Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2c/06462d-5aa3-4d6d-b219-80d87fa5eae2/1/Cs6xnjT8AXm8v6u8PO6ih550qXc.roa
File:                     Cs6xnjT8AXm8v6u8PO6ih550qXc.roa (raw, json)
Hash identifier:          wCfvQBHaRsq9eIB2IaBM+eiRB2i49k/9SWFMsACpS38=
Subject key identifier:   0A:CE:B1:9E:34:FC:01:79:BC:BF:AB:BC:3C:EE:A2:87:9E:74:A9:77
Certificate issuer:       /CN=9e0bba6d2e11171335417caa758189f0cf47a444
Certificate serial:       01E36A8B
Authority key identifier: 9E:0B:BA:6D:2E:11:17:13:35:41:7C:AA:75:81:89:F0:CF:47:A4:44
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ngu6bS4RFxM1QXyqdYGJ8M9HpEQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/2c/06462d-5aa3-4d6d-b219-80d87fa5eae2/1/Cs6xnjT8AXm8v6u8PO6ih550qXc.roa
Signing time:             Fri 24 Jun 2022 14:45:09 +0000
ROA not before:           Fri 24 Jun 2022 14:45:09 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     211237
IP address blocks:        146.19.205.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 31681163 (0x1e36a8b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9e0bba6d2e11171335417caa758189f0cf47a444
        Validity
            Not Before: Jun 24 14:45:09 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=0aceb19e34fc0179bcbfabbc3ceea2879e74a977
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:77:3b:c2:6d:c9:6e:ef:e1:22:66:6d:36:cc:
                    87:aa:6d:29:26:e5:74:d3:7b:27:91:91:72:f9:55:
                    84:b2:79:96:56:2f:8f:1c:13:47:59:35:06:8b:bb:
                    8b:c0:91:79:d1:47:9c:59:32:39:84:2d:0c:d4:6d:
                    00:b0:81:2c:87:e4:c9:c3:c2:b1:57:38:d1:a5:2a:
                    a9:20:10:57:05:64:fb:07:24:72:e0:cc:05:e5:5b:
                    e8:8a:93:7e:63:7e:74:8e:c5:a2:5b:bf:bf:8e:b0:
                    ee:19:a2:69:d0:e2:37:09:c5:f0:53:b4:2a:fd:53:
                    01:e3:d4:ee:fa:92:f5:22:d3:35:ea:f2:4e:be:86:
                    2e:c3:40:4b:70:37:1c:fc:12:19:b3:0f:d6:8b:48:
                    a6:1c:92:9f:8f:e5:ac:ed:f1:6c:12:bc:a7:34:7e:
                    08:18:2b:1c:67:66:bd:0b:4a:ce:05:42:ab:22:88:
                    bf:02:0f:fd:73:47:68:5f:d6:19:33:86:e9:75:27:
                    07:c9:0f:f4:f8:e4:5b:e3:24:ab:f7:ed:e3:3f:66:
                    1a:ad:4e:58:65:40:c1:ca:a6:14:f6:fd:4e:47:44:
                    e2:af:67:5c:39:df:60:ff:6a:da:34:ff:40:3c:93:
                    f0:31:cd:6c:82:c4:6d:14:70:e1:b7:72:ba:a0:52:
                    ec:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0A:CE:B1:9E:34:FC:01:79:BC:BF:AB:BC:3C:EE:A2:87:9E:74:A9:77
            X509v3 Authority Key Identifier:
                keyid:9E:0B:BA:6D:2E:11:17:13:35:41:7C:AA:75:81:89:F0:CF:47:A4:44

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ngu6bS4RFxM1QXyqdYGJ8M9HpEQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/06462d-5aa3-4d6d-b219-80d87fa5eae2/1/Cs6xnjT8AXm8v6u8PO6ih550qXc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/06462d-5aa3-4d6d-b219-80d87fa5eae2/1/ngu6bS4RFxM1QXyqdYGJ8M9HpEQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  146.19.205.0/24

    Signature Algorithm: sha256WithRSAEncryption
         21:d0:c1:ef:29:bf:30:1d:0a:cb:8b:98:c4:82:72:51:1a:9e:
         ef:d9:cd:af:04:de:68:3d:ba:a0:43:28:bf:5b:2e:f3:7e:c7:
         73:27:38:fc:ad:30:bb:84:bd:7b:09:b6:8f:dc:dd:26:52:f2:
         3a:b5:ab:4e:b0:5d:c0:b5:76:2d:d7:76:e7:38:e4:9e:0b:34:
         43:1c:f1:18:f1:43:12:4b:3e:08:a9:47:0f:25:38:e8:db:a5:
         a2:ae:da:c3:ab:10:87:f0:92:f8:47:a1:24:ba:15:58:4e:9d:
         17:8d:e2:b8:8b:ef:1f:3c:e6:77:7e:cd:9b:75:c8:5c:7d:30:
         63:05:e1:c9:5b:1d:d5:6b:3e:05:39:57:f0:85:b8:19:cd:27:
         49:01:c8:82:d5:8b:2d:48:64:77:0a:e8:c8:a9:89:c9:c3:42:
         d8:60:4a:0b:86:a1:69:55:5f:88:fe:b8:c1:fa:0c:3e:94:99:
         92:c6:c6:91:4a:1b:d0:3b:f9:af:e0:3d:d5:9c:dc:a9:2d:51:
         56:cd:0c:32:f3:fd:bf:fd:5f:9f:71:5a:89:72:3c:c6:5c:ea:
         2e:47:c6:a9:bc:f7:6d:90:95:af:19:77:21:bf:c8:e4:dd:08:
         4d:2b:e1:84:5b:98:ed:73:3e:7f:b1:00:96:22:8e:37:ef:7a:
         96:9f:9f:ff
-----BEGIN CERTIFICATE-----
MIIE7zCCA9egAwIBAgIEAeNqizANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg5
ZTBiYmE2ZDJlMTExNzEzMzU0MTdjYWE3NTgxODlmMGNmNDdhNDQ0MB4XDTIyMDYy
NDE0NDUwOVoXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoMGFjZWIxOWUzNGZj
MDE3OWJjYmZhYmJjM2NlZWEyODc5ZTc0YTk3NzCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBANl3O8JtyW7v4SJmbTbMh6ptKSbldNN7J5GRcvlVhLJ5llYv
jxwTR1k1Bou7i8CRedFHnFkyOYQtDNRtALCBLIfkycPCsVc40aUqqSAQVwVk+wck
cuDMBeVb6IqTfmN+dI7Folu/v46w7hmiadDiNwnF8FO0Kv1TAePU7vqS9SLTNery
Tr6GLsNAS3A3HPwSGbMP1otIphySn4/lrO3xbBK8pzR+CBgrHGdmvQtKzgVCqyKI
vwIP/XNHaF/WGTOG6XUnB8kP9PjkW+Mkq/ft4z9mGq1OWGVAwcqmFPb9TkdE4q9n
XDnfYP9q2jT/QDyT8DHNbILEbRRw4bdyuqBS7KECAwEAAaOCAgkwggIFMB0GA1Ud
DgQWBBQKzrGeNPwBeby/q7w87qKHnnSpdzAfBgNVHSMEGDAWgBSeC7ptLhEXEzVB
fKp1gYnwz0ekRDAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L25ndTZiUzRSRnhNMVFYeXFkWUdKOE05SHBFUS5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvMmMvMDY0NjJkLTVhYTMtNGQ2ZC1iMjE5LTgwZDg3ZmE1ZWFlMi8x
L0NzNnhualQ4QVhtOHY2dThQTzZpaDU1MHFYYy5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMmMv
MDY0NjJkLTVhYTMtNGQ2ZC1iMjE5LTgwZDg3ZmE1ZWFlMi8xL25ndTZiUzRSRnhN
MVFYeXFkWUdKOE05SHBFUS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAf
BggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAJITzTANBgkqhkiG9w0BAQsFAAOC
AQEAIdDB7ym/MB0Ky4uYxIJyURqe79nNrwTeaD26oEMov1su837Hcyc4/K0wu4S9
ewm2j9zdJlLyOrWrTrBdwLV2Ldd25zjkngs0QxzxGPFDEks+CKlHDyU46Nuloq7a
w6sQh/CS+EehJLoVWE6dF43iuIvvHzzmd37Nm3XIXH0wYwXhyVsd1Ws+BTlX8IW4
Gc0nSQHIgtWLLUhkdwroyKmJycNC2GBKC4ahaVVfiP64wfoMPpSZksbGkUob0Dv5
r+A91ZzcqS1RVs0MMvP9v/1fn3FaiXI8xlzqLkfGqbz3bZCVrxl3Ib/I5N0ITSvh
hFuY7XM+f7EAliKON+96lp+f/w==
-----END CERTIFICATE-----