Route Origin Authorization

$ rpki-client -vvf ca.rg.net/rpki/RGnet-OU/sNDf3nl2Jb95f9MD6RTemiGL20g.roa
File:                     sNDf3nl2Jb95f9MD6RTemiGL20g.roa (raw, json)
Hash identifier:          ONeGGChzw++/p6Tf6YYFk6GKlp9Qyutp9L2FxtYge8I=
Subject key identifier:   B0:D0:DF:DE:79:76:25:BF:79:7F:D3:03:E9:14:DE:9A:21:8B:DB:48
Certificate issuer:       /CN=6d6fbfa9753db8d846433db5351d9a9ec07c96bd
Certificate serial:       9FA6
Authority key identifier: 6D:6F:BF:A9:75:3D:B8:D8:46:43:3D:B5:35:1D:9A:9E:C0:7C:96:BD
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/bW-_qXU9uNhGQz21NR2ansB8lr0.cer
Subject info access:      rsync://ca.rg.net/rpki/RGnet-OU/sNDf3nl2Jb95f9MD6RTemiGL20g.roa
Signing time:             Sun 29 Aug 2021 23:37:55 +0000
ROA not before:           Sun 29 Aug 2021 23:37:55 +0000
ROA not after:            Fri 01 Jul 2022 00:00:00 +0000
asID:                     4128
IP address blocks:        198.180.152.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 40870 (0x9fa6)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6d6fbfa9753db8d846433db5351d9a9ec07c96bd
        Validity
            Not Before: Aug 29 23:37:55 2021 GMT
            Not After : Jul  1 00:00:00 2022 GMT
        Subject: CN=B0D0DFDE797625BF797FD303E914DE9A218BDB48
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:7e:4b:f6:15:4d:d9:58:9e:4f:1f:1d:69:a2:
                    23:4b:34:e6:fc:5b:06:03:b6:8f:92:6c:73:4d:a0:
                    1c:ac:9f:86:ef:25:9d:78:1d:60:b7:85:aa:db:bd:
                    3a:a9:3f:61:a7:d1:d8:f3:aa:2b:73:00:5a:16:d7:
                    b9:52:2f:4a:67:a2:58:b5:c1:9f:13:1b:34:f1:45:
                    5d:8a:f7:d9:e0:16:ef:0f:ae:1d:35:87:19:93:12:
                    4c:51:dc:8b:9e:09:9f:ef:60:90:4d:ee:b9:89:fa:
                    77:25:a5:b5:23:ae:4d:d3:54:16:b4:bc:ff:8b:25:
                    2f:b2:ce:61:ab:1b:a9:54:36:bf:4e:1b:f8:ad:e1:
                    05:71:ff:eb:74:ea:d6:17:a9:6d:32:7d:54:4d:4b:
                    75:51:11:78:60:f1:97:93:d5:fa:61:fb:ca:7a:23:
                    49:77:05:4d:a0:5d:bf:5a:7a:8d:42:94:61:6d:e0:
                    40:96:0b:54:bf:25:22:f0:fa:91:08:93:79:64:47:
                    24:3a:69:63:66:be:b4:c2:60:82:c3:a9:e4:6f:81:
                    b4:41:5a:0c:e5:28:cf:a2:71:17:32:02:2e:b0:3b:
                    2d:7c:7b:a9:e6:aa:05:76:53:d7:2c:7b:2e:1d:18:
                    ae:a1:68:26:f3:a2:ef:d5:9a:ec:c1:8f:ea:56:44:
                    b9:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B0:D0:DF:DE:79:76:25:BF:79:7F:D3:03:E9:14:DE:9A:21:8B:DB:48
            X509v3 Authority Key Identifier:
                keyid:6D:6F:BF:A9:75:3D:B8:D8:46:43:3D:B5:35:1D:9A:9E:C0:7C:96:BD

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://ca.rg.net/rpki/RGnet-OU/bW-_qXU9uNhGQz21NR2ansB8lr0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bW-_qXU9uNhGQz21NR2ansB8lr0.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://ca.rg.net/rpki/RGnet-OU/sNDf3nl2Jb95f9MD6RTemiGL20g.roa
                RPKI Notify - URI:https://ca.rg.net/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  198.180.152.0/24

    Signature Algorithm: sha256WithRSAEncryption
         3c:35:29:af:fe:82:87:e4:a2:bd:60:ab:f3:87:6b:6e:28:dc:
         bd:33:e9:bd:14:57:9b:36:bc:53:50:2b:21:cb:70:d0:cd:3b:
         02:78:99:db:ed:f0:d0:3c:d3:96:99:24:33:d6:3b:69:62:7c:
         11:22:8d:ad:63:a9:65:7b:09:09:df:d4:09:5d:76:23:b5:f2:
         05:16:e3:9d:e3:66:7c:16:c3:32:88:75:4d:18:e3:92:38:09:
         3e:af:eb:26:6d:65:e1:e3:76:95:0b:aa:fe:c7:c4:b3:9a:47:
         2b:fa:02:36:c6:77:47:9d:e5:ae:82:2c:ab:b2:6d:06:f2:51:
         85:dd:87:8c:cf:b2:46:79:46:5b:3b:cc:36:95:e5:cb:52:66:
         03:36:93:07:43:69:14:a4:20:ca:95:c5:04:a0:91:e1:e1:c3:
         a2:7a:90:12:66:60:e7:7a:0d:51:cf:8b:18:37:df:1b:50:03:
         cc:03:9f:8f:02:14:1e:e6:d1:66:70:94:da:d5:c1:16:62:75:
         dd:38:92:84:a0:4c:ed:e4:60:e4:74:56:24:72:b1:6b:63:ec:
         2c:4d:90:59:c1:2c:03:8b:0a:78:85:99:2b:05:4d:28:29:90:
         7d:7b:b2:bb:9d:88:f0:10:84:2a:67:cd:11:da:12:4a:88:fb:
         97:b4:56:3c
-----BEGIN CERTIFICATE-----
MIIEuTCCA6GgAwIBAgIDAJ+mMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKDZk
NmZiZmE5NzUzZGI4ZDg0NjQzM2RiNTM1MWQ5YTllYzA3Yzk2YmQwHhcNMjEwODI5
MjMzNzU1WhcNMjIwNzAxMDAwMDAwWjAzMTEwLwYDVQQDEyhCMEQwREZERTc5NzYy
NUJGNzk3RkQzMDNFOTE0REU5QTIxOEJEQjQ4MIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEAun5L9hVN2VieTx8daaIjSzTm/FsGA7aPkmxzTaAcrJ+G7yWd
eB1gt4Wq2706qT9hp9HY86orcwBaFte5Ui9KZ6JYtcGfExs08UVdivfZ4BbvD64d
NYcZkxJMUdyLngmf72CQTe65ifp3JaW1I65N01QWtLz/iyUvss5hqxupVDa/Thv4
reEFcf/rdOrWF6ltMn1UTUt1URF4YPGXk9X6YfvKeiNJdwVNoF2/WnqNQpRhbeBA
lgtUvyUi8PqRCJN5ZEckOmljZr60wmCCw6nkb4G0QVoM5SjPonEXMgIusDstfHup
5qoFdlPXLHsuHRiuoWgm86Lv1ZrswY/qVkS5NQIDAQABo4IB1DCCAdAwHQYDVR0O
BBYEFLDQ3955diW/eX/TA+kU3pohi9tIMB8GA1UdIwQYMBaAFG1vv6l1PbjYRkM9
tTUdmp7AfJa9MBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwUAYDVR0fBEkwRzBF
oEOgQYY/cnN5bmM6Ly9jYS5yZy5uZXQvcnBraS9SR25ldC1PVS9iVy1fcVhVOXVO
aEdRejIxTlIyYW5zQjhscjAuY3JsMGQGCCsGAQUFBwEBBFgwVjBUBggrBgEFBQcw
AoZIcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iVy1f
cVhVOXVOaEdRejIxTlIyYW5zQjhscjAuY2VyMA4GA1UdDwEB/wQEAwIHgDCBigYI
KwYBBQUHAQsEfjB8MEsGCCsGAQUFBzALhj9yc3luYzovL2NhLnJnLm5ldC9ycGtp
L1JHbmV0LU9VL3NORGYzbmwySmI5NWY5TUQ2UlRlbWlHTDIwZy5yb2EwLQYIKwYB
BQUHMA2GIWh0dHBzOi8vY2EucmcubmV0L3JyZHAvbm90aWZ5LnhtbDAfBggrBgEF
BQcBBwEB/wQQMA4wDAQCAAEwBgMEAMa0mDANBgkqhkiG9w0BAQsFAAOCAQEAPDUp
r/6Ch+SivWCr84drbijcvTPpvRRXmza8U1ArIctw0M07AniZ2+3w0DzTlpkkM9Y7
aWJ8ESKNrWOpZXsJCd/UCV12I7XyBRbjneNmfBbDMoh1TRjjkjgJPq/rJm1l4eN2
lQuq/sfEs5pHK/oCNsZ3R53lroIsq7JtBvJRhd2HjM+yRnlGWzvMNpXly1JmAzaT
B0NpFKQgypXFBKCR4eHDonqQEmZg53oNUc+LGDffG1ADzAOfjwIUHubRZnCU2tXB
FmJ13TiShKBM7eRg5HRWJHKxa2PsLE2QWcEsA4sKeIWZKwVNKCmQfXuyu52I8BCE
KmfNEdoSSoj7l7RWPA==
-----END CERTIFICATE-----