Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/25/58ff54-3410-4e42-aab8-d2d7f2bb64df/1/xoXEK0nghoExPrJTfQhZwVrknYo.roa
File:                     xoXEK0nghoExPrJTfQhZwVrknYo.roa (raw, json)
Hash identifier:          cCTe/ckIM5JrehW+N+woGbLgbNi+xWoeH+Y9Mt94DaM=
Subject key identifier:   C6:85:C4:2B:49:E0:86:81:31:3E:B2:53:7D:08:59:C1:5A:E4:9D:8A
Certificate issuer:       /CN=d56ef48ed6155dd7843eed3632469abaa3100bf3
Certificate serial:       018354EF8C3568813D384C4BFFE26D4CC0F5
Authority key identifier: D5:6E:F4:8E:D6:15:5D:D7:84:3E:ED:36:32:46:9A:BA:A3:10:0B:F3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1W70jtYVXdeEPu02MkaauqMQC_M.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/25/58ff54-3410-4e42-aab8-d2d7f2bb64df/1/xoXEK0nghoExPrJTfQhZwVrknYo.roa
Signing time:             Mon 19 Sep 2022 08:48:48 +0000
ROA not before:           Mon 19 Sep 2022 08:48:48 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     202952
IP address blocks:        2a0e:8f02:f04d::/48 maxlen: 48
                          2a0e:8f02:21e0::/44 maxlen: 48

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:83:54:ef:8c:35:68:81:3d:38:4c:4b:ff:e2:6d:4c:c0:f5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d56ef48ed6155dd7843eed3632469abaa3100bf3
        Validity
            Not Before: Sep 19 08:48:48 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=c685c42b49e08681313eb2537d0859c15ae49d8a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:b6:63:34:b1:44:74:42:4f:2f:ef:83:71:6d:
                    71:45:7c:3e:fc:9a:6a:4e:ab:92:62:a6:e9:0d:74:
                    8b:08:3f:5e:64:e9:8c:ba:79:4f:7c:07:76:80:66:
                    33:f7:b7:b4:64:68:2f:5c:83:44:f3:11:91:6f:01:
                    89:da:bd:03:5e:61:f9:a3:e7:d7:53:68:13:36:15:
                    0d:95:88:19:14:a6:e3:0c:83:08:89:39:a2:54:3e:
                    a4:ae:91:6b:44:4a:f2:2b:7c:30:1b:e7:0c:f3:d5:
                    89:17:60:c3:de:89:71:26:73:dd:02:92:e1:3c:50:
                    1d:bf:64:3a:f0:90:94:b6:17:48:3b:ac:c7:67:14:
                    e9:39:39:b3:c2:3b:3e:20:e8:05:4b:1f:65:2c:90:
                    00:f0:d1:67:ab:39:f0:1b:05:f5:6f:41:09:00:32:
                    23:32:e8:86:8b:31:f2:a1:d9:93:bf:b1:49:5e:87:
                    95:34:7b:a4:a7:d9:76:d5:97:bd:46:44:97:99:2a:
                    e4:69:e8:b1:c5:d4:51:a8:02:f9:d8:75:db:92:30:
                    d1:c4:26:62:42:9e:28:90:2f:32:91:8f:18:c6:ac:
                    c6:5c:1d:97:34:9c:b6:c5:8e:52:3d:1b:81:be:49:
                    24:4f:c0:23:87:8b:07:71:79:e3:2f:a1:a4:df:b9:
                    32:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C6:85:C4:2B:49:E0:86:81:31:3E:B2:53:7D:08:59:C1:5A:E4:9D:8A
            X509v3 Authority Key Identifier:
                keyid:D5:6E:F4:8E:D6:15:5D:D7:84:3E:ED:36:32:46:9A:BA:A3:10:0B:F3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1W70jtYVXdeEPu02MkaauqMQC_M.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/58ff54-3410-4e42-aab8-d2d7f2bb64df/1/xoXEK0nghoExPrJTfQhZwVrknYo.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/25/58ff54-3410-4e42-aab8-d2d7f2bb64df/1/1W70jtYVXdeEPu02MkaauqMQC_M.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a0e:8f02:21e0::/44
                  2a0e:8f02:f04d::/48

    Signature Algorithm: sha256WithRSAEncryption
         68:15:c8:8a:54:03:c0:1e:87:90:11:74:b0:f7:4d:fc:42:7d:
         75:82:6e:28:70:8e:5b:c1:42:bd:45:c4:6c:1c:fa:17:24:d3:
         28:06:e3:3d:11:d3:54:66:51:fc:77:3f:5d:63:90:2a:73:60:
         8d:cb:c7:e7:89:1b:c0:e2:ae:70:ae:0b:1c:82:0d:ca:63:5d:
         a4:e1:7d:cc:02:22:b9:49:ad:05:71:0d:e9:6a:70:42:d0:ee:
         56:0c:8a:69:12:89:a0:c6:30:9d:8f:ef:00:d8:22:22:b0:14:
         8f:07:f8:d4:b0:e9:44:54:ab:2f:20:48:b7:43:76:79:7c:1d:
         25:48:53:13:85:53:50:5c:69:00:bf:2d:c0:0a:de:47:b7:20:
         c0:b1:c2:84:17:a6:6d:74:c8:d3:ca:b1:91:cc:db:b1:e8:2c:
         4e:87:9c:9f:ac:04:61:df:bb:3f:2b:56:4e:39:f7:b4:1f:07:
         9d:09:b4:c7:ec:0d:cf:7c:63:03:45:b8:4d:24:25:45:34:54:
         7e:6d:5d:db:c8:59:a2:45:eb:29:23:47:7a:cb:e3:21:3c:92:
         20:26:8d:e3:c9:05:1d:32:16:06:0f:7b:58:76:0c:4b:9c:30:
         b2:18:d5:5a:e1:41:f7:9d:6e:c9:59:0e:f5:b9:f9:4a:83:2a:
         b7:45:ed:5c
-----BEGIN CERTIFICATE-----
MIIFCTCCA/GgAwIBAgISAYNU74w1aIE9OExL/+JtTMD1MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQ1NmVmNDhlZDYxNTVkZDc4NDNlZWQzNjMyNDY5YWJhYTMx
MDBiZjMwHhcNMjIwOTE5MDg0ODQ4WhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhjNjg1YzQyYjQ5ZTA4NjgxMzEzZWIyNTM3ZDA4NTljMTVhZTQ5ZDhhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyrZjNLFEdEJPL++DcW1xRXw+/Jpq
TquSYqbpDXSLCD9eZOmMunlPfAd2gGYz97e0ZGgvXINE8xGRbwGJ2r0DXmH5o+fX
U2gTNhUNlYgZFKbjDIMIiTmiVD6krpFrREryK3wwG+cM89WJF2DD3olxJnPdApLh
PFAdv2Q68JCUthdIO6zHZxTpOTmzwjs+IOgFSx9lLJAA8NFnqznwGwX1b0EJADIj
MuiGizHyodmTv7FJXoeVNHukp9l21Ze9RkSXmSrkaeixxdRRqAL52HXbkjDRxCZi
Qp4okC8ykY8YxqzGXB2XNJy2xY5SPRuBvkkkT8Ajh4sHcXnjL6Gk37kydwIDAQAB
o4ICFTCCAhEwHQYDVR0OBBYEFMaFxCtJ4IaBMT6yU30IWcFa5J2KMB8GA1UdIwQY
MBaAFNVu9I7WFV3XhD7tNjJGmrqjEAvzMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMVc3MGp0WVZYZGVFUHUwMk1rYWF1cU1RQ19NLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNS81OGZmNTQtMzQxMC00ZTQyLWFhYjgt
ZDJkN2YyYmI2NGRmLzEveG9YRUswbmdob0V4UHJKVGZRaFp3VnJrbllvLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yNS81OGZmNTQtMzQxMC00ZTQyLWFhYjgtZDJkN2YyYmI2NGRm
LzEvMVc3MGp0WVZYZGVFUHUwMk1rYWF1cU1RQ19NLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAAjASAwcEKg6PAiHg
AwcAKg6PAvBNMA0GCSqGSIb3DQEBCwUAA4IBAQBoFciKVAPAHoeQEXSw9038Qn11
gm4ocI5bwUK9RcRsHPoXJNMoBuM9EdNUZlH8dz9dY5Aqc2CNy8fniRvA4q5wrgsc
gg3KY12k4X3MAiK5Sa0FcQ3panBC0O5WDIppEomgxjCdj+8A2CIisBSPB/jUsOlE
VKsvIEi3Q3Z5fB0lSFMThVNQXGkAvy3ACt5HtyDAscKEF6ZtdMjTyrGRzNux6CxO
h5yfrARh37s/K1ZOOfe0HwedCbTH7A3PfGMDRbhNJCVFNFR+bV3byFmiRespI0d6
y+MhPJIgJo3jyQUdMhYGD3tYdgxLnDCyGNVa4UH3nW7JWQ71uflKgyq3Re1c
-----END CERTIFICATE-----