Route Origin Authorization

$ rpki-client -vvf 0.sb/repo/sb/21/3139322e3130392e3232382e302f32342d3234203d3e2037303138.roa
File:                     3139322e3130392e3232382e302f32342d3234203d3e2037303138.roa (raw, json)
Hash identifier:          9dcutMz0wZ/+gg4zlBwuUpqTylqT/wZEJC24VkaDT+w=
Subject key identifier:   8A:FB:14:D7:27:76:BC:4C:E0:13:47:87:0C:52:E9:A9:DE:89:E1:FB
Certificate issuer:       /CN=761c616364b89659ed9f18cb0af77420437cc7da
Certificate serial:       2CDD57C94DE7698F8D6BB5548662B86595BF663B
Authority key identifier: 76:1C:61:63:64:B8:96:59:ED:9F:18:CB:0A:F7:74:20:43:7C:C7:DA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/dhxhY2S4llntnxjLCvd0IEN8x9o.cer
Subject info access:      rsync://0.sb/repo/sb/21/3139322e3130392e3232382e302f32342d3234203d3e2037303138.roa
Signing time:             Tue 12 Jul 2022 22:57:16 +0000
ROA not before:           Tue 12 Jul 2022 22:52:16 +0000
ROA not after:            Tue 11 Jul 2023 22:57:16 +0000
asID:                     7018
IP address blocks:        192.109.228.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2c:dd:57:c9:4d:e7:69:8f:8d:6b:b5:54:86:62:b8:65:95:bf:66:3b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=761c616364b89659ed9f18cb0af77420437cc7da
        Validity
            Not Before: Jul 12 22:52:16 2022 GMT
            Not After : Jul 11 22:57:16 2023 GMT
        Subject: CN=8AFB14D72776BC4CE01347870C52E9A9DE89E1FB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:c0:73:96:3e:f0:5d:5c:63:11:6c:67:33:e2:
                    b9:97:36:01:30:39:03:3d:ab:29:c6:dc:9e:85:dd:
                    18:e1:9d:89:c7:23:9a:c5:be:6c:be:b1:f2:9d:39:
                    6d:3d:1a:00:10:f0:6d:07:cf:95:58:49:38:3b:a7:
                    8a:01:67:58:49:92:2f:df:21:13:6d:23:22:1e:e7:
                    47:b8:7e:4a:99:d6:8a:4a:e0:d5:57:e9:60:8c:7a:
                    72:39:09:dd:0b:01:b3:41:84:7b:af:61:aa:df:91:
                    b6:8c:c5:73:e1:7b:87:ac:ec:7a:7b:35:8b:e3:34:
                    68:6c:7f:c6:bf:e8:08:0a:ba:fd:53:ae:74:24:a5:
                    ac:15:51:4f:30:51:7a:8d:72:4f:f2:09:bc:19:0b:
                    73:fa:2a:64:07:a5:2d:1c:a6:1d:16:30:98:e8:3f:
                    42:a6:4e:08:7d:5e:b7:05:2c:5e:f4:5d:af:f5:06:
                    e3:97:2e:89:30:ec:d5:0b:60:bd:9d:8f:99:a3:33:
                    bd:1e:89:df:97:e7:da:5d:8b:b4:80:d4:fd:ce:52:
                    08:48:b9:02:11:8f:c5:80:c4:68:cb:b9:24:81:a4:
                    6a:53:c6:9c:75:9b:3d:41:ba:9a:b9:be:af:92:41:
                    22:de:54:b1:54:9a:db:4d:d2:98:a0:b7:73:36:a1:
                    65:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8A:FB:14:D7:27:76:BC:4C:E0:13:47:87:0C:52:E9:A9:DE:89:E1:FB
            X509v3 Authority Key Identifier:
                keyid:76:1C:61:63:64:B8:96:59:ED:9F:18:CB:0A:F7:74:20:43:7C:C7:DA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://0.sb/repo/sb/21/761C616364B89659ED9F18CB0AF77420437CC7DA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dhxhY2S4llntnxjLCvd0IEN8x9o.cer

            Subject Information Access:
                Signed Object - URI:rsync://0.sb/repo/sb/21/3139322e3130392e3232382e302f32342d3234203d3e2037303138.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.109.228.0/24

    Signature Algorithm: sha256WithRSAEncryption
         a2:5d:56:f3:4d:46:f3:eb:5b:03:2c:0e:b2:a2:39:1e:21:87:
         82:8c:39:83:b3:3d:48:f3:e6:11:b5:35:11:c4:ac:02:40:2c:
         28:04:5b:a0:3b:58:9f:12:10:bb:85:4f:58:28:de:fb:0d:a6:
         a2:7f:9a:d8:59:07:ae:c7:9b:a4:25:98:ff:00:4d:ef:ed:73:
         cc:64:c3:ca:0a:a1:24:f8:98:36:2a:38:1c:51:2a:4d:48:c4:
         cb:91:f2:85:5c:0a:1e:e5:df:86:4a:68:61:04:ef:fe:f4:75:
         ff:f8:1a:86:5f:83:be:92:d5:a9:cd:9f:c6:04:79:6c:0f:cd:
         ef:da:b9:60:69:c2:f9:bf:6d:e2:b1:6e:d2:c0:80:7f:9d:43:
         11:24:9b:99:d1:37:e9:b3:56:34:8c:49:67:0d:d0:58:21:be:
         fc:f7:1c:8a:33:7f:82:65:04:ec:43:20:df:ff:9d:3d:8e:6e:
         a5:3d:fb:47:38:04:23:b4:72:d0:6b:2d:7a:19:c3:6d:9b:0e:
         9d:36:fa:5e:ad:02:fc:00:43:eb:5a:11:55:eb:f8:6c:9a:1d:
         91:b1:1e:05:4d:a2:9b:bf:49:72:89:69:da:ff:b0:c6:29:46:
         7d:41:1f:8c:af:83:ad:a5:2e:7e:94:43:cd:83:a1:02:1d:b2:
         81:7a:d0:f4
-----BEGIN CERTIFICATE-----
MIIEsjCCA5qgAwIBAgIULN1XyU3naY+Na7VUhmK4ZZW/ZjswDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNzYxYzYxNjM2NGI4OTY1OWVkOWYxOGNiMGFmNzc0MjA0
MzdjYzdkYTAeFw0yMjA3MTIyMjUyMTZaFw0yMzA3MTEyMjU3MTZaMDMxMTAvBgNV
BAMTKDhBRkIxNEQ3Mjc3NkJDNENFMDEzNDc4NzBDNTJFOUE5REU4OUUxRkIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC/wHOWPvBdXGMRbGcz4rmXNgEw
OQM9qynG3J6F3RjhnYnHI5rFvmy+sfKdOW09GgAQ8G0Hz5VYSTg7p4oBZ1hJki/f
IRNtIyIe50e4fkqZ1opK4NVX6WCMenI5Cd0LAbNBhHuvYarfkbaMxXPhe4es7Hp7
NYvjNGhsf8a/6AgKuv1TrnQkpawVUU8wUXqNck/yCbwZC3P6KmQHpS0cph0WMJjo
P0KmTgh9XrcFLF70Xa/1BuOXLokw7NULYL2dj5mjM70eid+X59pdi7SA1P3OUghI
uQIRj8WAxGjLuSSBpGpTxpx1mz1Bupq5vq+SQSLeVLFUmttN0pigt3M2oWURAgMB
AAGjggG8MIIBuDAdBgNVHQ4EFgQUivsU1yd2vEzgE0eHDFLpqd6J4fswHwYDVR0j
BBgwFoAUdhxhY2S4llntnxjLCvd0IEN8x9owDgYDVR0PAQH/BAQDAgeAMFUGA1Ud
HwROMEwwSqBIoEaGRHJzeW5jOi8vMC5zYi9yZXBvL3NiLzIxLzc2MUM2MTYzNjRC
ODk2NTlFRDlGMThDQjBBRjc3NDIwNDM3Q0M3REEuY3JsMGQGCCsGAQUFBwEBBFgw
VjBUBggrBgEFBQcwAoZIcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkv
REVGQVVMVC9kaHhoWTJTNGxsbnRueGpMQ3ZkMElFTjh4OW8uY2VyMG4GCCsGAQUF
BwELBGIwYDBeBggrBgEFBQcwC4ZScnN5bmM6Ly8wLnNiL3JlcG8vc2IvMjEvMzEz
OTMyMmUzMTMwMzkyZTMyMzIzODJlMzAyZjMyMzQyZDMyMzQyMDNkM2UyMDM3MzAz
MTM4LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/
BBAwDjAMBAIAATAGAwQAwG3kMA0GCSqGSIb3DQEBCwUAA4IBAQCiXVbzTUbz61sD
LA6yojkeIYeCjDmDsz1I8+YRtTURxKwCQCwoBFugO1ifEhC7hU9YKN77Daaif5rY
WQeux5ukJZj/AE3v7XPMZMPKCqEk+Jg2KjgcUSpNSMTLkfKFXAoe5d+GSmhhBO/+
9HX/+BqGX4O+ktWpzZ/GBHlsD83v2rlgacL5v23isW7SwIB/nUMRJJuZ0Tfps1Y0
jElnDdBYIb789xyKM3+CZQTsQyDf/509jm6lPftHOAQjtHLQay16GcNtmw6dNvpe
rQL8AEPrWhFV6/hsmh2RsR4FTaKbv0lyiWna/7DGKUZ9QR+Mr4OtpS5+lEPNg6EC
HbKBetD0
-----END CERTIFICATE-----