Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/4ffb82-b4e6-4e7d-9a7e-e0760ba089a2/1/gBOxSaBTb1ETQN6gQ6cmzfNAP0o.roa
File:                     gBOxSaBTb1ETQN6gQ6cmzfNAP0o.roa (raw, json)
Hash identifier:          jGootbCGxd+XQy8LgFQhRQymB93B6Sc1D3fI1rACeqQ=
Subject key identifier:   80:13:B1:49:A0:53:6F:51:13:40:DE:A0:43:A7:26:CD:F3:40:3F:4A
Certificate issuer:       /CN=0b862688087112727edd0ddbbeac36783a3b7d2a
Certificate serial:       018359B05019D2AC75CC9D8F2A3D95CA68CB
Authority key identifier: 0B:86:26:88:08:71:12:72:7E:DD:0D:DB:BE:AC:36:78:3A:3B:7D:2A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/C4YmiAhxEnJ-3Q3bvqw2eDo7fSo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5b/4ffb82-b4e6-4e7d-9a7e-e0760ba089a2/1/gBOxSaBTb1ETQN6gQ6cmzfNAP0o.roa
Signing time:             Tue 20 Sep 2022 06:57:50 +0000
ROA not before:           Tue 20 Sep 2022 06:57:50 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     206291
IP address blocks:        185.188.44.0/22 maxlen: 22
                          2a0b:b780::/29 maxlen: 29

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:83:59:b0:50:19:d2:ac:75:cc:9d:8f:2a:3d:95:ca:68:cb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0b862688087112727edd0ddbbeac36783a3b7d2a
        Validity
            Not Before: Sep 20 06:57:50 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=8013b149a0536f511340dea043a726cdf3403f4a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:d1:00:6a:71:80:15:6f:be:f0:40:27:59:5c:
                    51:52:1c:66:76:41:b1:ab:75:38:97:ad:e6:1c:51:
                    e2:ea:99:05:3b:23:bb:96:8c:c3:0d:54:83:55:fd:
                    a3:b8:ac:a7:5c:c3:6e:46:fa:32:70:06:e4:bd:1d:
                    9c:a7:74:05:29:1a:c3:e0:32:20:fa:37:87:b1:81:
                    ae:c4:0b:b5:0a:26:7e:87:49:a9:5b:7e:b2:a9:7d:
                    7d:46:89:bb:e0:d1:e0:bc:85:c2:56:e0:3c:68:ab:
                    c5:de:ae:49:3e:c1:0b:7e:ca:1b:07:8a:0d:2b:eb:
                    08:fc:91:49:06:6a:b4:5b:fb:16:9e:1a:07:24:b0:
                    df:cb:ad:69:d4:b9:e1:78:62:d7:23:e2:81:28:44:
                    7a:0a:36:c3:ef:dd:cd:31:9b:cc:99:72:9c:17:93:
                    e3:85:a8:16:db:9d:bb:b0:6c:77:85:8a:65:cc:be:
                    64:bf:5a:cf:98:da:21:91:3b:a2:ca:8b:28:0d:3c:
                    36:0a:9a:e8:d3:d3:55:b1:2e:b7:5a:30:d9:fc:0f:
                    7f:b5:06:ba:4b:4c:3f:23:6f:73:e7:dd:7d:be:24:
                    a1:38:b1:73:eb:ae:1e:ba:56:6e:f3:c9:ee:e6:fe:
                    a7:2a:56:f5:40:5e:5d:97:d4:0d:03:2b:a4:67:01:
                    40:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                80:13:B1:49:A0:53:6F:51:13:40:DE:A0:43:A7:26:CD:F3:40:3F:4A
            X509v3 Authority Key Identifier:
                keyid:0B:86:26:88:08:71:12:72:7E:DD:0D:DB:BE:AC:36:78:3A:3B:7D:2A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/C4YmiAhxEnJ-3Q3bvqw2eDo7fSo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/4ffb82-b4e6-4e7d-9a7e-e0760ba089a2/1/gBOxSaBTb1ETQN6gQ6cmzfNAP0o.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/4ffb82-b4e6-4e7d-9a7e-e0760ba089a2/1/C4YmiAhxEnJ-3Q3bvqw2eDo7fSo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.188.44.0/22
                IPv6:
                  2a0b:b780::/29

    Signature Algorithm: sha256WithRSAEncryption
         91:ac:55:8e:ed:19:56:6f:a1:94:d7:03:a0:7a:41:05:fd:6a:
         c4:bf:38:5f:59:74:22:83:d5:c4:5b:8b:86:2b:46:d7:2b:73:
         39:5f:6d:bc:f9:6f:a5:24:9c:de:37:03:b1:94:97:a7:00:dc:
         87:6c:ee:ea:0a:ec:c0:3b:37:2a:74:8f:09:8c:ce:51:1c:e1:
         86:27:9e:0c:df:a8:0d:24:9e:e3:88:24:92:01:cc:e0:d6:fe:
         56:88:84:ed:6e:66:b1:9c:f2:b1:0c:a1:65:12:6c:2f:04:b9:
         01:4d:e7:38:10:5c:fd:c7:9c:9c:30:9c:54:02:13:bf:f3:07:
         c4:97:34:19:0a:bb:fd:93:48:74:fd:02:22:a8:e0:ed:ce:29:
         28:bb:c5:34:36:6d:07:b8:08:dc:9b:24:01:f8:01:31:f1:fd:
         e6:92:a5:09:98:f6:ad:7b:0b:3e:71:09:a7:f9:dd:d7:7b:1e:
         f0:da:32:62:94:9b:39:b0:32:a7:c7:81:bd:d8:32:92:85:ee:
         eb:36:4a:e2:f1:1f:57:34:03:86:7b:81:22:43:4c:46:aa:ce:
         1f:83:8f:f4:7b:f4:d8:33:b2:9a:a0:67:dc:2f:90:f5:50:45:
         35:e8:c7:22:36:0e:d2:a7:80:7e:5b:aa:c8:a8:a1:c7:bd:7f:
         4d:1b:8f:5d
-----BEGIN CERTIFICATE-----
MIIFDDCCA/SgAwIBAgISAYNZsFAZ0qx1zJ2PKj2VymjLMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBiODYyNjg4MDg3MTEyNzI3ZWRkMGRkYmJlYWMzNjc4M2Ez
YjdkMmEwHhcNMjIwOTIwMDY1NzUwWhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg4MDEzYjE0OWEwNTM2ZjUxMTM0MGRlYTA0M2E3MjZjZGYzNDAzZjRhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0tEAanGAFW++8EAnWVxRUhxmdkGx
q3U4l63mHFHi6pkFOyO7lozDDVSDVf2juKynXMNuRvoycAbkvR2cp3QFKRrD4DIg
+jeHsYGuxAu1CiZ+h0mpW36yqX19Rom74NHgvIXCVuA8aKvF3q5JPsELfsobB4oN
K+sI/JFJBmq0W/sWnhoHJLDfy61p1LnheGLXI+KBKER6CjbD793NMZvMmXKcF5Pj
hagW2527sGx3hYplzL5kv1rPmNohkTuiyosoDTw2Cpro09NVsS63WjDZ/A9/tQa6
S0w/I29z5919viShOLFz664eulZu88nu5v6nKlb1QF5dl9QNAyukZwFAnQIDAQAB
o4ICGDCCAhQwHQYDVR0OBBYEFIATsUmgU29RE0DeoEOnJs3zQD9KMB8GA1UdIwQY
MBaAFAuGJogIcRJyft0N276sNng6O30qMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQzRZbWlBaHhFbkotM1EzYnZxdzJlRG83ZlNvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Yi80ZmZiODItYjRlNi00ZTdkLTlhN2Ut
ZTA3NjBiYTA4OWEyLzEvZ0JPeFNhQlRiMUVUUU42Z1E2Y216Zk5BUDBvLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81Yi80ZmZiODItYjRlNi00ZTdkLTlhN2UtZTA3NjBiYTA4OWEy
LzEvQzRZbWlBaHhFbkotM1EzYnZxdzJlRG83ZlNvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQCubwsMA0E
AgACMAcDBQMqC7eAMA0GCSqGSIb3DQEBCwUAA4IBAQCRrFWO7RlWb6GU1wOgekEF
/WrEvzhfWXQig9XEW4uGK0bXK3M5X228+W+lJJzeNwOxlJenANyHbO7qCuzAOzcq
dI8JjM5RHOGGJ54M36gNJJ7jiCSSAczg1v5WiITtbmaxnPKxDKFlEmwvBLkBTec4
EFz9x5ycMJxUAhO/8wfElzQZCrv9k0h0/QIiqODtzikou8U0Nm0HuAjcmyQB+AEx
8f3mkqUJmPatews+cQmn+d3Xex7w2jJilJs5sDKnx4G92DKShe7rNkri8R9XNAOG
e4EiQ0xGqs4fg4/0e/TYM7KaoGfcL5D1UEU16MciNg7Sp4B+W6rIqKHHvX9NG49d
-----END CERTIFICATE-----