Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/ccc808-14bb-494d-99c8-2f11a651962b/1/Ch6ZejpMXfUXKCDoQ1xWODw5Pes.roa
File:                     Ch6ZejpMXfUXKCDoQ1xWODw5Pes.roa (raw, json)
Hash identifier:          kgt1u5X7nMoQuc2/k7by+DNopaWYjrZdnGkeTp/GLdM=
Subject key identifier:   0A:1E:99:7A:3A:4C:5D:F5:17:28:20:E8:43:5C:56:38:3C:39:3D:EB
Certificate issuer:       /CN=2dc9cb5302d8d13fe91e80f5cbd1fbacbc014827
Certificate serial:       3814D6E9
Authority key identifier: 2D:C9:CB:53:02:D8:D1:3F:E9:1E:80:F5:CB:D1:FB:AC:BC:01:48:27
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/LcnLUwLY0T_pHoD1y9H7rLwBSCc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/10/ccc808-14bb-494d-99c8-2f11a651962b/1/Ch6ZejpMXfUXKCDoQ1xWODw5Pes.roa
Signing time:             Sat 01 Jan 2022 09:55:50 +0000
ROA not before:           Sat 01 Jan 2022 09:55:50 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     41242
IP address blocks:        81.31.48.0/20 maxlen: 20

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 940889833 (0x3814d6e9)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2dc9cb5302d8d13fe91e80f5cbd1fbacbc014827
        Validity
            Not Before: Jan  1 09:55:50 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=0a1e997a3a4c5df5172820e8435c56383c393deb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:d0:04:8b:83:f6:2c:35:91:91:ed:37:00:ca:
                    17:f8:77:35:1c:ca:51:ba:86:36:b7:45:fd:00:8c:
                    db:9e:fa:69:75:6d:3a:a8:c3:63:2b:42:b0:4a:f7:
                    a6:e0:e2:96:cc:63:52:5a:f9:95:3a:d0:f4:df:38:
                    a0:44:b5:8e:68:f7:76:24:b5:00:c1:47:c1:23:9a:
                    9f:8d:36:cd:ad:a3:42:a4:16:f2:f1:9c:21:b3:00:
                    5d:03:d7:fc:eb:bc:b3:2d:5f:71:ba:fd:c6:80:ea:
                    1a:d2:5a:fb:2c:22:f3:5f:7e:d5:a8:15:91:09:da:
                    ec:91:88:59:08:ff:83:32:44:9f:fa:56:f2:fb:89:
                    8e:11:8a:d5:37:da:27:2d:18:b4:3d:8f:13:b6:4f:
                    47:92:e6:87:aa:7a:a7:37:de:99:2e:9e:32:be:4a:
                    72:0c:68:cd:64:2f:6b:24:35:64:47:c1:91:b5:7b:
                    10:71:cb:08:86:06:59:f8:5c:7f:99:7f:a2:60:32:
                    ea:4f:b7:ba:47:88:26:ee:da:77:97:69:34:5f:1f:
                    f6:97:03:40:e5:59:75:dc:47:b9:76:8e:f7:05:8a:
                    43:3c:cd:de:21:f3:e9:a9:b0:4f:b0:4b:65:bb:1a:
                    a7:3c:2e:af:c6:6a:18:d3:f9:63:09:01:e6:74:1f:
                    f8:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0A:1E:99:7A:3A:4C:5D:F5:17:28:20:E8:43:5C:56:38:3C:39:3D:EB
            X509v3 Authority Key Identifier:
                keyid:2D:C9:CB:53:02:D8:D1:3F:E9:1E:80:F5:CB:D1:FB:AC:BC:01:48:27

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LcnLUwLY0T_pHoD1y9H7rLwBSCc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/ccc808-14bb-494d-99c8-2f11a651962b/1/Ch6ZejpMXfUXKCDoQ1xWODw5Pes.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/10/ccc808-14bb-494d-99c8-2f11a651962b/1/LcnLUwLY0T_pHoD1y9H7rLwBSCc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  81.31.48.0/20

    Signature Algorithm: sha256WithRSAEncryption
         74:f4:6b:b2:02:72:2e:ec:4a:ce:6f:e0:6e:fe:a7:e9:b1:87:
         cd:39:1c:59:d0:34:07:c8:cb:04:fa:2f:87:88:58:5d:ff:42:
         a0:d9:30:34:48:03:92:73:aa:a2:dd:96:6b:5a:a3:18:60:f2:
         24:94:8f:f3:68:15:0f:46:27:c9:97:fd:9a:17:1f:8c:88:d6:
         7d:a0:97:e7:35:87:1c:54:47:31:06:98:79:e5:a4:93:87:db:
         4f:35:57:c8:bc:f0:fb:58:4e:6f:ec:48:02:bf:f6:26:43:6f:
         16:01:7b:b2:4e:73:b5:bc:2b:16:dc:07:04:69:b4:77:f1:2d:
         d0:bc:5f:ae:42:2b:95:26:12:f2:5c:e0:3a:1b:cd:08:ac:c1:
         1e:b5:d7:fc:b7:af:e6:b2:9e:33:9c:40:24:f3:90:ad:45:91:
         88:2f:d7:6c:a6:61:50:ce:48:25:a0:ba:7a:31:c8:96:c3:57:
         21:af:6d:37:33:01:5b:bf:80:83:42:d0:9e:b3:ea:f4:72:e3:
         33:7b:25:2b:3f:49:a7:87:73:29:15:da:e7:11:61:4b:87:c1:
         21:5a:25:86:1d:94:0f:45:b2:64:f5:38:2f:02:3b:1f:65:fb:
         a4:b9:93:17:ae:9a:f6:38:68:b6:c2:24:75:85:88:e3:21:f3:
         90:c3:34:a2
-----BEGIN CERTIFICATE-----
MIIE7zCCA9egAwIBAgIEOBTW6TANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEygy
ZGM5Y2I1MzAyZDhkMTNmZTkxZTgwZjVjYmQxZmJhY2JjMDE0ODI3MB4XDTIyMDEw
MTA5NTU1MFoXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoMGExZTk5N2EzYTRj
NWRmNTE3MjgyMGU4NDM1YzU2MzgzYzM5M2RlYjCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBALfQBIuD9iw1kZHtNwDKF/h3NRzKUbqGNrdF/QCM2576aXVt
OqjDYytCsEr3puDilsxjUlr5lTrQ9N84oES1jmj3diS1AMFHwSOan402za2jQqQW
8vGcIbMAXQPX/Ou8sy1fcbr9xoDqGtJa+ywi819+1agVkQna7JGIWQj/gzJEn/pW
8vuJjhGK1TfaJy0YtD2PE7ZPR5Lmh6p6pzfemS6eMr5KcgxozWQvayQ1ZEfBkbV7
EHHLCIYGWfhcf5l/omAy6k+3ukeIJu7ad5dpNF8f9pcDQOVZddxHuXaO9wWKQzzN
3iHz6amwT7BLZbsapzwur8ZqGNP5YwkB5nQf+MMCAwEAAaOCAgkwggIFMB0GA1Ud
DgQWBBQKHpl6Okxd9RcoIOhDXFY4PDk96zAfBgNVHSMEGDAWgBQtyctTAtjRP+ke
gPXL0fusvAFIJzAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L0xjbkxVd0xZMFRfcEhvRDF5OUg3ckx3QlNDYy5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvMTAvY2NjODA4LTE0YmItNDk0ZC05OWM4LTJmMTFhNjUxOTYyYi8x
L0NoNlplanBNWGZVWEtDRG9RMXhXT0R3NVBlcy5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMTAv
Y2NjODA4LTE0YmItNDk0ZC05OWM4LTJmMTFhNjUxOTYyYi8xL0xjbkxVd0xZMFRf
cEhvRDF5OUg3ckx3QlNDYy5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAf
BggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEBFEfMDANBgkqhkiG9w0BAQsFAAOC
AQEAdPRrsgJyLuxKzm/gbv6n6bGHzTkcWdA0B8jLBPovh4hYXf9CoNkwNEgDknOq
ot2Wa1qjGGDyJJSP82gVD0YnyZf9mhcfjIjWfaCX5zWHHFRHMQaYeeWkk4fbTzVX
yLzw+1hOb+xIAr/2JkNvFgF7sk5ztbwrFtwHBGm0d/Et0LxfrkIrlSYS8lzgOhvN
CKzBHrXX/Lev5rKeM5xAJPOQrUWRiC/XbKZhUM5IJaC6ejHIlsNXIa9tNzMBW7+A
g0LQnrPq9HLjM3slKz9Jp4dzKRXa5xFhS4fBIVolhh2UD0WyZPU4LwI7H2X7pLmT
F66a9jhotsIkdYWI4yHzkMM0og==
-----END CERTIFICATE-----