Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7f/72bf2f-8e34-48a2-849a-a541d1bcee19/1/fGY0W6LD4rVt-SBut_AhHzJGpnc.roa
File:                     fGY0W6LD4rVt-SBut_AhHzJGpnc.roa (raw, json)
Hash identifier:          entHhr+dsdUCRI3CKregQ5Ac4VtLpmbJgh2KNMfL/XY=
Subject key identifier:   7C:66:34:5B:A2:C3:E2:B5:6D:F9:20:6E:B7:F0:21:1F:32:46:A6:77
Certificate issuer:       /CN=9361b5cd696825b74fccba7d97c3d0a2724ef3aa
Certificate serial:       0964D033
Authority key identifier: 93:61:B5:CD:69:68:25:B7:4F:CC:BA:7D:97:C3:D0:A2:72:4E:F3:AA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/k2G1zWloJbdPzLp9l8PQonJO86o.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/7f/72bf2f-8e34-48a2-849a-a541d1bcee19/1/fGY0W6LD4rVt-SBut_AhHzJGpnc.roa
Signing time:             Sat 01 Jan 2022 09:03:54 +0000
ROA not before:           Sat 01 Jan 2022 09:03:54 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     140972
IP address blocks:        2a0e:aa07:e015::/48 maxlen: 48

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 157601843 (0x964d033)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9361b5cd696825b74fccba7d97c3d0a2724ef3aa
        Validity
            Not Before: Jan  1 09:03:54 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=7c66345ba2c3e2b56df9206eb7f0211f3246a677
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:f7:3e:ac:73:24:99:27:8a:46:94:b9:c7:49:
                    7e:43:26:c2:87:03:82:93:62:b1:8f:c2:f8:30:04:
                    c8:a4:71:88:c2:36:45:39:d3:1c:19:c9:c4:ed:78:
                    82:44:fd:07:29:33:fe:f0:a3:79:79:40:09:81:42:
                    04:7e:95:a2:62:62:19:19:d8:e4:d4:2d:74:36:23:
                    e4:50:ae:71:d0:41:f5:63:6e:3d:31:3b:d8:2b:72:
                    d6:3a:0b:cc:78:fb:ba:8e:96:e2:cf:b2:64:f2:f6:
                    11:3a:38:8e:8c:d8:94:2a:fa:08:88:7e:69:70:da:
                    1d:bb:2f:17:d7:7d:42:83:10:81:2a:d6:04:80:d3:
                    91:0a:86:54:96:93:e8:c1:15:18:e3:23:49:bc:f5:
                    73:bb:ff:11:a4:5a:36:87:3d:26:78:12:52:6f:09:
                    34:f3:0f:ab:5c:a5:e5:6d:2f:68:56:cc:91:cd:8b:
                    bd:69:f3:86:fb:42:b9:d0:df:65:52:7f:54:b7:7c:
                    c9:87:fc:ff:58:6c:78:47:3e:04:fe:59:b0:c0:c7:
                    4b:fc:57:fa:54:7c:e4:3b:09:e5:33:aa:1a:af:2b:
                    8d:2c:a5:b6:8a:5a:2a:21:2b:81:6d:8d:78:0f:7b:
                    8a:50:5e:b3:b3:fa:53:35:bb:71:28:1a:28:ac:fb:
                    ba:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7C:66:34:5B:A2:C3:E2:B5:6D:F9:20:6E:B7:F0:21:1F:32:46:A6:77
            X509v3 Authority Key Identifier:
                keyid:93:61:B5:CD:69:68:25:B7:4F:CC:BA:7D:97:C3:D0:A2:72:4E:F3:AA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/k2G1zWloJbdPzLp9l8PQonJO86o.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/72bf2f-8e34-48a2-849a-a541d1bcee19/1/fGY0W6LD4rVt-SBut_AhHzJGpnc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/72bf2f-8e34-48a2-849a-a541d1bcee19/1/k2G1zWloJbdPzLp9l8PQonJO86o.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a0e:aa07:e015::/48

    Signature Algorithm: sha256WithRSAEncryption
         02:28:ce:03:9d:5b:fa:33:ab:e0:d4:52:22:93:45:5b:97:71:
         8b:61:9a:48:cb:c7:a2:dd:55:18:b2:d8:7f:94:92:be:5c:68:
         d9:71:bd:1a:0c:af:e6:00:1e:90:eb:7a:f9:1a:a6:0f:25:bb:
         eb:0a:df:a7:26:28:ce:6e:2c:da:9f:46:df:43:17:91:2b:f7:
         ed:57:33:a8:dc:cb:5e:a1:54:1f:62:40:67:9a:1c:20:ce:1e:
         2a:a6:e7:4c:b7:76:38:8b:d4:50:e8:8d:71:60:dd:44:8d:00:
         b6:49:36:14:8f:62:74:2a:90:5b:f3:05:0c:5d:43:c5:d2:83:
         2f:6c:de:1f:d0:2e:25:80:5e:6a:cd:03:70:01:86:fd:67:dd:
         91:e7:b0:b9:ec:60:55:bc:8f:cb:d3:76:58:26:4a:16:7f:7b:
         27:f4:a1:b9:33:22:38:2f:f9:ea:22:f6:08:32:60:b5:8b:33:
         b9:25:bd:87:a8:cc:c1:ac:48:c8:06:bd:42:ce:c3:24:3a:d5:
         b7:1f:09:58:f1:67:90:38:cf:c6:f2:26:58:ba:1a:00:44:50:
         a4:4f:db:5a:87:78:c0:11:b4:5f:ef:a5:c9:6c:8a:00:8e:a1:
         1c:d9:ae:33:71:9b:00:77:8b:d1:9d:61:e2:9a:7d:c0:dd:a6:
         65:b2:ca:ea
-----BEGIN CERTIFICATE-----
MIIE8jCCA9qgAwIBAgIECWTQMzANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg5
MzYxYjVjZDY5NjgyNWI3NGZjY2JhN2Q5N2MzZDBhMjcyNGVmM2FhMB4XDTIyMDEw
MTA5MDM1NFoXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoN2M2NjM0NWJhMmMz
ZTJiNTZkZjkyMDZlYjdmMDIxMWYzMjQ2YTY3NzCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAKz3PqxzJJknikaUucdJfkMmwocDgpNisY/C+DAEyKRxiMI2
RTnTHBnJxO14gkT9Bykz/vCjeXlACYFCBH6VomJiGRnY5NQtdDYj5FCucdBB9WNu
PTE72Cty1joLzHj7uo6W4s+yZPL2ETo4jozYlCr6CIh+aXDaHbsvF9d9QoMQgSrW
BIDTkQqGVJaT6MEVGOMjSbz1c7v/EaRaNoc9JngSUm8JNPMPq1yl5W0vaFbMkc2L
vWnzhvtCudDfZVJ/VLd8yYf8/1hseEc+BP5ZsMDHS/xX+lR85DsJ5TOqGq8rjSyl
topaKiErgW2NeA97ilBes7P6UzW7cSgaKKz7usECAwEAAaOCAgwwggIIMB0GA1Ud
DgQWBBR8ZjRbosPitW35IG638CEfMkamdzAfBgNVHSMEGDAWgBSTYbXNaWglt0/M
un2Xw9Cick7zqjAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L2syRzF6V2xvSmJkUHpMcDlsOFBRb25KTzg2by5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvN2YvNzJiZjJmLThlMzQtNDhhMi04NDlhLWE1NDFkMWJjZWUxOS8x
L2ZHWTBXNkxENHJWdC1TQnV0X0FoSHpKR3BuYy5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvN2Yv
NzJiZjJmLThlMzQtNDhhMi04NDlhLWE1NDFkMWJjZWUxOS8xL2syRzF6V2xvSmJk
UHpMcDlsOFBRb25KTzg2by5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAi
BggrBgEFBQcBBwEB/wQTMBEwDwQCAAIwCQMHACoOqgfgFTANBgkqhkiG9w0BAQsF
AAOCAQEAAijOA51b+jOr4NRSIpNFW5dxi2GaSMvHot1VGLLYf5SSvlxo2XG9Ggyv
5gAekOt6+RqmDyW76wrfpyYozm4s2p9G30MXkSv37VczqNzLXqFUH2JAZ5ocIM4e
KqbnTLd2OIvUUOiNcWDdRI0Atkk2FI9idCqQW/MFDF1DxdKDL2zeH9AuJYBeas0D
cAGG/WfdkeewuexgVbyPy9N2WCZKFn97J/ShuTMiOC/56iL2CDJgtYszuSW9h6jM
waxIyAa9Qs7DJDrVtx8JWPFnkDjPxvImWLoaAERQpE/bWod4wBG0X++lyWyKAI6h
HNmuM3GbAHeL0Z1h4pp9wN2mZbLK6g==
-----END CERTIFICATE-----