Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e9/b82a06-ab0d-4adf-8a85-97c9aab828f2/1/fbBzmSF-hHDYhT5NMx_JG-lWv1E.roa
File:                     fbBzmSF-hHDYhT5NMx_JG-lWv1E.roa (raw, json)
Hash identifier:          j5qL7GAt+h9jN9P3DkIt5z6AN3UtV/s5btO5fBOrd0g=
Subject key identifier:   7D:B0:73:99:21:7E:84:70:D8:85:3E:4D:33:1F:C9:1B:E9:56:BF:51
Certificate issuer:       /CN=7bbd51272064b63b2c663c0296ba11db5ea238c0
Certificate serial:       12072ECA
Authority key identifier: 7B:BD:51:27:20:64:B6:3B:2C:66:3C:02:96:BA:11:DB:5E:A2:38:C0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/e71RJyBktjssZjwClroR216iOMA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e9/b82a06-ab0d-4adf-8a85-97c9aab828f2/1/fbBzmSF-hHDYhT5NMx_JG-lWv1E.roa
Signing time:             Sat 01 Jan 2022 13:06:03 +0000
ROA not before:           Sat 01 Jan 2022 13:06:03 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     44090
IP address blocks:        185.129.232.0/21 maxlen: 21

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 302460618 (0x12072eca)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7bbd51272064b63b2c663c0296ba11db5ea238c0
        Validity
            Not Before: Jan  1 13:06:03 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=7db07399217e8470d8853e4d331fc91be956bf51
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:6d:f8:63:71:ba:e0:05:a4:64:ca:5b:87:01:
                    f3:c8:8a:3a:68:7f:8e:3d:16:3d:89:7f:8f:db:95:
                    02:38:e0:30:5c:c4:42:2b:3c:08:6b:f1:c4:18:ce:
                    f5:06:76:63:b2:79:59:71:00:d6:28:cb:b6:5d:4c:
                    57:82:a4:8e:51:d0:05:de:71:79:51:84:45:93:12:
                    3d:df:84:29:68:71:0a:43:10:a4:59:0e:73:67:a8:
                    9f:47:6e:aa:8e:10:51:cd:ad:43:76:f0:c3:0a:e4:
                    b6:09:9b:cc:81:35:60:92:84:92:cd:7f:1d:3c:b5:
                    15:7a:88:be:59:25:8a:21:f5:13:48:95:40:ac:1d:
                    70:6e:d7:b0:8c:d6:fa:c1:6b:e6:73:a6:08:47:8b:
                    4e:c4:3f:84:96:39:0b:5d:1e:71:38:7c:45:84:b7:
                    59:c3:59:81:b8:94:80:54:93:68:97:8c:66:bf:8f:
                    d1:5a:0d:e0:e8:4d:bc:42:0d:10:8b:a8:c6:0e:ff:
                    38:f4:07:d3:99:36:b1:4d:35:b1:ec:5d:6a:12:1f:
                    ed:96:e9:28:4d:46:8b:93:3b:af:46:4f:14:11:d0:
                    e6:d4:a0:d5:53:71:c3:78:da:9c:93:a1:47:48:64:
                    99:d6:e8:d3:e8:7f:26:90:66:76:32:5a:61:c9:5a:
                    98:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7D:B0:73:99:21:7E:84:70:D8:85:3E:4D:33:1F:C9:1B:E9:56:BF:51
            X509v3 Authority Key Identifier:
                keyid:7B:BD:51:27:20:64:B6:3B:2C:66:3C:02:96:BA:11:DB:5E:A2:38:C0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/e71RJyBktjssZjwClroR216iOMA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/b82a06-ab0d-4adf-8a85-97c9aab828f2/1/fbBzmSF-hHDYhT5NMx_JG-lWv1E.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/b82a06-ab0d-4adf-8a85-97c9aab828f2/1/e71RJyBktjssZjwClroR216iOMA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.129.232.0/21

    Signature Algorithm: sha256WithRSAEncryption
         96:10:85:5b:dc:16:f5:5b:98:5a:b3:47:aa:3c:17:2e:6a:1f:
         f6:00:b2:69:6f:30:11:2c:ff:5e:6c:e1:ce:ce:5c:f5:51:32:
         47:36:0d:e9:2f:e3:42:97:83:f7:e1:ca:50:83:7b:26:f7:4b:
         c9:45:ec:1d:09:49:51:52:62:12:7a:2a:91:71:9e:2e:9f:12:
         9f:2a:dd:0f:58:ab:6e:1a:ca:9d:13:d6:5f:2c:97:a1:4b:49:
         56:66:11:d6:c6:f8:d6:0b:f5:2f:30:92:37:46:d8:c7:70:00:
         a4:7d:94:db:6d:b7:47:b1:ce:8b:0f:52:90:be:67:c2:c9:ae:
         bb:48:2d:40:be:a9:5c:85:21:d7:fc:88:53:bc:e4:ee:08:11:
         93:eb:8c:14:19:3c:17:57:13:15:26:59:71:1c:46:0a:e4:e8:
         4c:3d:51:d0:01:eb:d5:4a:17:db:82:24:cc:45:79:4c:59:dc:
         c8:2c:7e:85:73:fc:9e:1e:90:20:86:15:27:04:58:50:44:01:
         94:3a:88:bb:27:fc:93:a7:68:92:23:c4:6a:f0:01:c4:dd:71:
         89:55:cd:45:08:30:8b:53:33:5f:ff:6a:55:9c:bb:60:e7:a6:
         8b:74:41:45:da:e3:fc:76:5e:9a:45:1f:77:1a:41:64:bf:09:
         72:06:c6:b8
-----BEGIN CERTIFICATE-----
MIIE7zCCA9egAwIBAgIEEgcuyjANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg3
YmJkNTEyNzIwNjRiNjNiMmM2NjNjMDI5NmJhMTFkYjVlYTIzOGMwMB4XDTIyMDEw
MTEzMDYwM1oXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoN2RiMDczOTkyMTdl
ODQ3MGQ4ODUzZTRkMzMxZmM5MWJlOTU2YmY1MTCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAKxt+GNxuuAFpGTKW4cB88iKOmh/jj0WPYl/j9uVAjjgMFzE
Qis8CGvxxBjO9QZ2Y7J5WXEA1ijLtl1MV4KkjlHQBd5xeVGERZMSPd+EKWhxCkMQ
pFkOc2eon0duqo4QUc2tQ3bwwwrktgmbzIE1YJKEks1/HTy1FXqIvlkliiH1E0iV
QKwdcG7XsIzW+sFr5nOmCEeLTsQ/hJY5C10ecTh8RYS3WcNZgbiUgFSTaJeMZr+P
0VoN4OhNvEINEIuoxg7/OPQH05k2sU01sexdahIf7ZbpKE1Gi5M7r0ZPFBHQ5tSg
1VNxw3janJOhR0hkmdbo0+h/JpBmdjJaYclamEECAwEAAaOCAgkwggIFMB0GA1Ud
DgQWBBR9sHOZIX6EcNiFPk0zH8kb6Va/UTAfBgNVHSMEGDAWgBR7vVEnIGS2Oyxm
PAKWuhHbXqI4wDAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L2U3MVJKeUJrdGpzc1pqd0Nscm9SMjE2aU9NQS5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvZTkvYjgyYTA2LWFiMGQtNGFkZi04YTg1LTk3YzlhYWI4MjhmMi8x
L2ZiQnptU0YtaEhEWWhUNU5NeF9KRy1sV3YxRS5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZTkv
YjgyYTA2LWFiMGQtNGFkZi04YTg1LTk3YzlhYWI4MjhmMi8xL2U3MVJKeUJrdGpz
c1pqd0Nscm9SMjE2aU9NQS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAf
BggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEA7mB6DANBgkqhkiG9w0BAQsFAAOC
AQEAlhCFW9wW9VuYWrNHqjwXLmof9gCyaW8wESz/Xmzhzs5c9VEyRzYN6S/jQpeD
9+HKUIN7JvdLyUXsHQlJUVJiEnoqkXGeLp8SnyrdD1irbhrKnRPWXyyXoUtJVmYR
1sb41gv1LzCSN0bYx3AApH2U2223R7HOiw9SkL5nwsmuu0gtQL6pXIUh1/yIU7zk
7ggRk+uMFBk8F1cTFSZZcRxGCuToTD1R0AHr1UoX24IkzEV5TFncyCx+hXP8nh6Q
IIYVJwRYUEQBlDqIuyf8k6dokiPEavABxN1xiVXNRQgwi1MzX/9qVZy7YOemi3RB
Rdrj/HZemkUfdxpBZL8JcgbGuA==
-----END CERTIFICATE-----