Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fc/a1c6ec-c260-4ca2-887b-4bb94cbc2e73/1/w_vb-Wgd8sHNUv3IHHUwtunbZHo.roa
File:                     w_vb-Wgd8sHNUv3IHHUwtunbZHo.roa (raw, json)
Hash identifier:          KOPgoajQ/VcML0GLuJ85jGkoHgJwfvsqLKQXIhkwKu8=
Subject key identifier:   C3:FB:DB:F9:68:1D:F2:C1:CD:52:FD:C8:1C:75:30:B6:E9:DB:64:7A
Certificate issuer:       /CN=5b6d178f13851306b5634df159716319f4d82478
Certificate serial:       028C51
Authority key identifier: 5B:6D:17:8F:13:85:13:06:B5:63:4D:F1:59:71:63:19:F4:D8:24:78
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/W20XjxOFEwa1Y03xWXFjGfTYJHg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/fc/a1c6ec-c260-4ca2-887b-4bb94cbc2e73/1/w_vb-Wgd8sHNUv3IHHUwtunbZHo.roa
Signing time:             Tue 24 May 2022 12:59:13 +0000
ROA not before:           Tue 24 May 2022 12:59:13 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     207459
IP address blocks:        2a0e:36c0::/29 maxlen: 32

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 166993 (0x28c51)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5b6d178f13851306b5634df159716319f4d82478
        Validity
            Not Before: May 24 12:59:13 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=c3fbdbf9681df2c1cd52fdc81c7530b6e9db647a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:24:5b:c1:53:3b:48:4a:e5:ad:8d:eb:88:27:
                    50:e9:e9:26:68:9e:4e:2b:b8:37:fb:60:eb:d1:78:
                    a4:21:a8:76:d8:6f:c6:62:48:40:ea:b6:74:07:ff:
                    99:b9:7e:03:80:b5:7d:1f:73:6d:23:b3:41:e4:51:
                    e1:30:a1:17:95:a6:2a:55:15:8c:a6:f3:d7:81:7d:
                    d7:ad:07:e7:cc:9d:97:04:12:e4:fb:4a:69:0d:91:
                    69:b8:9d:02:36:20:57:7e:51:c3:c8:19:63:d3:4a:
                    27:e6:c6:1f:0d:36:f3:54:bf:8d:9c:c9:90:7b:b5:
                    f2:b0:bc:4a:b5:9c:87:1a:75:e5:39:c1:da:c5:89:
                    6e:0f:21:06:e4:43:cf:3d:57:a2:2e:88:d2:f4:58:
                    83:a1:d2:bf:83:ce:42:a2:88:92:ec:91:f7:04:f2:
                    14:ba:b1:ff:28:14:cb:34:b0:a6:5d:7e:89:db:06:
                    1c:aa:15:d4:6f:8a:a5:0d:73:f8:5a:38:b5:e6:b5:
                    d5:29:cd:f7:a2:11:01:6a:fb:fb:7f:67:8b:eb:80:
                    08:8c:28:fc:be:a5:56:65:82:c9:5f:c5:38:89:d9:
                    1e:21:6d:a0:36:87:97:1c:0e:27:3b:fc:c4:a8:71:
                    a5:ed:78:55:f4:a8:55:fa:13:99:24:de:ff:76:7e:
                    e1:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C3:FB:DB:F9:68:1D:F2:C1:CD:52:FD:C8:1C:75:30:B6:E9:DB:64:7A
            X509v3 Authority Key Identifier:
                keyid:5B:6D:17:8F:13:85:13:06:B5:63:4D:F1:59:71:63:19:F4:D8:24:78

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/W20XjxOFEwa1Y03xWXFjGfTYJHg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/a1c6ec-c260-4ca2-887b-4bb94cbc2e73/1/w_vb-Wgd8sHNUv3IHHUwtunbZHo.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/a1c6ec-c260-4ca2-887b-4bb94cbc2e73/1/W20XjxOFEwa1Y03xWXFjGfTYJHg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a0e:36c0::/29

    Signature Algorithm: sha256WithRSAEncryption
         7b:ce:5a:ce:8f:0a:e2:68:02:51:0c:37:6f:bf:30:7a:d8:bb:
         86:4f:be:f7:b0:c8:27:83:8e:1f:18:a5:ed:bd:36:e7:3c:9c:
         d7:03:5d:10:ea:fb:5d:bc:d5:42:7f:4e:55:68:e9:e2:f8:72:
         4c:05:4a:e0:87:81:8b:21:d8:32:4f:bd:4a:f2:2d:39:0a:08:
         5c:3a:5b:2e:46:1c:bc:75:13:f4:64:3a:d6:0a:8f:f7:95:ab:
         34:b7:d9:03:26:f3:b9:81:09:29:1d:f0:3e:05:cc:ad:81:32:
         3e:fb:ea:ad:e0:5b:25:d3:78:90:15:8a:07:6e:df:2e:ee:d0:
         78:85:1c:72:4b:b6:c8:3c:3c:a9:2f:65:2e:53:74:4c:e6:77:
         ce:8d:0b:4a:eb:da:a8:79:dd:f5:1b:fe:93:07:0e:36:13:b6:
         b5:42:02:2e:ce:3a:41:f7:98:8f:ec:ae:d6:55:78:48:77:11:
         05:76:d1:a4:82:21:64:bc:30:d5:98:3f:6d:bb:8d:25:60:ab:
         9e:0d:3c:88:28:72:26:db:b6:e8:fe:e2:02:75:76:b1:e5:00:
         5a:09:37:a1:f4:99:48:ca:ad:d6:ac:e2:25:d1:d3:1a:2f:4b:
         06:48:9a:7d:54:6e:60:d1:00:4f:ed:14:f6:28:11:e4:ee:4c:
         69:e9:8b:03
-----BEGIN CERTIFICATE-----
MIIE7zCCA9egAwIBAgIDAoxRMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKDVi
NmQxNzhmMTM4NTEzMDZiNTYzNGRmMTU5NzE2MzE5ZjRkODI0NzgwHhcNMjIwNTI0
MTI1OTEzWhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQDEyhjM2ZiZGJmOTY4MWRm
MmMxY2Q1MmZkYzgxYzc1MzBiNmU5ZGI2NDdhMIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEAoCRbwVM7SErlrY3riCdQ6ekmaJ5OK7g3+2Dr0XikIah22G/G
YkhA6rZ0B/+ZuX4DgLV9H3NtI7NB5FHhMKEXlaYqVRWMpvPXgX3XrQfnzJ2XBBLk
+0ppDZFpuJ0CNiBXflHDyBlj00on5sYfDTbzVL+NnMmQe7XysLxKtZyHGnXlOcHa
xYluDyEG5EPPPVeiLojS9FiDodK/g85CooiS7JH3BPIUurH/KBTLNLCmXX6J2wYc
qhXUb4qlDXP4Wji15rXVKc33ohEBavv7f2eL64AIjCj8vqVWZYLJX8U4idkeIW2g
NoeXHA4nO/zEqHGl7XhV9KhV+hOZJN7/dn7htwIDAQABo4ICCjCCAgYwHQYDVR0O
BBYEFMP72/loHfLBzVL9yBx1MLbp22R6MB8GA1UdIwQYMBaAFFttF48ThRMGtWNN
8VlxYxn02CR4MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEFBQcBAQRYMFYwVAYIKwYB
BQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQv
VzIwWGp4T0ZFd2ExWTAzeFdYRmpHZlRZSkhnLmNlcjCBjQYIKwYBBQUHAQsEgYAw
fjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkv
REVGQVVMVC9mYy9hMWM2ZWMtYzI2MC00Y2EyLTg4N2ItNGJiOTRjYmMyZTczLzEv
d192Yi1XZ2Q4c0hOVXYzSUhIVXd0dW5iWkhvLnJvYTCBgQYDVR0fBHoweDB2oHSg
coZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mYy9h
MWM2ZWMtYzI2MC00Y2EyLTg4N2ItNGJiOTRjYmMyZTczLzEvVzIwWGp4T0ZFd2Ex
WTAzeFdYRmpHZlRZSkhnLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCAG
CCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUDKg42wDANBgkqhkiG9w0BAQsFAAOC
AQEAe85azo8K4mgCUQw3b78weti7hk++97DIJ4OOHxil7b025zyc1wNdEOr7XbzV
Qn9OVWjp4vhyTAVK4IeBiyHYMk+9SvItOQoIXDpbLkYcvHUT9GQ61gqP95WrNLfZ
AybzuYEJKR3wPgXMrYEyPvvqreBbJdN4kBWKB27fLu7QeIUccku2yDw8qS9lLlN0
TOZ3zo0LSuvaqHnd9Rv+kwcONhO2tUICLs46QfeYj+yu1lV4SHcRBXbRpIIhZLww
1Zg/bbuNJWCrng08iChyJtu26P7iAnV2seUAWgk3ofSZSMqt1qziJdHTGi9LBkia
fVRuYNEAT+0U9igR5O5MaemLAw==
-----END CERTIFICATE-----