Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/11/45ad5b-3ce1-48f1-bef7-641cfb6e3d9b/1/mc35h8v2WnTysQxBjVhqi7-wRlc.roa
File:                     mc35h8v2WnTysQxBjVhqi7-wRlc.roa (raw, json)
Hash identifier:          JWItpm5jPYBZlHTKzdiJM91ctr/l7vgpPWcm6Bk4OyE=
Subject key identifier:   99:CD:F9:87:CB:F6:5A:74:F2:B1:0C:41:8D:58:6A:8B:BF:B0:46:57
Certificate issuer:       /CN=a4e7777c7afb7d439b46f681c4c7bf6a8252e315
Certificate serial:       050F83
Authority key identifier: A4:E7:77:7C:7A:FB:7D:43:9B:46:F6:81:C4:C7:BF:6A:82:52:E3:15
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/pOd3fHr7fUObRvaBxMe_aoJS4xU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/11/45ad5b-3ce1-48f1-bef7-641cfb6e3d9b/1/mc35h8v2WnTysQxBjVhqi7-wRlc.roa
Signing time:             Tue 26 Apr 2022 14:57:33 +0000
ROA not before:           Tue 26 Apr 2022 14:57:33 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     31424
IP address blocks:        91.202.120.0/22 maxlen: 22
                          2001:67c:2e38::/48 maxlen: 48

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 331651 (0x50f83)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a4e7777c7afb7d439b46f681c4c7bf6a8252e315
        Validity
            Not Before: Apr 26 14:57:33 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=99cdf987cbf65a74f2b10c418d586a8bbfb04657
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:bd:f9:e2:40:ae:f8:7d:77:a2:4e:c6:a2:80:
                    37:40:03:77:c8:a3:c0:4d:c6:5d:41:1f:1b:d7:9d:
                    a7:ad:23:ef:59:83:d3:5e:56:a2:4d:30:28:58:ff:
                    e2:ab:63:67:af:d7:d2:79:76:1a:05:4a:17:45:8f:
                    49:5c:da:9f:23:6e:93:1e:52:53:61:5b:43:84:64:
                    4b:62:c1:31:85:73:8c:2d:b9:7b:2c:bd:60:cb:ad:
                    ee:27:31:fb:d8:26:29:a8:76:07:b1:04:ba:73:27:
                    6a:1e:43:bd:e4:7b:90:aa:1c:f3:42:f2:b4:b6:a6:
                    1d:2e:fc:c0:4f:da:24:ba:c5:a6:1a:4e:89:0d:c2:
                    eb:9c:3f:32:3b:cd:0a:f2:59:cb:03:ed:6e:10:85:
                    46:3d:d1:00:bb:eb:e7:09:57:2a:1b:63:46:b3:5d:
                    e4:44:d0:30:74:43:f0:b7:8e:b2:b2:18:90:24:7c:
                    b2:84:62:ca:d0:de:96:68:2c:99:41:a8:b7:c8:78:
                    bc:f9:b3:97:96:1c:ec:5b:ef:03:86:0b:ee:7a:5a:
                    d2:d2:1d:36:be:cc:49:94:8b:1b:5b:75:94:94:d6:
                    0a:87:7c:75:76:7b:cb:86:00:6d:35:47:86:c6:48:
                    66:5c:3e:06:7c:fc:98:8b:37:94:f3:ca:f4:92:75:
                    25:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                99:CD:F9:87:CB:F6:5A:74:F2:B1:0C:41:8D:58:6A:8B:BF:B0:46:57
            X509v3 Authority Key Identifier:
                keyid:A4:E7:77:7C:7A:FB:7D:43:9B:46:F6:81:C4:C7:BF:6A:82:52:E3:15

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pOd3fHr7fUObRvaBxMe_aoJS4xU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/45ad5b-3ce1-48f1-bef7-641cfb6e3d9b/1/mc35h8v2WnTysQxBjVhqi7-wRlc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/11/45ad5b-3ce1-48f1-bef7-641cfb6e3d9b/1/pOd3fHr7fUObRvaBxMe_aoJS4xU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  91.202.120.0/22
                IPv6:
                  2001:67c:2e38::/48

    Signature Algorithm: sha256WithRSAEncryption
         85:1d:ee:8e:bb:be:b3:4c:46:e8:fb:7c:c9:1c:1a:fa:d5:79:
         af:57:06:a1:9a:36:76:55:91:15:ff:09:68:bb:f6:21:de:f5:
         1d:b8:1a:3b:c7:09:2d:9e:78:64:6a:5c:da:97:71:6e:03:8c:
         52:18:95:fc:d1:cf:a7:09:01:50:d5:0a:bf:03:ab:17:60:55:
         9a:4e:31:b8:f6:83:e4:f3:52:13:70:ba:35:eb:cd:b5:a3:cc:
         72:e8:4c:93:21:8c:64:32:50:51:90:ce:18:30:f8:07:72:e1:
         ca:82:0d:4d:87:1b:43:8b:34:8b:67:02:2b:7c:37:64:c6:ad:
         c8:c2:89:2d:f1:42:d6:0e:54:1d:7d:cf:bf:c8:a1:8e:8a:22:
         c4:1d:70:f8:47:43:9a:d5:0d:fd:ef:35:4e:bd:e1:06:a1:3d:
         d9:86:04:da:d2:38:d8:93:42:e0:0a:58:e8:8d:4e:ee:51:7c:
         cf:14:0f:ca:a1:c7:3e:12:a2:54:ae:79:1a:d8:16:7d:ff:6e:
         29:a5:92:75:fb:cf:d4:c7:27:71:b2:59:f7:34:fc:ef:92:75:
         5f:fc:e0:fd:d6:d3:93:e9:41:fc:7a:22:ce:17:ce:77:ef:5c:
         b1:6b:4e:a1:e6:e9:49:7a:9c:75:b1:31:1d:33:91:a9:21:b3:
         0e:dc:f6:79
-----BEGIN CERTIFICATE-----
MIIE/zCCA+egAwIBAgIDBQ+DMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKGE0
ZTc3NzdjN2FmYjdkNDM5YjQ2ZjY4MWM0YzdiZjZhODI1MmUzMTUwHhcNMjIwNDI2
MTQ1NzMzWhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQDEyg5OWNkZjk4N2NiZjY1
YTc0ZjJiMTBjNDE4ZDU4NmE4YmJmYjA0NjU3MIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEAy7354kCu+H13ok7GooA3QAN3yKPATcZdQR8b152nrSPvWYPT
XlaiTTAoWP/iq2Nnr9fSeXYaBUoXRY9JXNqfI26THlJTYVtDhGRLYsExhXOMLbl7
LL1gy63uJzH72CYpqHYHsQS6cydqHkO95HuQqhzzQvK0tqYdLvzAT9okusWmGk6J
DcLrnD8yO80K8lnLA+1uEIVGPdEAu+vnCVcqG2NGs13kRNAwdEPwt46yshiQJHyy
hGLK0N6WaCyZQai3yHi8+bOXlhzsW+8DhgvuelrS0h02vsxJlIsbW3WUlNYKh3x1
dnvLhgBtNUeGxkhmXD4GfPyYizeU88r0knUlxQIDAQABo4ICGjCCAhYwHQYDVR0O
BBYEFJnN+YfL9lp08rEMQY1Yaou/sEZXMB8GA1UdIwQYMBaAFKTnd3x6+31Dm0b2
gcTHv2qCUuMVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEFBQcBAQRYMFYwVAYIKwYB
BQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQv
cE9kM2ZIcjdmVU9iUnZhQnhNZV9hb0pTNHhVLmNlcjCBjQYIKwYBBQUHAQsEgYAw
fjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkv
REVGQVVMVC8xMS80NWFkNWItM2NlMS00OGYxLWJlZjctNjQxY2ZiNmUzZDliLzEv
bWMzNWg4djJXblR5c1F4QmpWaHFpNy13UmxjLnJvYTCBgQYDVR0fBHoweDB2oHSg
coZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMS80
NWFkNWItM2NlMS00OGYxLWJlZjctNjQxY2ZiNmUzZDliLzEvcE9kM2ZIcjdmVU9i
UnZhQnhNZV9hb0pTNHhVLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDAG
CCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQCW8p4MA8EAgACMAkDBwAgAQZ8Ljgw
DQYJKoZIhvcNAQELBQADggEBAIUd7o67vrNMRuj7fMkcGvrVea9XBqGaNnZVkRX/
CWi79iHe9R24GjvHCS2eeGRqXNqXcW4DjFIYlfzRz6cJAVDVCr8DqxdgVZpOMbj2
g+TzUhNwujXrzbWjzHLoTJMhjGQyUFGQzhgw+Ady4cqCDU2HG0OLNItnAit8N2TG
rcjCiS3xQtYOVB19z7/IoY6KIsQdcPhHQ5rVDf3vNU694QahPdmGBNrSONiTQuAK
WOiNTu5RfM8UD8qhxz4SolSueRrYFn3/bimlknX7z9THJ3GyWfc0/O+SdV/84P3W
05PpQfx6Is4XznfvXLFrTqHm6Ul6nHWxMR0zkakhsw7c9nk=
-----END CERTIFICATE-----