Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/99/8f1968-a79a-4a07-ace6-c1d296f8fd07/1/_cA0dprPzTcNmTgCYiQri5tQtCI.roa
File:                     _cA0dprPzTcNmTgCYiQri5tQtCI.roa (raw, json)
Hash identifier:          nVFW7ByPpD+4A0wqYeE9ph/iYeU5bxdMTB3ZH7B3ImI=
Subject key identifier:   FD:C0:34:76:9A:CF:CD:37:0D:99:38:02:62:24:2B:8B:9B:50:B4:22
Certificate issuer:       /CN=66e92c341e769443fde1d27566044b4b65159060
Certificate serial:       1138A082
Authority key identifier: 66:E9:2C:34:1E:76:94:43:FD:E1:D2:75:66:04:4B:4B:65:15:90:60
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ZuksNB52lEP94dJ1ZgRLS2UVkGA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/99/8f1968-a79a-4a07-ace6-c1d296f8fd07/1/_cA0dprPzTcNmTgCYiQri5tQtCI.roa
Signing time:             Sat 01 Jan 2022 14:58:36 +0000
ROA not before:           Sat 01 Jan 2022 14:58:36 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     211675
IP address blocks:        2a0d:da06::/32 maxlen: 32

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 288923778 (0x1138a082)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=66e92c341e769443fde1d27566044b4b65159060
        Validity
            Not Before: Jan  1 14:58:36 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=fdc034769acfcd370d99380262242b8b9b50b422
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:e6:95:fe:47:1c:22:13:0c:90:ad:74:a3:24:
                    e4:54:44:1c:44:b3:a7:1c:fb:37:64:72:ad:56:dd:
                    10:c0:a5:21:fd:37:d3:2e:31:00:7e:a3:48:b9:99:
                    e3:a7:dd:d5:bf:32:49:aa:41:ab:1b:87:27:00:a1:
                    2d:e5:a2:eb:ad:cb:d5:3a:83:48:f4:61:ca:4c:2b:
                    3d:6e:e3:23:ab:4b:db:db:ed:11:a2:52:dc:48:68:
                    fb:77:ea:5b:80:3f:c7:10:f0:e6:5b:db:bd:0c:05:
                    81:a8:03:cf:5f:c6:4a:9c:86:e3:1b:0a:85:34:42:
                    d0:a8:fa:01:97:67:e7:32:ed:b8:ff:9b:d6:fe:9c:
                    d3:fe:21:9a:f3:58:aa:33:20:18:97:9c:49:f6:2b:
                    03:a5:64:4e:9b:c4:7d:f5:20:20:54:bf:52:23:11:
                    bb:e1:7e:03:28:77:97:26:fe:ef:46:17:57:9a:7c:
                    90:35:a8:a6:fa:8d:ae:51:d1:1d:d8:ca:f0:b4:b0:
                    68:2b:45:2b:8e:ae:3f:88:e8:20:22:f7:2f:eb:8e:
                    52:f6:61:d2:9a:ae:ef:64:b4:c2:7d:79:2b:19:02:
                    67:e3:5e:55:b6:4c:e1:ad:a8:b4:78:c4:ad:90:2f:
                    49:53:8c:fc:dc:83:91:8b:cc:03:cf:21:c9:64:ae:
                    f5:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FD:C0:34:76:9A:CF:CD:37:0D:99:38:02:62:24:2B:8B:9B:50:B4:22
            X509v3 Authority Key Identifier:
                keyid:66:E9:2C:34:1E:76:94:43:FD:E1:D2:75:66:04:4B:4B:65:15:90:60

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZuksNB52lEP94dJ1ZgRLS2UVkGA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/99/8f1968-a79a-4a07-ace6-c1d296f8fd07/1/_cA0dprPzTcNmTgCYiQri5tQtCI.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/99/8f1968-a79a-4a07-ace6-c1d296f8fd07/1/ZuksNB52lEP94dJ1ZgRLS2UVkGA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a0d:da06::/32

    Signature Algorithm: sha256WithRSAEncryption
         81:ea:c2:9f:eb:48:93:0f:20:a1:93:2a:17:0c:cd:df:4f:26:
         f5:d8:b5:29:ff:05:69:83:7c:7f:9e:c4:c1:66:ea:69:b9:50:
         99:43:b9:46:22:73:12:7a:01:84:c2:67:c1:aa:a4:44:3a:44:
         5b:df:ca:fb:91:ff:4b:06:bc:58:0a:63:25:46:ba:1d:9a:ee:
         c7:c5:9c:80:45:a9:99:5f:44:8e:81:36:9e:f9:73:25:e4:95:
         d1:5e:4f:6d:d7:14:28:8a:cd:b8:d3:17:53:50:6c:87:b7:89:
         fc:31:11:0f:68:1c:63:15:10:bf:21:1f:3b:6a:0e:2c:1f:c5:
         3b:29:20:6f:57:60:5d:11:28:61:d6:ca:c2:75:4b:55:36:df:
         90:4d:25:38:3f:95:7b:fc:11:44:64:44:42:2e:a0:79:53:b7:
         48:6a:4a:9b:de:66:c1:b3:c6:91:2e:07:07:9a:07:18:56:e6:
         1f:ce:31:a1:b5:93:68:e8:06:c0:cc:da:ca:9d:4b:07:8c:01:
         e2:70:c8:89:8d:57:2d:59:6b:a0:49:85:9b:73:09:21:6b:a8:
         d1:0a:90:81:87:ec:46:9e:e0:29:51:77:92:d5:13:61:7b:1a:
         ff:75:35:17:bd:b0:8b:85:6e:6a:4d:58:a3:50:48:66:b1:51:
         dc:6b:10:db
-----BEGIN CERTIFICATE-----
MIIE8DCCA9igAwIBAgIEETiggjANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg2
NmU5MmMzNDFlNzY5NDQzZmRlMWQyNzU2NjA0NGI0YjY1MTU5MDYwMB4XDTIyMDEw
MTE0NTgzNloXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoZmRjMDM0NzY5YWNm
Y2QzNzBkOTkzODAyNjIyNDJiOGI5YjUwYjQyMjCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAJrmlf5HHCITDJCtdKMk5FREHESzpxz7N2RyrVbdEMClIf03
0y4xAH6jSLmZ46fd1b8ySapBqxuHJwChLeWi663L1TqDSPRhykwrPW7jI6tL29vt
EaJS3Eho+3fqW4A/xxDw5lvbvQwFgagDz1/GSpyG4xsKhTRC0Kj6AZdn5zLtuP+b
1v6c0/4hmvNYqjMgGJecSfYrA6VkTpvEffUgIFS/UiMRu+F+Ayh3lyb+70YXV5p8
kDWopvqNrlHRHdjK8LSwaCtFK46uP4joICL3L+uOUvZh0pqu72S0wn15KxkCZ+Ne
VbZM4a2otHjErZAvSVOM/NyDkYvMA88hyWSu9akCAwEAAaOCAgowggIGMB0GA1Ud
DgQWBBT9wDR2ms/NNw2ZOAJiJCuLm1C0IjAfBgNVHSMEGDAWgBRm6Sw0HnaUQ/3h
0nVmBEtLZRWQYDAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L1p1a3NOQjUybEVQOTRkSjFaZ1JMUzJVVmtHQS5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvOTkvOGYxOTY4LWE3OWEtNGEwNy1hY2U2LWMxZDI5NmY4ZmQwNy8x
L19jQTBkcHJQelRjTm1UZ0NZaVFyaTV0UXRDSS5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvOTkv
OGYxOTY4LWE3OWEtNGEwNy1hY2U2LWMxZDI5NmY4ZmQwNy8xL1p1a3NOQjUybEVQ
OTRkSjFaZ1JMUzJVVmtHQS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAg
BggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMFACoN2gYwDQYJKoZIhvcNAQELBQAD
ggEBAIHqwp/rSJMPIKGTKhcMzd9PJvXYtSn/BWmDfH+exMFm6mm5UJlDuUYicxJ6
AYTCZ8GqpEQ6RFvfyvuR/0sGvFgKYyVGuh2a7sfFnIBFqZlfRI6BNp75cyXkldFe
T23XFCiKzbjTF1NQbIe3ifwxEQ9oHGMVEL8hHztqDiwfxTspIG9XYF0RKGHWysJ1
S1U235BNJTg/lXv8EURkREIuoHlTt0hqSpveZsGzxpEuBweaBxhW5h/OMaG1k2jo
BsDM2sqdSweMAeJwyImNVy1Za6BJhZtzCSFrqNEKkIGH7Eae4ClRd5LVE2F7Gv91
NRe9sIuFbmpNWKNQSGaxUdxrENs=
-----END CERTIFICATE-----