Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/09/541c05-8d7d-42b8-ab00-7fbbae6f9437/1/iphDXzAsYhuy0cWQb3fNx9jgNLw.roa
File:                     iphDXzAsYhuy0cWQb3fNx9jgNLw.roa (raw, json)
Hash identifier:          3Uac91siZmC8kIlmIKCm/O7N8xWlfRz7KAkQwsyhddU=
Subject key identifier:   8A:98:43:5F:30:2C:62:1B:B2:D1:C5:90:6F:77:CD:C7:D8:E0:34:BC
Certificate issuer:       /CN=0548cedf17029ed98a108113c6c109ecaccd82ec
Certificate serial:       38AB2F30
Authority key identifier: 05:48:CE:DF:17:02:9E:D9:8A:10:81:13:C6:C1:09:EC:AC:CD:82:EC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/BUjO3xcCntmKEIETxsEJ7KzNguw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/09/541c05-8d7d-42b8-ab00-7fbbae6f9437/1/iphDXzAsYhuy0cWQb3fNx9jgNLw.roa
Signing time:             Tue 17 May 2022 05:30:18 +0000
ROA not before:           Tue 17 May 2022 05:30:18 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     49421
IP address blocks:        78.83.238.0/23 maxlen: 23

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 950742832 (0x38ab2f30)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0548cedf17029ed98a108113c6c109ecaccd82ec
        Validity
            Not Before: May 17 05:30:18 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=8a98435f302c621bb2d1c5906f77cdc7d8e034bc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:76:23:ea:ed:f4:a6:27:23:e4:88:f1:73:c4:
                    f2:30:d0:df:cf:47:d0:82:57:19:af:1d:a6:9f:ab:
                    0d:1e:d5:0c:d1:f0:ff:98:aa:d5:26:88:88:1c:5e:
                    92:bc:bf:4a:0e:6f:ad:3a:fc:ab:f4:b3:62:39:96:
                    7a:0d:60:a0:f3:42:5b:d5:e8:2c:2f:2c:c8:41:c6:
                    d0:bc:21:ff:6d:61:88:80:c6:3e:d0:51:9c:be:31:
                    dc:51:5d:be:a2:75:81:83:7a:bc:2e:20:07:0b:02:
                    6b:c3:ef:b4:34:20:fd:5c:a2:79:46:b3:de:db:16:
                    4f:02:d0:40:91:61:1b:0f:17:c3:45:4a:30:4e:78:
                    ba:4b:8b:70:39:c8:37:d2:05:76:fc:30:cc:37:73:
                    b0:b2:ed:89:6d:32:59:a7:3b:9d:0e:d0:c5:0f:a1:
                    35:29:d9:10:33:ce:41:43:62:8b:35:5f:1a:10:d4:
                    4a:87:3b:03:6c:ba:76:01:41:b0:9e:0e:05:37:ce:
                    00:65:71:2b:92:d8:49:76:58:7e:e2:ce:d8:2a:90:
                    4f:c4:ec:7e:70:96:5d:34:f2:d2:3e:da:65:22:e3:
                    2d:71:35:f7:18:d1:bc:7e:45:26:4e:39:50:08:dd:
                    6a:40:49:15:20:09:e0:7d:b1:19:29:72:20:0c:18:
                    09:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8A:98:43:5F:30:2C:62:1B:B2:D1:C5:90:6F:77:CD:C7:D8:E0:34:BC
            X509v3 Authority Key Identifier:
                keyid:05:48:CE:DF:17:02:9E:D9:8A:10:81:13:C6:C1:09:EC:AC:CD:82:EC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BUjO3xcCntmKEIETxsEJ7KzNguw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/541c05-8d7d-42b8-ab00-7fbbae6f9437/1/iphDXzAsYhuy0cWQb3fNx9jgNLw.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/09/541c05-8d7d-42b8-ab00-7fbbae6f9437/1/BUjO3xcCntmKEIETxsEJ7KzNguw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  78.83.238.0/23

    Signature Algorithm: sha256WithRSAEncryption
         97:e8:16:b2:c7:54:94:1a:ce:1a:a0:00:a8:b4:80:ea:11:53:
         00:a9:53:17:bb:f5:f9:64:df:77:42:81:6c:9a:b5:e8:6a:bb:
         e6:7f:ad:f9:e0:d5:9f:9e:a8:c9:79:e0:3f:1b:86:57:e7:cd:
         87:f1:ae:69:7d:f4:31:a9:5f:b8:6d:bd:88:3e:b6:94:52:32:
         83:92:02:28:05:3a:ce:a2:a6:a4:a2:6b:2e:3c:18:21:76:42:
         b9:d3:ae:f8:83:e6:3c:de:8a:5b:d9:8e:ce:22:6b:05:fa:4c:
         76:54:0d:3e:8f:3c:84:dd:50:45:af:81:ef:29:ea:ca:da:c4:
         2c:b6:e5:7e:37:4f:60:2e:b9:e6:bc:20:c4:27:28:4e:6f:65:
         1a:ff:57:82:75:41:ee:56:58:ce:43:69:11:fd:6e:aa:c8:07:
         76:5e:f8:15:ed:00:21:ce:9c:5e:e7:5b:6e:a2:18:d4:ce:da:
         5d:54:af:f1:a8:97:d2:cd:3d:e9:9e:a4:a1:42:ed:92:0c:e3:
         81:3f:15:41:3b:36:c7:aa:fe:fd:c7:45:07:86:39:1b:36:96:
         e1:ce:65:1f:a4:88:57:96:21:43:73:c0:95:b9:68:3f:49:62:
         b5:66:31:1b:d6:b5:88:c8:a9:b6:b2:34:d3:c3:a8:b5:af:d6:
         75:64:37:97
-----BEGIN CERTIFICATE-----
MIIE7zCCA9egAwIBAgIEOKsvMDANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEygw
NTQ4Y2VkZjE3MDI5ZWQ5OGExMDgxMTNjNmMxMDllY2FjY2Q4MmVjMB4XDTIyMDUx
NzA1MzAxOFoXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoOGE5ODQzNWYzMDJj
NjIxYmIyZDFjNTkwNmY3N2NkYzdkOGUwMzRiYzCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAL12I+rt9KYnI+SI8XPE8jDQ389H0IJXGa8dpp+rDR7VDNHw
/5iq1SaIiBxekry/Sg5vrTr8q/SzYjmWeg1goPNCW9XoLC8syEHG0Lwh/21hiIDG
PtBRnL4x3FFdvqJ1gYN6vC4gBwsCa8PvtDQg/VyieUaz3tsWTwLQQJFhGw8Xw0VK
ME54ukuLcDnIN9IFdvwwzDdzsLLtiW0yWac7nQ7QxQ+hNSnZEDPOQUNiizVfGhDU
Soc7A2y6dgFBsJ4OBTfOAGVxK5LYSXZYfuLO2CqQT8TsfnCWXTTy0j7aZSLjLXE1
9xjRvH5FJk45UAjdakBJFSAJ4H2xGSlyIAwYCc0CAwEAAaOCAgkwggIFMB0GA1Ud
DgQWBBSKmENfMCxiG7LRxZBvd83H2OA0vDAfBgNVHSMEGDAWgBQFSM7fFwKe2YoQ
gRPGwQnsrM2C7DAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L0JVak8zeGNDbnRtS0VJRVR4c0VKN0t6Tmd1dy5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvMDkvNTQxYzA1LThkN2QtNDJiOC1hYjAwLTdmYmJhZTZmOTQzNy8x
L2lwaERYekFzWWh1eTBjV1FiM2ZOeDlqZ05Mdy5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMDkv
NTQxYzA1LThkN2QtNDJiOC1hYjAwLTdmYmJhZTZmOTQzNy8xL0JVak8zeGNDbnRt
S0VJRVR4c0VKN0t6Tmd1dy5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAf
BggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAU5T7jANBgkqhkiG9w0BAQsFAAOC
AQEAl+gWssdUlBrOGqAAqLSA6hFTAKlTF7v1+WTfd0KBbJq16Gq75n+t+eDVn56o
yXngPxuGV+fNh/GuaX30MalfuG29iD62lFIyg5ICKAU6zqKmpKJrLjwYIXZCudOu
+IPmPN6KW9mOziJrBfpMdlQNPo88hN1QRa+B7ynqytrELLblfjdPYC655rwgxCco
Tm9lGv9XgnVB7lZYzkNpEf1uqsgHdl74Fe0AIc6cXudbbqIY1M7aXVSv8aiX0s09
6Z6koULtkgzjgT8VQTs2x6r+/cdFB4Y5GzaW4c5lH6SIV5YhQ3PAlbloP0litWYx
G9a1iMiptrI008Oota/WdWQ3lw==
-----END CERTIFICATE-----