Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ff/49424a-aa5f-4b9f-a627-24654e941c12/1/6x6AkRm5EfirF7OPjlvBK5OxsxU.roa
File:                     6x6AkRm5EfirF7OPjlvBK5OxsxU.roa (raw, json)
Hash identifier:          Nce+JFPr0H8Yjdgz5lF44bxIJr4KPmsoewwH4LLKdj0=
Subject key identifier:   EB:1E:80:91:19:B9:11:F8:AB:17:B3:8F:8E:5B:C1:2B:93:B1:B3:15
Certificate issuer:       /CN=dac32632aa9154253c6dcd2331e9ad6920b6bdcc
Certificate serial:       0181CF2965D73F245D7FF2C360C245C30E7B
Authority key identifier: DA:C3:26:32:AA:91:54:25:3C:6D:CD:23:31:E9:AD:69:20:B6:BD:CC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/2sMmMqqRVCU8bc0jMemtaSC2vcw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ff/49424a-aa5f-4b9f-a627-24654e941c12/1/6x6AkRm5EfirF7OPjlvBK5OxsxU.roa
Signing time:             Tue 05 Jul 2022 16:20:05 +0000
ROA not before:           Tue 05 Jul 2022 16:20:05 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     8075
IP address blocks:        212.46.57.0/24 maxlen: 24
                          2a12:fc0:20::/48 maxlen: 48

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:81:cf:29:65:d7:3f:24:5d:7f:f2:c3:60:c2:45:c3:0e:7b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=dac32632aa9154253c6dcd2331e9ad6920b6bdcc
        Validity
            Not Before: Jul  5 16:20:05 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=eb1e809119b911f8ab17b38f8e5bc12b93b1b315
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:a0:97:a2:46:aa:00:a3:a9:5e:cc:f6:e0:64:
                    be:85:9c:c1:89:22:aa:fc:a3:69:8b:8a:0c:60:1a:
                    38:61:a9:7d:a7:f8:ed:eb:df:19:1e:52:92:9e:58:
                    a2:41:34:23:03:0c:5a:ab:8a:37:b6:28:7b:e8:41:
                    3b:c3:55:7b:40:39:37:3f:09:73:cb:8a:67:da:49:
                    04:18:09:69:df:a3:aa:21:e0:2a:e1:dd:e7:1c:be:
                    2d:2f:4d:e0:08:d7:f6:43:de:2a:42:90:79:60:12:
                    2e:f1:04:91:ac:45:40:e5:3d:67:3e:27:60:59:77:
                    cd:2d:06:3c:ba:f9:b1:0d:f3:6f:a1:2c:30:b9:9d:
                    e3:0a:08:7e:b9:97:0c:ab:32:24:a3:86:b3:d8:63:
                    86:d3:9e:b7:cc:da:77:a8:47:14:5c:bd:40:6f:eb:
                    c0:30:a6:93:ff:72:9e:e2:53:35:67:4a:69:3b:ff:
                    07:40:f5:76:e9:b2:b1:d1:d5:6c:c7:d8:fc:28:7a:
                    4c:9f:93:97:cb:72:a3:4e:e5:39:5c:a8:a7:bc:37:
                    ad:2a:e6:e9:96:9e:7e:66:cb:36:71:dc:63:2f:62:
                    47:e7:97:bb:da:c9:45:8e:1e:6d:b7:59:8d:9a:05:
                    56:32:26:29:fb:b8:66:79:4e:2f:af:04:f9:29:f4:
                    83:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EB:1E:80:91:19:B9:11:F8:AB:17:B3:8F:8E:5B:C1:2B:93:B1:B3:15
            X509v3 Authority Key Identifier:
                keyid:DA:C3:26:32:AA:91:54:25:3C:6D:CD:23:31:E9:AD:69:20:B6:BD:CC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2sMmMqqRVCU8bc0jMemtaSC2vcw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/49424a-aa5f-4b9f-a627-24654e941c12/1/6x6AkRm5EfirF7OPjlvBK5OxsxU.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/49424a-aa5f-4b9f-a627-24654e941c12/1/2sMmMqqRVCU8bc0jMemtaSC2vcw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  212.46.57.0/24
                IPv6:
                  2a12:fc0:20::/48

    Signature Algorithm: sha256WithRSAEncryption
         a9:5e:15:c6:e3:b9:09:2c:e4:81:23:a7:db:d4:af:fc:7a:f6:
         7a:39:68:ea:27:92:97:05:34:e7:18:08:1f:35:e9:0e:b3:d8:
         e4:c1:8d:20:74:90:bb:18:77:3a:7d:8d:72:0f:c0:42:07:3c:
         11:c6:25:91:36:df:d0:ff:58:8a:c8:48:48:95:7a:60:71:15:
         8d:cd:2f:a3:bb:e9:64:c3:cf:50:d0:c5:64:68:1f:9f:5d:98:
         a7:81:de:43:12:40:a2:12:99:fc:4a:d0:12:d6:fa:54:d8:20:
         b5:bf:50:b0:48:7d:e6:85:95:02:57:8e:9e:c1:59:2b:71:e7:
         c8:a3:a7:bd:e1:76:a4:17:12:bf:e2:35:cf:ef:4a:d2:0e:49:
         d1:7a:a1:ca:fc:cc:45:4e:66:17:3c:b0:b2:37:51:74:95:e9:
         8e:9b:49:af:b1:39:75:af:5e:2d:e6:d7:03:02:44:60:25:77:
         eb:5a:e6:74:bd:7a:b1:6b:c0:98:c7:04:47:34:8b:84:12:5c:
         e5:64:12:a7:e1:37:8f:78:b6:5f:59:32:88:aa:36:da:10:03:
         12:58:f5:1f:b1:c4:4c:a9:ae:35:94:1f:9b:16:f2:9c:2a:7e:
         1f:8b:cb:dd:81:9a:9b:8b:ae:0f:43:73:22:47:6f:cd:b2:50:
         f3:3d:b4:37
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgISAYHPKWXXPyRdf/LDYMJFww57MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRhYzMyNjMyYWE5MTU0MjUzYzZkY2QyMzMxZTlhZDY5MjBi
NmJkY2MwHhcNMjIwNzA1MTYyMDA1WhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhlYjFlODA5MTE5YjkxMWY4YWIxN2IzOGY4ZTViYzEyYjkzYjFiMzE1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAk6CXokaqAKOpXsz24GS+hZzBiSKq
/KNpi4oMYBo4Yal9p/jt698ZHlKSnliiQTQjAwxaq4o3tih76EE7w1V7QDk3Pwlz
y4pn2kkEGAlp36OqIeAq4d3nHL4tL03gCNf2Q94qQpB5YBIu8QSRrEVA5T1nPidg
WXfNLQY8uvmxDfNvoSwwuZ3jCgh+uZcMqzIko4az2GOG0563zNp3qEcUXL1Ab+vA
MKaT/3Ke4lM1Z0ppO/8HQPV26bKx0dVsx9j8KHpMn5OXy3KjTuU5XKinvDetKubp
lp5+Zss2cdxjL2JH55e72slFjh5tt1mNmgVWMiYp+7hmeU4vrwT5KfSDIQIDAQAB
o4ICGjCCAhYwHQYDVR0OBBYEFOsegJEZuRH4qxezj45bwSuTsbMVMB8GA1UdIwQY
MBaAFNrDJjKqkVQlPG3NIzHprWkgtr3MMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMnNNbU1xcVJWQ1U4YmMwak1lbXRhU0MydmN3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mZi80OTQyNGEtYWE1Zi00YjlmLWE2Mjct
MjQ2NTRlOTQxYzEyLzEvNng2QWtSbTVFZmlyRjdPUGpsdkJLNU94c3hVLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mZi80OTQyNGEtYWE1Zi00YjlmLWE2MjctMjQ2NTRlOTQxYzEy
LzEvMnNNbU1xcVJWQ1U4YmMwak1lbXRhU0MydmN3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQA1C45MA8E
AgACMAkDBwAqEg/AACAwDQYJKoZIhvcNAQELBQADggEBAKleFcbjuQks5IEjp9vU
r/x69no5aOonkpcFNOcYCB816Q6z2OTBjSB0kLsYdzp9jXIPwEIHPBHGJZE239D/
WIrISEiVemBxFY3NL6O76WTDz1DQxWRoH59dmKeB3kMSQKISmfxK0BLW+lTYILW/
ULBIfeaFlQJXjp7BWStx58ijp73hdqQXEr/iNc/vStIOSdF6ocr8zEVOZhc8sLI3
UXSV6Y6bSa+xOXWvXi3m1wMCRGAld+ta5nS9erFrwJjHBEc0i4QSXOVkEqfhN494
tl9ZMoiqNtoQAxJY9R+xxEyprjWUH5sW8pwqfh+Ly92BmpuLrg9DcyJHb82yUPM9
tDc=
-----END CERTIFICATE-----