Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/YPnjWqNy51dDcschNyDvT_OlxsE.roa
File:                     YPnjWqNy51dDcschNyDvT_OlxsE.roa (raw, json)
Hash identifier:          vgf5SLxjgRrU0IqXfaUEH6el8vtjar2TnfsOP1EX94M=
Subject key identifier:   60:F9:E3:5A:A3:72:E7:57:43:72:C7:21:37:20:EF:4F:F3:A5:C6:C1
Certificate issuer:       /CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Certificate serial:       1C884B19
Authority key identifier: 22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/YPnjWqNy51dDcschNyDvT_OlxsE.roa
Signing time:             Sat 01 Jan 2022 01:02:50 +0000
ROA not before:           Sat 01 Jan 2022 01:02:50 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     203559
IP address blocks:        2a00:1728:9::/48 maxlen: 48

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 478694169 (0x1c884b19)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
        Validity
            Not Before: Jan  1 01:02:50 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=60f9e35aa372e7574372c7213720ef4ff3a5c6c1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:17:a3:78:02:40:ff:21:6c:3d:f8:d5:8e:f3:
                    99:59:60:9f:76:fc:2c:88:a0:7b:38:55:bb:33:5b:
                    c6:c4:f2:1c:f1:81:d5:e8:7c:b4:0e:19:83:14:2d:
                    e5:9f:e2:80:6c:01:57:b1:b3:24:99:7b:29:06:a1:
                    92:d3:f8:9e:94:8c:a2:13:df:04:0b:53:13:1b:05:
                    6c:5d:fc:a0:95:16:7c:da:4c:fc:21:15:1e:96:cd:
                    c8:72:24:81:96:07:c4:cd:eb:91:08:91:a1:de:d7:
                    70:d0:56:a8:87:50:4c:fe:f3:29:32:6f:2c:9c:c2:
                    c7:7f:44:1a:93:9a:93:4e:35:43:48:fc:27:38:b8:
                    cc:ba:bc:e9:cd:8b:d4:ad:0a:75:f3:93:a2:19:0f:
                    28:c2:be:83:92:b2:a0:dc:96:e4:03:86:fe:de:28:
                    5c:0c:aa:a4:f6:75:15:9a:7c:79:91:3d:78:6b:1c:
                    59:e2:ad:14:dc:62:11:2e:76:0a:a3:0c:45:6f:7c:
                    92:12:2f:79:fa:86:1b:c8:7a:e3:ca:a3:22:ce:92:
                    06:9c:cd:de:da:17:e5:59:f7:a2:86:ab:5c:09:31:
                    b5:51:d6:7c:ca:b1:ce:71:54:85:99:35:6d:b1:6f:
                    d5:b5:08:a4:14:6d:2a:63:41:97:19:6e:e3:dd:50:
                    6a:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                60:F9:E3:5A:A3:72:E7:57:43:72:C7:21:37:20:EF:4F:F3:A5:C6:C1
            X509v3 Authority Key Identifier:
                keyid:22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/YPnjWqNy51dDcschNyDvT_OlxsE.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a00:1728:9::/48

    Signature Algorithm: sha256WithRSAEncryption
         41:be:39:41:61:d2:67:10:69:ef:e4:27:1b:b3:39:e6:2b:41:
         3e:f7:29:6b:62:43:e3:bf:91:12:b1:86:39:31:0a:e3:bc:64:
         1a:3e:7b:7a:91:cc:37:26:28:a8:4d:e4:db:58:f7:5f:50:c6:
         23:d2:57:4a:8c:42:fb:cc:da:53:c5:9a:d6:fc:45:b3:0f:b7:
         67:dd:06:1b:fe:40:07:b4:f4:f7:61:39:78:d9:6e:de:0c:77:
         58:98:88:e9:cc:cf:7b:3f:81:19:2c:61:16:5f:e1:ca:4e:86:
         5c:ee:21:d8:bf:69:7c:db:81:44:c0:32:4b:b8:59:69:4f:0e:
         18:a2:23:f4:56:2c:0a:2a:94:8c:9b:f8:df:e8:ea:a0:4c:66:
         ee:3c:8d:46:eb:cc:08:cd:b1:98:02:47:cf:e4:bc:d1:21:38:
         60:7f:fa:7a:05:f1:e1:23:f9:fb:da:fc:e1:72:b4:d1:d2:2d:
         78:fb:eb:23:1e:03:7d:78:92:aa:92:7d:92:6a:a5:14:5d:b8:
         57:0d:16:be:fe:6f:f1:60:0b:f3:91:5e:67:74:89:7d:41:65:
         67:5c:4f:b4:b5:f7:53:c9:3c:c8:37:ba:10:44:6c:20:bf:0e:
         df:39:56:b6:ce:03:b2:95:77:4f:3a:95:f2:54:f9:c8:d3:76:
         d9:71:19:ad
-----BEGIN CERTIFICATE-----
MIIE8jCCA9qgAwIBAgIEHIhLGTANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEygy
MmM0YWMzZTNjNDNkNzBkMDUzNDljODE1YmFhZGQzOGFkNzc1ZTlkMB4XDTIyMDEw
MTAxMDI1MFoXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoNjBmOWUzNWFhMzcy
ZTc1NzQzNzJjNzIxMzcyMGVmNGZmM2E1YzZjMTCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBANMXo3gCQP8hbD341Y7zmVlgn3b8LIigezhVuzNbxsTyHPGB
1eh8tA4ZgxQt5Z/igGwBV7GzJJl7KQahktP4npSMohPfBAtTExsFbF38oJUWfNpM
/CEVHpbNyHIkgZYHxM3rkQiRod7XcNBWqIdQTP7zKTJvLJzCx39EGpOak041Q0j8
Jzi4zLq86c2L1K0KdfOTohkPKMK+g5KyoNyW5AOG/t4oXAyqpPZ1FZp8eZE9eGsc
WeKtFNxiES52CqMMRW98khIvefqGG8h648qjIs6SBpzN3toX5Vn3ooarXAkxtVHW
fMqxznFUhZk1bbFv1bUIpBRtKmNBlxlu491Qag8CAwEAAaOCAgwwggIIMB0GA1Ud
DgQWBBRg+eNao3LnV0NyxyE3IO9P86XGwTAfBgNVHSMEGDAWgBQixKw+PEPXDQU0
nIFbqt04rXdenTAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L0lzU3NQanhEMXcwRk5KeUJXNnJkT0sxM1hwMC5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvMDMvOTEzYTNhLWY1NTAtNDZmMC1hY2M3LWNkM2NhNTk3NTcxMi8x
L1lQbmpXcU55NTFkRGNzY2hOeUR2VF9PbHhzRS5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMDMv
OTEzYTNhLWY1NTAtNDZmMC1hY2M3LWNkM2NhNTk3NTcxMi8xL0lzU3NQanhEMXcw
Rk5KeUJXNnJkT0sxM1hwMC5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAi
BggrBgEFBQcBBwEB/wQTMBEwDwQCAAIwCQMHACoAFygACTANBgkqhkiG9w0BAQsF
AAOCAQEAQb45QWHSZxBp7+QnG7M55itBPvcpa2JD47+RErGGOTEK47xkGj57epHM
NyYoqE3k21j3X1DGI9JXSoxC+8zaU8Wa1vxFsw+3Z90GG/5AB7T092E5eNlu3gx3
WJiI6czPez+BGSxhFl/hyk6GXO4h2L9pfNuBRMAyS7hZaU8OGKIj9FYsCiqUjJv4
3+jqoExm7jyNRuvMCM2xmAJHz+S80SE4YH/6egXx4SP5+9r84XK00dItePvrIx4D
fXiSqpJ9kmqlFF24Vw0Wvv5v8WAL85FeZ3SJfUFlZ1xPtLX3U8k8yDe6EERsIL8O
3zlWts4DspV3TzqV8lT5yNN22XEZrQ==
-----END CERTIFICATE-----