Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/80/702a72-3112-4d9f-bba9-8034e2d05d39/1/w9FuVukP1hfnwW_8gGbSkhiXEP0.roa
File:                     w9FuVukP1hfnwW_8gGbSkhiXEP0.roa (raw, json)
Hash identifier:          eBsjlzTCVZtEft7DwQn5Yw8Tg5DzmiI68lhtRIUVTY4=
Subject key identifier:   C3:D1:6E:56:E9:0F:D6:17:E7:C1:6F:FC:80:66:D2:92:18:97:10:FD
Certificate issuer:       /CN=146170cb906ef42d097c6402d83eec3d92677a68
Certificate serial:       14CC76D4
Authority key identifier: 14:61:70:CB:90:6E:F4:2D:09:7C:64:02:D8:3E:EC:3D:92:67:7A:68
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/FGFwy5Bu9C0JfGQC2D7sPZJnemg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/80/702a72-3112-4d9f-bba9-8034e2d05d39/1/w9FuVukP1hfnwW_8gGbSkhiXEP0.roa
Signing time:             Sat 01 Jan 2022 13:56:25 +0000
ROA not before:           Sat 01 Jan 2022 13:56:25 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     201690
IP address blocks:        2a03:22e0::/32 maxlen: 32

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 348944084 (0x14cc76d4)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=146170cb906ef42d097c6402d83eec3d92677a68
        Validity
            Not Before: Jan  1 13:56:25 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=c3d16e56e90fd617e7c16ffc8066d292189710fd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:e2:97:0b:77:d5:70:6b:bb:e8:1a:44:cc:e7:
                    55:4a:33:70:6e:8b:ed:d3:d5:c8:c0:06:79:bc:b0:
                    b5:9e:fa:fa:e6:6c:68:91:16:60:ce:eb:92:f2:5a:
                    9f:5d:5a:fe:e0:5a:48:9d:32:de:f2:de:ce:8a:5a:
                    2e:37:30:a2:6e:c9:2f:9d:72:f2:f0:74:21:fe:f5:
                    f1:1c:82:ca:52:97:92:f0:42:8d:65:c9:01:5a:31:
                    fd:e1:9c:23:07:0c:04:ec:eb:c6:bf:8c:7e:28:77:
                    27:4c:4c:cd:ce:ad:78:b3:e0:19:4e:0e:f9:b6:d8:
                    19:61:69:c7:42:3e:2e:4a:04:fe:9d:57:b8:05:ee:
                    6b:27:59:6b:ea:58:65:1b:58:7a:39:dc:95:40:aa:
                    96:e3:37:c3:8a:f1:37:22:0f:a9:db:df:ca:9a:a1:
                    aa:bf:2f:dc:72:fc:7f:1b:dc:5a:30:97:e7:c7:6d:
                    56:d9:4d:d7:19:6c:76:d5:af:bc:f8:03:1e:65:ee:
                    b5:27:e1:3e:44:2b:86:6a:8c:73:fc:14:e1:76:b0:
                    1b:3f:ff:23:05:ed:a9:35:eb:ce:e7:d5:89:4a:8e:
                    38:7d:c0:f4:34:bc:35:43:83:52:2d:e8:ba:03:a7:
                    f9:df:3c:13:de:38:d0:42:5c:c4:8b:06:a6:a1:4a:
                    ba:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C3:D1:6E:56:E9:0F:D6:17:E7:C1:6F:FC:80:66:D2:92:18:97:10:FD
            X509v3 Authority Key Identifier:
                keyid:14:61:70:CB:90:6E:F4:2D:09:7C:64:02:D8:3E:EC:3D:92:67:7A:68

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FGFwy5Bu9C0JfGQC2D7sPZJnemg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/702a72-3112-4d9f-bba9-8034e2d05d39/1/w9FuVukP1hfnwW_8gGbSkhiXEP0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/80/702a72-3112-4d9f-bba9-8034e2d05d39/1/FGFwy5Bu9C0JfGQC2D7sPZJnemg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a03:22e0::/32

    Signature Algorithm: sha256WithRSAEncryption
         04:73:80:62:d1:03:ec:8f:8f:1e:72:ee:a0:2a:8c:28:7d:c7:
         48:8a:7e:a9:5d:95:68:25:2a:c3:85:75:08:0e:bb:6e:57:79:
         ed:f9:10:68:e8:fb:6c:a8:f4:c3:4e:1c:ef:08:9d:18:99:cf:
         79:9b:66:ca:2e:7e:79:fb:39:3a:bf:52:0c:22:76:ce:21:09:
         75:fc:3c:0e:68:a6:f2:ae:85:8a:d5:cc:35:c8:f3:c3:e0:ec:
         8b:86:cf:ad:76:3e:33:ce:15:d6:0d:e4:8f:64:f8:09:3f:de:
         3c:f0:a8:0b:6c:99:05:0b:88:9a:4b:8e:64:8e:fa:2d:e0:39:
         58:4f:06:e6:c5:06:36:08:5b:88:1a:98:a4:78:8e:52:e6:7b:
         b1:7c:50:77:f2:d3:44:e2:84:d1:ca:e8:4a:49:37:37:93:17:
         4d:df:42:4e:ef:1e:92:91:00:50:ac:2e:6c:0c:0e:ac:e4:14:
         16:47:51:68:a5:78:8d:74:e3:8f:75:8e:00:69:14:b6:85:7e:
         ee:70:e7:5f:04:fe:6d:fb:38:7c:0c:29:f1:be:78:d5:be:7e:
         ab:e9:4a:c0:4d:d1:7e:de:61:00:30:56:fb:30:4e:83:dc:4c:
         d7:2b:95:39:cc:06:13:4a:b9:14:a5:9a:72:cb:2d:22:8a:ae:
         45:29:90:c0
-----BEGIN CERTIFICATE-----
MIIE8DCCA9igAwIBAgIEFMx21DANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEygx
NDYxNzBjYjkwNmVmNDJkMDk3YzY0MDJkODNlZWMzZDkyNjc3YTY4MB4XDTIyMDEw
MTEzNTYyNVoXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoYzNkMTZlNTZlOTBm
ZDYxN2U3YzE2ZmZjODA2NmQyOTIxODk3MTBmZDCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAMnilwt31XBru+gaRMznVUozcG6L7dPVyMAGebywtZ76+uZs
aJEWYM7rkvJan11a/uBaSJ0y3vLezopaLjcwom7JL51y8vB0If718RyCylKXkvBC
jWXJAVox/eGcIwcMBOzrxr+Mfih3J0xMzc6teLPgGU4O+bbYGWFpx0I+LkoE/p1X
uAXuaydZa+pYZRtYejnclUCqluM3w4rxNyIPqdvfypqhqr8v3HL8fxvcWjCX58dt
VtlN1xlsdtWvvPgDHmXutSfhPkQrhmqMc/wU4XawGz//IwXtqTXrzufViUqOOH3A
9DS8NUODUi3ougOn+d88E9440EJcxIsGpqFKunkCAwEAAaOCAgowggIGMB0GA1Ud
DgQWBBTD0W5W6Q/WF+fBb/yAZtKSGJcQ/TAfBgNVHSMEGDAWgBQUYXDLkG70LQl8
ZALYPuw9kmd6aDAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L0ZHRnd5NUJ1OUMwSmZHUUMyRDdzUFpKbmVtZy5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvODAvNzAyYTcyLTMxMTItNGQ5Zi1iYmE5LTgwMzRlMmQwNWQzOS8x
L3c5RnVWdWtQMWhmbndXXzhnR2JTa2hpWEVQMC5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvODAv
NzAyYTcyLTMxMTItNGQ5Zi1iYmE5LTgwMzRlMmQwNWQzOS8xL0ZHRnd5NUJ1OUMw
SmZHUUMyRDdzUFpKbmVtZy5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAg
BggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMFACoDIuAwDQYJKoZIhvcNAQELBQAD
ggEBAARzgGLRA+yPjx5y7qAqjCh9x0iKfqldlWglKsOFdQgOu25Xee35EGjo+2yo
9MNOHO8InRiZz3mbZsoufnn7OTq/Ugwids4hCXX8PA5opvKuhYrVzDXI88Pg7IuG
z612PjPOFdYN5I9k+Ak/3jzwqAtsmQULiJpLjmSO+i3gOVhPBubFBjYIW4gamKR4
jlLme7F8UHfy00TihNHK6EpJNzeTF03fQk7vHpKRAFCsLmwMDqzkFBZHUWileI10
4491jgBpFLaFfu5w518E/m37OHwMKfG+eNW+fqvpSsBN0X7eYQAwVvswToPcTNcr
lTnMBhNKuRSlmnLLLSKKrkUpkMA=
-----END CERTIFICATE-----