Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/70/405bbd-5913-4e95-8e75-fe0659176a56/1/_pNHiYY_hyT9JFz8h0yBAXYfMCY.roa
File:                     _pNHiYY_hyT9JFz8h0yBAXYfMCY.roa (raw, json)
Hash identifier:          IW0NuBZxsCY3mTAvcXrKnVXcfgzGPpX21fnbSBYIyQE=
Subject key identifier:   FE:93:47:89:86:3F:87:24:FD:24:5C:FC:87:4C:81:01:76:1F:30:26
Certificate issuer:       /CN=2ac3daa1b14850f2e61c592b2191915a5e65a478
Certificate serial:       13249466
Authority key identifier: 2A:C3:DA:A1:B1:48:50:F2:E6:1C:59:2B:21:91:91:5A:5E:65:A4:78
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/KsPaobFIUPLmHFkrIZGRWl5lpHg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/70/405bbd-5913-4e95-8e75-fe0659176a56/1/_pNHiYY_hyT9JFz8h0yBAXYfMCY.roa
Signing time:             Sat 01 Jan 2022 04:02:55 +0000
ROA not before:           Sat 01 Jan 2022 04:02:55 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     12697
IP address blocks:        46.249.96.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 321164390 (0x13249466)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2ac3daa1b14850f2e61c592b2191915a5e65a478
        Validity
            Not Before: Jan  1 04:02:55 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=fe934789863f8724fd245cfc874c8101761f3026
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:ff:4a:52:4e:db:d0:d7:4b:78:fc:92:50:e1:
                    d4:a5:f5:e3:fe:0f:99:68:30:f2:97:03:ab:67:e4:
                    0a:16:16:25:82:20:c0:fe:28:63:e2:a6:1c:f0:66:
                    cf:0e:59:7b:cb:ec:7a:c2:de:7c:77:5d:8a:68:3d:
                    3a:29:a0:57:76:dd:84:e7:c9:32:09:57:e6:18:9a:
                    71:3e:6d:e1:9b:61:f8:2c:79:8d:53:e0:61:77:86:
                    b9:20:89:d6:92:05:69:ce:48:93:3c:20:5b:99:4a:
                    d3:ff:e1:8d:61:f6:3e:d1:7f:9b:a4:d0:31:f9:ad:
                    25:a3:b5:f5:78:a3:8c:f5:63:f2:71:61:05:ec:cb:
                    4a:43:3c:67:7a:6f:60:db:01:c5:23:86:c3:a4:f2:
                    66:86:b7:86:25:de:a1:4f:33:53:a2:ae:6b:a8:8c:
                    a5:f9:5b:6d:40:8f:dc:07:d3:c3:a3:12:b6:21:e1:
                    2f:d9:1d:4c:76:1e:e5:35:8d:7c:7d:ff:7f:4d:71:
                    57:b6:ed:b5:11:6c:86:aa:b9:80:a5:7f:8a:a0:19:
                    cd:7e:fd:18:15:42:3d:f3:56:5e:16:c2:29:42:9d:
                    8d:56:71:f5:71:86:1c:9d:62:72:a4:d7:54:89:7d:
                    d3:2b:a0:c7:7e:c5:ae:41:b0:a1:94:5d:ea:64:30:
                    76:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FE:93:47:89:86:3F:87:24:FD:24:5C:FC:87:4C:81:01:76:1F:30:26
            X509v3 Authority Key Identifier:
                keyid:2A:C3:DA:A1:B1:48:50:F2:E6:1C:59:2B:21:91:91:5A:5E:65:A4:78

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KsPaobFIUPLmHFkrIZGRWl5lpHg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/405bbd-5913-4e95-8e75-fe0659176a56/1/_pNHiYY_hyT9JFz8h0yBAXYfMCY.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/70/405bbd-5913-4e95-8e75-fe0659176a56/1/KsPaobFIUPLmHFkrIZGRWl5lpHg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  46.249.96.0/24

    Signature Algorithm: sha256WithRSAEncryption
         cb:5b:1e:b3:5f:1b:35:1e:78:46:37:fb:9c:8f:71:fa:e0:f7:
         c9:d3:1c:04:27:4b:5d:1d:e8:2a:4c:1d:e5:dc:9c:7b:d0:3c:
         10:b7:d1:f3:3a:43:b5:71:30:32:4e:16:82:4f:95:f3:30:7d:
         01:43:e8:eb:6c:9e:03:6a:d5:72:9b:0f:2e:33:81:31:e7:ae:
         73:25:66:80:b9:8d:3e:4b:03:0c:f1:b0:a5:a2:ff:19:60:87:
         ee:d5:a2:4f:aa:36:2a:18:92:fd:1c:cc:c6:be:a5:0b:bd:2c:
         b6:33:f0:3d:a7:8c:01:d3:59:cd:ae:77:e2:10:e2:48:ff:97:
         91:80:4c:95:cb:61:35:fb:e9:f7:b6:6f:a9:92:16:b7:f0:7e:
         57:f9:5f:9f:52:72:0f:f6:39:02:29:f4:48:1c:30:f8:3a:d4:
         75:e0:fc:e8:12:5f:a1:ae:a0:04:36:dc:03:0a:da:1a:9a:d7:
         01:4d:ac:20:86:5c:ea:50:05:15:25:6c:29:eb:a9:91:8e:8b:
         3a:5b:13:03:7a:cf:64:f8:44:fb:c7:4f:4b:87:4e:3a:1e:0f:
         18:e0:c8:0b:9b:11:06:b1:76:36:ab:c5:b6:b6:86:58:4c:96:
         db:b5:97:cb:d3:ba:23:4b:81:36:90:42:49:67:8f:15:cd:21:
         f0:fe:c2:04
-----BEGIN CERTIFICATE-----
MIIE7zCCA9egAwIBAgIEEySUZjANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEygy
YWMzZGFhMWIxNDg1MGYyZTYxYzU5MmIyMTkxOTE1YTVlNjVhNDc4MB4XDTIyMDEw
MTA0MDI1NVoXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoZmU5MzQ3ODk4NjNm
ODcyNGZkMjQ1Y2ZjODc0YzgxMDE3NjFmMzAyNjCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAK//SlJO29DXS3j8klDh1KX14/4PmWgw8pcDq2fkChYWJYIg
wP4oY+KmHPBmzw5Ze8vsesLefHddimg9OimgV3bdhOfJMglX5hiacT5t4Zth+Cx5
jVPgYXeGuSCJ1pIFac5IkzwgW5lK0//hjWH2PtF/m6TQMfmtJaO19XijjPVj8nFh
BezLSkM8Z3pvYNsBxSOGw6TyZoa3hiXeoU8zU6Kua6iMpflbbUCP3AfTw6MStiHh
L9kdTHYe5TWNfH3/f01xV7bttRFshqq5gKV/iqAZzX79GBVCPfNWXhbCKUKdjVZx
9XGGHJ1icqTXVIl90yugx37FrkGwoZRd6mQwdjUCAwEAAaOCAgkwggIFMB0GA1Ud
DgQWBBT+k0eJhj+HJP0kXPyHTIEBdh8wJjAfBgNVHSMEGDAWgBQqw9qhsUhQ8uYc
WSshkZFaXmWkeDAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L0tzUGFvYkZJVVBMbUhGa3JJWkdSV2w1bHBIZy5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvNzAvNDA1YmJkLTU5MTMtNGU5NS04ZTc1LWZlMDY1OTE3NmE1Ni8x
L19wTkhpWVlfaHlUOUpGejhoMHlCQVhZZk1DWS5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNzAv
NDA1YmJkLTU5MTMtNGU5NS04ZTc1LWZlMDY1OTE3NmE1Ni8xL0tzUGFvYkZJVVBM
bUhGa3JJWkdSV2w1bHBIZy5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAf
BggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAC75YDANBgkqhkiG9w0BAQsFAAOC
AQEAy1ses18bNR54Rjf7nI9x+uD3ydMcBCdLXR3oKkwd5dyce9A8ELfR8zpDtXEw
Mk4Wgk+V8zB9AUPo62yeA2rVcpsPLjOBMeeucyVmgLmNPksDDPGwpaL/GWCH7tWi
T6o2KhiS/RzMxr6lC70stjPwPaeMAdNZza534hDiSP+XkYBMlcthNfvp97ZvqZIW
t/B+V/lfn1JyD/Y5Ain0SBww+DrUdeD86BJfoa6gBDbcAwraGprXAU2sIIZc6lAF
FSVsKeupkY6LOlsTA3rPZPhE+8dPS4dOOh4PGODIC5sRBrF2NqvFtraGWEyW27WX
y9O6I0uBNpBCSWePFc0h8P7CBA==
-----END CERTIFICATE-----