Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ef/91d629-7d1f-45bd-a1e1-931cf798e412/1/F3yFfqQvWNXD-KTfYeCq3_qoj4k.roa
File:                     F3yFfqQvWNXD-KTfYeCq3_qoj4k.roa (raw, json)
Hash identifier:          0wBDcvPZW/44uQVCGPV8yg70J/1NK/WjBaZYZkwf0mI=
Subject key identifier:   17:7C:85:7E:A4:2F:58:D5:C3:F8:A4:DF:61:E0:AA:DF:FA:A8:8F:89
Certificate issuer:       /CN=eab066c6e1800a3f5bd2e406e9a620d2a0f6f653
Certificate serial:       02A485
Authority key identifier: EA:B0:66:C6:E1:80:0A:3F:5B:D2:E4:06:E9:A6:20:D2:A0:F6:F6:53
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/6rBmxuGACj9b0uQG6aYg0qD29lM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ef/91d629-7d1f-45bd-a1e1-931cf798e412/1/F3yFfqQvWNXD-KTfYeCq3_qoj4k.roa
Signing time:             Wed 25 May 2022 12:28:02 +0000
ROA not before:           Wed 25 May 2022 12:28:02 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     559
IP address blocks:        2a0b:1200::/29 maxlen: 29

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 173189 (0x2a485)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=eab066c6e1800a3f5bd2e406e9a620d2a0f6f653
        Validity
            Not Before: May 25 12:28:02 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=177c857ea42f58d5c3f8a4df61e0aadffaa88f89
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:0b:9f:24:06:40:e9:70:2f:24:ba:8d:af:8f:
                    0d:e6:20:82:3c:44:45:fe:70:7f:60:be:17:ac:7f:
                    9d:5a:54:02:ec:f5:bf:92:08:8d:c9:47:7c:03:e6:
                    dc:4c:1c:41:80:68:d0:7e:35:59:63:54:87:6c:4b:
                    e1:d9:0d:61:da:47:4e:4f:30:47:bf:5b:38:01:ca:
                    80:b1:e7:c6:03:6d:5c:5d:83:f9:49:d2:88:64:88:
                    4a:10:41:2a:b5:ee:50:b6:14:e2:f1:16:f9:3c:11:
                    fc:9d:e8:b1:c1:39:96:25:e2:eb:6b:f1:86:87:6b:
                    c1:30:42:3f:34:9c:9d:3f:fc:bd:71:ff:28:1c:f9:
                    7b:df:7f:ec:74:1d:17:12:bd:8a:29:82:17:3f:34:
                    c9:d2:6b:f9:13:a5:71:2f:17:7e:45:7e:10:b9:25:
                    6d:b0:d5:4a:7f:6e:12:21:7c:b8:8d:ff:a8:36:72:
                    b3:3b:ff:8f:67:ef:f0:94:ba:f3:78:99:da:1c:c5:
                    f3:4e:1e:13:cf:24:d8:d0:53:9a:dc:8c:20:c1:87:
                    70:fe:56:3d:3a:5a:73:6b:3d:a9:df:28:3b:ce:8b:
                    ca:27:b8:14:d4:24:aa:87:c2:e7:f1:ae:e5:30:61:
                    1b:fb:9a:ab:2e:ac:79:fc:1b:41:ee:96:22:a5:df:
                    a2:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                17:7C:85:7E:A4:2F:58:D5:C3:F8:A4:DF:61:E0:AA:DF:FA:A8:8F:89
            X509v3 Authority Key Identifier:
                keyid:EA:B0:66:C6:E1:80:0A:3F:5B:D2:E4:06:E9:A6:20:D2:A0:F6:F6:53

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6rBmxuGACj9b0uQG6aYg0qD29lM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/91d629-7d1f-45bd-a1e1-931cf798e412/1/F3yFfqQvWNXD-KTfYeCq3_qoj4k.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/91d629-7d1f-45bd-a1e1-931cf798e412/1/6rBmxuGACj9b0uQG6aYg0qD29lM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a0b:1200::/29

    Signature Algorithm: sha256WithRSAEncryption
         3c:2a:f4:68:cf:e8:4e:66:a6:f1:ae:e5:5c:63:cc:2c:bd:14:
         d8:f3:2c:37:5b:16:12:0f:15:ce:5c:23:71:34:98:96:78:38:
         d8:29:d3:88:f2:54:24:af:1c:19:f2:21:79:c7:c2:fe:4b:35:
         13:bf:95:e0:39:19:f0:f5:a7:a4:29:97:65:2b:f1:f7:8d:d9:
         ff:da:3d:06:75:30:bb:94:cc:8b:79:1b:d5:24:6b:22:68:09:
         26:c4:b6:c3:b4:21:eb:3c:5b:f6:ce:38:26:8f:40:c8:f2:91:
         ca:b1:3f:16:d2:03:c2:a5:ec:db:be:4e:29:85:57:f4:9d:36:
         61:bd:99:28:39:af:43:6f:6f:8c:8d:de:3a:67:a5:b7:69:ca:
         a4:1b:84:7f:cf:72:c3:ed:4f:70:62:73:24:8a:3b:84:cd:dc:
         29:8c:48:26:9b:a8:8f:7c:9e:19:b1:41:8d:06:a3:f3:7a:70:
         9b:72:24:fd:4f:36:c7:9b:cf:bb:5a:50:98:4d:56:68:33:b5:
         7b:f8:09:6a:12:1c:7c:09:40:cc:5f:3c:ff:b2:b6:5d:20:bb:
         d0:ef:a0:83:dc:52:43:ca:69:a6:d7:a8:89:2c:22:d8:98:b9:
         3b:ee:b9:a0:26:20:e8:aa:99:60:88:32:7e:3d:1e:db:b0:cf:
         4c:6b:ca:38
-----BEGIN CERTIFICATE-----
MIIE7zCCA9egAwIBAgIDAqSFMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKGVh
YjA2NmM2ZTE4MDBhM2Y1YmQyZTQwNmU5YTYyMGQyYTBmNmY2NTMwHhcNMjIwNTI1
MTIyODAyWhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQDEygxNzdjODU3ZWE0MmY1
OGQ1YzNmOGE0ZGY2MWUwYWFkZmZhYTg4Zjg5MIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEAkgufJAZA6XAvJLqNr48N5iCCPERF/nB/YL4XrH+dWlQC7PW/
kgiNyUd8A+bcTBxBgGjQfjVZY1SHbEvh2Q1h2kdOTzBHv1s4AcqAsefGA21cXYP5
SdKIZIhKEEEqte5QthTi8Rb5PBH8neixwTmWJeLra/GGh2vBMEI/NJydP/y9cf8o
HPl733/sdB0XEr2KKYIXPzTJ0mv5E6VxLxd+RX4QuSVtsNVKf24SIXy4jf+oNnKz
O/+PZ+/wlLrzeJnaHMXzTh4TzyTY0FOa3IwgwYdw/lY9Olpzaz2p3yg7zovKJ7gU
1CSqh8Ln8a7lMGEb+5qrLqx5/BtB7pYipd+i2wIDAQABo4ICCjCCAgYwHQYDVR0O
BBYEFBd8hX6kL1jVw/ik32Hgqt/6qI+JMB8GA1UdIwQYMBaAFOqwZsbhgAo/W9Lk
BummINKg9vZTMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEFBQcBAQRYMFYwVAYIKwYB
BQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQv
NnJCbXh1R0FDajliMHVRRzZhWWcwcUQyOWxNLmNlcjCBjQYIKwYBBQUHAQsEgYAw
fjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkv
REVGQVVMVC9lZi85MWQ2MjktN2QxZi00NWJkLWExZTEtOTMxY2Y3OThlNDEyLzEv
RjN5RmZxUXZXTlhELUtUZlllQ3EzX3FvajRrLnJvYTCBgQYDVR0fBHoweDB2oHSg
coZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lZi85
MWQ2MjktN2QxZi00NWJkLWExZTEtOTMxY2Y3OThlNDEyLzEvNnJCbXh1R0FDajli
MHVRRzZhWWcwcUQyOWxNLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCAG
CCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUDKgsSADANBgkqhkiG9w0BAQsFAAOC
AQEAPCr0aM/oTmam8a7lXGPMLL0U2PMsN1sWEg8VzlwjcTSYlng42CnTiPJUJK8c
GfIhecfC/ks1E7+V4DkZ8PWnpCmXZSvx943Z/9o9BnUwu5TMi3kb1SRrImgJJsS2
w7Qh6zxb9s44Jo9AyPKRyrE/FtIDwqXs275OKYVX9J02Yb2ZKDmvQ29vjI3eOmel
t2nKpBuEf89yw+1PcGJzJIo7hM3cKYxIJpuoj3yeGbFBjQaj83pwm3Ik/U82x5vP
u1pQmE1WaDO1e/gJahIcfAlAzF88/7K2XSC70O+gg9xSQ8pppteoiSwi2Ji5O+65
oCYg6KqZYIgyfj0e27DPTGvKOA==
-----END CERTIFICATE-----