Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6b/9ba66c-bee7-44c9-82e5-d95a5155dd02/1/ZCNaT8FIQA8CdOK0iEYfNAM5lXA.roa
File:                     ZCNaT8FIQA8CdOK0iEYfNAM5lXA.roa (raw, json)
Hash identifier:          XMM3isuzYdTxrbSOBxE6+jCsmWAwyVzs4ji/fgV7Ax4=
Subject key identifier:   64:23:5A:4F:C1:48:40:0F:02:74:E2:B4:88:46:1F:34:03:39:95:70
Certificate issuer:       /CN=11466326406436e31478b7bca2dda16c96d5a964
Certificate serial:       06CA88DD
Authority key identifier: 11:46:63:26:40:64:36:E3:14:78:B7:BC:A2:DD:A1:6C:96:D5:A9:64
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/EUZjJkBkNuMUeLe8ot2hbJbVqWQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/6b/9ba66c-bee7-44c9-82e5-d95a5155dd02/1/ZCNaT8FIQA8CdOK0iEYfNAM5lXA.roa
Signing time:             Sat 01 Jan 2022 11:54:34 +0000
ROA not before:           Sat 01 Jan 2022 11:54:34 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     212270
IP address blocks:        2a0f:9240:2000::/48 maxlen: 48

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 113936605 (0x6ca88dd)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=11466326406436e31478b7bca2dda16c96d5a964
        Validity
            Not Before: Jan  1 11:54:34 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=64235a4fc148400f0274e2b488461f3403399570
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:11:40:a3:91:88:24:2d:9e:c5:08:74:37:02:
                    88:8f:d6:c0:c7:36:e1:ab:69:b8:26:1f:f0:3e:dc:
                    4a:e1:a2:a9:37:88:43:86:81:76:44:7f:9b:d0:5c:
                    6a:2e:af:67:40:c0:ce:a2:fb:9f:b7:a6:ea:e1:09:
                    44:65:9e:07:c8:9d:42:11:63:b4:5c:da:ef:4e:e1:
                    3d:af:4a:02:ef:a6:df:fb:9b:70:f7:90:42:e0:0c:
                    d6:8b:54:3c:b8:14:51:dd:77:43:ae:bc:41:7d:cd:
                    4c:a5:ef:59:68:85:f7:f6:8b:a5:fe:23:d3:48:a7:
                    b0:e0:94:aa:41:1d:e4:6a:61:47:dd:98:9f:a9:91:
                    91:29:d8:2a:9f:ce:ce:5b:7f:f0:d0:ef:70:03:93:
                    0d:57:c6:16:78:e0:45:1a:5a:1e:92:46:b3:6a:d3:
                    e7:77:2b:e3:91:59:75:e2:9c:68:4f:25:96:4e:58:
                    41:9c:a9:1d:69:3e:af:29:ba:2c:0c:88:1c:d2:53:
                    3d:71:64:e0:33:d5:a7:27:fa:94:62:30:0f:84:15:
                    16:9d:1c:f2:12:0a:d1:a9:67:39:41:19:8d:5d:13:
                    8d:10:a4:bf:69:43:53:fa:32:82:91:a5:9e:e6:03:
                    97:48:d0:24:98:57:46:f1:dd:59:33:2b:ca:54:e9:
                    e6:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                64:23:5A:4F:C1:48:40:0F:02:74:E2:B4:88:46:1F:34:03:39:95:70
            X509v3 Authority Key Identifier:
                keyid:11:46:63:26:40:64:36:E3:14:78:B7:BC:A2:DD:A1:6C:96:D5:A9:64

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EUZjJkBkNuMUeLe8ot2hbJbVqWQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/9ba66c-bee7-44c9-82e5-d95a5155dd02/1/ZCNaT8FIQA8CdOK0iEYfNAM5lXA.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/9ba66c-bee7-44c9-82e5-d95a5155dd02/1/EUZjJkBkNuMUeLe8ot2hbJbVqWQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a0f:9240:2000::/48

    Signature Algorithm: sha256WithRSAEncryption
         69:d7:aa:f8:11:b2:8e:42:06:4c:4d:9e:06:15:5b:8f:b9:6b:
         55:89:46:9b:18:05:4a:1b:c0:14:93:ae:e4:dd:6c:6a:bf:b5:
         9f:ef:46:d9:11:0c:33:e9:c9:c0:39:07:8a:b6:d4:4e:4f:33:
         74:23:4f:51:b1:6a:11:11:97:df:9e:b7:5b:7b:76:1c:2e:09:
         73:5e:b4:cc:30:db:ac:e8:76:3d:85:ea:d5:95:7c:1b:9d:a5:
         0f:25:00:65:19:0e:b9:95:ec:20:ef:84:14:96:b3:0d:ba:a2:
         af:33:e4:f7:e9:49:96:7c:ee:2a:6f:33:d1:b9:a8:5c:69:e4:
         d8:3f:2e:a4:80:e8:43:d9:91:07:3c:0d:f3:ce:51:0a:d3:df:
         73:71:7f:3c:65:f4:09:72:03:39:e5:08:4b:a3:06:8a:32:2a:
         2b:23:fc:82:ec:38:1a:1b:1e:6a:eb:bb:73:09:7e:5c:ac:de:
         f6:71:3e:2b:27:82:36:35:5e:c1:8e:57:e8:0e:35:eb:07:ed:
         10:59:24:75:45:71:77:77:9c:3a:3c:7a:c3:7c:09:41:d1:64:
         d8:10:ff:ce:33:67:1b:6e:c2:fb:3a:bb:96:68:d0:b1:24:e7:
         95:28:63:10:92:c8:f7:47:31:14:3a:ff:84:6f:c0:fa:09:43:
         e5:d4:ed:1d
-----BEGIN CERTIFICATE-----
MIIE8jCCA9qgAwIBAgIEBsqI3TANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEygx
MTQ2NjMyNjQwNjQzNmUzMTQ3OGI3YmNhMmRkYTE2Yzk2ZDVhOTY0MB4XDTIyMDEw
MTExNTQzNFoXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoNjQyMzVhNGZjMTQ4
NDAwZjAyNzRlMmI0ODg0NjFmMzQwMzM5OTU3MDCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBALQRQKORiCQtnsUIdDcCiI/WwMc24atpuCYf8D7cSuGiqTeI
Q4aBdkR/m9Bcai6vZ0DAzqL7n7em6uEJRGWeB8idQhFjtFza707hPa9KAu+m3/ub
cPeQQuAM1otUPLgUUd13Q668QX3NTKXvWWiF9/aLpf4j00insOCUqkEd5GphR92Y
n6mRkSnYKp/Ozlt/8NDvcAOTDVfGFnjgRRpaHpJGs2rT53cr45FZdeKcaE8llk5Y
QZypHWk+rym6LAyIHNJTPXFk4DPVpyf6lGIwD4QVFp0c8hIK0alnOUEZjV0TjRCk
v2lDU/oygpGlnuYDl0jQJJhXRvHdWTMrylTp5mcCAwEAAaOCAgwwggIIMB0GA1Ud
DgQWBBRkI1pPwUhADwJ04rSIRh80AzmVcDAfBgNVHSMEGDAWgBQRRmMmQGQ24xR4
t7yi3aFsltWpZDAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L0VVWmpKa0JrTnVNVWVMZThvdDJoYkpiVnFXUS5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvNmIvOWJhNjZjLWJlZTctNDRjOS04MmU1LWQ5NWE1MTU1ZGQwMi8x
L1pDTmFUOEZJUUE4Q2RPSzBpRVlmTkFNNWxYQS5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNmIv
OWJhNjZjLWJlZTctNDRjOS04MmU1LWQ5NWE1MTU1ZGQwMi8xL0VVWmpKa0JrTnVN
VWVMZThvdDJoYkpiVnFXUS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAi
BggrBgEFBQcBBwEB/wQTMBEwDwQCAAIwCQMHACoPkkAgADANBgkqhkiG9w0BAQsF
AAOCAQEAadeq+BGyjkIGTE2eBhVbj7lrVYlGmxgFShvAFJOu5N1sar+1n+9G2REM
M+nJwDkHirbUTk8zdCNPUbFqERGX3563W3t2HC4Jc160zDDbrOh2PYXq1ZV8G52l
DyUAZRkOuZXsIO+EFJazDbqirzPk9+lJlnzuKm8z0bmoXGnk2D8upIDoQ9mRBzwN
885RCtPfc3F/PGX0CXIDOeUIS6MGijIqKyP8guw4Ghseauu7cwl+XKze9nE+KyeC
NjVewY5X6A416wftEFkkdUVxd3ecOjx6w3wJQdFk2BD/zjNnG27C+zq7lmjQsSTn
lShjEJLI90cxFDr/hG/A+glD5dTtHQ==
-----END CERTIFICATE-----