Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/70/405bbd-5913-4e95-8e75-fe0659176a56/1/99_6D9QgzBc8F18grKHIkVTa0tQ.roa
File:                     99_6D9QgzBc8F18grKHIkVTa0tQ.roa (raw, json)
Hash identifier:          aYj91wRnAufMVPikIWBIo1m3ztK/szajC1pnWYnEtE8=
Subject key identifier:   F7:DF:FA:0F:D4:20:CC:17:3C:17:5F:20:AC:A1:C8:91:54:DA:D2:D4
Certificate issuer:       /CN=2ac3daa1b14850f2e61c592b2191915a5e65a478
Certificate serial:       1326F52E
Authority key identifier: 2A:C3:DA:A1:B1:48:50:F2:E6:1C:59:2B:21:91:91:5A:5E:65:A4:78
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/KsPaobFIUPLmHFkrIZGRWl5lpHg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/70/405bbd-5913-4e95-8e75-fe0659176a56/1/99_6D9QgzBc8F18grKHIkVTa0tQ.roa
Signing time:             Sat 01 Jan 2022 04:02:56 +0000
ROA not before:           Sat 01 Jan 2022 04:02:56 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     35251
IP address blocks:        91.132.58.0/23 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 321320238 (0x1326f52e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2ac3daa1b14850f2e61c592b2191915a5e65a478
        Validity
            Not Before: Jan  1 04:02:56 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=f7dffa0fd420cc173c175f20aca1c89154dad2d4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:cf:d2:c3:3b:2a:0f:f4:b1:93:6a:ea:50:4a:
                    11:b4:4f:e3:15:ca:5e:34:41:af:b2:70:b5:6e:1e:
                    0b:b8:9f:20:38:08:4b:93:28:dc:ed:29:89:12:b5:
                    44:af:84:4c:a3:69:13:da:97:e5:7d:38:00:d1:85:
                    04:f6:55:a4:c5:fd:89:20:3e:2c:6b:05:95:87:29:
                    48:0f:56:df:6f:9b:d5:eb:0d:90:ee:a1:b2:36:46:
                    14:a9:7d:d8:78:11:84:be:36:71:8e:70:98:8a:60:
                    c1:e3:6f:50:39:b6:05:8d:81:e9:9d:83:ea:5b:a3:
                    a6:d9:e4:9b:ac:7b:48:40:ec:ab:f8:08:93:b3:96:
                    4b:d9:de:54:c3:af:11:64:fb:76:07:0b:4f:1a:5c:
                    a9:8a:3c:72:64:40:f8:c8:68:66:d7:1d:f0:d4:74:
                    8a:7e:54:4c:72:bf:a5:aa:4b:4a:bf:cf:88:3d:e1:
                    9e:75:65:61:62:2f:0e:02:88:f8:6c:e5:90:a9:ca:
                    30:8e:3b:7c:59:82:ed:98:37:f1:72:50:4c:93:6d:
                    99:3e:f5:4e:38:30:1a:4e:21:7e:46:be:f4:45:96:
                    51:50:9d:3d:b4:73:f4:09:21:b6:46:c0:69:d3:ed:
                    17:f9:cf:ac:01:7d:b3:a1:8c:03:de:6a:a5:4c:93:
                    a3:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F7:DF:FA:0F:D4:20:CC:17:3C:17:5F:20:AC:A1:C8:91:54:DA:D2:D4
            X509v3 Authority Key Identifier:
                keyid:2A:C3:DA:A1:B1:48:50:F2:E6:1C:59:2B:21:91:91:5A:5E:65:A4:78

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KsPaobFIUPLmHFkrIZGRWl5lpHg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/405bbd-5913-4e95-8e75-fe0659176a56/1/99_6D9QgzBc8F18grKHIkVTa0tQ.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/70/405bbd-5913-4e95-8e75-fe0659176a56/1/KsPaobFIUPLmHFkrIZGRWl5lpHg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  91.132.58.0/23

    Signature Algorithm: sha256WithRSAEncryption
         4c:58:02:c8:9d:1c:d8:db:74:cb:a9:d1:3e:65:6d:db:68:19:
         3e:e6:e0:e0:1a:19:e0:67:c5:63:51:65:11:ab:16:d4:c0:ca:
         3e:bb:8f:a9:9c:2e:25:da:11:b4:80:a9:5e:81:3d:65:f4:f8:
         85:4b:0f:86:57:f8:d6:79:eb:65:9b:59:18:c2:1c:19:9a:fc:
         28:9e:75:40:f3:40:fd:1c:ce:73:43:98:4e:2c:a8:8e:99:53:
         14:70:e2:ab:d7:28:da:27:99:ba:db:f9:9b:6b:f3:87:85:1e:
         92:ab:a9:55:79:41:98:15:ca:65:15:ea:44:37:12:fa:6c:db:
         6b:8e:ae:f9:8c:a2:c6:b5:6a:5f:0c:e8:39:05:eb:2b:cf:c6:
         59:81:b7:b6:17:d2:57:f4:0c:d7:f0:b4:da:a6:9c:c8:49:0c:
         f8:da:1c:82:f4:9d:52:d3:8a:45:ab:22:30:88:ad:81:1b:a1:
         ed:25:b7:94:40:4c:3c:17:94:3c:87:27:40:28:ec:2d:68:f3:
         23:a9:55:99:74:28:be:9f:f6:07:54:bb:1f:1e:f1:da:b7:15:
         dd:9d:36:bd:5a:39:58:8f:7d:d5:61:ae:b8:d2:8b:da:2e:2e:
         a3:97:e4:da:10:4b:cc:a5:2c:13:04:cd:37:b0:4a:2b:5b:93:
         f8:bf:c1:35
-----BEGIN CERTIFICATE-----
MIIE7zCCA9egAwIBAgIEEyb1LjANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEygy
YWMzZGFhMWIxNDg1MGYyZTYxYzU5MmIyMTkxOTE1YTVlNjVhNDc4MB4XDTIyMDEw
MTA0MDI1NloXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoZjdkZmZhMGZkNDIw
Y2MxNzNjMTc1ZjIwYWNhMWM4OTE1NGRhZDJkNDCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBALrP0sM7Kg/0sZNq6lBKEbRP4xXKXjRBr7JwtW4eC7ifIDgI
S5Mo3O0piRK1RK+ETKNpE9qX5X04ANGFBPZVpMX9iSA+LGsFlYcpSA9W32+b1esN
kO6hsjZGFKl92HgRhL42cY5wmIpgweNvUDm2BY2B6Z2D6lujptnkm6x7SEDsq/gI
k7OWS9neVMOvEWT7dgcLTxpcqYo8cmRA+MhoZtcd8NR0in5UTHK/papLSr/PiD3h
nnVlYWIvDgKI+GzlkKnKMI47fFmC7Zg38XJQTJNtmT71TjgwGk4hfka+9EWWUVCd
PbRz9AkhtkbAadPtF/nPrAF9s6GMA95qpUyTo5MCAwEAAaOCAgkwggIFMB0GA1Ud
DgQWBBT33/oP1CDMFzwXXyCsociRVNrS1DAfBgNVHSMEGDAWgBQqw9qhsUhQ8uYc
WSshkZFaXmWkeDAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L0tzUGFvYkZJVVBMbUhGa3JJWkdSV2w1bHBIZy5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvNzAvNDA1YmJkLTU5MTMtNGU5NS04ZTc1LWZlMDY1OTE3NmE1Ni8x
Lzk5XzZEOVFnekJjOEYxOGdyS0hJa1ZUYTB0US5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNzAv
NDA1YmJkLTU5MTMtNGU5NS04ZTc1LWZlMDY1OTE3NmE1Ni8xL0tzUGFvYkZJVVBM
bUhGa3JJWkdSV2w1bHBIZy5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAf
BggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAVuEOjANBgkqhkiG9w0BAQsFAAOC
AQEATFgCyJ0c2Nt0y6nRPmVt22gZPubg4BoZ4GfFY1FlEasW1MDKPruPqZwuJdoR
tICpXoE9ZfT4hUsPhlf41nnrZZtZGMIcGZr8KJ51QPNA/RzOc0OYTiyojplTFHDi
q9co2ieZutv5m2vzh4UekqupVXlBmBXKZRXqRDcS+mzba46u+YyixrVqXwzoOQXr
K8/GWYG3thfSV/QM1/C02qacyEkM+NocgvSdUtOKRasiMIitgRuh7SW3lEBMPBeU
PIcnQCjsLWjzI6lVmXQovp/2B1S7Hx7x2rcV3Z02vVo5WI991WGuuNKL2i4uo5fk
2hBLzKUsEwTNN7BKK1uT+L/BNQ==
-----END CERTIFICATE-----