Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4e/8fc09d-7d25-425c-8b91-d62e454bf37f/1/Z4i0SACq_z2G3gGnbyqIvnuzqTY.roa
File:                     Z4i0SACq_z2G3gGnbyqIvnuzqTY.roa (raw, json)
Hash identifier:          tprCSL9pzZpG70WCEHsMdT1fNGmNXECPz75xLeJoD+k=
Subject key identifier:   67:88:B4:48:00:AA:FF:3D:86:DE:01:A7:6F:2A:88:BE:7B:B3:A9:36
Certificate issuer:       /CN=fbac50f19d9930aeec09cd27f508fc502ea14d1f
Certificate serial:       06F0184D
Authority key identifier: FB:AC:50:F1:9D:99:30:AE:EC:09:CD:27:F5:08:FC:50:2E:A1:4D:1F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1-6xQ8Z2ZMK7sCc0n9Qj8UC6hTR8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4e/8fc09d-7d25-425c-8b91-d62e454bf37f/1/Z4i0SACq_z2G3gGnbyqIvnuzqTY.roa
Signing time:             Fri 27 May 2022 13:43:13 +0000
ROA not before:           Fri 27 May 2022 13:43:13 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     205723
IP address blocks:        2a0a:4540:2000::/48 maxlen: 48

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 116398157 (0x6f0184d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fbac50f19d9930aeec09cd27f508fc502ea14d1f
        Validity
            Not Before: May 27 13:43:13 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=6788b44800aaff3d86de01a76f2a88be7bb3a936
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:c3:79:3e:c0:3a:76:1b:54:09:c2:ce:af:c2:
                    a7:25:33:6a:6f:1c:83:55:df:33:25:60:09:3c:51:
                    27:69:91:6b:24:54:7b:b9:58:b3:40:2e:99:0c:ef:
                    28:9a:4c:e6:13:e1:c2:c8:d1:41:6c:76:f7:78:6f:
                    a5:6b:9d:6d:d2:66:43:d2:c2:57:e4:a1:c6:03:b6:
                    07:8b:94:68:3a:3e:46:39:78:1b:17:57:74:3f:45:
                    bd:5f:f9:bf:20:f3:04:02:60:10:44:56:09:42:20:
                    c0:2d:3c:41:47:ec:9d:82:54:3c:47:97:57:d7:1a:
                    a1:8c:17:c6:f7:ec:48:65:b0:54:e9:0d:1d:31:52:
                    45:96:ef:fd:19:64:18:5d:66:a1:8a:33:e2:d7:e9:
                    ed:2e:fc:d0:d7:c4:aa:47:9f:0e:e7:84:7d:ce:18:
                    27:9c:ae:9a:12:df:aa:19:42:ac:41:4f:44:f3:a7:
                    d1:bd:00:c6:f9:bc:af:13:7a:57:c8:d2:12:97:93:
                    aa:cc:f3:2b:e1:27:3e:e9:59:a8:4a:3f:30:6e:ca:
                    b0:40:ab:f5:64:f1:ec:1e:19:ba:40:f4:a3:bc:be:
                    c5:e9:28:59:11:aa:0a:45:90:c3:a6:cf:45:45:08:
                    26:a1:c0:9b:55:ff:d5:11:68:bb:a9:fc:5c:f4:ba:
                    de:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                67:88:B4:48:00:AA:FF:3D:86:DE:01:A7:6F:2A:88:BE:7B:B3:A9:36
            X509v3 Authority Key Identifier:
                keyid:FB:AC:50:F1:9D:99:30:AE:EC:09:CD:27:F5:08:FC:50:2E:A1:4D:1F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-6xQ8Z2ZMK7sCc0n9Qj8UC6hTR8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/8fc09d-7d25-425c-8b91-d62e454bf37f/1/Z4i0SACq_z2G3gGnbyqIvnuzqTY.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/8fc09d-7d25-425c-8b91-d62e454bf37f/1/1-6xQ8Z2ZMK7sCc0n9Qj8UC6hTR8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a0a:4540:2000::/48

    Signature Algorithm: sha256WithRSAEncryption
         4f:3b:a1:a6:22:1e:7f:6c:a7:72:7f:a2:03:dc:07:18:35:90:
         d9:bb:84:06:66:f3:5d:ac:3e:26:09:f7:85:2d:e4:62:24:97:
         d6:75:0d:ed:a2:ea:cd:1c:fd:4a:76:14:f5:66:ed:7a:95:89:
         a2:86:19:ba:7d:cb:c9:a5:98:c9:5b:a3:17:9f:53:28:00:1e:
         07:47:d8:e8:87:ea:d7:86:1f:54:69:40:fa:26:51:57:a7:88:
         cd:32:0b:42:fc:4f:01:bf:98:6f:53:55:c0:1d:46:96:de:5e:
         81:62:47:51:cc:60:fb:3e:b1:2f:d7:be:91:f7:8d:45:1a:87:
         ea:e2:04:d2:bf:92:2c:12:d3:fe:82:e5:23:45:3a:c6:5d:d2:
         d8:17:17:d2:8b:10:db:55:f9:ab:f7:b6:a7:30:64:71:86:f8:
         11:c0:dd:d1:3e:a7:e5:d5:35:86:d4:cf:7a:94:cb:1d:e4:8b:
         66:f7:5c:33:56:ab:f9:8d:4f:e2:a9:0c:21:92:44:d4:6a:39:
         24:a5:d9:14:9f:07:13:9c:8b:4e:e2:89:bf:6a:64:86:e2:ef:
         cd:c1:ed:5b:8c:4f:b8:74:d9:99:42:49:64:15:56:39:23:8e:
         98:5b:9c:b9:5f:bf:d9:18:02:60:99:0c:ba:05:5c:43:c3:03:
         17:ab:98:fe
-----BEGIN CERTIFICATE-----
MIIE9DCCA9ygAwIBAgIEBvAYTTANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyhm
YmFjNTBmMTlkOTkzMGFlZWMwOWNkMjdmNTA4ZmM1MDJlYTE0ZDFmMB4XDTIyMDUy
NzEzNDMxM1oXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoNjc4OGI0NDgwMGFh
ZmYzZDg2ZGUwMWE3NmYyYTg4YmU3YmIzYTkzNjCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBALnDeT7AOnYbVAnCzq/CpyUzam8cg1XfMyVgCTxRJ2mRayRU
e7lYs0AumQzvKJpM5hPhwsjRQWx293hvpWudbdJmQ9LCV+ShxgO2B4uUaDo+Rjl4
GxdXdD9FvV/5vyDzBAJgEERWCUIgwC08QUfsnYJUPEeXV9caoYwXxvfsSGWwVOkN
HTFSRZbv/RlkGF1moYoz4tfp7S780NfEqkefDueEfc4YJ5yumhLfqhlCrEFPRPOn
0b0Axvm8rxN6V8jSEpeTqszzK+EnPulZqEo/MG7KsECr9WTx7B4ZukD0o7y+xeko
WRGqCkWQw6bPRUUIJqHAm1X/1RFou6n8XPS63rkCAwEAAaOCAg4wggIKMB0GA1Ud
DgQWBBRniLRIAKr/PYbeAadvKoi+e7OpNjAfBgNVHSMEGDAWgBT7rFDxnZkwruwJ
zSf1CPxQLqFNHzAOBgNVHQ8BAf8EBAMCB4AwZQYIKwYBBQUHAQEEWTBXMFUGCCsG
AQUFBzAChklyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
LzEtNnhROFoyWk1LN3NDYzBuOVFqOFVDNmhUUjguY2VyMIGNBggrBgEFBQcBCwSB
gDB+MHwGCCsGAQUFBzALhnByc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9y
eS9ERUZBVUxULzRlLzhmYzA5ZC03ZDI1LTQyNWMtOGI5MS1kNjJlNDU0YmYzN2Yv
MS9aNGkwU0FDcV96MkczZ0duYnlxSXZudXpxVFkucm9hMIGCBgNVHR8EezB5MHeg
daBzhnFyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzRl
LzhmYzA5ZC03ZDI1LTQyNWMtOGI5MS1kNjJlNDU0YmYzN2YvMS8xLTZ4UThaMlpN
SzdzQ2MwbjlRajhVQzZoVFI4LmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4C
MCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAKgpFQCAAMA0GCSqGSIb3DQEB
CwUAA4IBAQBPO6GmIh5/bKdyf6ID3AcYNZDZu4QGZvNdrD4mCfeFLeRiJJfWdQ3t
ourNHP1KdhT1Zu16lYmihhm6fcvJpZjJW6MXn1MoAB4HR9joh+rXhh9UaUD6JlFX
p4jNMgtC/E8Bv5hvU1XAHUaW3l6BYkdRzGD7PrEv176R941FGofq4gTSv5IsEtP+
guUjRTrGXdLYFxfSixDbVfmr97anMGRxhvgRwN3RPqfl1TWG1M96lMsd5Itm91wz
Vqv5jU/iqQwhkkTUajkkpdkUnwcTnItO4om/amSG4u/Nwe1bjE+4dNmZQklkFVY5
I46YW5y5X7/ZGAJgmQy6BVxDwwMXq5j+
-----END CERTIFICATE-----