Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a9/6b0798-3d4f-40e6-b739-cc1c9b5f6640/1/d_EuOCwquMhh0tywaV7j-buMDO4.roa
File:                     d_EuOCwquMhh0tywaV7j-buMDO4.roa (raw, json)
Hash identifier:          CxfkTmsG1ww1/3sj+R6R4fvfVpFLGHt1cXwUJf5nD/w=
Subject key identifier:   77:F1:2E:38:2C:2A:B8:C8:61:D2:DC:B0:69:5E:E3:F9:BB:8C:0C:EE
Certificate issuer:       /CN=4a644c1156851803f37adeec0876ccf989d5aef0
Certificate serial:       090C0100
Authority key identifier: 4A:64:4C:11:56:85:18:03:F3:7A:DE:EC:08:76:CC:F9:89:D5:AE:F0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/SmRMEVaFGAPzet7sCHbM-YnVrvA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a9/6b0798-3d4f-40e6-b739-cc1c9b5f6640/1/d_EuOCwquMhh0tywaV7j-buMDO4.roa
Signing time:             Fri 08 Apr 2022 09:09:00 +0000
ROA not before:           Fri 08 Apr 2022 09:09:00 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     49581
IP address blocks:        2a0f:5707:aae0::/44 maxlen: 48

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 151781632 (0x90c0100)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4a644c1156851803f37adeec0876ccf989d5aef0
        Validity
            Not Before: Apr  8 09:09:00 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=77f12e382c2ab8c861d2dcb0695ee3f9bb8c0cee
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e4:39:1d:e5:32:b8:4c:69:ba:34:01:21:20:cb:
                    b6:a8:5c:91:47:b4:7b:da:d5:3a:f6:58:f8:4a:9d:
                    f2:f9:f8:76:a9:60:03:d7:d4:8f:8b:7d:0d:32:45:
                    9f:25:36:73:67:9d:36:5a:a5:b8:a1:7a:f8:26:f4:
                    d8:28:6f:33:41:c5:44:bd:52:10:86:28:1f:ef:58:
                    17:54:6d:79:3a:f6:c3:08:df:b5:23:b5:a1:5c:98:
                    66:2c:90:91:a5:09:ab:48:e6:d5:43:2a:52:2a:88:
                    3d:cd:9d:1b:38:e6:93:39:9d:27:11:b7:97:09:6c:
                    10:ac:d1:d2:27:f8:a8:45:72:3d:f4:20:2e:0d:c5:
                    6b:fd:f9:42:46:b7:64:a9:85:75:30:94:bd:a2:b3:
                    15:87:1b:b0:a3:d2:46:fc:a5:fd:93:95:00:2f:96:
                    5a:91:38:60:59:33:f9:4b:8e:e6:99:48:58:3a:fb:
                    ac:b5:38:c3:15:b0:a8:6f:ac:4a:3d:2e:c3:1a:a9:
                    90:34:68:20:d0:8b:51:29:45:50:07:00:ba:0f:80:
                    fb:84:ff:40:20:9c:5e:f5:98:36:d7:f1:fc:1f:78:
                    92:4b:a0:45:d5:3f:24:ad:33:0c:fc:a6:ec:3a:27:
                    a6:63:47:e6:bd:d0:0b:0b:e8:a0:de:e0:53:93:74:
                    2d:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                77:F1:2E:38:2C:2A:B8:C8:61:D2:DC:B0:69:5E:E3:F9:BB:8C:0C:EE
            X509v3 Authority Key Identifier:
                keyid:4A:64:4C:11:56:85:18:03:F3:7A:DE:EC:08:76:CC:F9:89:D5:AE:F0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SmRMEVaFGAPzet7sCHbM-YnVrvA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/6b0798-3d4f-40e6-b739-cc1c9b5f6640/1/d_EuOCwquMhh0tywaV7j-buMDO4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/6b0798-3d4f-40e6-b739-cc1c9b5f6640/1/SmRMEVaFGAPzet7sCHbM-YnVrvA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a0f:5707:aae0::/44

    Signature Algorithm: sha256WithRSAEncryption
         75:94:97:4b:c0:0a:41:b6:bb:89:be:bd:21:c6:e0:da:ea:bd:
         e9:d5:54:6a:86:94:6c:a6:1b:8b:9f:11:0a:f5:6d:3b:6f:d4:
         a0:9d:a9:b8:5c:b2:4c:70:c0:e9:8e:0c:df:c7:e3:5d:b5:8d:
         9f:59:9e:6d:1e:5f:dc:27:d7:e7:29:bb:3a:22:5b:aa:35:e5:
         cd:f5:cb:ca:80:79:b8:db:43:2c:9a:42:6c:e3:06:8c:7d:4f:
         ba:20:87:55:7d:cb:ad:1d:73:d6:e9:90:93:7f:42:0c:60:e0:
         41:30:b0:b3:f6:3e:78:15:7c:cf:dc:17:f0:47:8a:92:e3:25:
         94:75:70:c5:12:f9:ed:31:9e:e0:36:6f:2d:4a:40:50:2d:2a:
         49:e8:18:05:92:8a:62:3d:9e:2d:0b:12:fd:68:54:3f:f5:d2:
         32:41:2a:25:9e:2d:dc:7c:93:22:da:b6:36:a4:ef:e1:6d:73:
         3b:77:b0:07:02:32:cd:4f:02:6f:e0:d0:95:96:ef:f5:6b:c0:
         cf:f7:54:fd:c7:1f:13:77:52:a3:6f:f7:3d:b9:ee:e2:d9:72:
         e4:44:c0:59:37:92:8d:7c:00:3c:69:30:a7:ed:44:7e:a6:b2:
         59:b8:71:25:30:8c:93:e6:72:a3:9e:77:d5:41:6a:fa:d4:15:
         4c:79:b3:a8
-----BEGIN CERTIFICATE-----
MIIE8jCCA9qgAwIBAgIECQwBADANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg0
YTY0NGMxMTU2ODUxODAzZjM3YWRlZWMwODc2Y2NmOTg5ZDVhZWYwMB4XDTIyMDQw
ODA5MDkwMFoXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoNzdmMTJlMzgyYzJh
YjhjODYxZDJkY2IwNjk1ZWUzZjliYjhjMGNlZTCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAOQ5HeUyuExpujQBISDLtqhckUe0e9rVOvZY+Eqd8vn4dqlg
A9fUj4t9DTJFnyU2c2edNlqluKF6+Cb02ChvM0HFRL1SEIYoH+9YF1RteTr2wwjf
tSO1oVyYZiyQkaUJq0jm1UMqUiqIPc2dGzjmkzmdJxG3lwlsEKzR0if4qEVyPfQg
Lg3Fa/35Qka3ZKmFdTCUvaKzFYcbsKPSRvyl/ZOVAC+WWpE4YFkz+UuO5plIWDr7
rLU4wxWwqG+sSj0uwxqpkDRoINCLUSlFUAcAug+A+4T/QCCcXvWYNtfx/B94kkug
RdU/JK0zDPym7DonpmNH5r3QCwvooN7gU5N0LSMCAwEAAaOCAgwwggIIMB0GA1Ud
DgQWBBR38S44LCq4yGHS3LBpXuP5u4wM7jAfBgNVHSMEGDAWgBRKZEwRVoUYA/N6
3uwIdsz5idWu8DAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L1NtUk1FVmFGR0FQemV0N3NDSGJNLVluVnJ2QS5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvYTkvNmIwNzk4LTNkNGYtNDBlNi1iNzM5LWNjMWM5YjVmNjY0MC8x
L2RfRXVPQ3dxdU1oaDB0eXdhVjdqLWJ1TURPNC5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYTkv
NmIwNzk4LTNkNGYtNDBlNi1iNzM5LWNjMWM5YjVmNjY0MC8xL1NtUk1FVmFGR0FQ
emV0N3NDSGJNLVluVnJ2QS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAi
BggrBgEFBQcBBwEB/wQTMBEwDwQCAAIwCQMHBCoPVweq4DANBgkqhkiG9w0BAQsF
AAOCAQEAdZSXS8AKQba7ib69Icbg2uq96dVUaoaUbKYbi58RCvVtO2/UoJ2puFyy
THDA6Y4M38fjXbWNn1mebR5f3CfX5ym7OiJbqjXlzfXLyoB5uNtDLJpCbOMGjH1P
uiCHVX3LrR1z1umQk39CDGDgQTCws/Y+eBV8z9wX8EeKkuMllHVwxRL57TGe4DZv
LUpAUC0qSegYBZKKYj2eLQsS/WhUP/XSMkEqJZ4t3HyTItq2NqTv4W1zO3ewBwIy
zU8Cb+DQlZbv9WvAz/dU/ccfE3dSo2/3Pbnu4tly5ETAWTeSjXwAPGkwp+1Efqay
WbhxJTCMk+Zyo5531UFq+tQVTHmzqA==
-----END CERTIFICATE-----