Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/62/f9d547-c86c-44da-a9c0-007e84c0f9e5/1/ZWoNgJE2wgijpcZVE2FXEnob9TE.roa
File:                     ZWoNgJE2wgijpcZVE2FXEnob9TE.roa (raw, json)
Hash identifier:          /CyCkOMSrvVJiU9CgaQ0DAKHX084njb7odOco7S2qJs=
Subject key identifier:   65:6A:0D:80:91:36:C2:08:A3:A5:C6:55:13:61:57:12:7A:1B:F5:31
Certificate issuer:       /CN=6255f073ffb04727d15cd758399c6c613faef10e
Certificate serial:       0181D889443C7E98160D42090DF3B0624893
Authority key identifier: 62:55:F0:73:FF:B0:47:27:D1:5C:D7:58:39:9C:6C:61:3F:AE:F1:0E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/YlXwc_-wRyfRXNdYOZxsYT-u8Q4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/62/f9d547-c86c-44da-a9c0-007e84c0f9e5/1/ZWoNgJE2wgijpcZVE2FXEnob9TE.roa
Signing time:             Thu 07 Jul 2022 12:01:23 +0000
ROA not before:           Thu 07 Jul 2022 12:01:23 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     211332
IP address blocks:        62.3.26.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:81:d8:89:44:3c:7e:98:16:0d:42:09:0d:f3:b0:62:48:93
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6255f073ffb04727d15cd758399c6c613faef10e
        Validity
            Not Before: Jul  7 12:01:23 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=656a0d809136c208a3a5c655136157127a1bf531
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:5f:81:56:68:7e:94:27:a4:4e:57:db:fd:95:
                    33:93:ab:61:35:b2:c2:11:6c:17:be:83:c1:33:2c:
                    5e:05:41:9f:18:28:09:fd:8b:a3:23:b8:0d:38:af:
                    11:22:d8:97:db:65:5f:af:9b:08:4f:62:e3:4a:51:
                    b2:c5:e4:35:57:7f:f2:6e:d0:06:9d:ef:a6:6f:de:
                    d0:74:6e:fd:73:16:fe:7a:4a:e0:7b:81:01:11:03:
                    19:ae:ec:36:9e:de:0a:b9:8c:c4:6f:88:5e:9b:c2:
                    b7:be:4c:b9:dd:f2:51:50:ad:b4:5b:06:50:4f:9c:
                    89:00:4a:3d:68:40:90:45:f4:ea:77:4b:64:9f:77:
                    84:3f:db:a8:ce:8d:81:84:bf:08:85:8b:75:66:b3:
                    1b:04:8f:f6:63:bc:97:48:5a:f1:89:f0:9b:bf:6f:
                    ee:86:bf:a1:e6:bc:68:98:f2:ae:c6:a3:78:be:b4:
                    46:d5:20:a4:bc:5d:f2:c5:40:b1:e2:c9:dd:e7:f7:
                    7b:2a:68:55:63:ad:05:52:9e:c1:68:a3:f1:2a:cd:
                    e2:0c:46:c4:40:44:89:8f:f8:21:1f:c4:d9:7d:be:
                    0e:c0:fa:bb:6c:a7:2c:85:49:4c:ab:88:af:a0:dc:
                    49:42:11:c2:a0:3c:bb:36:45:3b:22:00:3f:7f:99:
                    4a:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                65:6A:0D:80:91:36:C2:08:A3:A5:C6:55:13:61:57:12:7A:1B:F5:31
            X509v3 Authority Key Identifier:
                keyid:62:55:F0:73:FF:B0:47:27:D1:5C:D7:58:39:9C:6C:61:3F:AE:F1:0E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YlXwc_-wRyfRXNdYOZxsYT-u8Q4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/f9d547-c86c-44da-a9c0-007e84c0f9e5/1/ZWoNgJE2wgijpcZVE2FXEnob9TE.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/62/f9d547-c86c-44da-a9c0-007e84c0f9e5/1/YlXwc_-wRyfRXNdYOZxsYT-u8Q4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  62.3.26.0/24

    Signature Algorithm: sha256WithRSAEncryption
         c2:b6:25:a4:1a:58:f2:95:ce:68:08:b1:1e:f0:2b:53:b6:41:
         c9:5b:17:61:94:68:c9:74:6a:2a:56:dd:32:31:55:e5:83:6c:
         fc:dd:b4:a5:58:c6:05:ae:8c:3e:f1:ea:07:59:1c:82:be:68:
         d6:5e:9f:14:9c:7d:f4:a0:a8:cc:ce:a2:14:12:12:f4:b8:76:
         98:ed:31:43:19:1c:49:71:de:ba:ce:48:8a:99:23:e8:3e:39:
         d5:1a:bc:7e:88:a2:d6:57:1c:9f:40:64:88:21:98:3d:8e:7e:
         5d:7e:c3:15:1d:fe:7d:3e:37:a9:a4:ad:b0:4b:ee:3e:67:08:
         70:f7:0b:e0:65:be:0b:25:f9:d5:3f:01:2b:22:2e:07:98:58:
         8c:f4:4b:10:1d:61:d2:7e:3b:24:65:b8:f6:da:be:98:26:df:
         ac:3d:8a:df:ab:dd:35:1d:b9:8a:92:83:d6:ec:72:01:ee:f6:
         97:e9:c4:78:f4:eb:16:2a:79:e2:50:35:2b:c9:0f:bb:42:85:
         4d:71:94:30:7a:29:2c:0b:76:b9:c0:df:1b:5b:73:c4:cb:90:
         82:1f:f6:de:f2:16:06:65:e7:25:1c:ca:a6:39:fd:b4:44:e7:
         c5:35:79:44:73:a5:82:a3:b9:df:45:fd:c2:25:d8:7c:bc:41:
         bf:72:f0:20
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYHYiUQ8fpgWDUIJDfOwYkiTMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDYyNTVmMDczZmZiMDQ3MjdkMTVjZDc1ODM5OWM2YzYxM2Zh
ZWYxMGUwHhcNMjIwNzA3MTIwMTIzWhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg2NTZhMGQ4MDkxMzZjMjA4YTNhNWM2NTUxMzYxNTcxMjdhMWJmNTMxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmF+BVmh+lCekTlfb/ZUzk6thNbLC
EWwXvoPBMyxeBUGfGCgJ/YujI7gNOK8RItiX22Vfr5sIT2LjSlGyxeQ1V3/ybtAG
ne+mb97QdG79cxb+ekrge4EBEQMZruw2nt4KuYzEb4hem8K3vky53fJRUK20WwZQ
T5yJAEo9aECQRfTqd0tkn3eEP9uozo2BhL8IhYt1ZrMbBI/2Y7yXSFrxifCbv2/u
hr+h5rxomPKuxqN4vrRG1SCkvF3yxUCx4snd5/d7KmhVY60FUp7BaKPxKs3iDEbE
QESJj/ghH8TZfb4OwPq7bKcshUlMq4ivoNxJQhHCoDy7NkU7IgA/f5lKSQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFGVqDYCRNsIIo6XGVRNhVxJ6G/UxMB8GA1UdIwQY
MBaAFGJV8HP/sEcn0VzXWDmcbGE/rvEOMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWWxYd2NfLXdSeWZSWE5kWU9aeHNZVC11OFE0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Mi9mOWQ1NDctYzg2Yy00NGRhLWE5YzAt
MDA3ZTg0YzBmOWU1LzEvWldvTmdKRTJ3Z2lqcGNaVkUyRlhFbm9iOVRFLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82Mi9mOWQ1NDctYzg2Yy00NGRhLWE5YzAtMDA3ZTg0YzBmOWU1
LzEvWWxYd2NfLXdSeWZSWE5kWU9aeHNZVC11OFE0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAPgMaMA0G
CSqGSIb3DQEBCwUAA4IBAQDCtiWkGljylc5oCLEe8CtTtkHJWxdhlGjJdGoqVt0y
MVXlg2z83bSlWMYFrow+8eoHWRyCvmjWXp8UnH30oKjMzqIUEhL0uHaY7TFDGRxJ
cd66zkiKmSPoPjnVGrx+iKLWVxyfQGSIIZg9jn5dfsMVHf59PjeppK2wS+4+Zwhw
9wvgZb4LJfnVPwErIi4HmFiM9EsQHWHSfjskZbj22r6YJt+sPYrfq901HbmKkoPW
7HIB7vaX6cR49OsWKnniUDUryQ+7QoVNcZQweiksC3a5wN8bW3PEy5CCH/be8hYG
ZeclHMqmOf20ROfFNXlEc6WCo7nfRf3CJdh8vEG/cvAg
-----END CERTIFICATE-----