Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/84/5ed525-3f37-4c70-a2ec-a4151b5e2fcf/1/IqEyBjGTyVN8ch56Fl_dVJ-RF4A.roa
File:                     IqEyBjGTyVN8ch56Fl_dVJ-RF4A.roa (raw, json)
Hash identifier:          MzdhBrCqZngAQqUviRTXq4lHJ91+JL0XXnc6NinYrAU=
Subject key identifier:   22:A1:32:06:31:93:C9:53:7C:72:1E:7A:16:5F:DD:54:9F:91:17:80
Certificate issuer:       /CN=3c177b528043a85953fc250f991d9d8020e2810d
Certificate serial:       088E1A7F
Authority key identifier: 3C:17:7B:52:80:43:A8:59:53:FC:25:0F:99:1D:9D:80:20:E2:81:0D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/PBd7UoBDqFlT_CUPmR2dgCDigQ0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/84/5ed525-3f37-4c70-a2ec-a4151b5e2fcf/1/IqEyBjGTyVN8ch56Fl_dVJ-RF4A.roa
Signing time:             Sat 01 Jan 2022 04:59:14 +0000
ROA not before:           Sat 01 Jan 2022 04:59:14 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     202572
IP address blocks:        2a0a:2303::/32 maxlen: 32

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 143530623 (0x88e1a7f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3c177b528043a85953fc250f991d9d8020e2810d
        Validity
            Not Before: Jan  1 04:59:14 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=22a132063193c9537c721e7a165fdd549f911780
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:ff:ed:6a:bc:51:b9:d0:f9:2d:f5:f4:79:50:
                    f6:fd:b7:84:2c:27:be:86:cb:29:8e:e1:cc:7c:07:
                    0f:5b:ad:9a:8f:fa:d5:60:c0:3b:a8:6b:00:19:1d:
                    82:bd:bb:4d:ec:b3:8a:42:03:2c:f0:a9:e1:24:05:
                    c9:96:ed:cd:bc:f3:ad:9c:42:7d:d3:ad:83:56:10:
                    75:80:68:95:62:e9:54:15:b5:7c:91:4e:8f:ce:e7:
                    ae:4c:cb:f4:a0:92:98:13:fe:a2:bb:76:d8:99:30:
                    64:4e:a7:1a:07:69:cd:de:0a:1c:bf:5f:cb:a4:77:
                    57:01:ac:07:32:aa:00:37:6c:d3:5b:4d:db:49:6c:
                    26:a3:de:b6:11:a7:c1:c1:5f:1c:c8:2d:f2:56:da:
                    88:83:83:2b:fc:f0:b9:7a:b7:1e:a8:dd:22:f6:43:
                    19:35:20:53:d4:a5:5e:b2:bf:d5:47:3b:e1:17:86:
                    04:96:02:84:29:ff:76:b4:3c:19:67:fb:df:a9:70:
                    d7:86:ee:42:49:27:40:64:20:fb:f7:97:c8:fd:ed:
                    d7:fd:b2:16:cf:b5:c8:00:ad:80:7c:5a:68:69:83:
                    ba:62:24:c0:61:89:95:09:55:de:26:bc:03:c3:44:
                    d4:b4:db:70:1d:7c:45:0c:1d:c0:44:7a:ec:0d:bd:
                    18:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                22:A1:32:06:31:93:C9:53:7C:72:1E:7A:16:5F:DD:54:9F:91:17:80
            X509v3 Authority Key Identifier:
                keyid:3C:17:7B:52:80:43:A8:59:53:FC:25:0F:99:1D:9D:80:20:E2:81:0D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PBd7UoBDqFlT_CUPmR2dgCDigQ0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/84/5ed525-3f37-4c70-a2ec-a4151b5e2fcf/1/IqEyBjGTyVN8ch56Fl_dVJ-RF4A.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/84/5ed525-3f37-4c70-a2ec-a4151b5e2fcf/1/PBd7UoBDqFlT_CUPmR2dgCDigQ0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a0a:2303::/32

    Signature Algorithm: sha256WithRSAEncryption
         53:43:61:80:b5:1d:f5:d2:33:0d:3f:7d:81:1e:3c:5e:36:11:
         3a:9c:77:5d:56:34:80:f7:d1:8b:77:2f:ba:cc:34:70:16:3a:
         b0:b6:24:83:85:5c:20:57:09:8f:2d:9a:94:24:46:c9:24:f5:
         0d:ab:8d:a4:a3:3b:34:8d:09:0b:8a:df:87:27:84:09:f5:a4:
         64:d2:30:08:a9:f1:53:5c:80:35:c1:2d:f2:4b:e3:09:d3:62:
         ad:14:ff:fe:4c:f8:0e:69:a3:cf:c3:da:35:08:1a:56:2e:8e:
         50:43:7f:b4:dc:fd:bc:ff:20:2e:a8:dd:ab:84:a4:f9:b2:3e:
         26:c2:9f:fa:2b:5a:6c:69:e1:c5:f0:2d:fc:5a:69:e4:bf:ae:
         88:c9:91:19:24:6a:a1:4a:2e:fd:3f:d3:0e:8b:af:1b:98:96:
         8f:9f:f8:c7:09:8a:be:8f:aa:53:37:e9:70:93:76:70:37:a7:
         97:c6:e6:79:b7:ca:2a:26:e6:c1:2e:51:bd:61:ba:4a:95:d5:
         ef:27:58:43:ad:6c:da:82:77:3a:03:46:b9:f9:10:ca:6e:a8:
         df:f2:ea:a7:bb:df:6b:0b:c0:93:d5:b5:e8:e0:4a:95:22:55:
         0d:1a:e9:9b:75:b4:5d:f5:3a:ef:f5:7c:15:e0:f4:fa:8f:69:
         da:75:b1:73
-----BEGIN CERTIFICATE-----
MIIE8DCCA9igAwIBAgIECI4afzANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEygz
YzE3N2I1MjgwNDNhODU5NTNmYzI1MGY5OTFkOWQ4MDIwZTI4MTBkMB4XDTIyMDEw
MTA0NTkxNFoXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoMjJhMTMyMDYzMTkz
Yzk1MzdjNzIxZTdhMTY1ZmRkNTQ5ZjkxMTc4MDCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBALP/7Wq8UbnQ+S319HlQ9v23hCwnvobLKY7hzHwHD1utmo/6
1WDAO6hrABkdgr27TeyzikIDLPCp4SQFyZbtzbzzrZxCfdOtg1YQdYBolWLpVBW1
fJFOj87nrkzL9KCSmBP+ort22JkwZE6nGgdpzd4KHL9fy6R3VwGsBzKqADds01tN
20lsJqPethGnwcFfHMgt8lbaiIODK/zwuXq3HqjdIvZDGTUgU9SlXrK/1Uc74ReG
BJYChCn/drQ8GWf736lw14buQkknQGQg+/eXyP3t1/2yFs+1yACtgHxaaGmDumIk
wGGJlQlV3ia8A8NE1LTbcB18RQwdwER67A29GCsCAwEAAaOCAgowggIGMB0GA1Ud
DgQWBBQioTIGMZPJU3xyHnoWX91Un5EXgDAfBgNVHSMEGDAWgBQ8F3tSgEOoWVP8
JQ+ZHZ2AIOKBDTAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L1BCZDdVb0JEcUZsVF9DVVBtUjJkZ0NEaWdRMC5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvODQvNWVkNTI1LTNmMzctNGM3MC1hMmVjLWE0MTUxYjVlMmZjZi8x
L0lxRXlCakdUeVZOOGNoNTZGbF9kVkotUkY0QS5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvODQv
NWVkNTI1LTNmMzctNGM3MC1hMmVjLWE0MTUxYjVlMmZjZi8xL1BCZDdVb0JEcUZs
VF9DVVBtUjJkZ0NEaWdRMC5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAg
BggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMFACoKIwMwDQYJKoZIhvcNAQELBQAD
ggEBAFNDYYC1HfXSMw0/fYEePF42ETqcd11WNID30Yt3L7rMNHAWOrC2JIOFXCBX
CY8tmpQkRskk9Q2rjaSjOzSNCQuK34cnhAn1pGTSMAip8VNcgDXBLfJL4wnTYq0U
//5M+A5po8/D2jUIGlYujlBDf7Tc/bz/IC6o3auEpPmyPibCn/orWmxp4cXwLfxa
aeS/rojJkRkkaqFKLv0/0w6LrxuYlo+f+McJir6PqlM36XCTdnA3p5fG5nm3yiom
5sEuUb1hukqV1e8nWEOtbNqCdzoDRrn5EMpuqN/y6qe732sLwJPVtejgSpUiVQ0a
6Zt1tF31Ou/1fBXg9PqPadp1sXM=
-----END CERTIFICATE-----