Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/09/01000b-aa96-4bc6-8cc1-af07a9e87fc0/1/oQ31_wcpcgwJBG4NFpwK_PIaQ-0.roa
File:                     oQ31_wcpcgwJBG4NFpwK_PIaQ-0.roa (raw, json)
Hash identifier:          WGqdKgfHQ+eFrNad/LlA1QORxMEDadmTF1el2PE2z7c=
Subject key identifier:   A1:0D:F5:FF:07:29:72:0C:09:04:6E:0D:16:9C:0A:FC:F2:1A:43:ED
Certificate issuer:       /CN=e05a2dacf5dd4e9bfa2d2d9b2d3c3f9678745841
Certificate serial:       1ADEB910
Authority key identifier: E0:5A:2D:AC:F5:DD:4E:9B:FA:2D:2D:9B:2D:3C:3F:96:78:74:58:41
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/4FotrPXdTpv6LS2bLTw_lnh0WEE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/09/01000b-aa96-4bc6-8cc1-af07a9e87fc0/1/oQ31_wcpcgwJBG4NFpwK_PIaQ-0.roa
Signing time:             Sat 01 Jan 2022 04:01:28 +0000
ROA not before:           Sat 01 Jan 2022 04:01:28 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     60390
IP address blocks:        185.31.180.0/22 maxlen: 23
                          2a00:bf60::/32 maxlen: 33

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 450803984 (0x1adeb910)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e05a2dacf5dd4e9bfa2d2d9b2d3c3f9678745841
        Validity
            Not Before: Jan  1 04:01:28 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=a10df5ff0729720c09046e0d169c0afcf21a43ed
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:56:92:14:8f:43:ba:f9:ec:23:4f:a7:37:cc:
                    18:96:6b:72:be:fd:02:0a:41:0a:a3:6c:0b:49:13:
                    43:08:ab:f3:8d:33:71:61:98:2f:bc:38:ae:c5:aa:
                    34:a0:16:bc:ae:03:6e:ad:c2:82:4a:7f:90:db:3a:
                    33:64:1f:e5:8e:1a:b6:0f:c1:74:69:63:80:fa:b9:
                    3f:3c:0e:2a:00:a7:29:49:17:1d:be:b9:74:e3:30:
                    e2:d0:b1:6f:f1:57:cc:0a:d8:d7:0a:ed:06:a1:f6:
                    9f:ba:a6:e6:4e:b4:e8:6e:55:c3:52:41:d9:b6:78:
                    7f:58:8c:77:16:a6:3c:ea:24:9d:29:3b:0b:02:30:
                    9b:3c:2d:34:49:f4:ec:4c:10:5c:54:ce:1b:dd:a1:
                    2d:3c:b4:8c:9f:33:b6:4b:00:5d:bf:1d:ff:80:ff:
                    5d:d4:27:91:3a:70:b0:35:fa:be:3c:e9:f6:de:ac:
                    59:6f:0b:87:12:87:2e:30:37:3d:f1:7e:be:01:15:
                    c9:84:9e:a0:77:0e:42:57:1c:0a:e3:49:ab:be:cb:
                    6c:c5:ce:3e:d3:a4:7e:ab:3f:7d:c4:2e:6d:6e:23:
                    8c:47:c4:7a:c8:21:91:51:fa:a6:43:e3:13:51:95:
                    80:5c:cc:c1:b5:18:07:d1:b2:3d:12:5b:3d:da:bb:
                    4f:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A1:0D:F5:FF:07:29:72:0C:09:04:6E:0D:16:9C:0A:FC:F2:1A:43:ED
            X509v3 Authority Key Identifier:
                keyid:E0:5A:2D:AC:F5:DD:4E:9B:FA:2D:2D:9B:2D:3C:3F:96:78:74:58:41

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4FotrPXdTpv6LS2bLTw_lnh0WEE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/01000b-aa96-4bc6-8cc1-af07a9e87fc0/1/oQ31_wcpcgwJBG4NFpwK_PIaQ-0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/09/01000b-aa96-4bc6-8cc1-af07a9e87fc0/1/4FotrPXdTpv6LS2bLTw_lnh0WEE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.31.180.0/22
                IPv6:
                  2a00:bf60::/32

    Signature Algorithm: sha256WithRSAEncryption
         33:3f:8c:a2:7a:07:bc:97:71:29:50:f0:3b:06:45:35:88:b8:
         77:9b:2a:4f:f2:67:17:f1:7e:21:1c:d0:eb:75:20:a5:1a:1d:
         2a:c7:fd:7b:1d:69:49:8a:5c:1a:2f:df:4b:f3:7b:19:58:86:
         ad:3a:54:fb:2a:c5:91:64:09:ca:85:ee:6c:b5:6f:fb:2f:92:
         9a:c7:d5:8c:93:11:31:6d:f3:49:78:c7:7e:49:6a:4c:f2:13:
         b9:0d:63:25:9e:d6:36:08:f9:5f:13:67:c0:7c:cf:fa:ac:38:
         d2:03:d1:6b:db:47:15:5f:54:0a:b6:bf:fe:74:e9:61:2f:bf:
         cc:43:70:b8:a7:ae:55:21:69:bc:26:b7:c0:77:0f:4b:f7:51:
         e3:64:1e:5a:75:8d:ef:eb:2a:9d:97:1d:48:7e:9d:40:60:5f:
         f3:c4:a4:f0:e6:2c:89:e5:ec:7d:29:35:3d:da:0d:a2:0b:db:
         97:0d:63:2e:43:f7:01:1d:08:c2:8d:1f:f6:37:d6:0b:e2:be:
         e6:bb:eb:f1:c9:3f:b5:d8:9b:9d:0d:f4:21:94:59:71:01:1e:
         6c:44:3a:5e:85:68:09:da:71:7e:15:35:4b:56:94:43:89:f0:
         ff:95:76:9f:81:93:24:d9:71:a2:01:c3:b5:5e:49:cc:5d:75:
         57:38:76:30
-----BEGIN CERTIFICATE-----
MIIE/jCCA+agAwIBAgIEGt65EDANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyhl
MDVhMmRhY2Y1ZGQ0ZTliZmEyZDJkOWIyZDNjM2Y5Njc4NzQ1ODQxMB4XDTIyMDEw
MTA0MDEyOFoXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoYTEwZGY1ZmYwNzI5
NzIwYzA5MDQ2ZTBkMTY5YzBhZmNmMjFhNDNlZDCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBALpWkhSPQ7r57CNPpzfMGJZrcr79AgpBCqNsC0kTQwir840z
cWGYL7w4rsWqNKAWvK4Dbq3Cgkp/kNs6M2Qf5Y4atg/BdGljgPq5PzwOKgCnKUkX
Hb65dOMw4tCxb/FXzArY1wrtBqH2n7qm5k606G5Vw1JB2bZ4f1iMdxamPOoknSk7
CwIwmzwtNEn07EwQXFTOG92hLTy0jJ8ztksAXb8d/4D/XdQnkTpwsDX6vjzp9t6s
WW8LhxKHLjA3PfF+vgEVyYSeoHcOQlccCuNJq77LbMXOPtOkfqs/fcQubW4jjEfE
esghkVH6pkPjE1GVgFzMwbUYB9GyPRJbPdq7TxcCAwEAAaOCAhgwggIUMB0GA1Ud
DgQWBBShDfX/BylyDAkEbg0WnAr88hpD7TAfBgNVHSMEGDAWgBTgWi2s9d1Om/ot
LZstPD+WeHRYQTAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
LzRGb3RyUFhkVHB2NkxTMmJMVHdfbG5oMFdFRS5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvMDkvMDEwMDBiLWFhOTYtNGJjNi04Y2MxLWFmMDdhOWU4N2ZjMC8x
L29RMzFfd2NwY2d3SkJHNE5GcHdLX1BJYVEtMC5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMDkv
MDEwMDBiLWFhOTYtNGJjNi04Y2MxLWFmMDdhOWU4N2ZjMC8xLzRGb3RyUFhkVHB2
NkxTMmJMVHdfbG5oMFdFRS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAu
BggrBgEFBQcBBwEB/wQfMB0wDAQCAAEwBgMEArkftDANBAIAAjAHAwUAKgC/YDAN
BgkqhkiG9w0BAQsFAAOCAQEAMz+MonoHvJdxKVDwOwZFNYi4d5sqT/JnF/F+IRzQ
63UgpRodKsf9ex1pSYpcGi/fS/N7GViGrTpU+yrFkWQJyoXubLVv+y+SmsfVjJMR
MW3zSXjHfklqTPITuQ1jJZ7WNgj5XxNnwHzP+qw40gPRa9tHFV9UCra//nTpYS+/
zENwuKeuVSFpvCa3wHcPS/dR42QeWnWN7+sqnZcdSH6dQGBf88Sk8OYsieXsfSk1
PdoNogvblw1jLkP3AR0Iwo0f9jfWC+K+5rvr8ck/tdibnQ30IZRZcQEebEQ6XoVo
CdpxfhU1S1aUQ4nw/5V2n4GTJNlxogHDtV5JzF11Vzh2MA==
-----END CERTIFICATE-----