Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9b/91af66-d394-42fa-a0c6-b16cb4dfadd3/1/_Lo0IgaJznll2qJzIJszpg5qumM.roa
File:                     _Lo0IgaJznll2qJzIJszpg5qumM.roa (raw, json)
Hash identifier:          zex2t+8V2ziXK5E30lOnspXkgi/RVvT2aH1JOEsYexM=
Subject key identifier:   FC:BA:34:22:06:89:CE:79:65:DA:A2:73:20:9B:33:A6:0E:6A:BA:63
Certificate issuer:       /CN=827603a93bca31b018f511f6d4b0b7546e963362
Certificate serial:       08BE2CFC
Authority key identifier: 82:76:03:A9:3B:CA:31:B0:18:F5:11:F6:D4:B0:B7:54:6E:96:33:62
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/gnYDqTvKMbAY9RH21LC3VG6WM2I.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/9b/91af66-d394-42fa-a0c6-b16cb4dfadd3/1/_Lo0IgaJznll2qJzIJszpg5qumM.roa
Signing time:             Tue 15 Mar 2022 11:25:34 +0000
ROA not before:           Tue 15 Mar 2022 11:25:34 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     1239
IP address blocks:        2a0e:2b03::/32 maxlen: 32
                          2a0e:2b01::/32 maxlen: 32
                          2a0e:2b05::/32 maxlen: 32
                          2a0e:2b00::/29 maxlen: 29
                          2a0e:2b07::/32 maxlen: 32
                          2a0e:2b04::/32 maxlen: 32
                          2a0e:2b02::/32 maxlen: 32
                          2a0e:2b00::/32 maxlen: 32
                          2a0e:2b06::/32 maxlen: 32

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 146681084 (0x8be2cfc)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=827603a93bca31b018f511f6d4b0b7546e963362
        Validity
            Not Before: Mar 15 11:25:34 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=fcba34220689ce7965daa273209b33a60e6aba63
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:31:17:28:87:8a:12:0c:c5:d0:62:92:01:ab:
                    45:69:a1:3f:69:a7:7b:e0:ed:80:91:8a:46:3e:56:
                    75:1e:27:53:45:f5:f9:95:86:24:3b:87:1a:a3:c8:
                    1f:8a:a2:5b:77:f8:fb:38:ef:ee:97:61:10:ec:d8:
                    f8:d4:bf:cb:cd:e5:24:09:a5:57:62:8c:e9:51:4b:
                    fe:fa:b2:e0:24:82:d4:84:0d:c9:9a:6e:a7:b9:cf:
                    ad:28:5a:0b:44:78:90:5f:86:57:47:d0:8c:f2:5c:
                    fc:c0:8a:1a:c9:a7:ec:0d:cb:39:ca:72:40:25:a0:
                    e0:63:e2:dd:35:91:5b:f2:eb:b8:ce:3d:60:8e:e7:
                    b8:fd:f1:16:f8:ac:ed:b0:ab:c5:a1:00:25:d1:fd:
                    d5:5b:d0:f7:40:7a:56:ea:f0:b3:8a:3b:f2:ca:c4:
                    ec:e4:31:35:32:86:bc:ba:83:6b:52:22:9d:a7:26:
                    0b:a2:87:ea:a7:98:4d:43:57:d7:0e:01:0f:1d:d7:
                    0a:99:35:e8:d0:74:af:a5:12:7a:76:3e:cf:1c:f4:
                    ab:89:77:e0:53:61:17:3c:0c:f3:83:fd:cc:36:fe:
                    0a:12:64:ff:55:28:a8:5b:7d:ad:b9:71:24:e9:60:
                    62:10:3f:44:85:17:c7:ac:94:c8:c6:22:a1:c5:af:
                    7f:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FC:BA:34:22:06:89:CE:79:65:DA:A2:73:20:9B:33:A6:0E:6A:BA:63
            X509v3 Authority Key Identifier:
                keyid:82:76:03:A9:3B:CA:31:B0:18:F5:11:F6:D4:B0:B7:54:6E:96:33:62

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gnYDqTvKMbAY9RH21LC3VG6WM2I.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/91af66-d394-42fa-a0c6-b16cb4dfadd3/1/_Lo0IgaJznll2qJzIJszpg5qumM.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/91af66-d394-42fa-a0c6-b16cb4dfadd3/1/gnYDqTvKMbAY9RH21LC3VG6WM2I.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a0e:2b00::/29

    Signature Algorithm: sha256WithRSAEncryption
         50:c8:ef:d3:ef:a7:47:51:a6:70:a9:72:b2:c1:f8:86:f1:f0:
         23:28:f3:b4:93:4b:7c:8e:09:92:79:89:fa:83:bf:05:4c:78:
         e8:d4:1e:6b:6c:d8:80:d6:f7:9a:e7:32:a0:3a:97:4c:d0:2b:
         b6:4b:d7:b6:18:86:e0:6b:ed:92:5b:66:f0:61:48:12:48:17:
         ee:fb:96:af:09:63:94:79:6f:4e:12:b4:b4:cf:d0:97:7f:45:
         24:90:5c:54:50:40:ea:7e:a6:12:09:96:02:bf:b8:d7:1a:fb:
         83:ba:e2:b0:17:87:e1:62:f8:f7:24:34:40:16:d0:b7:00:bc:
         ac:0e:fd:56:fa:93:3c:d7:68:99:ad:7b:35:6c:62:03:2c:64:
         b4:db:37:4d:27:5f:c4:cf:e4:39:1d:1a:a4:38:70:21:ba:79:
         81:c7:7d:de:36:da:fc:ab:7f:40:7f:24:74:c7:fc:22:e3:54:
         da:1b:a5:f4:5e:3a:f4:35:c1:62:d4:a3:e6:d7:6c:a3:1d:28:
         10:c1:92:84:c7:1c:f2:47:b8:c6:6f:a2:b0:a1:46:54:a3:de:
         8b:69:21:cb:f5:a8:db:20:b6:24:e0:7b:98:93:60:b8:c1:9e:
         4a:d1:9f:06:ba:3d:b0:4f:06:c3:46:28:c3:1a:1b:50:6f:39:
         76:8a:4f:be
-----BEGIN CERTIFICATE-----
MIIE8DCCA9igAwIBAgIECL4s/DANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg4
Mjc2MDNhOTNiY2EzMWIwMThmNTExZjZkNGIwYjc1NDZlOTYzMzYyMB4XDTIyMDMx
NTExMjUzNFoXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoZmNiYTM0MjIwNjg5
Y2U3OTY1ZGFhMjczMjA5YjMzYTYwZTZhYmE2MzCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBALcxFyiHihIMxdBikgGrRWmhP2mne+DtgJGKRj5WdR4nU0X1
+ZWGJDuHGqPIH4qiW3f4+zjv7pdhEOzY+NS/y83lJAmlV2KM6VFL/vqy4CSC1IQN
yZpup7nPrShaC0R4kF+GV0fQjPJc/MCKGsmn7A3LOcpyQCWg4GPi3TWRW/LruM49
YI7nuP3xFvis7bCrxaEAJdH91VvQ90B6Vurws4o78srE7OQxNTKGvLqDa1Iinacm
C6KH6qeYTUNX1w4BDx3XCpk16NB0r6USenY+zxz0q4l34FNhFzwM84P9zDb+ChJk
/1UoqFt9rblxJOlgYhA/RIUXx6yUyMYiocWvf0ECAwEAAaOCAgowggIGMB0GA1Ud
DgQWBBT8ujQiBonOeWXaonMgmzOmDmq6YzAfBgNVHSMEGDAWgBSCdgOpO8oxsBj1
EfbUsLdUbpYzYjAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L2duWURxVHZLTWJBWTlSSDIxTEMzVkc2V00ySS5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvOWIvOTFhZjY2LWQzOTQtNDJmYS1hMGM2LWIxNmNiNGRmYWRkMy8x
L19MbzBJZ2FKem5sbDJxSnpJSnN6cGc1cXVtTS5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvOWIv
OTFhZjY2LWQzOTQtNDJmYS1hMGM2LWIxNmNiNGRmYWRkMy8xL2duWURxVHZLTWJB
WTlSSDIxTEMzVkc2V00ySS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAg
BggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMFAyoOKwAwDQYJKoZIhvcNAQELBQAD
ggEBAFDI79Pvp0dRpnCpcrLB+Ibx8CMo87STS3yOCZJ5ifqDvwVMeOjUHmts2IDW
95rnMqA6l0zQK7ZL17YYhuBr7ZJbZvBhSBJIF+77lq8JY5R5b04StLTP0Jd/RSSQ
XFRQQOp+phIJlgK/uNca+4O64rAXh+Fi+PckNEAW0LcAvKwO/Vb6kzzXaJmtezVs
YgMsZLTbN00nX8TP5DkdGqQ4cCG6eYHHfd422vyrf0B/JHTH/CLjVNobpfReOvQ1
wWLUo+bXbKMdKBDBkoTHHPJHuMZvorChRlSj3otpIcv1qNsgtiTge5iTYLjBnkrR
nwa6PbBPBsNGKMMaG1BvOXaKT74=
-----END CERTIFICATE-----