Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/25/58ff54-3410-4e42-aab8-d2d7f2bb64df/1/1-yauMAF9bJukbfRLhtBLZJdixaw.roa
File:                     1-yauMAF9bJukbfRLhtBLZJdixaw.roa (raw, json)
Hash identifier:          +rSjQzf++DqKEaj/SlrLjCdWzQnVEIEyIS/QQ/h6Gq0=
Subject key identifier:   FB:26:AE:30:01:7D:6C:9B:A4:6D:F4:4B:86:D0:4B:64:97:62:C5:AC
Certificate issuer:       /CN=d56ef48ed6155dd7843eed3632469abaa3100bf3
Certificate serial:       0183A1C1089388C56E8BEA3DD6F54C9D0F6B
Authority key identifier: D5:6E:F4:8E:D6:15:5D:D7:84:3E:ED:36:32:46:9A:BA:A3:10:0B:F3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1W70jtYVXdeEPu02MkaauqMQC_M.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/25/58ff54-3410-4e42-aab8-d2d7f2bb64df/1/1-yauMAF9bJukbfRLhtBLZJdixaw.roa
Signing time:             Tue 04 Oct 2022 06:48:45 +0000
ROA not before:           Tue 04 Oct 2022 06:48:45 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     202952
IP address blocks:        2a0e:8f02:f04d::/48 maxlen: 48
                          2a0e:8f02:21e0::/44 maxlen: 44

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:83:a1:c1:08:93:88:c5:6e:8b:ea:3d:d6:f5:4c:9d:0f:6b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d56ef48ed6155dd7843eed3632469abaa3100bf3
        Validity
            Not Before: Oct  4 06:48:45 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=fb26ae30017d6c9ba46df44b86d04b649762c5ac
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:81:2d:5b:46:9e:bd:3b:05:0c:29:14:73:1d:d1:
                    0f:89:ce:c8:ec:20:a0:c8:ae:d2:0c:c7:6f:a4:1e:
                    d4:76:89:a9:27:a5:0c:e1:da:cc:24:4e:10:99:e2:
                    8a:cf:75:12:c9:90:fb:62:e7:6c:01:c2:a9:4e:5e:
                    5e:e7:84:ef:ad:fc:03:38:98:6e:bf:79:e6:4c:96:
                    62:ce:37:e5:ea:dc:30:be:e6:63:12:e9:eb:c9:1c:
                    23:3f:01:bb:ef:17:89:a8:eb:06:a0:9a:07:35:aa:
                    ac:96:2b:69:f2:d0:58:ee:bc:d6:df:f3:93:fa:1f:
                    d4:27:46:9b:da:3d:03:ef:39:5c:f4:28:44:de:1e:
                    90:ba:3e:3c:2c:64:47:db:07:34:9f:a3:f5:47:8f:
                    86:14:6c:c0:2e:7b:82:d4:c9:c5:b8:7c:f6:45:87:
                    c3:08:82:5e:c9:fd:26:e2:6e:9a:03:00:f1:1f:7c:
                    75:45:fc:5c:aa:24:db:e9:9e:62:78:f5:bd:8b:e4:
                    ec:ff:8f:72:50:6e:71:8b:e7:40:1b:e5:60:7e:60:
                    29:d5:6c:6a:79:ff:a4:e8:cc:3d:bd:65:77:19:a2:
                    b4:68:62:e6:f6:a7:24:5d:57:e8:12:d6:5e:d8:c1:
                    70:8f:04:28:e2:99:4d:cc:64:ce:88:71:e0:89:a7:
                    9a:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FB:26:AE:30:01:7D:6C:9B:A4:6D:F4:4B:86:D0:4B:64:97:62:C5:AC
            X509v3 Authority Key Identifier:
                keyid:D5:6E:F4:8E:D6:15:5D:D7:84:3E:ED:36:32:46:9A:BA:A3:10:0B:F3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1W70jtYVXdeEPu02MkaauqMQC_M.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/58ff54-3410-4e42-aab8-d2d7f2bb64df/1/1-yauMAF9bJukbfRLhtBLZJdixaw.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/25/58ff54-3410-4e42-aab8-d2d7f2bb64df/1/1W70jtYVXdeEPu02MkaauqMQC_M.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a0e:8f02:21e0::/44
                  2a0e:8f02:f04d::/48

    Signature Algorithm: sha256WithRSAEncryption
         16:f2:3b:e3:38:0d:23:47:9f:0f:8f:d9:88:f2:7c:b5:0c:29:
         13:34:83:a8:75:02:a9:ff:48:b5:f4:34:41:c6:c6:d3:aa:39:
         11:1b:7e:57:a3:2d:1d:8a:9f:e7:bc:b2:27:68:77:99:3e:26:
         5f:07:26:d1:e3:36:1c:49:f3:46:b2:3b:fe:c3:8b:c4:8b:5f:
         90:9a:82:90:9e:b2:75:66:73:2b:06:e4:af:73:56:c4:8f:2d:
         9d:2f:22:da:7b:3e:14:2b:43:2c:4f:84:8c:37:8b:13:5e:14:
         80:82:07:03:be:4a:88:a1:76:5f:53:15:38:ee:99:b8:62:03:
         79:ba:07:fb:c0:ea:0a:d6:b0:4a:d5:b6:e6:8f:91:4f:1b:4e:
         07:99:49:b2:87:44:b4:2b:24:b0:42:88:7a:47:5a:89:79:a0:
         bd:ce:0b:1e:b6:de:41:e6:38:ac:84:64:72:40:63:04:21:96:
         b9:49:81:f9:48:0a:aa:e3:d9:3d:73:df:9e:d8:83:82:1a:0c:
         55:9d:7c:9d:7c:ce:48:b3:d9:2a:d1:42:7c:23:d3:49:92:0f:
         a2:cf:d6:ce:bf:cc:5d:f9:b8:3d:48:0d:e5:f4:c8:8d:63:e9:
         c1:30:8b:2a:3c:25:ec:cf:b4:5f:3e:9b:bf:00:04:d8:85:ef:
         93:f1:7a:ef
-----BEGIN CERTIFICATE-----
MIIFCjCCA/KgAwIBAgISAYOhwQiTiMVui+o91vVMnQ9rMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQ1NmVmNDhlZDYxNTVkZDc4NDNlZWQzNjMyNDY5YWJhYTMx
MDBiZjMwHhcNMjIxMDA0MDY0ODQ1WhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhmYjI2YWUzMDAxN2Q2YzliYTQ2ZGY0NGI4NmQwNGI2NDk3NjJjNWFjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgS1bRp69OwUMKRRzHdEPic7I7CCg
yK7SDMdvpB7UdompJ6UM4drMJE4QmeKKz3USyZD7YudsAcKpTl5e54TvrfwDOJhu
v3nmTJZizjfl6twwvuZjEunryRwjPwG77xeJqOsGoJoHNaqslitp8tBY7rzW3/OT
+h/UJ0ab2j0D7zlc9ChE3h6Quj48LGRH2wc0n6P1R4+GFGzALnuC1MnFuHz2RYfD
CIJeyf0m4m6aAwDxH3x1RfxcqiTb6Z5iePW9i+Ts/49yUG5xi+dAG+VgfmAp1Wxq
ef+k6Mw9vWV3GaK0aGLm9qckXVfoEtZe2MFwjwQo4plNzGTOiHHgiaea8wIDAQAB
o4ICFjCCAhIwHQYDVR0OBBYEFPsmrjABfWybpG30S4bQS2SXYsWsMB8GA1UdIwQY
MBaAFNVu9I7WFV3XhD7tNjJGmrqjEAvzMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMVc3MGp0WVZYZGVFUHUwMk1rYWF1cU1RQ19NLmNlcjCB
jgYIKwYBBQUHAQsEgYEwfzB9BggrBgEFBQcwC4ZxcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNS81OGZmNTQtMzQxMC00ZTQyLWFhYjgt
ZDJkN2YyYmI2NGRmLzEvMS15YXVNQUY5Ykp1a2JmUkxodEJMWkpkaXhhdy5yb2Ew
gYEGA1UdHwR6MHgwdqB0oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0
b3J5L0RFRkFVTFQvMjUvNThmZjU0LTM0MTAtNGU0Mi1hYWI4LWQyZDdmMmJiNjRk
Zi8xLzFXNzBqdFlWWGRlRVB1MDJNa2FhdXFNUUNfTS5jcmwwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjArBggrBgEFBQcBBwEB/wQcMBowGAQCAAIwEgMHBCoOjwIh
4AMHACoOjwLwTTANBgkqhkiG9w0BAQsFAAOCAQEAFvI74zgNI0efD4/ZiPJ8tQwp
EzSDqHUCqf9ItfQ0QcbG06o5ERt+V6MtHYqf57yyJ2h3mT4mXwcm0eM2HEnzRrI7
/sOLxItfkJqCkJ6ydWZzKwbkr3NWxI8tnS8i2ns+FCtDLE+EjDeLE14UgIIHA75K
iKF2X1MVOO6ZuGIDeboH+8DqCtawStW25o+RTxtOB5lJsodEtCsksEKIekdaiXmg
vc4LHrbeQeY4rIRkckBjBCGWuUmB+UgKquPZPXPfntiDghoMVZ18nXzOSLPZKtFC
fCPTSZIPos/Wzr/MXfm4PUgN5fTIjWPpwTCLKjwl7M+0Xz6bvwAE2IXvk/F67w==
-----END CERTIFICATE-----