Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/21/b6468d-10ed-4d48-803c-ea97665c13df/1/hiqzlAewq3tngd435BcCPOU5U3s.roa
File:                     hiqzlAewq3tngd435BcCPOU5U3s.roa (raw, json)
Hash identifier:          FDOJgDy16n89x+t3hSpPhnh9GoBJDGCG88nerwE+N4k=
Subject key identifier:   86:2A:B3:94:07:B0:AB:7B:67:81:DE:37:E4:17:02:3C:E5:39:53:7B
Certificate issuer:       /CN=e2834429775e6555e5742492286254b1da9f1903
Certificate serial:       5F5031
Authority key identifier: E2:83:44:29:77:5E:65:55:E5:74:24:92:28:62:54:B1:DA:9F:19:03
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/4oNEKXdeZVXldCSSKGJUsdqfGQM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/21/b6468d-10ed-4d48-803c-ea97665c13df/1/hiqzlAewq3tngd435BcCPOU5U3s.roa
Signing time:             Sat 01 Jan 2022 01:01:44 +0000
ROA not before:           Sat 01 Jan 2022 01:01:44 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     200023
IP address blocks:        146.19.250.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 6246449 (0x5f5031)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e2834429775e6555e5742492286254b1da9f1903
        Validity
            Not Before: Jan  1 01:01:44 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=862ab39407b0ab7b6781de37e417023ce539537b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:19:19:67:ff:ba:c5:79:30:57:e5:2d:b0:cb:
                    9b:b0:1d:69:b5:b5:c1:7d:65:2f:6e:e2:83:8c:c0:
                    73:e3:0e:34:73:c0:be:6b:5c:fe:5d:94:42:9f:e8:
                    46:85:5d:fb:a5:ee:bb:78:10:a6:8b:12:7d:48:bb:
                    37:d4:14:ed:42:55:93:2c:51:3f:ac:d2:11:3d:9d:
                    59:a0:50:d3:6b:3d:2a:47:7e:2f:47:8b:fc:18:de:
                    dd:34:09:67:4a:21:f4:0f:b4:f5:9d:3e:64:e8:4b:
                    0b:34:02:9f:a8:dc:5d:4e:06:76:1b:19:f4:d4:fd:
                    5a:73:99:55:0a:2c:ba:42:81:ee:a0:8e:a8:58:80:
                    1e:74:3d:8a:66:fa:6b:97:1d:43:6e:f2:35:cd:7e:
                    36:58:1b:8d:fc:62:b6:9d:27:2f:b1:5f:d3:3f:42:
                    93:fd:de:e4:48:ec:2e:44:ed:ba:a0:cf:48:24:93:
                    ae:18:e7:fd:22:56:c1:16:67:27:a4:68:d5:dc:0e:
                    f1:ad:e3:38:29:db:6d:53:5b:15:04:0a:ae:dd:6f:
                    0a:9e:55:b2:32:32:18:28:f7:64:5b:9b:16:9e:07:
                    22:96:6d:00:64:d3:73:8d:a2:31:4d:33:a4:74:45:
                    7a:22:34:a1:79:57:04:75:f5:79:b6:6f:9c:85:37:
                    cc:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                86:2A:B3:94:07:B0:AB:7B:67:81:DE:37:E4:17:02:3C:E5:39:53:7B
            X509v3 Authority Key Identifier:
                keyid:E2:83:44:29:77:5E:65:55:E5:74:24:92:28:62:54:B1:DA:9F:19:03

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4oNEKXdeZVXldCSSKGJUsdqfGQM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/21/b6468d-10ed-4d48-803c-ea97665c13df/1/hiqzlAewq3tngd435BcCPOU5U3s.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/21/b6468d-10ed-4d48-803c-ea97665c13df/1/4oNEKXdeZVXldCSSKGJUsdqfGQM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  146.19.250.0/24

    Signature Algorithm: sha256WithRSAEncryption
         0b:b8:38:72:f9:f2:a5:53:26:72:b1:11:0a:1a:28:33:ec:0c:
         99:2f:bd:81:36:51:d3:73:59:0d:d6:fb:2f:8c:2e:1b:6c:fe:
         4f:d3:ba:8b:9b:9a:ca:b0:1b:27:c8:cb:37:34:d1:26:dc:6b:
         bc:ae:ee:e6:b6:7e:9f:29:58:37:a4:aa:09:6c:e9:92:a7:bb:
         2b:6d:50:99:e6:9f:7d:eb:5f:d6:0c:0f:24:df:7c:c0:4f:0c:
         70:75:97:3f:39:85:6c:48:70:68:09:09:a7:77:fd:ad:55:4c:
         54:75:d7:ee:bd:64:a1:2a:3e:5f:7d:fe:45:bb:b6:a6:d1:86:
         f1:94:8c:64:91:1c:da:6f:71:1e:18:95:4c:6f:cd:05:b9:bb:
         6c:94:53:75:4f:d4:dc:b0:d8:34:3d:af:68:8f:37:b0:51:a3:
         a5:a8:e8:7b:67:45:70:70:ae:ff:42:d8:73:76:d8:50:8e:4d:
         c4:4c:f6:e0:ca:2e:f7:10:3e:bf:bc:52:2e:c7:7b:69:79:5d:
         a9:41:60:69:fe:5a:5f:84:f6:af:6a:02:5e:2d:db:38:d2:dd:
         e5:75:88:d9:20:2b:a5:98:84:26:82:73:23:bb:a9:fc:19:7c:
         08:a8:17:75:cd:e9:af:9a:f5:66:1e:ab:33:00:27:7f:98:32:
         97:e5:0e:01
-----BEGIN CERTIFICATE-----
MIIE7jCCA9agAwIBAgIDX1AxMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKGUy
ODM0NDI5Nzc1ZTY1NTVlNTc0MjQ5MjI4NjI1NGIxZGE5ZjE5MDMwHhcNMjIwMTAx
MDEwMTQ0WhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQDEyg4NjJhYjM5NDA3YjBh
YjdiNjc4MWRlMzdlNDE3MDIzY2U1Mzk1MzdiMIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEAsRkZZ/+6xXkwV+UtsMubsB1ptbXBfWUvbuKDjMBz4w40c8C+
a1z+XZRCn+hGhV37pe67eBCmixJ9SLs31BTtQlWTLFE/rNIRPZ1ZoFDTaz0qR34v
R4v8GN7dNAlnSiH0D7T1nT5k6EsLNAKfqNxdTgZ2Gxn01P1ac5lVCiy6QoHuoI6o
WIAedD2KZvprlx1DbvI1zX42WBuN/GK2nScvsV/TP0KT/d7kSOwuRO26oM9IJJOu
GOf9IlbBFmcnpGjV3A7xreM4KdttU1sVBAqu3W8KnlWyMjIYKPdkW5sWngcilm0A
ZNNzjaIxTTOkdEV6IjSheVcEdfV5tm+chTfMawIDAQABo4ICCTCCAgUwHQYDVR0O
BBYEFIYqs5QHsKt7Z4HeN+QXAjzlOVN7MB8GA1UdIwQYMBaAFOKDRCl3XmVV5XQk
kihiVLHanxkDMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEFBQcBAQRYMFYwVAYIKwYB
BQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQv
NG9ORUtYZGVaVlhsZENTU0tHSlVzZHFmR1FNLmNlcjCBjQYIKwYBBQUHAQsEgYAw
fjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkv
REVGQVVMVC8yMS9iNjQ2OGQtMTBlZC00ZDQ4LTgwM2MtZWE5NzY2NWMxM2RmLzEv
aGlxemxBZXdxM3RuZ2Q0MzVCY0NQT1U1VTNzLnJvYTCBgQYDVR0fBHoweDB2oHSg
coZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yMS9i
NjQ2OGQtMTBlZC00ZDQ4LTgwM2MtZWE5NzY2NWMxM2RmLzEvNG9ORUtYZGVaVlhs
ZENTU0tHSlVzZHFmR1FNLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8G
CCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAkhP6MA0GCSqGSIb3DQEBCwUAA4IB
AQALuDhy+fKlUyZysREKGigz7AyZL72BNlHTc1kN1vsvjC4bbP5P07qLm5rKsBsn
yMs3NNEm3Gu8ru7mtn6fKVg3pKoJbOmSp7srbVCZ5p9961/WDA8k33zATwxwdZc/
OYVsSHBoCQmnd/2tVUxUddfuvWShKj5fff5Fu7am0YbxlIxkkRzab3EeGJVMb80F
ubtslFN1T9TcsNg0Pa9ojzewUaOlqOh7Z0VwcK7/QthzdthQjk3ETPbgyi73ED6/
vFIux3tpeV2pQWBp/lpfhPavagJeLds40t3ldYjZICulmIQmgnMju6n8GXwIqBd1
zemvmvVmHqszACd/mDKX5Q4B
-----END CERTIFICATE-----