Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a9/6b0798-3d4f-40e6-b739-cc1c9b5f6640/1/kDymGnXALRg9i2H6HrCmBoUu5SA.roa
File:                     kDymGnXALRg9i2H6HrCmBoUu5SA.roa (raw, json)
Hash identifier:          WQTNvUlXm3inamfk5AmGgFMKVIakRgt+llSviqGbSPc=
Subject key identifier:   90:3C:A6:1A:75:C0:2D:18:3D:8B:61:FA:1E:B0:A6:06:85:2E:E5:20
Certificate issuer:       /CN=4a644c1156851803f37adeec0876ccf989d5aef0
Certificate serial:       08004992
Authority key identifier: 4A:64:4C:11:56:85:18:03:F3:7A:DE:EC:08:76:CC:F9:89:D5:AE:F0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/SmRMEVaFGAPzet7sCHbM-YnVrvA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a9/6b0798-3d4f-40e6-b739-cc1c9b5f6640/1/kDymGnXALRg9i2H6HrCmBoUu5SA.roa
Signing time:             Sat 01 Jan 2022 06:55:43 +0000
ROA not before:           Sat 01 Jan 2022 06:55:43 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     44592
IP address blocks:        2a0f:5707:aae0::/44 maxlen: 48

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 134236562 (0x8004992)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4a644c1156851803f37adeec0876ccf989d5aef0
        Validity
            Not Before: Jan  1 06:55:43 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=903ca61a75c02d183d8b61fa1eb0a606852ee520
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:f0:ed:0e:ee:dc:f0:3e:ca:fe:0f:78:87:0b:
                    d9:e9:cf:07:6e:58:21:c5:b3:f7:c5:41:53:3e:84:
                    9e:df:c5:f6:5d:76:07:20:67:ad:5f:8b:ad:85:9d:
                    14:c7:1c:07:82:6a:66:57:ed:3f:c4:8d:48:91:b9:
                    49:d5:1e:5f:37:16:f5:fc:ef:b0:89:bc:9b:53:44:
                    dd:e0:a3:a9:6c:ca:b4:8f:4b:10:87:e6:31:4e:48:
                    29:7a:37:a0:4a:03:47:07:9b:80:78:82:a6:d9:6b:
                    3f:21:5a:33:f0:cf:c6:e9:d4:39:af:71:c2:d7:a0:
                    d9:95:4a:6c:9d:0a:f1:d1:d0:44:29:7a:12:ce:cd:
                    09:1c:5a:fa:2e:be:4f:40:a9:12:bc:a9:36:ff:77:
                    11:93:10:64:e6:62:29:fb:c8:f3:b7:02:99:21:a5:
                    e4:2d:56:3a:a6:ef:62:f3:eb:81:c1:c8:a8:3d:c6:
                    3b:52:b6:42:1d:c2:db:27:c0:05:d5:82:65:28:7d:
                    3b:c0:7e:3e:21:67:b1:60:99:3d:33:8e:1c:f5:c0:
                    b6:ee:80:66:1b:80:33:79:35:7d:6a:e3:c0:be:1d:
                    75:a8:02:d9:b8:02:32:29:92:1b:4f:c5:18:47:09:
                    fa:34:f3:ed:0c:c2:c0:1e:f9:e7:45:7e:db:ee:c0:
                    91:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                90:3C:A6:1A:75:C0:2D:18:3D:8B:61:FA:1E:B0:A6:06:85:2E:E5:20
            X509v3 Authority Key Identifier:
                keyid:4A:64:4C:11:56:85:18:03:F3:7A:DE:EC:08:76:CC:F9:89:D5:AE:F0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SmRMEVaFGAPzet7sCHbM-YnVrvA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/6b0798-3d4f-40e6-b739-cc1c9b5f6640/1/kDymGnXALRg9i2H6HrCmBoUu5SA.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/6b0798-3d4f-40e6-b739-cc1c9b5f6640/1/SmRMEVaFGAPzet7sCHbM-YnVrvA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a0f:5707:aae0::/44

    Signature Algorithm: sha256WithRSAEncryption
         91:70:de:b9:ec:b6:37:ea:a1:c6:49:3c:05:3b:c4:3f:3a:2b:
         70:3e:89:b3:14:fb:76:28:ee:40:8f:95:87:ae:98:48:44:11:
         dd:a5:c5:dc:2b:f1:cc:2d:9e:07:6f:0b:46:0a:40:b1:48:25:
         10:2d:c5:bd:2e:42:07:2c:f8:d5:75:0a:47:bb:ba:6c:8c:d5:
         61:1d:0a:52:d1:4a:02:f8:57:b4:8b:fc:7b:c8:7c:ec:34:0a:
         18:24:9d:d3:f8:fe:6c:dc:11:8a:c0:55:3e:b3:db:c5:08:2f:
         58:ce:55:41:04:05:08:a2:bd:a2:bd:5d:04:05:e9:08:97:1b:
         92:de:23:ba:7a:cb:31:d8:55:12:c9:ee:a8:38:bc:08:f1:89:
         86:b9:55:41:ab:5a:84:30:c5:21:1c:30:b1:39:76:1f:c2:fb:
         71:6f:7c:8f:2a:08:10:0e:0c:d8:74:fb:8c:bf:b1:c7:98:38:
         62:7d:bc:42:e4:6d:7a:13:0f:35:2b:3b:74:da:e0:41:18:4f:
         eb:7d:b3:7f:cb:09:58:48:d8:27:7d:28:b4:45:3b:d1:9a:ef:
         dc:9e:66:a0:2d:89:e5:10:45:c9:6b:82:f6:92:3b:47:8a:5e:
         38:a5:b1:af:70:f7:cb:2d:50:eb:cb:8a:be:4e:8a:58:65:b7:
         50:13:01:82
-----BEGIN CERTIFICATE-----
MIIE8jCCA9qgAwIBAgIECABJkjANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg0
YTY0NGMxMTU2ODUxODAzZjM3YWRlZWMwODc2Y2NmOTg5ZDVhZWYwMB4XDTIyMDEw
MTA2NTU0M1oXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoOTAzY2E2MWE3NWMw
MmQxODNkOGI2MWZhMWViMGE2MDY4NTJlZTUyMDCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAM3w7Q7u3PA+yv4PeIcL2enPB25YIcWz98VBUz6Ent/F9l12
ByBnrV+LrYWdFMccB4JqZlftP8SNSJG5SdUeXzcW9fzvsIm8m1NE3eCjqWzKtI9L
EIfmMU5IKXo3oEoDRwebgHiCptlrPyFaM/DPxunUOa9xwteg2ZVKbJ0K8dHQRCl6
Es7NCRxa+i6+T0CpErypNv93EZMQZOZiKfvI87cCmSGl5C1WOqbvYvPrgcHIqD3G
O1K2Qh3C2yfABdWCZSh9O8B+PiFnsWCZPTOOHPXAtu6AZhuAM3k1fWrjwL4ddagC
2bgCMimSG0/FGEcJ+jTz7QzCwB7550V+2+7AkY8CAwEAAaOCAgwwggIIMB0GA1Ud
DgQWBBSQPKYadcAtGD2LYfoesKYGhS7lIDAfBgNVHSMEGDAWgBRKZEwRVoUYA/N6
3uwIdsz5idWu8DAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L1NtUk1FVmFGR0FQemV0N3NDSGJNLVluVnJ2QS5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvYTkvNmIwNzk4LTNkNGYtNDBlNi1iNzM5LWNjMWM5YjVmNjY0MC8x
L2tEeW1HblhBTFJnOWkySDZIckNtQm9VdTVTQS5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYTkv
NmIwNzk4LTNkNGYtNDBlNi1iNzM5LWNjMWM5YjVmNjY0MC8xL1NtUk1FVmFGR0FQ
emV0N3NDSGJNLVluVnJ2QS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAi
BggrBgEFBQcBBwEB/wQTMBEwDwQCAAIwCQMHBCoPVweq4DANBgkqhkiG9w0BAQsF
AAOCAQEAkXDeuey2N+qhxkk8BTvEPzorcD6JsxT7dijuQI+Vh66YSEQR3aXF3Cvx
zC2eB28LRgpAsUglEC3FvS5CByz41XUKR7u6bIzVYR0KUtFKAvhXtIv8e8h87DQK
GCSd0/j+bNwRisBVPrPbxQgvWM5VQQQFCKK9or1dBAXpCJcbkt4junrLMdhVEsnu
qDi8CPGJhrlVQatahDDFIRwwsTl2H8L7cW98jyoIEA4M2HT7jL+xx5g4Yn28QuRt
ehMPNSs7dNrgQRhP632zf8sJWEjYJ30otEU70Zrv3J5moC2J5RBFyWuC9pI7R4pe
OKWxr3D3yy1Q68uKvk6KWGW3UBMBgg==
-----END CERTIFICATE-----