Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/62/9e2351-8dd0-4b70-a5fc-fb774abdfac2/1/1-kwOHACkl6gTiWA0FMYsBJ1Uhzs.roa
File:                     1-kwOHACkl6gTiWA0FMYsBJ1Uhzs.roa (raw, json)
Hash identifier:          6Bky/+RO07dd6Q8PqeQ8HcPfYes82punQSOFUPpqV9U=
Subject key identifier:   FA:4C:0E:1C:00:A4:97:A8:13:89:60:34:14:C6:2C:04:9D:54:87:3B
Certificate issuer:       /CN=746395c12672ad958921b62b9dc9b2bcd8a68a9f
Certificate serial:       0183ECAF411C7DD659440F259EDABE994175
Authority key identifier: 74:63:95:C1:26:72:AD:95:89:21:B6:2B:9D:C9:B2:BC:D8:A6:8A:9F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/dGOVwSZyrZWJIbYrncmyvNimip8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/62/9e2351-8dd0-4b70-a5fc-fb774abdfac2/1/1-kwOHACkl6gTiWA0FMYsBJ1Uhzs.roa
Signing time:             Tue 18 Oct 2022 20:00:51 +0000
ROA not before:           Tue 18 Oct 2022 20:00:51 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     209958
IP address blocks:        2a12:4940::/32 maxlen: 48
                          2a12:4946:4940::/44 maxlen: 48
                          2a12:4946:6960::/44 maxlen: 48
                          2a12:4946:3000::/48 maxlen: 48

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:83:ec:af:41:1c:7d:d6:59:44:0f:25:9e:da:be:99:41:75
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=746395c12672ad958921b62b9dc9b2bcd8a68a9f
        Validity
            Not Before: Oct 18 20:00:51 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=fa4c0e1c00a497a81389603414c62c049d54873b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:54:43:b4:dc:d2:c1:80:da:7f:3b:3d:42:c0:
                    3a:76:51:85:59:2b:51:91:af:75:3e:83:54:7e:ef:
                    93:a3:4c:01:c1:15:79:46:5a:23:1d:bb:e4:c7:df:
                    59:15:e0:3c:67:50:e3:bc:13:01:d4:d5:d7:84:39:
                    a7:70:fc:96:1f:39:14:59:b1:1c:bb:81:df:c5:96:
                    a0:6f:5c:44:18:a9:51:57:3a:6b:5d:bd:4a:0b:50:
                    9b:53:af:10:11:0a:70:eb:e8:bc:46:10:9f:cc:68:
                    d2:71:19:38:9f:d2:db:42:d7:1c:01:94:11:40:de:
                    21:ec:18:22:87:ab:39:a7:83:65:46:74:5c:25:e0:
                    93:fa:67:17:13:5e:d7:74:b0:93:09:1e:e0:4f:ab:
                    f1:01:ad:4d:72:2a:4b:28:f6:3b:d0:0a:4a:17:81:
                    77:2f:03:59:ad:d8:c0:9e:61:6a:7e:6d:c2:40:0c:
                    c3:2d:58:66:a6:76:58:87:a7:a2:3d:03:38:b4:ee:
                    2f:a2:75:70:5c:7e:57:a6:93:b8:7c:e1:c9:70:e4:
                    4e:90:67:dc:5b:18:58:27:f3:18:d7:99:b4:39:f9:
                    b8:90:e9:2a:72:5b:b3:56:ea:ed:81:a0:4d:ec:5a:
                    e5:4a:40:e7:4d:90:e1:a4:93:b2:a3:13:d6:d1:0f:
                    f8:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FA:4C:0E:1C:00:A4:97:A8:13:89:60:34:14:C6:2C:04:9D:54:87:3B
            X509v3 Authority Key Identifier:
                keyid:74:63:95:C1:26:72:AD:95:89:21:B6:2B:9D:C9:B2:BC:D8:A6:8A:9F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dGOVwSZyrZWJIbYrncmyvNimip8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/9e2351-8dd0-4b70-a5fc-fb774abdfac2/1/1-kwOHACkl6gTiWA0FMYsBJ1Uhzs.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/62/9e2351-8dd0-4b70-a5fc-fb774abdfac2/1/dGOVwSZyrZWJIbYrncmyvNimip8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a12:4940::/32
                  2a12:4946:3000::/48
                  2a12:4946:4940::/44
                  2a12:4946:6960::/44

    Signature Algorithm: sha256WithRSAEncryption
         2d:cf:e0:b0:ac:05:e5:2c:cf:df:39:9a:fc:f2:9b:2b:d6:36:
         30:64:2c:57:7f:82:f9:b9:d1:6b:eb:1e:38:9d:2d:a7:0b:81:
         36:21:e8:7b:b2:ce:82:fd:ba:3f:b7:ab:d7:c0:ed:29:22:8d:
         26:b5:b3:91:33:18:dc:9e:15:5b:63:cb:08:ff:a4:1a:1e:d3:
         49:9f:af:97:0f:ef:8d:67:5b:4a:94:09:dd:ce:94:e8:26:df:
         04:ad:25:68:37:92:c0:e2:28:0b:0b:c4:76:7f:dc:4c:6d:b4:
         95:b2:64:ea:c1:ef:d6:64:32:ed:ad:59:bd:97:cf:10:03:62:
         1f:c6:a9:e9:79:39:23:b8:c8:58:ef:12:a2:78:cd:49:91:ee:
         a3:8b:b4:e8:f0:70:50:d1:10:37:bd:07:9e:30:05:3b:74:84:
         2a:95:2d:c3:f9:64:7d:7b:07:5b:65:0f:cc:10:1c:14:04:03:
         fc:23:d3:a8:7f:25:52:5b:18:ad:28:35:27:93:48:b0:bf:f7:
         8e:d0:67:05:6a:40:79:f7:74:8f:e5:92:ec:91:a5:24:27:c1:
         68:0e:af:3c:a4:6a:69:6b:66:1a:81:0a:92:d4:32:24:3f:56:
         38:5a:bd:94:21:1a:08:15:01:64:3d:73:4e:10:06:3e:ff:36:
         36:54:ce:13
-----BEGIN CERTIFICATE-----
MIIFGjCCBAKgAwIBAgISAYPsr0EcfdZZRA8lntq+mUF1MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDc0NjM5NWMxMjY3MmFkOTU4OTIxYjYyYjlkYzliMmJjZDhh
NjhhOWYwHhcNMjIxMDE4MjAwMDUxWhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhmYTRjMGUxYzAwYTQ5N2E4MTM4OTYwMzQxNGM2MmMwNDlkNTQ4NzNiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvlRDtNzSwYDafzs9QsA6dlGFWStR
ka91PoNUfu+To0wBwRV5RlojHbvkx99ZFeA8Z1DjvBMB1NXXhDmncPyWHzkUWbEc
u4HfxZagb1xEGKlRVzprXb1KC1CbU68QEQpw6+i8RhCfzGjScRk4n9LbQtccAZQR
QN4h7Bgih6s5p4NlRnRcJeCT+mcXE17XdLCTCR7gT6vxAa1NcipLKPY70ApKF4F3
LwNZrdjAnmFqfm3CQAzDLVhmpnZYh6eiPQM4tO4vonVwXH5XppO4fOHJcOROkGfc
WxhYJ/MY15m0Ofm4kOkqcluzVurtgaBN7FrlSkDnTZDhpJOyoxPW0Q/4jQIDAQAB
o4ICJjCCAiIwHQYDVR0OBBYEFPpMDhwApJeoE4lgNBTGLASdVIc7MB8GA1UdIwQY
MBaAFHRjlcEmcq2ViSG2K53JsrzYpoqfMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZEdPVndTWnlyWldKSWJZcm5jbXl2TmltaXA4LmNlcjCB
jgYIKwYBBQUHAQsEgYEwfzB9BggrBgEFBQcwC4ZxcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Mi85ZTIzNTEtOGRkMC00YjcwLWE1ZmMt
ZmI3NzRhYmRmYWMyLzEvMS1rd09IQUNrbDZnVGlXQTBGTVlzQkoxVWh6cy5yb2Ew
gYEGA1UdHwR6MHgwdqB0oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0
b3J5L0RFRkFVTFQvNjIvOWUyMzUxLThkZDAtNGI3MC1hNWZjLWZiNzc0YWJkZmFj
Mi8xL2RHT1Z3U1p5clpXSkliWXJuY215dk5pbWlwOC5jcmwwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjA7BggrBgEFBQcBBwEB/wQsMCowKAQCAAIwIgMFACoSSUAD
BwAqEklGMAADBwQqEklGSUADBwQqEklGaWAwDQYJKoZIhvcNAQELBQADggEBAC3P
4LCsBeUsz985mvzymyvWNjBkLFd/gvm50WvrHjidLacLgTYh6HuyzoL9uj+3q9fA
7SkijSa1s5EzGNyeFVtjywj/pBoe00mfr5cP741nW0qUCd3OlOgm3wStJWg3ksDi
KAsLxHZ/3ExttJWyZOrB79ZkMu2tWb2XzxADYh/Gqel5OSO4yFjvEqJ4zUmR7qOL
tOjwcFDREDe9B54wBTt0hCqVLcP5ZH17B1tlD8wQHBQEA/wj06h/JVJbGK0oNSeT
SLC/947QZwVqQHn3dI/lkuyRpSQnwWgOrzykamlrZhqBCpLUMiQ/VjhavZQhGggV
AWQ9c04QBj7/NjZUzhM=
-----END CERTIFICATE-----