Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/37WnWu7E7qkuvlO6-Qy3Xl0sA2Y.roa
File:                     37WnWu7E7qkuvlO6-Qy3Xl0sA2Y.roa (raw, json)
Hash identifier:          OZUUeEKYhGOZHKjImF4XKg7NHmWdnayHs8grQUkhZiI=
Subject key identifier:   DF:B5:A7:5A:EE:C4:EE:A9:2E:BE:53:BA:F9:0C:B7:5E:5D:2C:03:66
Certificate issuer:       /CN=3183785916cd98d7c770d685145499a8a0a15722
Certificate serial:       1ADE4AD6
Authority key identifier: 31:83:78:59:16:CD:98:D7:C7:70:D6:85:14:54:99:A8:A0:A1:57:22
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/MYN4WRbNmNfHcNaFFFSZqKChVyI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/37WnWu7E7qkuvlO6-Qy3Xl0sA2Y.roa
Signing time:             Thu 28 Apr 2022 12:17:31 +0000
ROA not before:           Thu 28 Apr 2022 12:17:31 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     35711
IP address blocks:        80.96.14.0/23 maxlen: 23

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 450775766 (0x1ade4ad6)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3183785916cd98d7c770d685145499a8a0a15722
        Validity
            Not Before: Apr 28 12:17:31 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=dfb5a75aeec4eea92ebe53baf90cb75e5d2c0366
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:10:18:c4:ba:71:1d:ff:64:04:87:2e:1e:25:
                    25:b3:3a:a6:ea:0e:f0:8b:6b:da:90:26:a7:7e:88:
                    a2:9d:50:71:43:de:dc:f8:95:57:0b:c5:34:fd:33:
                    ff:27:3f:a7:4e:e3:8e:3d:5f:9c:92:4e:88:c2:4b:
                    18:72:56:4b:63:24:01:93:67:b6:93:e4:75:af:c2:
                    87:4b:33:1a:dc:bc:bf:17:80:00:17:0c:b8:ea:2e:
                    60:21:3f:19:fe:a9:ea:9e:33:0b:08:79:f1:94:25:
                    e6:cc:50:4a:17:bb:a0:61:22:8b:05:44:27:8e:15:
                    22:5a:23:5d:2d:e4:1e:fa:88:18:77:c8:c8:ed:26:
                    81:32:e2:af:13:7f:0e:7d:95:c1:54:ee:17:70:8e:
                    c5:f0:9f:2d:27:94:c3:de:6e:74:55:59:6f:bb:f4:
                    9b:0e:04:31:dc:56:75:d9:6c:50:ae:e0:00:39:32:
                    d2:e0:ee:8f:4c:ba:cf:61:68:73:1b:08:de:dd:18:
                    2c:88:8c:bc:74:5a:0d:6f:1b:1c:7b:cf:44:af:78:
                    2d:30:64:d5:c6:f8:90:62:2f:fd:2c:c5:20:9a:60:
                    32:dc:d5:37:91:50:ed:f0:fe:d7:95:09:16:3d:5a:
                    36:b8:b8:c1:c7:26:27:a5:df:2c:26:96:0b:be:a6:
                    07:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DF:B5:A7:5A:EE:C4:EE:A9:2E:BE:53:BA:F9:0C:B7:5E:5D:2C:03:66
            X509v3 Authority Key Identifier:
                keyid:31:83:78:59:16:CD:98:D7:C7:70:D6:85:14:54:99:A8:A0:A1:57:22

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MYN4WRbNmNfHcNaFFFSZqKChVyI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/37WnWu7E7qkuvlO6-Qy3Xl0sA2Y.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/MYN4WRbNmNfHcNaFFFSZqKChVyI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  80.96.14.0/23

    Signature Algorithm: sha256WithRSAEncryption
         65:a2:a1:3c:88:7f:3f:e8:ff:b0:07:8d:24:16:40:74:90:cb:
         87:77:66:c0:bb:57:e1:38:64:db:81:37:4f:92:f0:0e:52:6e:
         19:53:2b:47:01:da:35:09:8a:ba:1f:69:bf:9a:cd:ff:c9:2b:
         08:fc:f6:cf:38:a7:e0:a5:db:bc:c3:f4:29:9f:c4:8b:46:84:
         ce:ca:41:75:b3:88:f6:9b:71:a9:61:d7:01:53:f3:20:0a:c8:
         da:23:37:59:46:a5:56:f2:e6:4f:2a:23:20:ce:a8:29:6c:3c:
         96:44:77:58:f6:ad:5c:e9:63:fc:55:21:a6:a8:d8:45:2d:a6:
         e8:e5:21:62:dc:ed:db:e0:1b:24:0c:2e:e6:db:e2:9d:cc:92:
         61:ff:d5:96:ac:3d:fb:f0:21:2c:d8:93:f9:ce:6f:e7:b1:2d:
         92:ea:db:c4:4f:d9:f1:23:50:6d:af:71:45:1a:e6:c5:90:b6:
         77:f0:0c:71:bf:76:ad:1c:0a:7d:42:6c:3c:37:e6:49:5a:18:
         80:34:48:68:50:0f:a4:5e:59:fb:c2:af:02:b1:b3:f7:f7:e7:
         87:ae:03:de:d6:94:ad:c8:8d:64:a9:b4:2f:e6:7d:3b:3a:0e:
         f7:97:23:70:b5:4f:ea:e3:0a:6b:49:83:f2:c6:56:31:34:94:
         4b:6c:b9:41
-----BEGIN CERTIFICATE-----
MIIE7zCCA9egAwIBAgIEGt5K1jANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEygz
MTgzNzg1OTE2Y2Q5OGQ3Yzc3MGQ2ODUxNDU0OTlhOGEwYTE1NzIyMB4XDTIyMDQy
ODEyMTczMVoXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoZGZiNWE3NWFlZWM0
ZWVhOTJlYmU1M2JhZjkwY2I3NWU1ZDJjMDM2NjCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBANYQGMS6cR3/ZASHLh4lJbM6puoO8Itr2pAmp36Iop1QcUPe
3PiVVwvFNP0z/yc/p07jjj1fnJJOiMJLGHJWS2MkAZNntpPkda/Ch0szGty8vxeA
ABcMuOouYCE/Gf6p6p4zCwh58ZQl5sxQShe7oGEiiwVEJ44VIlojXS3kHvqIGHfI
yO0mgTLirxN/Dn2VwVTuF3COxfCfLSeUw95udFVZb7v0mw4EMdxWddlsUK7gADky
0uDuj0y6z2FocxsI3t0YLIiMvHRaDW8bHHvPRK94LTBk1cb4kGIv/SzFIJpgMtzV
N5FQ7fD+15UJFj1aNri4wccmJ6XfLCaWC76mB5cCAwEAAaOCAgkwggIFMB0GA1Ud
DgQWBBTftada7sTuqS6+U7r5DLdeXSwDZjAfBgNVHSMEGDAWgBQxg3hZFs2Y18dw
1oUUVJmooKFXIjAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L01ZTjRXUmJObU5mSGNOYUZGRlNacUtDaFZ5SS5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvMTUvNzE5M2RiLTdmODUtNDJiYi1iMDlhLWY1MmM0N2MyMjVkYi8x
LzM3V25XdTdFN3FrdXZsTzYtUXkzWGwwc0EyWS5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMTUv
NzE5M2RiLTdmODUtNDJiYi1iMDlhLWY1MmM0N2MyMjVkYi8xL01ZTjRXUmJObU5m
SGNOYUZGRlNacUtDaFZ5SS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAf
BggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAVBgDjANBgkqhkiG9w0BAQsFAAOC
AQEAZaKhPIh/P+j/sAeNJBZAdJDLh3dmwLtX4Thk24E3T5LwDlJuGVMrRwHaNQmK
uh9pv5rN/8krCPz2zzin4KXbvMP0KZ/Ei0aEzspBdbOI9ptxqWHXAVPzIArI2iM3
WUalVvLmTyojIM6oKWw8lkR3WPatXOlj/FUhpqjYRS2m6OUhYtzt2+AbJAwu5tvi
ncySYf/Vlqw9+/AhLNiT+c5v57EtkurbxE/Z8SNQba9xRRrmxZC2d/AMcb92rRwK
fUJsPDfmSVoYgDRIaFAPpF5Z+8KvArGz9/fnh64D3taUrciNZKm0L+Z9OzoO95cj
cLVP6uMKa0mD8sZWMTSUS2y5QQ==
-----END CERTIFICATE-----