Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fb/7215e0-9ab8-4a13-a605-31ab32ff7c68/1/zBNn7EY5nTjdZXg1hCC-basYneg.roa
File:                     zBNn7EY5nTjdZXg1hCC-basYneg.roa (raw, json)
Hash identifier:          QTxbom+ZvE0Y5mTb/doPP+hvFeO0D3YD24tt9nR8C2g=
Subject key identifier:   CC:13:67:EC:46:39:9D:38:DD:65:78:35:84:20:BE:6D:AB:18:9D:E8
Certificate issuer:       /CN=e1584910124af776e30e5acf055d6bae1761a536
Certificate serial:       0183E77C1402CFA0CE80D20D7A826C79D5C4
Authority key identifier: E1:58:49:10:12:4A:F7:76:E3:0E:5A:CF:05:5D:6B:AE:17:61:A5:36
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/4VhJEBJK93bjDlrPBV1rrhdhpTY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/fb/7215e0-9ab8-4a13-a605-31ab32ff7c68/1/zBNn7EY5nTjdZXg1hCC-basYneg.roa
Signing time:             Mon 17 Oct 2022 19:46:51 +0000
ROA not before:           Mon 17 Oct 2022 19:46:51 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     16509
IP address blocks:        2a13:3c0:3::/48 maxlen: 48
                          2a13:3c0:6::/48 maxlen: 48
                          2a13:3c0:9::/48 maxlen: 48
                          2a13:3c0:1::/48 maxlen: 48
                          2a13:3c0:11::/48 maxlen: 48
                          2a13:3c0:4::/48 maxlen: 48
                          2a13:3c0:7::/48 maxlen: 48
                          2a13:3c0:2::/48 maxlen: 48
                          2a13:3c0:5::/48 maxlen: 48
                          2a13:3c0:10::/48 maxlen: 48
                          2a13:3c0:8::/48 maxlen: 48

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:83:e7:7c:14:02:cf:a0:ce:80:d2:0d:7a:82:6c:79:d5:c4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e1584910124af776e30e5acf055d6bae1761a536
        Validity
            Not Before: Oct 17 19:46:51 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=cc1367ec46399d38dd6578358420be6dab189de8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:be:86:83:97:86:31:5f:d8:4f:ce:06:ed:a7:
                    bf:a2:4b:21:86:e9:97:d2:1b:a2:80:4b:af:c0:36:
                    b0:3e:80:d4:0b:2b:89:9d:0f:91:fc:75:82:d8:71:
                    35:3a:02:5c:f0:18:df:9d:20:97:d1:3f:29:3e:e8:
                    d1:ac:bb:4a:01:5d:e6:10:36:77:33:3f:c7:99:5b:
                    eb:78:20:b3:1b:75:04:2a:3e:71:a4:4e:c3:01:36:
                    37:b2:b8:91:28:7d:fc:0c:7a:c5:29:8e:18:d7:2a:
                    ea:a8:b1:b8:10:2c:29:39:65:08:64:df:4e:f1:27:
                    03:bc:a2:39:a7:52:3b:8f:d2:c8:4d:77:ca:cf:7a:
                    7d:74:90:55:fc:13:18:48:19:77:72:37:70:97:c0:
                    69:02:34:65:47:7c:a5:b7:9f:0a:5c:a7:55:03:55:
                    8c:a4:24:4d:a6:ad:28:88:18:3f:b2:22:6a:18:7c:
                    59:8a:31:2a:7d:ac:bf:d3:48:c1:db:45:2f:ac:b9:
                    41:0e:c0:90:55:4f:00:9a:9a:4a:5a:f1:cc:a1:a7:
                    0b:d1:c6:9e:6e:9a:c3:24:b8:bd:74:c5:d4:b1:7e:
                    08:fa:d4:5f:49:cb:8e:4c:04:f5:88:bb:a4:fb:15:
                    2f:fe:3e:55:f7:3a:96:e9:0f:9e:5a:90:c9:87:86:
                    be:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CC:13:67:EC:46:39:9D:38:DD:65:78:35:84:20:BE:6D:AB:18:9D:E8
            X509v3 Authority Key Identifier:
                keyid:E1:58:49:10:12:4A:F7:76:E3:0E:5A:CF:05:5D:6B:AE:17:61:A5:36

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4VhJEBJK93bjDlrPBV1rrhdhpTY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/7215e0-9ab8-4a13-a605-31ab32ff7c68/1/zBNn7EY5nTjdZXg1hCC-basYneg.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/7215e0-9ab8-4a13-a605-31ab32ff7c68/1/4VhJEBJK93bjDlrPBV1rrhdhpTY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a13:3c0:1::-2a13:3c0:9:ffff:ffff:ffff:ffff:ffff
                  2a13:3c0:10::/47

    Signature Algorithm: sha256WithRSAEncryption
         4e:f8:4c:97:fa:ca:b6:88:27:ec:7f:2a:46:07:f1:91:8d:0e:
         84:84:4b:b3:91:30:d4:5e:59:c6:88:a4:c7:a0:b6:53:94:fa:
         50:26:aa:c6:a3:f5:bf:3b:10:76:b1:df:59:f4:eb:31:c7:1d:
         05:cc:89:2f:16:47:fd:7c:ed:92:91:f5:8c:e3:0b:be:f4:dc:
         89:bd:f1:cd:9d:31:76:1b:94:71:92:01:d6:22:e6:33:08:55:
         79:b2:c3:c8:ce:0b:3a:62:cc:7e:57:da:09:a8:c1:d1:26:d2:
         56:8d:93:83:e0:7e:44:32:1f:60:8b:ff:b0:19:f0:09:2c:98:
         a7:d8:62:fc:e0:d7:e5:fd:9c:9c:23:c7:bb:49:a1:6a:18:18:
         52:3a:64:a6:c9:7c:8b:d7:51:5d:61:a7:82:fc:a3:fe:38:7b:
         c1:c7:8a:4b:d8:d1:85:db:7c:0f:91:2d:e3:49:a3:c9:15:bc:
         21:e4:68:14:e5:bc:8e:b3:76:bf:85:c6:97:0b:10:28:cf:af:
         77:60:fc:7c:95:de:5a:86:29:82:7d:39:34:02:cf:2d:12:e5:
         71:b3:bc:58:78:8a:b7:9b:01:91:52:6b:9a:a5:23:60:4a:8a:
         0a:d0:93:22:47:cc:66:1d:33:78:43:56:33:35:e5:b4:b1:cd:
         b6:39:06:70
-----BEGIN CERTIFICATE-----
MIIFFDCCA/ygAwIBAgISAYPnfBQCz6DOgNINeoJsedXEMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGUxNTg0OTEwMTI0YWY3NzZlMzBlNWFjZjA1NWQ2YmFlMTc2
MWE1MzYwHhcNMjIxMDE3MTk0NjUxWhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhjYzEzNjdlYzQ2Mzk5ZDM4ZGQ2NTc4MzU4NDIwYmU2ZGFiMTg5ZGU4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnL6Gg5eGMV/YT84G7ae/okshhumX
0huigEuvwDawPoDUCyuJnQ+R/HWC2HE1OgJc8BjfnSCX0T8pPujRrLtKAV3mEDZ3
Mz/HmVvreCCzG3UEKj5xpE7DATY3sriRKH38DHrFKY4Y1yrqqLG4ECwpOWUIZN9O
8ScDvKI5p1I7j9LITXfKz3p9dJBV/BMYSBl3cjdwl8BpAjRlR3ylt58KXKdVA1WM
pCRNpq0oiBg/siJqGHxZijEqfay/00jB20UvrLlBDsCQVU8AmppKWvHMoacL0cae
bprDJLi9dMXUsX4I+tRfScuOTAT1iLuk+xUv/j5V9zqW6Q+eWpDJh4a+qwIDAQAB
o4ICIDCCAhwwHQYDVR0OBBYEFMwTZ+xGOZ043WV4NYQgvm2rGJ3oMB8GA1UdIwQY
MBaAFOFYSRASSvd24w5azwVda64XYaU2MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNFZoSkVCSks5M2JqRGxyUEJWMXJyaGRocFRZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mYi83MjE1ZTAtOWFiOC00YTEzLWE2MDUt
MzFhYjMyZmY3YzY4LzEvekJObjdFWTVuVGpkWlhnMWhDQy1iYXNZbmVnLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mYi83MjE1ZTAtOWFiOC00YTEzLWE2MDUtMzFhYjMyZmY3YzY4
LzEvNFZoSkVCSks5M2JqRGxyUEJWMXJyaGRocFRZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDYGCCsGAQUFBwEHAQH/BCcwJTAjBAIAAjAdMBIDBwAqEwPA
AAEDBwEqEwPAAAgDBwEqEwPAABAwDQYJKoZIhvcNAQELBQADggEBAE74TJf6yraI
J+x/KkYH8ZGNDoSES7ORMNReWcaIpMegtlOU+lAmqsaj9b87EHax31n06zHHHQXM
iS8WR/187ZKR9YzjC7703Im98c2dMXYblHGSAdYi5jMIVXmyw8jOCzpizH5X2gmo
wdEm0laNk4PgfkQyH2CL/7AZ8AksmKfYYvzg1+X9nJwjx7tJoWoYGFI6ZKbJfIvX
UV1hp4L8o/44e8HHikvY0YXbfA+RLeNJo8kVvCHkaBTlvI6zdr+FxpcLECjPr3dg
/HyV3lqGKYJ9OTQCzy0S5XGzvFh4irebAZFSa5qlI2BKigrQkyJHzGYdM3hDVjM1
5bSxzbY5BnA=
-----END CERTIFICATE-----