Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/70/405bbd-5913-4e95-8e75-fe0659176a56/1/JqbM82DQ59FDej7J6kJlsi1yuR4.roa
File:                     JqbM82DQ59FDej7J6kJlsi1yuR4.roa (raw, json)
Hash identifier:          uEIyxWYju+oENPLiVZgQWtVN7LuBXu1+KJa9mgZBVEY=
Subject key identifier:   26:A6:CC:F3:60:D0:E7:D1:43:7A:3E:C9:EA:42:65:B2:2D:72:B9:1E
Certificate issuer:       /CN=2ac3daa1b14850f2e61c592b2191915a5e65a478
Certificate serial:       13350B65
Authority key identifier: 2A:C3:DA:A1:B1:48:50:F2:E6:1C:59:2B:21:91:91:5A:5E:65:A4:78
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/KsPaobFIUPLmHFkrIZGRWl5lpHg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/70/405bbd-5913-4e95-8e75-fe0659176a56/1/JqbM82DQ59FDej7J6kJlsi1yuR4.roa
Signing time:             Sat 01 Jan 2022 04:03:02 +0000
ROA not before:           Sat 01 Jan 2022 04:03:02 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     60631
IP address blocks:        5.226.48.0/21 maxlen: 21

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 322243429 (0x13350b65)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2ac3daa1b14850f2e61c592b2191915a5e65a478
        Validity
            Not Before: Jan  1 04:03:02 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=26a6ccf360d0e7d1437a3ec9ea4265b22d72b91e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:c6:b4:7e:92:c3:a3:09:22:2f:2c:15:8f:01:
                    96:8d:c9:51:cb:f5:78:f7:3c:c2:4f:c7:28:10:be:
                    6a:3b:eb:c9:a7:5f:52:2c:56:6d:65:88:1a:03:62:
                    a3:41:f7:85:f3:06:96:a2:1f:9e:9c:8e:0b:45:a1:
                    63:ea:95:e7:97:df:a2:cd:a8:4c:5b:9e:4c:3d:8c:
                    31:b3:f3:27:b1:f8:86:9f:b4:35:0e:85:0d:3a:5d:
                    42:52:70:8a:06:4f:c2:97:75:87:89:97:a5:96:29:
                    18:a8:51:3c:f3:13:47:4e:1f:b5:87:c4:5d:78:1b:
                    cc:23:a0:47:e0:83:87:41:1f:8e:ba:c4:f8:81:73:
                    a0:b1:39:f1:fe:10:ec:5c:23:9e:90:a4:51:39:53:
                    91:78:05:19:9a:62:78:11:ef:e0:67:48:c2:d9:9b:
                    9c:ef:76:35:97:ec:67:7e:cf:c5:6c:45:80:95:85:
                    30:43:95:3f:fd:cc:1b:92:c6:a7:b6:0b:da:83:df:
                    a4:74:f8:f2:ae:51:c1:8b:12:01:03:b8:b7:51:27:
                    7e:9e:5d:f3:4c:fa:93:71:07:a5:99:a1:13:54:43:
                    e2:c0:5b:99:f8:6e:51:f6:7a:14:0c:fe:e8:ff:58:
                    ea:b3:ca:6b:03:83:ae:f9:bf:28:5a:67:3b:75:14:
                    19:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                26:A6:CC:F3:60:D0:E7:D1:43:7A:3E:C9:EA:42:65:B2:2D:72:B9:1E
            X509v3 Authority Key Identifier:
                keyid:2A:C3:DA:A1:B1:48:50:F2:E6:1C:59:2B:21:91:91:5A:5E:65:A4:78

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KsPaobFIUPLmHFkrIZGRWl5lpHg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/405bbd-5913-4e95-8e75-fe0659176a56/1/JqbM82DQ59FDej7J6kJlsi1yuR4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/70/405bbd-5913-4e95-8e75-fe0659176a56/1/KsPaobFIUPLmHFkrIZGRWl5lpHg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  5.226.48.0/21

    Signature Algorithm: sha256WithRSAEncryption
         a7:18:3c:db:a8:e0:0b:5c:83:40:d9:c3:c2:34:52:78:25:2d:
         5b:44:79:32:ca:d9:14:86:a0:f0:45:40:64:ac:79:9a:d2:5d:
         06:7b:d0:1b:ab:5c:de:61:07:99:75:3f:41:cc:d0:e4:4d:b4:
         1c:0e:56:e1:13:d1:46:02:45:f5:1a:83:c9:fd:5f:8a:c4:1c:
         51:45:65:dd:30:27:ae:2e:7f:1f:91:85:51:2e:0e:b1:5d:e7:
         98:5b:c5:95:58:25:7a:50:93:93:1f:71:26:b0:e0:dd:6b:8e:
         51:56:ce:81:d0:ca:70:59:73:3c:6e:74:2a:02:a0:35:7d:41:
         48:27:3b:de:b1:a3:59:c9:11:04:31:7e:01:c5:ea:b5:64:44:
         d5:a6:e8:d2:d1:8c:22:12:2a:ac:07:ef:88:f6:e1:cd:71:b7:
         6a:83:4f:86:e4:99:b8:c5:78:69:5f:e9:72:1e:4e:43:f3:94:
         6f:f2:6f:fc:ae:ca:26:09:e0:19:06:a5:a6:be:4c:42:48:b9:
         ae:a1:8b:48:c2:e7:82:e4:5d:ac:db:d2:f6:82:63:23:95:a5:
         29:75:a7:a1:41:1c:f5:c0:a9:3b:a9:66:83:86:a7:e8:d3:9d:
         12:c7:5a:a1:03:8e:ca:84:b0:86:92:7e:50:1f:c0:3d:a6:2b:
         57:ab:79:a3
-----BEGIN CERTIFICATE-----
MIIE7zCCA9egAwIBAgIEEzULZTANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEygy
YWMzZGFhMWIxNDg1MGYyZTYxYzU5MmIyMTkxOTE1YTVlNjVhNDc4MB4XDTIyMDEw
MTA0MDMwMloXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoMjZhNmNjZjM2MGQw
ZTdkMTQzN2EzZWM5ZWE0MjY1YjIyZDcyYjkxZTCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAKzGtH6Sw6MJIi8sFY8Blo3JUcv1ePc8wk/HKBC+ajvryadf
UixWbWWIGgNio0H3hfMGlqIfnpyOC0WhY+qV55ffos2oTFueTD2MMbPzJ7H4hp+0
NQ6FDTpdQlJwigZPwpd1h4mXpZYpGKhRPPMTR04ftYfEXXgbzCOgR+CDh0EfjrrE
+IFzoLE58f4Q7FwjnpCkUTlTkXgFGZpieBHv4GdIwtmbnO92NZfsZ37PxWxFgJWF
MEOVP/3MG5LGp7YL2oPfpHT48q5RwYsSAQO4t1Enfp5d80z6k3EHpZmhE1RD4sBb
mfhuUfZ6FAz+6P9Y6rPKawODrvm/KFpnO3UUGesCAwEAAaOCAgkwggIFMB0GA1Ud
DgQWBBQmpszzYNDn0UN6PsnqQmWyLXK5HjAfBgNVHSMEGDAWgBQqw9qhsUhQ8uYc
WSshkZFaXmWkeDAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L0tzUGFvYkZJVVBMbUhGa3JJWkdSV2w1bHBIZy5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvNzAvNDA1YmJkLTU5MTMtNGU5NS04ZTc1LWZlMDY1OTE3NmE1Ni8x
L0pxYk04MkRRNTlGRGVqN0o2a0psc2kxeXVSNC5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNzAv
NDA1YmJkLTU5MTMtNGU5NS04ZTc1LWZlMDY1OTE3NmE1Ni8xL0tzUGFvYkZJVVBM
bUhGa3JJWkdSV2w1bHBIZy5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAf
BggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAwXiMDANBgkqhkiG9w0BAQsFAAOC
AQEApxg826jgC1yDQNnDwjRSeCUtW0R5MsrZFIag8EVAZKx5mtJdBnvQG6tc3mEH
mXU/QczQ5E20HA5W4RPRRgJF9RqDyf1fisQcUUVl3TAnri5/H5GFUS4OsV3nmFvF
lVglelCTkx9xJrDg3WuOUVbOgdDKcFlzPG50KgKgNX1BSCc73rGjWckRBDF+AcXq
tWRE1abo0tGMIhIqrAfviPbhzXG3aoNPhuSZuMV4aV/pch5OQ/OUb/Jv/K7KJgng
GQalpr5MQki5rqGLSMLnguRdrNvS9oJjI5WlKXWnoUEc9cCpO6lmg4an6NOdEsda
oQOOyoSwhpJ+UB/APaYrV6t5ow==
-----END CERTIFICATE-----