Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/60/439a10-60c4-4c28-91bf-88d2df10d15b/1/q2Xery8kURlxOnxl4QO9baiDOfU.roa
File:                     q2Xery8kURlxOnxl4QO9baiDOfU.roa (raw, json)
Hash identifier:          E7+qoYdnj1FYQhF7ebMwqHVldhRjTBGucOQQtkJfTDk=
Subject key identifier:   AB:65:DE:AF:2F:24:51:19:71:3A:7C:65:E1:03:BD:6D:A8:83:39:F5
Certificate issuer:       /CN=c45c683cb1eb9c0f49b967e3bd9b8b84cf099bb8
Certificate serial:       0F20EAFD
Authority key identifier: C4:5C:68:3C:B1:EB:9C:0F:49:B9:67:E3:BD:9B:8B:84:CF:09:9B:B8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/xFxoPLHrnA9JuWfjvZuLhM8Jm7g.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/60/439a10-60c4-4c28-91bf-88d2df10d15b/1/q2Xery8kURlxOnxl4QO9baiDOfU.roa
Signing time:             Sat 01 Jan 2022 12:57:31 +0000
ROA not before:           Sat 01 Jan 2022 12:57:31 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     559
IP address blocks:        2a07:290a::/32 maxlen: 32

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 253815549 (0xf20eafd)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c45c683cb1eb9c0f49b967e3bd9b8b84cf099bb8
        Validity
            Not Before: Jan  1 12:57:31 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=ab65deaf2f245119713a7c65e103bd6da88339f5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:81:bd:69:1a:5d:a0:80:60:86:1c:45:c8:1b:
                    7e:c2:c0:33:1c:2b:e9:f1:65:ee:71:df:a9:b0:0c:
                    cc:49:56:96:bb:b9:64:aa:ab:6e:16:f1:84:f3:b9:
                    5b:19:31:c2:d1:52:5d:10:68:c5:68:38:57:e4:56:
                    01:d3:17:a9:c7:ea:c2:6a:89:f0:52:5e:74:dd:22:
                    ca:2c:19:e8:6b:9e:e1:90:89:35:00:d0:cf:ca:b1:
                    78:72:56:9d:e0:c2:4a:7c:73:fa:49:3d:9f:50:dc:
                    3f:82:0c:b7:1f:8a:ab:f3:56:b1:20:ab:75:e3:be:
                    ea:e6:ae:40:6e:58:78:b3:a8:eb:c0:ae:08:34:b5:
                    3b:68:f8:28:4b:c6:ab:a9:e6:25:c2:ca:fa:db:14:
                    61:bc:67:78:ba:47:8c:de:a1:e5:88:1f:99:ea:b1:
                    71:0e:39:f4:c3:90:fc:90:ff:95:98:92:4b:ac:d4:
                    90:c3:c1:31:1f:67:a9:97:01:d1:1d:b6:49:6f:e6:
                    07:bf:40:83:42:76:4b:94:bc:d1:83:76:a9:f1:3b:
                    e6:82:5a:aa:1d:cb:69:6a:84:d2:a3:4e:64:4c:e2:
                    75:55:78:36:58:cd:33:d5:c1:73:ee:f3:97:4d:24:
                    b1:5a:9e:e4:e7:03:be:5e:2f:b0:20:25:a9:26:9e:
                    fb:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AB:65:DE:AF:2F:24:51:19:71:3A:7C:65:E1:03:BD:6D:A8:83:39:F5
            X509v3 Authority Key Identifier:
                keyid:C4:5C:68:3C:B1:EB:9C:0F:49:B9:67:E3:BD:9B:8B:84:CF:09:9B:B8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xFxoPLHrnA9JuWfjvZuLhM8Jm7g.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/60/439a10-60c4-4c28-91bf-88d2df10d15b/1/q2Xery8kURlxOnxl4QO9baiDOfU.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/60/439a10-60c4-4c28-91bf-88d2df10d15b/1/xFxoPLHrnA9JuWfjvZuLhM8Jm7g.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a07:290a::/32

    Signature Algorithm: sha256WithRSAEncryption
         6c:55:07:43:61:49:79:a2:bf:96:bd:09:16:cd:91:4a:2e:f3:
         58:8d:59:76:3b:84:fe:bd:66:55:a1:ec:33:d8:32:41:f5:bf:
         81:9a:07:7a:92:a0:8c:c0:d1:1b:c6:26:75:2c:70:8b:41:77:
         42:c0:07:e7:55:f2:08:b5:eb:77:7c:14:66:2e:0e:c7:f3:e0:
         7a:36:90:be:0c:71:88:d5:a8:a2:83:67:9a:7a:d2:36:d6:c3:
         62:55:c1:ab:87:af:db:2d:e4:11:6b:db:a8:71:c4:c0:ad:33:
         76:7e:50:e4:59:bb:06:29:ce:b4:28:d5:5c:bc:20:e0:9f:d7:
         41:7c:d8:d0:39:da:97:d6:44:b3:24:8f:58:62:10:dc:c7:69:
         ed:f9:e6:49:de:3a:9d:34:6e:22:8b:18:e2:0a:ee:d1:5f:aa:
         f0:68:04:fd:54:2a:23:03:b3:0a:85:36:2f:c3:ea:75:e3:1f:
         1e:28:f4:d0:3b:6e:82:32:d7:36:37:17:0d:ac:37:db:bd:d8:
         dc:ab:63:c6:52:f4:b9:18:33:2f:66:ec:d2:b0:f4:bc:26:f0:
         12:1f:14:9d:d2:72:d5:36:83:35:7a:ee:0d:5c:0a:1b:9d:fe:
         60:9b:14:b1:22:bc:f5:a5:d3:28:17:70:f8:3d:d0:8e:1a:e3:
         55:48:0d:d5
-----BEGIN CERTIFICATE-----
MIIE8DCCA9igAwIBAgIEDyDq/TANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyhj
NDVjNjgzY2IxZWI5YzBmNDliOTY3ZTNiZDliOGI4NGNmMDk5YmI4MB4XDTIyMDEw
MTEyNTczMVoXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoYWI2NWRlYWYyZjI0
NTExOTcxM2E3YzY1ZTEwM2JkNmRhODgzMzlmNTCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBANeBvWkaXaCAYIYcRcgbfsLAMxwr6fFl7nHfqbAMzElWlru5
ZKqrbhbxhPO5WxkxwtFSXRBoxWg4V+RWAdMXqcfqwmqJ8FJedN0iyiwZ6Gue4ZCJ
NQDQz8qxeHJWneDCSnxz+kk9n1DcP4IMtx+Kq/NWsSCrdeO+6uauQG5YeLOo68Cu
CDS1O2j4KEvGq6nmJcLK+tsUYbxneLpHjN6h5YgfmeqxcQ459MOQ/JD/lZiSS6zU
kMPBMR9nqZcB0R22SW/mB79Ag0J2S5S80YN2qfE75oJaqh3LaWqE0qNOZEzidVV4
NljNM9XBc+7zl00ksVqe5OcDvl4vsCAlqSae+8MCAwEAAaOCAgowggIGMB0GA1Ud
DgQWBBSrZd6vLyRRGXE6fGXhA71tqIM59TAfBgNVHSMEGDAWgBTEXGg8seucD0m5
Z+O9m4uEzwmbuDAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L3hGeG9QTEhybkE5SnVXZmp2WnVMaE04Sm03Zy5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvNjAvNDM5YTEwLTYwYzQtNGMyOC05MWJmLTg4ZDJkZjEwZDE1Yi8x
L3EyWGVyeThrVVJseE9ueGw0UU85YmFpRE9mVS5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNjAv
NDM5YTEwLTYwYzQtNGMyOC05MWJmLTg4ZDJkZjEwZDE1Yi8xL3hGeG9QTEhybkE5
SnVXZmp2WnVMaE04Sm03Zy5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAg
BggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMFACoHKQowDQYJKoZIhvcNAQELBQAD
ggEBAGxVB0NhSXmiv5a9CRbNkUou81iNWXY7hP69ZlWh7DPYMkH1v4GaB3qSoIzA
0RvGJnUscItBd0LAB+dV8gi163d8FGYuDsfz4Ho2kL4McYjVqKKDZ5p60jbWw2JV
wauHr9st5BFr26hxxMCtM3Z+UORZuwYpzrQo1Vy8IOCf10F82NA52pfWRLMkj1hi
ENzHae355kneOp00biKLGOIK7tFfqvBoBP1UKiMDswqFNi/D6nXjHx4o9NA7boIy
1zY3Fw2sN9u92NyrY8ZS9LkYMy9m7NKw9Lwm8BIfFJ3SctU2gzV67g1cChud/mCb
FLEivPWl0ygXcPg90I4a41VIDdU=
-----END CERTIFICATE-----