Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7d/f0172e-69c2-422f-8296-9e80d0d87c2d/1/m2rZyh9FDePVONNg6-S2SQ_8d9o.roa
File:                     m2rZyh9FDePVONNg6-S2SQ_8d9o.roa (raw, json)
Hash identifier:          j88n5k92Yvvxzes+/XY4SJ/vcjECaEHkKX0E+o3hFJc=
Subject key identifier:   9B:6A:D9:CA:1F:45:0D:E3:D5:38:D3:60:EB:E4:B6:49:0F:FC:77:DA
Certificate issuer:       /CN=73975d5da9da8a074b33fbcb5c09d503a3b443a1
Certificate serial:       15F79F4C
Authority key identifier: 73:97:5D:5D:A9:DA:8A:07:4B:33:FB:CB:5C:09:D5:03:A3:B4:43:A1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/c5ddXanaigdLM_vLXAnVA6O0Q6E.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/7d/f0172e-69c2-422f-8296-9e80d0d87c2d/1/m2rZyh9FDePVONNg6-S2SQ_8d9o.roa
Signing time:             Sat 01 Jan 2022 11:58:16 +0000
ROA not before:           Sat 01 Jan 2022 11:58:16 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     13030
IP address blocks:        2001:67c:2648::/48 maxlen: 48

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 368549708 (0x15f79f4c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73975d5da9da8a074b33fbcb5c09d503a3b443a1
        Validity
            Not Before: Jan  1 11:58:16 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=9b6ad9ca1f450de3d538d360ebe4b6490ffc77da
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:e5:01:f2:ae:22:49:29:f0:e3:d5:84:bf:c2:
                    10:c7:5b:c1:94:b9:3d:0a:51:8d:e0:12:f3:c4:cd:
                    cf:b5:63:d7:ee:cd:23:f5:73:07:49:ae:ee:0e:d4:
                    7e:0f:25:d0:d2:be:5c:a3:44:1e:e6:d8:03:7c:36:
                    2a:07:ad:86:22:95:9c:b1:74:a6:51:93:44:e5:f6:
                    8f:0a:bd:1c:19:8f:0f:e1:b1:cc:02:b4:b1:80:c1:
                    aa:73:8a:3a:c8:ba:51:d9:30:33:65:b1:ed:06:36:
                    e0:9a:b0:4e:ba:81:16:c4:73:d9:c6:9a:02:fc:ae:
                    ad:29:46:4e:c2:75:65:9a:20:0c:61:4b:32:c6:d6:
                    19:4b:32:22:7f:a5:74:fe:6c:b9:7a:5d:18:09:85:
                    53:75:59:dc:e8:28:56:a0:6a:3c:47:09:78:01:43:
                    3b:16:47:df:02:8f:3c:c6:d7:42:81:6a:73:67:9a:
                    2d:01:9a:90:b3:17:09:8c:6f:5c:e8:8f:0d:dd:94:
                    e7:f6:7f:58:cb:92:ae:46:06:54:7b:ea:56:85:7b:
                    1b:89:35:00:55:0d:0d:96:9b:9e:af:f7:b3:ac:1d:
                    38:13:29:8d:d9:c2:bd:e5:14:39:6e:e2:af:58:c8:
                    22:cb:65:7f:4e:11:c3:46:b9:87:52:38:c6:12:24:
                    2e:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9B:6A:D9:CA:1F:45:0D:E3:D5:38:D3:60:EB:E4:B6:49:0F:FC:77:DA
            X509v3 Authority Key Identifier:
                keyid:73:97:5D:5D:A9:DA:8A:07:4B:33:FB:CB:5C:09:D5:03:A3:B4:43:A1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5ddXanaigdLM_vLXAnVA6O0Q6E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/f0172e-69c2-422f-8296-9e80d0d87c2d/1/m2rZyh9FDePVONNg6-S2SQ_8d9o.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/f0172e-69c2-422f-8296-9e80d0d87c2d/1/c5ddXanaigdLM_vLXAnVA6O0Q6E.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:67c:2648::/48

    Signature Algorithm: sha256WithRSAEncryption
         2e:c9:48:a4:32:bd:34:dd:fc:b8:cc:2b:92:b2:86:eb:58:b9:
         f8:5f:73:5d:3d:8d:d6:7f:cf:54:61:56:d1:66:d0:f5:04:75:
         1c:e5:18:89:b6:b7:f1:03:84:fe:fb:a3:81:f5:44:b6:4c:09:
         58:8d:68:dc:d9:e1:6a:ba:de:96:6c:fa:61:b6:3f:fb:1c:a8:
         62:df:78:df:ba:6e:2b:fd:95:91:c4:d7:4a:f4:88:2b:0e:a4:
         c4:de:da:ba:a7:32:94:08:0d:5a:ef:62:0b:db:4c:c2:15:4a:
         56:30:cd:30:ab:9d:c9:43:a7:d4:9d:09:be:dc:fe:cd:a7:f6:
         48:28:c2:b1:5c:4e:e0:1b:6e:4c:eb:9a:d3:8e:d2:6a:a2:a6:
         30:b9:b6:a1:5e:b8:dd:37:67:03:2a:2f:a9:e5:20:64:97:14:
         64:d6:1c:8f:a7:54:49:e7:91:b9:66:a7:d5:b0:89:1d:fc:13:
         ec:27:ec:03:64:4b:a8:d5:bf:97:a5:56:5d:19:bf:0d:03:0c:
         fd:b6:fe:d0:7f:45:34:ef:8c:41:3a:ef:2e:e5:a3:bf:5f:6b:
         cd:79:25:60:f0:32:04:f2:71:35:a4:7c:fe:c8:4f:d3:7d:2f:
         c4:e0:bd:4d:0f:25:0a:88:dd:b6:96:76:38:5c:65:4e:17:f5:
         c2:53:a2:e7
-----BEGIN CERTIFICATE-----
MIIE8jCCA9qgAwIBAgIEFfefTDANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg3
Mzk3NWQ1ZGE5ZGE4YTA3NGIzM2ZiY2I1YzA5ZDUwM2EzYjQ0M2ExMB4XDTIyMDEw
MTExNTgxNloXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoOWI2YWQ5Y2ExZjQ1
MGRlM2Q1MzhkMzYwZWJlNGI2NDkwZmZjNzdkYTCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBALvlAfKuIkkp8OPVhL/CEMdbwZS5PQpRjeAS88TNz7Vj1+7N
I/VzB0mu7g7Ufg8l0NK+XKNEHubYA3w2KgethiKVnLF0plGTROX2jwq9HBmPD+Gx
zAK0sYDBqnOKOsi6UdkwM2Wx7QY24JqwTrqBFsRz2caaAvyurSlGTsJ1ZZogDGFL
MsbWGUsyIn+ldP5suXpdGAmFU3VZ3OgoVqBqPEcJeAFDOxZH3wKPPMbXQoFqc2ea
LQGakLMXCYxvXOiPDd2U5/Z/WMuSrkYGVHvqVoV7G4k1AFUNDZabnq/3s6wdOBMp
jdnCveUUOW7ir1jIIstlf04Rw0a5h1I4xhIkLs8CAwEAAaOCAgwwggIIMB0GA1Ud
DgQWBBSbatnKH0UN49U402Dr5LZJD/x32jAfBgNVHSMEGDAWgBRzl11dqdqKB0sz
+8tcCdUDo7RDoTAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L2M1ZGRYYW5haWdkTE1fdkxYQW5WQTZPMFE2RS5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvN2QvZjAxNzJlLTY5YzItNDIyZi04Mjk2LTllODBkMGQ4N2MyZC8x
L20yclp5aDlGRGVQVk9OTmc2LVMyU1FfOGQ5by5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvN2Qv
ZjAxNzJlLTY5YzItNDIyZi04Mjk2LTllODBkMGQ4N2MyZC8xL2M1ZGRYYW5haWdk
TE1fdkxYQW5WQTZPMFE2RS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAi
BggrBgEFBQcBBwEB/wQTMBEwDwQCAAIwCQMHACABBnwmSDANBgkqhkiG9w0BAQsF
AAOCAQEALslIpDK9NN38uMwrkrKG61i5+F9zXT2N1n/PVGFW0WbQ9QR1HOUYiba3
8QOE/vujgfVEtkwJWI1o3Nnharrelmz6YbY/+xyoYt9437puK/2VkcTXSvSIKw6k
xN7auqcylAgNWu9iC9tMwhVKVjDNMKudyUOn1J0Jvtz+zaf2SCjCsVxO4BtuTOua
047SaqKmMLm2oV643TdnAyovqeUgZJcUZNYcj6dUSeeRuWan1bCJHfwT7CfsA2RL
qNW/l6VWXRm/DQMM/bb+0H9FNO+MQTrvLuWjv19rzXklYPAyBPJxNaR8/shP030v
xOC9TQ8lCojdtpZ2OFxlThf1wlOi5w==
-----END CERTIFICATE-----