Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/94aae4-771c-429a-a7cd-f87bc173d2aa/1/9SQwg_ehqRSlWqMa1rTG3Tx70vo.roa
File:                     9SQwg_ehqRSlWqMa1rTG3Tx70vo.roa (raw, json)
Hash identifier:          cuUudKr7HmGLvKOi7VCV0DtXUp8sAtnWP2EWOWJxSUA=
Subject key identifier:   F5:24:30:83:F7:A1:A9:14:A5:5A:A3:1A:D6:B4:C6:DD:3C:7B:D2:FA
Certificate issuer:       /CN=269b8a3748440c9d5c2c508bd03b46d7273eee56
Certificate serial:       FCE221
Authority key identifier: 26:9B:8A:37:48:44:0C:9D:5C:2C:50:8B:D0:3B:46:D7:27:3E:EE:56
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/JpuKN0hEDJ1cLFCL0DtG1yc-7lY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/58/94aae4-771c-429a-a7cd-f87bc173d2aa/1/9SQwg_ehqRSlWqMa1rTG3Tx70vo.roa
Signing time:             Fri 29 Apr 2022 22:03:23 +0000
ROA not before:           Fri 29 Apr 2022 22:03:23 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     62119
IP address blocks:        2a12:42c0::/29 maxlen: 48

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 16572961 (0xfce221)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=269b8a3748440c9d5c2c508bd03b46d7273eee56
        Validity
            Not Before: Apr 29 22:03:23 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=f5243083f7a1a914a55aa31ad6b4c6dd3c7bd2fa
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:0b:e8:bb:3a:0e:33:9e:bb:51:69:d6:f8:0e:
                    e8:8d:f4:ff:90:ce:da:17:ef:c1:46:6f:4f:4d:d2:
                    30:fc:d5:86:f2:59:6d:d7:5a:ec:75:ce:79:97:6d:
                    9e:e3:05:7d:00:dd:7d:aa:b0:43:2b:ce:ca:a1:a2:
                    c7:f2:9f:76:32:15:96:3d:ea:9a:cd:0e:9b:da:b2:
                    33:da:02:8c:31:46:f2:39:7e:be:6a:13:50:db:bf:
                    3e:d1:c4:51:e4:2f:f2:a9:67:85:54:0c:8c:8b:4a:
                    81:f0:0b:86:c4:c9:de:3d:74:d3:d2:b3:44:5c:71:
                    92:7f:af:0f:24:d4:08:ca:78:cc:3f:eb:48:2c:82:
                    e3:1f:a0:6b:1b:2b:de:1a:70:62:61:16:20:12:4f:
                    ef:1c:d1:e1:af:99:91:4b:2f:09:d2:0f:c4:e6:18:
                    08:b1:ad:63:e2:62:94:ea:e0:63:02:40:7c:0f:2c:
                    dd:cf:c2:38:1e:ca:e6:d5:e3:f9:1f:03:b3:8e:bb:
                    7b:aa:d5:77:df:40:8f:a8:86:81:f6:d2:21:55:2a:
                    df:e5:5f:08:4e:9f:77:e0:3b:46:89:dd:ca:aa:97:
                    fa:ac:48:b1:dd:a9:cd:12:9b:aa:de:7f:ab:f0:fc:
                    09:c8:59:5b:1e:2e:04:2b:e8:93:9f:b5:aa:01:e4:
                    34:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F5:24:30:83:F7:A1:A9:14:A5:5A:A3:1A:D6:B4:C6:DD:3C:7B:D2:FA
            X509v3 Authority Key Identifier:
                keyid:26:9B:8A:37:48:44:0C:9D:5C:2C:50:8B:D0:3B:46:D7:27:3E:EE:56

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JpuKN0hEDJ1cLFCL0DtG1yc-7lY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/94aae4-771c-429a-a7cd-f87bc173d2aa/1/9SQwg_ehqRSlWqMa1rTG3Tx70vo.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/58/94aae4-771c-429a-a7cd-f87bc173d2aa/1/JpuKN0hEDJ1cLFCL0DtG1yc-7lY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a12:42c0::/29

    Signature Algorithm: sha256WithRSAEncryption
         7d:40:3c:62:b0:72:cf:ab:9b:72:77:a2:95:2f:dc:6d:48:44:
         22:e0:a6:00:23:a1:47:9f:c5:28:0f:c5:67:7a:27:ac:9a:85:
         4e:72:9e:29:2b:74:a5:8f:e7:c5:40:16:b1:c8:79:4e:dc:f3:
         9e:ee:71:1e:0e:fc:cf:64:fd:68:79:76:62:b9:9f:8a:88:57:
         97:8b:7e:32:15:2b:1a:a1:f9:a3:b0:7e:29:71:10:ba:e3:38:
         c0:b6:ce:32:d4:ae:bd:d5:b0:fe:12:a8:15:0f:fa:5e:93:19:
         aa:30:2b:c3:80:70:c9:5e:8c:d4:ea:5d:f1:df:06:b8:a4:3e:
         c9:48:57:89:af:c8:eb:70:35:a5:2c:a3:f1:ec:7b:a4:72:60:
         ce:0e:9d:85:6d:54:54:c5:fa:fe:49:38:9a:47:f9:44:40:e3:
         46:87:ea:a1:53:6d:ad:38:16:5b:31:4a:2a:e2:b3:b3:72:96:
         d5:cd:81:f9:23:55:21:1d:2d:64:a6:25:8b:f4:2d:a7:fe:8d:
         9f:b6:82:d0:73:a9:bd:de:e2:d9:11:ca:d3:5d:c0:bb:dc:72:
         98:a9:51:b8:72:e0:69:93:71:f3:da:47:52:1a:c4:c3:04:f2:
         d2:32:83:f0:9b:e9:99:35:e8:21:2c:98:69:a0:d8:ab:a5:d3:
         35:83:3c:f5
-----BEGIN CERTIFICATE-----
MIIE8DCCA9igAwIBAgIEAPziITANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEygy
NjliOGEzNzQ4NDQwYzlkNWMyYzUwOGJkMDNiNDZkNzI3M2VlZTU2MB4XDTIyMDQy
OTIyMDMyM1oXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoZjUyNDMwODNmN2Ex
YTkxNGE1NWFhMzFhZDZiNGM2ZGQzYzdiZDJmYTCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAMYL6Ls6DjOeu1Fp1vgO6I30/5DO2hfvwUZvT03SMPzVhvJZ
bdda7HXOeZdtnuMFfQDdfaqwQyvOyqGix/KfdjIVlj3qms0Om9qyM9oCjDFG8jl+
vmoTUNu/PtHEUeQv8qlnhVQMjItKgfALhsTJ3j1009KzRFxxkn+vDyTUCMp4zD/r
SCyC4x+gaxsr3hpwYmEWIBJP7xzR4a+ZkUsvCdIPxOYYCLGtY+JilOrgYwJAfA8s
3c/COB7K5tXj+R8Ds467e6rVd99Aj6iGgfbSIVUq3+VfCE6fd+A7RondyqqX+qxI
sd2pzRKbqt5/q/D8CchZWx4uBCvok5+1qgHkNGcCAwEAAaOCAgowggIGMB0GA1Ud
DgQWBBT1JDCD96GpFKVaoxrWtMbdPHvS+jAfBgNVHSMEGDAWgBQmm4o3SEQMnVws
UIvQO0bXJz7uVjAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L0pwdUtOMGhFREoxY0xGQ0wwRHRHMXljLTdsWS5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvNTgvOTRhYWU0LTc3MWMtNDI5YS1hN2NkLWY4N2JjMTczZDJhYS8x
LzlTUXdnX2VocVJTbFdxTWExclRHM1R4NzB2by5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNTgv
OTRhYWU0LTc3MWMtNDI5YS1hN2NkLWY4N2JjMTczZDJhYS8xL0pwdUtOMGhFREox
Y0xGQ0wwRHRHMXljLTdsWS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAg
BggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMFAyoSQsAwDQYJKoZIhvcNAQELBQAD
ggEBAH1APGKwcs+rm3J3opUv3G1IRCLgpgAjoUefxSgPxWd6J6yahU5ynikrdKWP
58VAFrHIeU7c857ucR4O/M9k/Wh5dmK5n4qIV5eLfjIVKxqh+aOwfilxELrjOMC2
zjLUrr3VsP4SqBUP+l6TGaowK8OAcMlejNTqXfHfBrikPslIV4mvyOtwNaUso/Hs
e6RyYM4OnYVtVFTF+v5JOJpH+URA40aH6qFTba04FlsxSiris7NyltXNgfkjVSEd
LWSmJYv0Laf+jZ+2gtBzqb3e4tkRytNdwLvccpipUbhy4GmTcfPaR1IaxMME8tIy
g/Cb6Zk16CEsmGmg2Kul0zWDPPU=
-----END CERTIFICATE-----