Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/09/a3ccce-c0d6-49a8-bbb8-b8ae16b35c31/1/SvUr_CKa9ep0h2sCgnQrB_x0hUA.roa
File:                     SvUr_CKa9ep0h2sCgnQrB_x0hUA.roa (raw, json)
Hash identifier:          1kiIutnpHSQcPkWadwnTwZbDEopbS0XCv9bAgu5NDH0=
Subject key identifier:   4A:F5:2B:FC:22:9A:F5:EA:74:87:6B:02:82:74:2B:07:FC:74:85:40
Certificate issuer:       /CN=790d1ca78761310ac39a714ff62f3b92b2e77d8a
Certificate serial:       080B5D23
Authority key identifier: 79:0D:1C:A7:87:61:31:0A:C3:9A:71:4F:F6:2F:3B:92:B2:E7:7D:8A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/eQ0cp4dhMQrDmnFP9i87krLnfYo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/09/a3ccce-c0d6-49a8-bbb8-b8ae16b35c31/1/SvUr_CKa9ep0h2sCgnQrB_x0hUA.roa
Signing time:             Sat 01 Jan 2022 06:57:04 +0000
ROA not before:           Sat 01 Jan 2022 06:57:04 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     0
IP address blocks:        194.42.48.0/24 maxlen: 32
                          2001:7f8:c::/48 maxlen: 128

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 134962467 (0x80b5d23)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=790d1ca78761310ac39a714ff62f3b92b2e77d8a
        Validity
            Not Before: Jan  1 06:57:04 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=4af52bfc229af5ea74876b0282742b07fc748540
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:d3:26:93:1b:cf:a3:ba:94:6b:04:cc:bc:61:
                    04:d3:57:e7:02:7a:b0:a6:84:4e:32:c0:11:d0:d0:
                    5f:05:ff:3f:7e:7c:25:51:12:79:eb:cd:86:cc:32:
                    89:3f:1c:4c:2c:7f:a9:0f:46:12:72:6b:62:0e:fc:
                    47:ea:8b:fb:83:a3:e4:c2:c6:d5:27:e1:fc:53:86:
                    cc:ca:cc:d7:54:be:74:50:37:28:9e:66:18:aa:85:
                    6f:a4:4c:14:34:a8:0c:ce:89:5e:de:97:44:6e:00:
                    c3:32:39:41:1f:8a:a7:7c:82:23:e6:2a:89:0b:30:
                    65:20:7b:13:45:f9:d2:ac:a7:11:d2:3d:e5:56:21:
                    9c:80:7b:f3:0e:b0:65:f3:da:ee:5c:cd:f3:ab:01:
                    e3:3c:79:f5:47:3a:b2:3b:23:54:df:83:e2:26:08:
                    3d:07:07:9a:98:a7:d8:3d:80:c1:2e:ea:c3:d6:f9:
                    e4:45:36:9a:a1:59:9f:2e:7c:88:b1:e7:b9:a5:97:
                    88:6c:88:9f:10:75:f5:de:f0:8f:95:78:9b:33:b4:
                    df:15:b5:b0:18:40:39:85:69:4f:5c:ce:94:e3:bb:
                    f5:74:2a:b4:6b:96:f3:b8:61:9a:e9:9c:8b:f8:fa:
                    59:00:45:90:66:2f:b8:5c:53:5c:c0:fe:e5:94:f5:
                    b8:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4A:F5:2B:FC:22:9A:F5:EA:74:87:6B:02:82:74:2B:07:FC:74:85:40
            X509v3 Authority Key Identifier:
                keyid:79:0D:1C:A7:87:61:31:0A:C3:9A:71:4F:F6:2F:3B:92:B2:E7:7D:8A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eQ0cp4dhMQrDmnFP9i87krLnfYo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/a3ccce-c0d6-49a8-bbb8-b8ae16b35c31/1/SvUr_CKa9ep0h2sCgnQrB_x0hUA.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/09/a3ccce-c0d6-49a8-bbb8-b8ae16b35c31/1/eQ0cp4dhMQrDmnFP9i87krLnfYo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  194.42.48.0/24
                IPv6:
                  2001:7f8:c::/48

    Signature Algorithm: sha256WithRSAEncryption
         a8:83:05:8d:8d:ff:dc:f5:4e:64:0f:48:29:46:eb:7c:5e:79:
         9e:38:60:52:4d:df:1b:da:9a:83:66:93:1b:47:4e:13:4d:8c:
         07:2e:85:ec:e5:ab:5a:59:78:b2:79:d6:09:21:d6:8c:c1:13:
         e4:47:db:fd:75:8d:e6:5c:7b:8b:42:b5:1b:f3:51:63:6d:8c:
         e0:a0:a2:d7:d3:39:5c:f5:a8:ba:3a:2c:3e:26:7a:0b:97:4c:
         65:70:7e:b6:71:f3:54:8c:f0:56:69:ee:53:b6:a8:8b:2f:61:
         85:f4:6d:99:85:7f:89:23:17:98:83:51:a3:1d:44:fd:e9:2b:
         78:c5:3b:29:12:c4:68:26:04:68:61:22:3f:71:b5:2c:6f:cb:
         78:62:95:62:cb:7f:2e:5a:1b:d9:4f:5d:a2:31:ed:b9:31:af:
         5a:35:42:31:4e:ce:a7:55:25:53:50:32:4e:65:8e:aa:94:e7:
         a7:4b:94:b2:49:61:83:9c:e7:86:06:55:fc:48:6d:5e:27:e1:
         59:0d:45:13:fe:22:f3:ee:99:c5:18:47:2b:34:43:2d:da:56:
         f4:7b:00:03:c4:2b:29:ba:7e:24:59:59:8e:f7:9b:04:9c:ce:
         c1:c6:4c:cc:f8:f0:9b:a8:47:52:74:ec:45:28:b5:15:4e:11:
         93:c6:79:7a
-----BEGIN CERTIFICATE-----
MIIFADCCA+igAwIBAgIECAtdIzANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg3
OTBkMWNhNzg3NjEzMTBhYzM5YTcxNGZmNjJmM2I5MmIyZTc3ZDhhMB4XDTIyMDEw
MTA2NTcwNFoXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoNGFmNTJiZmMyMjlh
ZjVlYTc0ODc2YjAyODI3NDJiMDdmYzc0ODU0MDCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAMDTJpMbz6O6lGsEzLxhBNNX5wJ6sKaETjLAEdDQXwX/P358
JVESeevNhswyiT8cTCx/qQ9GEnJrYg78R+qL+4Oj5MLG1Sfh/FOGzMrM11S+dFA3
KJ5mGKqFb6RMFDSoDM6JXt6XRG4AwzI5QR+Kp3yCI+YqiQswZSB7E0X50qynEdI9
5VYhnIB78w6wZfPa7lzN86sB4zx59Uc6sjsjVN+D4iYIPQcHmpin2D2AwS7qw9b5
5EU2mqFZny58iLHnuaWXiGyInxB19d7wj5V4mzO03xW1sBhAOYVpT1zOlOO79XQq
tGuW87hhmumci/j6WQBFkGYvuFxTXMD+5ZT1uGkCAwEAAaOCAhowggIWMB0GA1Ud
DgQWBBRK9Sv8Ipr16nSHawKCdCsH/HSFQDAfBgNVHSMEGDAWgBR5DRynh2ExCsOa
cU/2LzuSsud9ijAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L2VRMGNwNGRoTVFyRG1uRlA5aTg3a3JMbmZZby5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvMDkvYTNjY2NlLWMwZDYtNDlhOC1iYmI4LWI4YWUxNmIzNWMzMS8x
L1N2VXJfQ0thOWVwMGgyc0NnblFyQl94MGhVQS5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMDkv
YTNjY2NlLWMwZDYtNDlhOC1iYmI4LWI4YWUxNmIzNWMzMS8xL2VRMGNwNGRoTVFy
RG1uRlA5aTg3a3JMbmZZby5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAw
BggrBgEFBQcBBwEB/wQhMB8wDAQCAAEwBgMEAMIqMDAPBAIAAjAJAwcAIAEH+AAM
MA0GCSqGSIb3DQEBCwUAA4IBAQCogwWNjf/c9U5kD0gpRut8XnmeOGBSTd8b2pqD
ZpMbR04TTYwHLoXs5ataWXiyedYJIdaMwRPkR9v9dY3mXHuLQrUb81FjbYzgoKLX
0zlc9ai6Oiw+JnoLl0xlcH62cfNUjPBWae5TtqiLL2GF9G2ZhX+JIxeYg1GjHUT9
6St4xTspEsRoJgRoYSI/cbUsb8t4YpViy38uWhvZT12iMe25Ma9aNUIxTs6nVSVT
UDJOZY6qlOenS5SySWGDnOeGBlX8SG1eJ+FZDUUT/iLz7pnFGEcrNEMt2lb0ewAD
xCspun4kWVmO95sEnM7BxkzM+PCbqEdSdOxFKLUVThGTxnl6
-----END CERTIFICATE-----