Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/49/666404-c28f-4d29-96e4-607e17aec750/1/qY9hGlkTyWIbEYRHs8bwMiWONwE.roa
File:                     qY9hGlkTyWIbEYRHs8bwMiWONwE.roa (raw, json)
Hash identifier:          xhTOgaiCipddSZYC8wWIxw2cGDDTOsixQMZyuuaBPVg=
Subject key identifier:   A9:8F:61:1A:59:13:C9:62:1B:11:84:47:B3:C6:F0:32:25:8E:37:01
Certificate issuer:       /CN=70e7ad0598208a6af9d1500a740d73bcf28f0384
Certificate serial:       03B2521C
Authority key identifier: 70:E7:AD:05:98:20:8A:6A:F9:D1:50:0A:74:0D:73:BC:F2:8F:03:84
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/cOetBZggimr50VAKdA1zvPKPA4Q.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/49/666404-c28f-4d29-96e4-607e17aec750/1/qY9hGlkTyWIbEYRHs8bwMiWONwE.roa
Signing time:             Sat 01 Jan 2022 02:50:44 +0000
ROA not before:           Sat 01 Jan 2022 02:50:44 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     28681
IP address blocks:        193.201.116.0/24 maxlen: 24
                          2001:67c:5e8::/48 maxlen: 48

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 62018076 (0x3b2521c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=70e7ad0598208a6af9d1500a740d73bcf28f0384
        Validity
            Not Before: Jan  1 02:50:44 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=a98f611a5913c9621b118447b3c6f032258e3701
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:1e:5a:4d:22:c8:1f:31:1b:e0:cd:80:f4:48:
                    43:34:88:4c:23:40:70:34:49:e7:ad:c6:bb:0c:54:
                    9c:b7:ec:7f:4a:29:43:cd:4a:f9:73:9a:54:41:51:
                    82:5f:55:83:fd:f6:11:b3:e6:b1:11:b3:ac:5b:b1:
                    98:25:e2:46:ef:77:7b:99:02:5b:9a:a4:27:a2:17:
                    13:07:c3:00:98:b0:ac:b0:c1:9c:9c:f3:97:71:94:
                    1e:7b:3b:2e:77:2c:79:1f:2d:0a:43:35:84:c2:c9:
                    45:01:a5:14:ef:8a:a0:9e:42:e7:3d:64:70:32:33:
                    34:bc:52:f1:4b:a4:ac:e9:fb:02:c0:43:85:12:af:
                    1f:59:b2:3b:33:e4:83:99:3b:0b:53:10:fa:84:5f:
                    b1:de:b5:04:14:67:b4:3a:eb:16:ff:cf:1d:c4:58:
                    7e:92:8f:6c:af:3c:c4:ae:1c:3b:f0:9c:8c:16:99:
                    2b:f3:32:76:ef:be:cf:1b:d5:e6:02:2c:83:0a:ab:
                    80:25:cd:c8:58:5d:26:09:ca:19:85:86:ee:af:3f:
                    11:9d:ab:0d:cd:17:88:5b:f1:ae:6e:ac:37:31:ab:
                    6e:9a:c0:9e:d0:df:c6:da:d8:88:b6:b4:d1:0c:02:
                    b9:ce:7b:23:74:09:73:d6:10:e4:ba:81:bf:4d:57:
                    7a:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A9:8F:61:1A:59:13:C9:62:1B:11:84:47:B3:C6:F0:32:25:8E:37:01
            X509v3 Authority Key Identifier:
                keyid:70:E7:AD:05:98:20:8A:6A:F9:D1:50:0A:74:0D:73:BC:F2:8F:03:84

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cOetBZggimr50VAKdA1zvPKPA4Q.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/49/666404-c28f-4d29-96e4-607e17aec750/1/qY9hGlkTyWIbEYRHs8bwMiWONwE.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/49/666404-c28f-4d29-96e4-607e17aec750/1/cOetBZggimr50VAKdA1zvPKPA4Q.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  193.201.116.0/24
                IPv6:
                  2001:67c:5e8::/48

    Signature Algorithm: sha256WithRSAEncryption
         17:b4:08:16:29:cd:30:75:6e:7b:3b:ca:5f:3e:c7:5f:6c:01:
         5c:98:cb:73:4c:14:21:ef:cf:7c:13:6a:4c:d7:7f:06:a1:ae:
         db:2c:6f:da:55:11:a7:c8:35:55:1d:7d:c1:fa:90:23:c5:ef:
         f2:bf:d2:5f:45:7e:f9:27:80:7b:9f:8e:6f:7c:2c:45:67:81:
         08:57:65:6f:01:b9:68:22:be:a7:2a:3e:03:0b:d6:0b:80:0b:
         c2:f0:ea:b0:06:d1:49:5a:28:6c:94:52:a3:3e:f7:88:9c:94:
         00:5a:d3:d8:a6:96:ec:04:a8:25:7c:eb:1b:38:57:fb:98:45:
         4c:5d:a2:c8:a4:45:b6:d6:d3:04:0a:5f:4e:ab:72:3b:16:ce:
         cc:f2:dc:4d:72:69:25:5e:10:57:4c:d7:41:ff:a5:fc:03:e4:
         d6:00:c4:26:8f:af:0a:8d:f0:1f:af:e4:7c:61:9a:57:1e:90:
         dc:de:44:47:72:7f:b1:63:f4:11:cc:0f:c6:fa:f0:a0:62:63:
         0d:6f:66:63:93:1c:d6:b9:38:78:17:a8:f8:d1:ae:2b:b8:bc:
         87:0f:a8:8a:64:0b:bb:52:ff:56:4f:4e:62:96:ad:ff:9d:b3:
         48:45:a2:4c:a8:60:21:e1:6a:a4:7e:9f:b4:b1:98:ad:7a:60:
         10:6c:cb:0d
-----BEGIN CERTIFICATE-----
MIIFADCCA+igAwIBAgIEA7JSHDANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg3
MGU3YWQwNTk4MjA4YTZhZjlkMTUwMGE3NDBkNzNiY2YyOGYwMzg0MB4XDTIyMDEw
MTAyNTA0NFoXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoYTk4ZjYxMWE1OTEz
Yzk2MjFiMTE4NDQ3YjNjNmYwMzIyNThlMzcwMTCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAK0eWk0iyB8xG+DNgPRIQzSITCNAcDRJ563GuwxUnLfsf0op
Q81K+XOaVEFRgl9Vg/32EbPmsRGzrFuxmCXiRu93e5kCW5qkJ6IXEwfDAJiwrLDB
nJzzl3GUHns7LncseR8tCkM1hMLJRQGlFO+KoJ5C5z1kcDIzNLxS8UukrOn7AsBD
hRKvH1myOzPkg5k7C1MQ+oRfsd61BBRntDrrFv/PHcRYfpKPbK88xK4cO/CcjBaZ
K/Mydu++zxvV5gIsgwqrgCXNyFhdJgnKGYWG7q8/EZ2rDc0XiFvxrm6sNzGrbprA
ntDfxtrYiLa00QwCuc57I3QJc9YQ5LqBv01XenUCAwEAAaOCAhowggIWMB0GA1Ud
DgQWBBSpj2EaWRPJYhsRhEezxvAyJY43ATAfBgNVHSMEGDAWgBRw560FmCCKavnR
UAp0DXO88o8DhDAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L2NPZXRCWmdnaW1yNTBWQUtkQTF6dlBLUEE0US5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvNDkvNjY2NDA0LWMyOGYtNGQyOS05NmU0LTYwN2UxN2FlYzc1MC8x
L3FZOWhHbGtUeVdJYkVZUkhzOGJ3TWlXT053RS5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNDkv
NjY2NDA0LWMyOGYtNGQyOS05NmU0LTYwN2UxN2FlYzc1MC8xL2NPZXRCWmdnaW1y
NTBWQUtkQTF6dlBLUEE0US5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAw
BggrBgEFBQcBBwEB/wQhMB8wDAQCAAEwBgMEAMHJdDAPBAIAAjAJAwcAIAEGfAXo
MA0GCSqGSIb3DQEBCwUAA4IBAQAXtAgWKc0wdW57O8pfPsdfbAFcmMtzTBQh7898
E2pM138Goa7bLG/aVRGnyDVVHX3B+pAjxe/yv9JfRX75J4B7n45vfCxFZ4EIV2Vv
AbloIr6nKj4DC9YLgAvC8OqwBtFJWihslFKjPveInJQAWtPYppbsBKglfOsbOFf7
mEVMXaLIpEW21tMECl9Oq3I7Fs7M8txNcmklXhBXTNdB/6X8A+TWAMQmj68KjfAf
r+R8YZpXHpDc3kRHcn+xY/QRzA/G+vCgYmMNb2ZjkxzWuTh4F6j40a4ruLyHD6iK
ZAu7Uv9WT05ilq3/nbNIRaJMqGAh4Wqkfp+0sZitemAQbMsN
-----END CERTIFICATE-----