Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/31/6ebc1c-42ab-4559-84b1-f6ad9330c4b0/1/25N5RLwlyBqrqXHiOx61xVi7uRA.roa
File:                     25N5RLwlyBqrqXHiOx61xVi7uRA.roa (raw, json)
Hash identifier:          LKNBoVZQGhnqUbS+aXCectbDTl1kM9WfZwkPmC+lqfA=
Subject key identifier:   DB:93:79:44:BC:25:C8:1A:AB:A9:71:E2:3B:1E:B5:C5:58:BB:B9:10
Certificate issuer:       /CN=3ad2f7cc2753309833031ba894649a80cffb13e8
Certificate serial:       08A46301
Authority key identifier: 3A:D2:F7:CC:27:53:30:98:33:03:1B:A8:94:64:9A:80:CF:FB:13:E8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/OtL3zCdTMJgzAxuolGSagM_7E-g.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/31/6ebc1c-42ab-4559-84b1-f6ad9330c4b0/1/25N5RLwlyBqrqXHiOx61xVi7uRA.roa
Signing time:             Sat 01 Jan 2022 06:02:42 +0000
ROA not before:           Sat 01 Jan 2022 06:02:42 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     9063
IP address blocks:        185.38.76.0/22 maxlen: 22
                          2a01:4060::/32 maxlen: 32

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 144990977 (0x8a46301)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3ad2f7cc2753309833031ba894649a80cffb13e8
        Validity
            Not Before: Jan  1 06:02:42 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=db937944bc25c81aaba971e23b1eb5c558bbb910
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:49:20:09:e0:7f:24:c0:0c:e8:32:84:90:4a:
                    ce:fe:33:4f:32:84:ad:56:77:fb:c2:1f:ba:18:70:
                    fc:d2:5a:1c:7b:1d:7d:60:b8:a8:d5:df:37:ec:60:
                    ae:1f:41:6f:3d:ad:f8:ce:45:e1:2e:1f:61:17:d0:
                    5a:4b:37:8c:47:ef:e5:1b:0c:ba:76:b5:1c:68:b8:
                    b4:63:13:d2:87:a4:82:02:47:5c:e4:9d:74:7c:19:
                    c5:69:ce:a9:d1:79:7b:53:ee:31:2b:74:c4:a5:7b:
                    16:35:06:af:f3:22:92:f6:27:0b:96:82:f0:ed:31:
                    9a:ef:20:ad:65:9c:c0:2d:24:c7:f5:c1:38:50:2a:
                    7a:db:2d:14:79:8f:89:58:69:89:01:10:f2:59:8d:
                    da:41:57:23:f8:e4:aa:8a:3d:9c:ea:bc:79:dc:26:
                    96:b2:a7:75:34:89:00:37:18:80:54:47:09:34:2b:
                    5f:7c:ac:52:73:ca:d7:a9:ae:75:68:76:87:b3:3d:
                    50:90:60:c6:c7:1b:9e:ae:b4:5e:ad:4a:f9:f7:ae:
                    44:20:4a:00:1b:d0:72:56:2a:a4:13:8f:9f:f0:ea:
                    af:31:8f:26:14:8f:bc:52:3c:14:6d:83:6a:05:48:
                    a3:90:39:b8:a6:08:b5:52:0b:b6:10:1c:fb:08:38:
                    92:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DB:93:79:44:BC:25:C8:1A:AB:A9:71:E2:3B:1E:B5:C5:58:BB:B9:10
            X509v3 Authority Key Identifier:
                keyid:3A:D2:F7:CC:27:53:30:98:33:03:1B:A8:94:64:9A:80:CF:FB:13:E8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OtL3zCdTMJgzAxuolGSagM_7E-g.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/31/6ebc1c-42ab-4559-84b1-f6ad9330c4b0/1/25N5RLwlyBqrqXHiOx61xVi7uRA.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/31/6ebc1c-42ab-4559-84b1-f6ad9330c4b0/1/OtL3zCdTMJgzAxuolGSagM_7E-g.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.38.76.0/22
                IPv6:
                  2a01:4060::/32

    Signature Algorithm: sha256WithRSAEncryption
         8b:22:d6:a6:6d:23:9f:9c:f9:76:b6:7a:e5:5c:6c:07:43:e2:
         79:34:84:98:9e:56:98:e3:cb:e1:57:58:09:02:2f:72:9b:88:
         92:6b:9a:bd:ad:19:9a:d9:db:8e:0b:64:0c:da:87:4e:d3:ee:
         ef:f5:e2:fc:c0:c5:6d:cf:63:68:93:db:86:7c:87:0b:59:82:
         72:97:27:14:4d:19:86:39:00:ef:b0:b8:37:a1:10:85:6a:bf:
         f2:b3:f5:63:19:58:eb:79:37:ec:d3:18:ba:fd:a6:86:a7:30:
         1c:4b:5b:f4:4c:97:99:1f:d8:d1:8f:f5:20:5e:38:00:d3:ab:
         00:af:3f:76:7e:59:d9:bf:bd:f6:a3:8f:29:dc:85:39:3c:fd:
         28:26:53:01:04:ba:bc:70:4f:34:37:dd:18:0b:ba:0a:0f:b2:
         c8:ee:11:56:5f:8a:3d:26:4a:82:0c:91:ce:c9:c5:bd:32:5a:
         d6:e4:1f:8f:a0:14:d8:cc:4d:16:8f:61:d5:98:e1:b9:fa:fd:
         6a:e5:71:ab:08:68:a3:8c:6a:d9:2a:7b:79:31:a7:00:32:70:
         51:ab:d9:9a:69:df:77:04:68:f8:7a:83:7b:1e:1b:e9:31:d9:
         57:dc:bf:fd:60:22:b2:e9:59:38:35:32:8c:6f:9e:21:fc:0b:
         b9:d9:36:42
-----BEGIN CERTIFICATE-----
MIIE/jCCA+agAwIBAgIECKRjATANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEygz
YWQyZjdjYzI3NTMzMDk4MzMwMzFiYTg5NDY0OWE4MGNmZmIxM2U4MB4XDTIyMDEw
MTA2MDI0MloXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoZGI5Mzc5NDRiYzI1
YzgxYWFiYTk3MWUyM2IxZWI1YzU1OGJiYjkxMDCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAJ9JIAngfyTADOgyhJBKzv4zTzKErVZ3+8Ifuhhw/NJaHHsd
fWC4qNXfN+xgrh9Bbz2t+M5F4S4fYRfQWks3jEfv5RsMuna1HGi4tGMT0oekggJH
XOSddHwZxWnOqdF5e1PuMSt0xKV7FjUGr/MikvYnC5aC8O0xmu8grWWcwC0kx/XB
OFAqetstFHmPiVhpiQEQ8lmN2kFXI/jkqoo9nOq8edwmlrKndTSJADcYgFRHCTQr
X3ysUnPK16mudWh2h7M9UJBgxscbnq60Xq1K+feuRCBKABvQclYqpBOPn/DqrzGP
JhSPvFI8FG2DagVIo5A5uKYItVILthAc+wg4ki0CAwEAAaOCAhgwggIUMB0GA1Ud
DgQWBBTbk3lEvCXIGqupceI7HrXFWLu5EDAfBgNVHSMEGDAWgBQ60vfMJ1MwmDMD
G6iUZJqAz/sT6DAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L090TDN6Q2RUTUpnekF4dW9sR1NhZ01fN0UtZy5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvMzEvNmViYzFjLTQyYWItNDU1OS04NGIxLWY2YWQ5MzMwYzRiMC8x
LzI1TjVSTHdseUJxcnFYSGlPeDYxeFZpN3VSQS5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMzEv
NmViYzFjLTQyYWItNDU1OS04NGIxLWY2YWQ5MzMwYzRiMC8xL090TDN6Q2RUTUpn
ekF4dW9sR1NhZ01fN0UtZy5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAu
BggrBgEFBQcBBwEB/wQfMB0wDAQCAAEwBgMEArkmTDANBAIAAjAHAwUAKgFAYDAN
BgkqhkiG9w0BAQsFAAOCAQEAiyLWpm0jn5z5drZ65VxsB0PieTSEmJ5WmOPL4VdY
CQIvcpuIkmuava0ZmtnbjgtkDNqHTtPu7/Xi/MDFbc9jaJPbhnyHC1mCcpcnFE0Z
hjkA77C4N6EQhWq/8rP1YxlY63k37NMYuv2mhqcwHEtb9EyXmR/Y0Y/1IF44ANOr
AK8/dn5Z2b+99qOPKdyFOTz9KCZTAQS6vHBPNDfdGAu6Cg+yyO4RVl+KPSZKggyR
zsnFvTJa1uQfj6AU2MxNFo9h1Zjhufr9auVxqwhoo4xq2Sp7eTGnADJwUavZmmnf
dwRo+HqDex4b6THZV9y//WAisulZODUyjG+eIfwLudk2Qg==
-----END CERTIFICATE-----