Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1f/adb65c-f6f7-4495-ba23-885e84e7512e/1/OgYcSttAxEPCqqMQUHhTGELrSpY.roa
File:                     OgYcSttAxEPCqqMQUHhTGELrSpY.roa (raw, json)
Hash identifier:          qXhYxcJIwwBqLTt0GEdsXfJQWlaV1Iw1XF51bU8P6q0=
Subject key identifier:   3A:06:1C:4A:DB:40:C4:43:C2:AA:A3:10:50:78:53:18:42:EB:4A:96
Certificate issuer:       /CN=c74c60adeb0cd5768cf756f562b1b5cc5b9c180a
Certificate serial:       037C569A
Authority key identifier: C7:4C:60:AD:EB:0C:D5:76:8C:F7:56:F5:62:B1:B5:CC:5B:9C:18:0A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/x0xgresM1XaM91b1YrG1zFucGAo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/1f/adb65c-f6f7-4495-ba23-885e84e7512e/1/OgYcSttAxEPCqqMQUHhTGELrSpY.roa
Signing time:             Mon 02 May 2022 16:24:25 +0000
ROA not before:           Mon 02 May 2022 16:24:25 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     211522
IP address blocks:        2a05:4140:202::/48 maxlen: 48
                          2a05:4145:1::/48 maxlen: 48
                          2a05:4140:201::/48 maxlen: 48

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 58480282 (0x37c569a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c74c60adeb0cd5768cf756f562b1b5cc5b9c180a
        Validity
            Not Before: May  2 16:24:25 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=3a061c4adb40c443c2aaa3105078531842eb4a96
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:e2:50:af:90:86:74:b3:4c:69:2e:29:4f:e6:
                    92:10:e9:ab:43:9d:6b:e8:f9:c0:9e:19:4a:06:d7:
                    22:a9:a7:50:5b:75:d0:d8:46:14:9a:61:c7:96:4a:
                    4f:68:14:94:96:f1:ab:ea:33:ef:86:39:df:4e:ec:
                    9b:1c:23:98:f4:95:59:c2:11:f4:01:9d:5c:dc:6c:
                    c4:52:c0:8c:56:f4:ca:b4:99:06:01:53:d7:9e:b7:
                    e5:75:aa:83:0e:9e:65:f1:60:07:c3:3d:21:7f:74:
                    2b:b8:98:0d:1a:ff:61:e5:d5:4e:04:f3:bb:41:ca:
                    f0:e6:46:69:25:1f:cb:97:3b:d3:ae:33:b8:b6:14:
                    68:10:78:15:54:d0:35:c6:f0:ef:4a:26:ab:1e:69:
                    04:cb:a5:c8:1c:dc:cb:7f:6b:f8:3d:ba:c5:16:ab:
                    16:d6:9d:83:95:28:1c:e5:55:80:f6:83:e2:97:1f:
                    69:44:bc:47:78:61:4d:df:89:d7:e5:25:11:2d:9e:
                    e0:ff:53:cc:22:75:3c:ea:9a:12:99:f9:01:de:14:
                    04:d7:44:5a:e8:b4:5d:d5:f6:50:80:d2:49:42:66:
                    99:7b:a1:18:ca:38:27:2e:2f:a1:86:8b:ec:5f:1d:
                    cf:c7:a9:51:5d:c4:59:32:19:00:91:17:dd:82:8c:
                    6e:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3A:06:1C:4A:DB:40:C4:43:C2:AA:A3:10:50:78:53:18:42:EB:4A:96
            X509v3 Authority Key Identifier:
                keyid:C7:4C:60:AD:EB:0C:D5:76:8C:F7:56:F5:62:B1:B5:CC:5B:9C:18:0A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/x0xgresM1XaM91b1YrG1zFucGAo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/adb65c-f6f7-4495-ba23-885e84e7512e/1/OgYcSttAxEPCqqMQUHhTGELrSpY.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/adb65c-f6f7-4495-ba23-885e84e7512e/1/x0xgresM1XaM91b1YrG1zFucGAo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a05:4140:201::-2a05:4140:202:ffff:ffff:ffff:ffff:ffff
                  2a05:4145:1::/48

    Signature Algorithm: sha256WithRSAEncryption
         46:18:79:48:1d:35:f0:2c:8d:ac:21:0b:b5:f6:ab:6b:f3:6f:
         a6:04:e1:fc:6b:ac:8c:a5:97:ae:44:e2:f8:09:ac:9f:b0:a9:
         ff:50:cc:d5:97:05:e5:8c:33:51:a6:b8:c5:e9:12:de:05:c4:
         f6:19:01:0f:ed:3b:27:41:7d:9b:02:c2:8f:cc:e6:b7:46:2d:
         ac:80:2e:a4:69:32:94:da:5d:fa:7b:c8:cf:ec:d8:2f:71:6d:
         78:59:11:3a:0c:ef:0d:f3:33:11:ad:7c:8b:3f:13:5e:d7:5c:
         32:a7:ec:9f:3d:bd:ae:80:b5:a7:75:93:98:d4:83:94:24:21:
         d1:d0:dc:10:9a:6d:f2:0f:94:77:aa:cc:5a:f8:86:1b:29:5d:
         96:10:38:2c:94:8c:5d:b2:ea:fc:8f:99:1e:f4:b6:54:a6:80:
         5d:d5:8c:d4:37:00:d9:46:1a:e4:46:dd:f1:c4:0d:56:35:71:
         77:a6:8a:0b:7d:e3:26:ab:31:cf:60:08:f1:f0:72:2f:56:e5:
         42:93:2e:d4:e8:ce:f0:0a:07:d7:e1:de:e0:01:0a:1e:ad:27:
         d6:24:29:20:23:06:64:25:3b:ed:c2:34:65:f8:53:df:6d:6a:
         d3:74:67:0c:15:d3:b0:36:de:ea:26:d4:12:d7:7d:27:47:db:
         9a:9e:9f:a0
-----BEGIN CERTIFICATE-----
MIIFBjCCA+6gAwIBAgIEA3xWmjANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyhj
NzRjNjBhZGViMGNkNTc2OGNmNzU2ZjU2MmIxYjVjYzViOWMxODBhMB4XDTIyMDUw
MjE2MjQyNVoXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoM2EwNjFjNGFkYjQw
YzQ0M2MyYWFhMzEwNTA3ODUzMTg0MmViNGE5NjCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAKPiUK+QhnSzTGkuKU/mkhDpq0Oda+j5wJ4ZSgbXIqmnUFt1
0NhGFJphx5ZKT2gUlJbxq+oz74Y5307smxwjmPSVWcIR9AGdXNxsxFLAjFb0yrSZ
BgFT15635XWqgw6eZfFgB8M9IX90K7iYDRr/YeXVTgTzu0HK8OZGaSUfy5c7064z
uLYUaBB4FVTQNcbw70omqx5pBMulyBzcy39r+D26xRarFtadg5UoHOVVgPaD4pcf
aUS8R3hhTd+J1+UlES2e4P9TzCJ1POqaEpn5Ad4UBNdEWui0XdX2UIDSSUJmmXuh
GMo4Jy4voYaL7F8dz8epUV3EWTIZAJEX3YKMbvkCAwEAAaOCAiAwggIcMB0GA1Ud
DgQWBBQ6BhxK20DEQ8KqoxBQeFMYQutKljAfBgNVHSMEGDAWgBTHTGCt6wzVdoz3
VvVisbXMW5wYCjAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L3gweGdyZXNNMVhhTTkxYjFZckcxekZ1Y0dBby5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvMWYvYWRiNjVjLWY2ZjctNDQ5NS1iYTIzLTg4NWU4NGU3NTEyZS8x
L09nWWNTdHRBeEVQQ3FxTVFVSGhUR0VMclNwWS5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMWYv
YWRiNjVjLWY2ZjctNDQ5NS1iYTIzLTg4NWU4NGU3NTEyZS8xL3gweGdyZXNNMVhh
TTkxYjFZckcxekZ1Y0dBby5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjA2
BggrBgEFBQcBBwEB/wQnMCUwIwQCAAIwHTASAwcAKgVBQAIBAwcAKgVBQAICAwcA
KgVBRQABMA0GCSqGSIb3DQEBCwUAA4IBAQBGGHlIHTXwLI2sIQu19qtr82+mBOH8
a6yMpZeuROL4CayfsKn/UMzVlwXljDNRprjF6RLeBcT2GQEP7TsnQX2bAsKPzOa3
Ri2sgC6kaTKU2l36e8jP7NgvcW14WRE6DO8N8zMRrXyLPxNe11wyp+yfPb2ugLWn
dZOY1IOUJCHR0NwQmm3yD5R3qsxa+IYbKV2WEDgslIxdsur8j5ke9LZUpoBd1YzU
NwDZRhrkRt3xxA1WNXF3pooLfeMmqzHPYAjx8HIvVuVCky7U6M7wCgfX4d7gAQoe
rSfWJCkgIwZkJTvtwjRl+FPfbWrTdGcMFdOwNt7qJtQS130nR9uanp+g
-----END CERTIFICATE-----