Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/20/4429a4-0b36-4ced-846f-e20a654fca95/1/dlOmC9352Tqpp-vEgsuxc587H8Y.roa
File:                     dlOmC9352Tqpp-vEgsuxc587H8Y.roa (raw, json)
Hash identifier:          YCk03HHWtNU7WJKmQJSfunSdCBLsu8AA6reuiqHGRVU=
Subject key identifier:   76:53:A6:0B:DD:F9:D9:3A:A9:A7:EB:C4:82:CB:B1:73:9F:3B:1F:C6
Certificate issuer:       /CN=731d9ad404ecdafa70ea9a4c9d10b9801829ea1f
Certificate serial:       0176986A
Authority key identifier: 73:1D:9A:D4:04:EC:DA:FA:70:EA:9A:4C:9D:10:B9:80:18:29:EA:1F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/cx2a1ATs2vpw6ppMnRC5gBgp6h8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/20/4429a4-0b36-4ced-846f-e20a654fca95/1/dlOmC9352Tqpp-vEgsuxc587H8Y.roa
Signing time:             Sat 01 Jan 2022 01:54:39 +0000
ROA not before:           Sat 01 Jan 2022 01:54:39 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     9119
IP address blocks:        46.54.240.0/20 maxlen: 20

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 24549482 (0x176986a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=731d9ad404ecdafa70ea9a4c9d10b9801829ea1f
        Validity
            Not Before: Jan  1 01:54:39 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=7653a60bddf9d93aa9a7ebc482cbb1739f3b1fc6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:b0:6e:1f:c7:02:03:22:ae:22:34:45:c0:3e:
                    ee:9e:db:29:fd:60:b1:31:b1:c4:fa:95:a5:99:78:
                    33:b6:cf:82:95:5a:5d:02:91:6b:65:31:99:47:99:
                    45:6c:b4:92:42:c3:91:74:86:b2:8b:ef:4e:15:39:
                    a1:01:a8:94:7c:19:74:73:3d:b8:5e:1d:37:11:16:
                    d4:2a:83:64:3d:83:2f:af:ea:2c:29:4e:f2:bf:e0:
                    7a:c9:b3:97:7d:09:30:d3:3e:4f:ee:d9:24:f2:8f:
                    8c:7c:7e:46:f7:96:79:3b:75:b5:44:3e:99:10:9c:
                    e9:8e:ad:18:73:fd:cc:fa:ad:1a:0b:23:4f:9c:6c:
                    56:db:d4:6f:67:87:c1:26:43:9a:5b:82:78:77:78:
                    60:07:af:e1:0d:5a:dd:82:a4:ba:e5:d3:4f:1d:0b:
                    10:d9:b3:65:04:e8:c7:7b:d3:cd:26:f9:b3:d4:57:
                    bb:2d:81:d3:4e:3e:92:4c:76:78:3b:e9:2b:e1:35:
                    6e:a9:05:59:dc:4e:bc:06:dd:8e:a7:80:bf:f0:34:
                    65:b5:40:55:8b:21:ee:dd:af:30:84:8a:29:22:bd:
                    5f:71:40:c4:a6:48:c6:18:06:88:37:b4:87:11:42:
                    31:72:f6:7e:d2:0b:0b:22:ee:30:30:4d:90:29:c3:
                    f9:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                76:53:A6:0B:DD:F9:D9:3A:A9:A7:EB:C4:82:CB:B1:73:9F:3B:1F:C6
            X509v3 Authority Key Identifier:
                keyid:73:1D:9A:D4:04:EC:DA:FA:70:EA:9A:4C:9D:10:B9:80:18:29:EA:1F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cx2a1ATs2vpw6ppMnRC5gBgp6h8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/20/4429a4-0b36-4ced-846f-e20a654fca95/1/dlOmC9352Tqpp-vEgsuxc587H8Y.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/20/4429a4-0b36-4ced-846f-e20a654fca95/1/cx2a1ATs2vpw6ppMnRC5gBgp6h8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  46.54.240.0/20

    Signature Algorithm: sha256WithRSAEncryption
         3d:15:af:57:18:85:4d:d6:0c:77:2e:fc:3d:25:0b:85:11:50:
         7d:b1:64:51:f8:41:99:17:8c:2d:9b:15:14:2f:dc:b2:df:d7:
         bd:c3:ff:5a:9c:95:94:c3:e2:45:ad:2b:c4:7c:21:82:6b:4d:
         45:1e:23:66:11:bf:58:aa:c8:4e:fe:01:ff:08:8b:7b:c5:35:
         73:c5:23:eb:e3:b6:6e:99:c9:da:e1:8e:37:f4:44:38:c6:9b:
         40:a5:52:7d:65:0c:c3:2a:92:44:84:84:24:5a:dc:54:e0:f3:
         7f:58:4e:ad:e9:e4:69:5c:1d:38:91:f8:b0:f6:87:a3:cc:8e:
         a2:e0:08:94:15:bd:6b:0d:46:76:0f:6a:9d:bf:f5:34:b2:65:
         37:f8:56:fb:5c:74:23:dd:8e:90:b3:26:80:90:1a:02:58:11:
         6a:71:bc:e7:d8:e9:5b:12:8e:9e:47:73:1e:c9:42:1a:4b:dc:
         2f:72:9e:40:d8:44:54:74:f3:94:bc:e0:7e:56:a5:fe:27:a0:
         ff:54:94:64:59:42:ae:92:f5:57:46:b3:b9:68:99:ea:6c:a1:
         15:1c:e8:95:01:e2:21:e5:3f:33:8b:ab:f5:a0:f9:ac:a8:1a:
         df:1d:8b:c0:41:48:a1:e7:10:dd:ad:7c:fb:e3:f6:79:ac:54:
         60:cb:3c:c4
-----BEGIN CERTIFICATE-----
MIIE7zCCA9egAwIBAgIEAXaYajANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg3
MzFkOWFkNDA0ZWNkYWZhNzBlYTlhNGM5ZDEwYjk4MDE4MjllYTFmMB4XDTIyMDEw
MTAxNTQzOVoXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoNzY1M2E2MGJkZGY5
ZDkzYWE5YTdlYmM0ODJjYmIxNzM5ZjNiMWZjNjCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAKiwbh/HAgMiriI0RcA+7p7bKf1gsTGxxPqVpZl4M7bPgpVa
XQKRa2UxmUeZRWy0kkLDkXSGsovvThU5oQGolHwZdHM9uF4dNxEW1CqDZD2DL6/q
LClO8r/gesmzl30JMNM+T+7ZJPKPjHx+RveWeTt1tUQ+mRCc6Y6tGHP9zPqtGgsj
T5xsVtvUb2eHwSZDmluCeHd4YAev4Q1a3YKkuuXTTx0LENmzZQTox3vTzSb5s9RX
uy2B004+kkx2eDvpK+E1bqkFWdxOvAbdjqeAv/A0ZbVAVYsh7t2vMISKKSK9X3FA
xKZIxhgGiDe0hxFCMXL2ftILCyLuMDBNkCnD+YsCAwEAAaOCAgkwggIFMB0GA1Ud
DgQWBBR2U6YL3fnZOqmn68SCy7FznzsfxjAfBgNVHSMEGDAWgBRzHZrUBOza+nDq
mkydELmAGCnqHzAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L2N4MmExQVRzMnZwdzZwcE1uUkM1Z0JncDZoOC5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvMjAvNDQyOWE0LTBiMzYtNGNlZC04NDZmLWUyMGE2NTRmY2E5NS8x
L2RsT21DOTM1MlRxcHAtdkVnc3V4YzU4N0g4WS5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMjAv
NDQyOWE0LTBiMzYtNGNlZC04NDZmLWUyMGE2NTRmY2E5NS8xL2N4MmExQVRzMnZw
dzZwcE1uUkM1Z0JncDZoOC5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAf
BggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEBC428DANBgkqhkiG9w0BAQsFAAOC
AQEAPRWvVxiFTdYMdy78PSULhRFQfbFkUfhBmReMLZsVFC/cst/XvcP/WpyVlMPi
Ra0rxHwhgmtNRR4jZhG/WKrITv4B/wiLe8U1c8Uj6+O2bpnJ2uGON/REOMabQKVS
fWUMwyqSRISEJFrcVODzf1hOrenkaVwdOJH4sPaHo8yOouAIlBW9aw1Gdg9qnb/1
NLJlN/hW+1x0I92OkLMmgJAaAlgRanG859jpWxKOnkdzHslCGkvcL3KeQNhEVHTz
lLzgflal/ieg/1SUZFlCrpL1V0azuWiZ6myhFRzolQHiIeU/M4ur9aD5rKga3x2L
wEFIoecQ3a18++P2eaxUYMs8xA==
-----END CERTIFICATE-----