Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4b/a78979-dd24-4be7-8194-1fc19ea73a2a/1/OVP7H0tAADOJpS6_BBMMr84jb88.roa
File:                     OVP7H0tAADOJpS6_BBMMr84jb88.roa (raw, json)
Hash identifier:          3IPiXQa2seLSSOHMVXwCk7WxJAuWq2pJSInQW/MJUt8=
Subject key identifier:   39:53:FB:1F:4B:40:00:33:89:A5:2E:BF:04:13:0C:AF:CE:23:6F:CF
Certificate issuer:       /CN=93e8f4ed5dd06301c423988e786dabf51c5f5674
Certificate serial:       01844438973BDD0ADF7BD0752B90CD4B4574
Authority key identifier: 93:E8:F4:ED:5D:D0:63:01:C4:23:98:8E:78:6D:AB:F5:1C:5F:56:74
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/k-j07V3QYwHEI5iOeG2r9RxfVnQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4b/a78979-dd24-4be7-8194-1fc19ea73a2a/1/OVP7H0tAADOJpS6_BBMMr84jb88.roa
Signing time:             Fri 04 Nov 2022 19:57:50 +0000
ROA not before:           Fri 04 Nov 2022 19:57:50 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     398465
IP address blocks:        5.134.84.0/22 maxlen: 24
                          5.134.84.0/23 maxlen: 23
                          5.134.86.0/23 maxlen: 23

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:84:44:38:97:3b:dd:0a:df:7b:d0:75:2b:90:cd:4b:45:74
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=93e8f4ed5dd06301c423988e786dabf51c5f5674
        Validity
            Not Before: Nov  4 19:57:50 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=3953fb1f4b40003389a52ebf04130cafce236fcf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:9e:5b:a1:ae:2d:05:6a:30:ad:76:ad:ac:8c:
                    96:b2:20:85:d3:30:32:59:36:1e:7a:62:05:eb:2b:
                    e3:79:2e:42:fc:96:bf:a3:a0:dd:e8:ff:a6:cf:e2:
                    2f:eb:e7:99:aa:63:e5:f8:30:ae:1f:de:85:54:1d:
                    41:5f:07:e2:93:57:0e:af:36:b3:40:a7:77:d2:86:
                    92:23:ae:ff:fe:57:7e:c7:8b:c6:55:6d:3f:20:31:
                    ef:3b:e4:8b:87:49:bc:e5:84:82:21:80:53:a4:bf:
                    a8:f7:2d:ef:cc:91:0b:99:35:17:c0:01:18:0d:23:
                    c5:06:13:78:ed:5a:71:b4:38:04:1f:3a:ea:a9:98:
                    76:3e:4a:c9:81:af:b1:ad:00:a2:aa:51:df:64:3d:
                    09:d1:03:12:66:4a:4a:c4:d9:a8:b2:6a:6b:3d:06:
                    91:89:fd:9f:ba:68:70:af:68:b4:e2:db:a3:17:75:
                    1c:6a:2c:f8:08:0c:3c:ab:08:92:e8:fa:c3:cc:05:
                    12:31:a6:a6:7e:dc:4d:c0:e7:fd:71:1f:1f:a8:28:
                    c0:61:68:b1:72:a7:da:18:fd:25:03:11:0e:9a:25:
                    4f:83:f8:9b:b2:88:4c:69:13:6d:62:2e:b3:28:14:
                    66:fc:65:88:2a:87:07:83:89:df:4b:23:67:f6:6d:
                    9e:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                39:53:FB:1F:4B:40:00:33:89:A5:2E:BF:04:13:0C:AF:CE:23:6F:CF
            X509v3 Authority Key Identifier:
                keyid:93:E8:F4:ED:5D:D0:63:01:C4:23:98:8E:78:6D:AB:F5:1C:5F:56:74

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/k-j07V3QYwHEI5iOeG2r9RxfVnQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/a78979-dd24-4be7-8194-1fc19ea73a2a/1/OVP7H0tAADOJpS6_BBMMr84jb88.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/a78979-dd24-4be7-8194-1fc19ea73a2a/1/k-j07V3QYwHEI5iOeG2r9RxfVnQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  5.134.84.0/22

    Signature Algorithm: sha256WithRSAEncryption
         11:ae:c4:5d:9e:9b:5d:e6:f2:6b:64:39:f2:1f:4a:73:4a:81:
         d6:f8:b4:b1:2d:e2:b8:f2:a2:77:bc:88:5a:09:6f:d1:51:d3:
         fe:77:a7:60:f3:41:da:ed:87:fe:ed:b2:31:9c:06:cf:e3:fc:
         34:c2:60:86:84:97:f6:34:dd:61:bf:1b:4e:e0:9e:89:09:ab:
         fc:49:70:67:31:ff:7e:c5:04:8d:32:f7:37:a5:12:d4:a3:34:
         ae:2b:45:af:cc:05:09:a3:b9:2d:04:98:02:a5:52:16:b4:e9:
         fd:09:9b:17:6c:99:2a:02:d6:38:50:fc:51:2b:60:09:02:86:
         d0:f6:e4:8a:ca:c1:22:a4:3f:dc:2e:38:5d:19:bc:4f:a2:9a:
         1a:25:be:13:05:59:20:00:76:cf:b3:73:3f:e2:90:7f:d8:19:
         e9:b3:0b:88:a3:f1:b4:db:ab:50:07:a8:e7:27:7e:5b:82:9c:
         1c:58:5c:af:b6:49:c0:ea:8f:b0:7d:f2:3b:ac:e4:d1:1d:d1:
         47:18:93:a3:8f:f1:7a:fa:1f:57:10:18:fe:e8:b5:47:d6:0b:
         fd:ae:8d:e7:2e:db:97:2f:4f:d1:f9:1b:1d:c0:f0:a5:1c:bc:
         f5:78:3f:96:f6:11:cb:23:f3:8b:6e:be:c0:1b:56:5d:e3:3a:
         7b:da:a5:9f
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYREOJc73Qrfe9B1K5DNS0V0MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDkzZThmNGVkNWRkMDYzMDFjNDIzOTg4ZTc4NmRhYmY1MWM1
ZjU2NzQwHhcNMjIxMTA0MTk1NzUwWhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygzOTUzZmIxZjRiNDAwMDMzODlhNTJlYmYwNDEzMGNhZmNlMjM2ZmNmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjp5boa4tBWowrXatrIyWsiCF0zAy
WTYeemIF6yvjeS5C/Ja/o6Dd6P+mz+Iv6+eZqmPl+DCuH96FVB1BXwfik1cOrzaz
QKd30oaSI67//ld+x4vGVW0/IDHvO+SLh0m85YSCIYBTpL+o9y3vzJELmTUXwAEY
DSPFBhN47VpxtDgEHzrqqZh2PkrJga+xrQCiqlHfZD0J0QMSZkpKxNmosmprPQaR
if2fumhwr2i04tujF3Ucaiz4CAw8qwiS6PrDzAUSMaamftxNwOf9cR8fqCjAYWix
cqfaGP0lAxEOmiVPg/ibsohMaRNtYi6zKBRm/GWIKocHg4nfSyNn9m2e2wIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFDlT+x9LQAAziaUuvwQTDK/OI2/PMB8GA1UdIwQY
MBaAFJPo9O1d0GMBxCOYjnhtq/UcX1Z0MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvay1qMDdWM1FZd0hFSTVpT2VHMnI5UnhmVm5RLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Yi9hNzg5NzktZGQyNC00YmU3LTgxOTQt
MWZjMTllYTczYTJhLzEvT1ZQN0gwdEFBRE9KcFM2X0JCTU1yODRqYjg4LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80Yi9hNzg5NzktZGQyNC00YmU3LTgxOTQtMWZjMTllYTczYTJh
LzEvay1qMDdWM1FZd0hFSTVpT2VHMnI5UnhmVm5RLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCBYZUMA0G
CSqGSIb3DQEBCwUAA4IBAQARrsRdnptd5vJrZDnyH0pzSoHW+LSxLeK48qJ3vIha
CW/RUdP+d6dg80Ha7Yf+7bIxnAbP4/w0wmCGhJf2NN1hvxtO4J6JCav8SXBnMf9+
xQSNMvc3pRLUozSuK0WvzAUJo7ktBJgCpVIWtOn9CZsXbJkqAtY4UPxRK2AJAobQ
9uSKysEipD/cLjhdGbxPopoaJb4TBVkgAHbPs3M/4pB/2BnpswuIo/G026tQB6jn
J35bgpwcWFyvtknA6o+wffI7rOTRHdFHGJOjj/F6+h9XEBj+6LVH1gv9ro3nLtuX
L0/R+RsdwPClHLz1eD+W9hHLI/OLbr7AG1Zd4zp72qWf
-----END CERTIFICATE-----