPvywleXFajDjC8l3J+j7wEJqvraZdCWP4r/+W6azhWfId4MCh1321H2gJtlhty3
AOwB9MJ9/XDX2hGcejdLeLuklleIwM9YmmQIYWFkqFscKdVW/ZjS2KpNOwIDAQAB
o4ICDDCCAggwHQYDVR0OBBYEFC+4SW0TXWAkDxWIgFa4kGgoUwNHMB8GA1UdIwQY
MBaAFLLM2hxUh8uTjVfqYcwtYtMQcNtRMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvc3N6YUhGU0h5NU9OVi1waHpDMWkweEJ3MjFFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zYS9lNmI3N2YtNDBlNi00YzkzLWFjMzIt
M2RiOTYxNzAzZWE5LzEvTDdoSmJSTmRZQ1FQRllpQVZyaVFhQ2hUQTBjLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zYS9lNmI3N2YtNDBlNi00YzkzLWFjMzItM2RiOTYxNzAzZWE5
LzEvc3N6YUhGU0h5NU9OVi1waHpDMWkweEJ3MjFFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEGfAo4
MA0GCSqGSIb3DQEBCwUAA4IBAQAfD6cB+HlD+Rowz21kzhE5KMZ2pl0g6+doblTK
M1h8t3yutTuu1Nw+tdSFNm9g8tTYqbM1RYLi9dKnhEx2sR9hV51eP7mZMAFQaKOJ
oYVko/g1AXNFDai+sEzufEkK0V/PS8i8MEiaN02NHatTGuxH+eD14PKDtqyzK59c
wqiFdQ1pPztzyobhrLONKEsT4KySeVJIAQHhcGDk5rgkacBmeqtZmIEHpuY9c/Fu
nuM/MhAJoY1yB4XHgkOVzOGhFeyY7r/FauYjxjB0iCr5npjdUQhAGcmyow9xLgAP
+BBSQqnYspfqT8bPrlJZJSIRHTmD/x9e1xF+4UaiJ4OzHf/F
-----END CERTIFICATE-----