Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/zzhLT2qCb4I7oQwomKnwa8HCh60.roa
File:                     zzhLT2qCb4I7oQwomKnwa8HCh60.roa (raw, json)
Hash identifier:          mOQXzAHxeN0iRsF5BHp7zt0qCNnIwY7/xngk1NqlZy8=
Subject key identifier:   CF:38:4B:4F:6A:82:6F:82:3B:A1:0C:28:98:A9:F0:6B:C1:C2:87:AD
Certificate issuer:       /CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Certificate serial:       018870ACFCBF4CC20EBEB63F8955CEDD061A
Authority key identifier: 7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/zzhLT2qCb4I7oQwomKnwa8HCh60.roa
Signing time:             Wed 31 May 2023 07:19:25 +0000
ROA not before:           Wed 31 May 2023 07:19:25 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     32489
IP address blocks:        2a13:9580::/29 maxlen: 29
                          2a13:f900::/29 maxlen: 29
                          2a13:cf00::/29 maxlen: 29
                          2a13:9080::/29 maxlen: 29
                          2a13:9680::/29 maxlen: 29
                          2a13:9180::/29 maxlen: 29
                          2a13:8c80::/29 maxlen: 29
                          2a13:fb00::/29 maxlen: 29
                          2a13:d100::/29 maxlen: 29
                          2a13:e100::/29 maxlen: 29
                          2a13:9380::/29 maxlen: 29
                          2a13:d300::/29 maxlen: 29
                          2a13:9480::/29 maxlen: 29
Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:88:70:ac:fc:bf:4c:c2:0e:be:b6:3f:89:55:ce:dd:06:1a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
        Validity
            Not Before: May 31 07:19:25 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=cf384b4f6a826f823ba10c2898a9f06bc1c287ad
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:29:70:cc:57:b8:77:ec:bf:c1:63:98:be:e1:
                    1e:88:f8:67:99:3b:13:b7:bc:2e:92:d2:ad:3c:29:
                    d9:51:c3:3a:0c:c8:08:cf:66:6e:51:1a:6e:2a:da:
                    4d:ca:fa:93:8e:1c:37:18:5a:68:38:41:11:ff:53:
                    83:70:ea:86:0f:2d:a0:05:7a:99:aa:29:f1:3e:6a:
                    68:e7:a4:a8:8c:00:07:23:40:da:1c:35:8a:4f:e3:
                    c1:0e:6c:70:c2:ad:41:40:48:32:83:70:1d:61:a5:
                    e9:bd:03:0c:c7:b8:ec:33:ea:08:21:e9:39:96:be:
                    d0:93:91:40:d5:f0:b2:e4:b9:26:ee:e2:15:d3:7a:
                    4a:98:db:fc:15:3e:5a:f5:0b:c6:e0:50:9c:a2:61:
                    ea:16:55:68:a0:c3:6a:32:a2:d1:af:9c:2a:98:72:
                    ac:76:97:3d:9c:9b:84:81:3d:d0:e4:0c:1b:bc:57:
                    da:1c:62:a3:c3:f1:43:e9:1f:26:3e:28:0b:38:91:
                    f3:37:c1:95:9e:a8:bb:f3:ed:ac:cb:b6:17:e0:ec:
                    50:c3:bb:f7:60:ab:5c:65:e9:3c:34:17:8e:3b:30:
                    54:ad:08:c8:d2:3a:a8:ed:e3:6e:40:f5:7e:77:87:
                    7d:52:b5:dd:b9:ab:91:9c:67:45:dc:18:ec:1d:2d:
                    89:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CF:38:4B:4F:6A:82:6F:82:3B:A1:0C:28:98:A9:F0:6B:C1:C2:87:AD
            X509v3 Authority Key Identifier:
                keyid:7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/zzhLT2qCb4I7oQwomKnwa8HCh60.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a13:8c80::/29
                  2a13:9080::/29
                  2a13:9180::/29
                  2a13:9380::/29
                  2a13:9480::/29
                  2a13:9580::/29
                  2a13:9680::/29
                  2a13:cf00::/29
                  2a13:d100::/29
                  2a13:d300::/29
                  2a13:e100::/29
                  2a13:f900::/29
                  2a13:fb00::/29

    Signature Algorithm: sha256WithRSAEncryption
         ce:e0:9b:4a:33:1e:d2:8f:cd:ac:fd:eb:39:f1:f1:64:5d:20:
         26:a2:b4:f5:e8:01:b9:bb:a9:b6:2d:57:05:54:0f:95:73:db:
         ad:f7:b3:3f:ee:ed:4e:c5:67:f4:47:c0:2a:93:73:1c:40:bd:
         dc:1c:e3:7e:a3:7b:4f:41:9e:8c:17:e3:ea:93:a8:53:e9:4f:
         ed:ab:40:71:55:75:35:2b:ff:85:47:56:3c:af:b0:89:d9:96:
         c4:37:5f:64:1a:53:4d:7d:4a:5d:88:74:96:4c:35:5d:eb:96:
         e8:e7:71:20:1d:da:9c:2b:bc:d8:1d:68:4c:c2:d3:74:f6:42:
         64:b6:7b:c7:6f:99:a7:05:b5:1d:8f:db:b4:3a:4d:96:ef:21:
         0d:d9:84:d7:68:ec:8d:f6:c6:2c:82:d5:4f:29:0b:7d:36:99:
         00:6b:a7:a5:ba:cd:09:28:05:53:17:96:58:e8:56:68:3f:98:
         c2:34:5f:6b:f9:1a:2d:b0:b8:ac:7d:8d:d7:63:ff:4d:8e:35:
         28:25:0c:83:b0:fb:d4:7c:fc:50:92:9e:63:fa:64:57:85:d0:
         fc:0f:e6:e8:3f:ec:8f:0f:de:22:b4:a9:92:92:aa:31:23:b2:
         f0:e4:72:14:9c:d9:35:b5:2f:a2:26:b7:b2:c1:98:b2:f1:35:
         f5:42:14:e0
-----BEGIN CERTIFICATE-----
MIIFUjCCBDqgAwIBAgISAYhwrPy/TMIOvrY/iVXO3QYaMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDdkNTU5YWFmYmZjMDkzMTI0MmUxZDYzNzI5OGNmMWRkMjIz
ZTRjMjYwHhcNMjMwNTMxMDcxOTI1WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhjZjM4NGI0ZjZhODI2ZjgyM2JhMTBjMjg5OGE5ZjA2YmMxYzI4N2FkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoClwzFe4d+y/wWOYvuEeiPhnmTsT
t7wuktKtPCnZUcM6DMgIz2ZuURpuKtpNyvqTjhw3GFpoOEER/1ODcOqGDy2gBXqZ
qinxPmpo56SojAAHI0DaHDWKT+PBDmxwwq1BQEgyg3AdYaXpvQMMx7jsM+oIIek5
lr7Qk5FA1fCy5Lkm7uIV03pKmNv8FT5a9QvG4FCcomHqFlVooMNqMqLRr5wqmHKs
dpc9nJuEgT3Q5AwbvFfaHGKjw/FD6R8mPigLOJHzN8GVnqi78+2sy7YX4OxQw7v3
YKtcZek8NBeOOzBUrQjI0jqo7eNuQPV+d4d9UrXduauRnGdF3BjsHS2JfwIDAQAB
o4ICXjCCAlowHQYDVR0OBBYEFM84S09qgm+CO6EMKJip8GvBwoetMB8GA1UdIwQY
MBaAFH1Vmq+/wJMSQuHWNymM8d0iPkwmMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZlZXYXI3X0FreEpDNGRZM0tZengzU0ktVENZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMC80OWFkYzYtYmE4OS00MDNmLWFkYTkt
OGM1MDA3YzJhNGI2LzEvenpoTFQycUNiNEk3b1F3b21LbndhOEhDaDYwLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jMC80OWFkYzYtYmE4OS00MDNmLWFkYTktOGM1MDA3YzJhNGI2
LzEvZlZXYXI3X0FreEpDNGRZM0tZengzU0ktVENZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMHQGCCsGAQUFBwEHAQH/BGUwYzBhBAIAAjBbAwUDKhOMgAMF
AyoTkIADBQMqE5GAAwUDKhOTgAMFAyoTlIADBQMqE5WAAwUDKhOWgAMFAyoTzwAD
BQMqE9EAAwUDKhPTAAMFAyoT4QADBQMqE/kAAwUDKhP7ADANBgkqhkiG9w0BAQsF
AAOCAQEAzuCbSjMe0o/NrP3rOfHxZF0gJqK09egBubupti1XBVQPlXPbrfezP+7t
TsVn9EfAKpNzHEC93BzjfqN7T0GejBfj6pOoU+lP7atAcVV1NSv/hUdWPK+widmW
xDdfZBpTTX1KXYh0lkw1XeuW6OdxIB3anCu82B1oTMLTdPZCZLZ7x2+ZpwW1HY/b
tDpNlu8hDdmE12jsjfbGLILVTykLfTaZAGunpbrNCSgFUxeWWOhWaD+YwjRfa/ka
LbC4rH2N12P/TY41KCUMg7D71Hz8UJKeY/pkV4XQ/A/m6D/sjw/eIrSpkpKqMSOy
8ORyFJzZNbUvoia3ssGYsvE19UIU4A==
-----END CERTIFICATE-----