Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8c/8e9855-5989-486e-9436-50a7c92591d0/1/KihKgR5hQVL_DAfvdcPhW-zaZ5I.roa
File:                     KihKgR5hQVL_DAfvdcPhW-zaZ5I.roa (raw, json)
Hash identifier:          ePJ6IoC1ItktKmGh9TPYswacTvlnfXAo7DqgCDpaMEw=
Subject key identifier:   2A:28:4A:81:1E:61:41:52:FF:0C:07:EF:75:C3:E1:5B:EC:DA:67:92
Certificate issuer:       /CN=20c8d5c373a6bf3bab229394360b86d0096aecbd
Certificate serial:       02885875
Authority key identifier: 20:C8:D5:C3:73:A6:BF:3B:AB:22:93:94:36:0B:86:D0:09:6A:EC:BD
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/IMjVw3OmvzurIpOUNguG0Alq7L0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/8c/8e9855-5989-486e-9436-50a7c92591d0/1/KihKgR5hQVL_DAfvdcPhW-zaZ5I.roa
Signing time:             Sat 01 Jan 2022 05:57:59 +0000
ROA not before:           Sat 01 Jan 2022 05:57:59 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     211742
IP address blocks:        2001:67c:293c::/48 maxlen: 48

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 42489973 (0x2885875)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=20c8d5c373a6bf3bab229394360b86d0096aecbd
        Validity
            Not Before: Jan  1 05:57:59 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=2a284a811e614152ff0c07ef75c3e15becda6792
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:92:92:1a:08:d2:4e:2e:92:c4:97:1f:64:fb:
                    97:22:d5:60:dc:7a:28:f7:f7:d9:c2:a8:8e:45:b5:
                    c1:bf:8d:40:ae:9d:b4:d3:7b:7d:57:be:03:5f:24:
                    21:eb:67:9b:ad:3b:46:5a:de:e7:2f:ea:23:5e:88:
                    a2:44:96:f5:53:43:13:55:af:20:38:63:b0:e8:2f:
                    86:8b:34:31:13:a4:95:ec:ff:e6:4d:f5:d5:6b:a4:
                    5f:44:fd:72:8b:47:f5:93:df:fd:b3:43:3a:c2:8c:
                    ea:70:87:6e:6e:8a:ab:3e:e0:f6:bf:fa:d8:9e:2a:
                    9d:6b:fc:c0:04:e2:a6:0f:65:67:16:83:94:26:47:
                    3f:11:c9:f1:c5:60:1d:f2:60:be:00:1b:b1:8d:fd:
                    ee:6d:96:44:28:12:28:ce:54:08:d1:1e:d6:93:d6:
                    6a:f6:af:69:72:f1:f3:ee:7b:a6:b9:12:20:be:d3:
                    86:d3:ae:24:67:1c:58:9f:4d:f6:d9:92:2d:d4:a4:
                    7b:d1:a0:e0:ab:77:06:ec:14:a8:57:36:d1:3e:16:
                    14:f6:2d:c3:2b:9c:1b:10:81:e6:77:a1:9b:c3:b3:
                    09:d7:3d:d6:1b:00:49:f3:f1:30:4d:52:79:58:7f:
                    5e:f5:d8:a4:44:45:62:96:e7:76:eb:cc:3f:41:b2:
                    35:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2A:28:4A:81:1E:61:41:52:FF:0C:07:EF:75:C3:E1:5B:EC:DA:67:92
            X509v3 Authority Key Identifier:
                keyid:20:C8:D5:C3:73:A6:BF:3B:AB:22:93:94:36:0B:86:D0:09:6A:EC:BD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IMjVw3OmvzurIpOUNguG0Alq7L0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/8e9855-5989-486e-9436-50a7c92591d0/1/KihKgR5hQVL_DAfvdcPhW-zaZ5I.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/8e9855-5989-486e-9436-50a7c92591d0/1/IMjVw3OmvzurIpOUNguG0Alq7L0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:67c:293c::/48

    Signature Algorithm: sha256WithRSAEncryption
         62:c7:de:b4:f5:bf:18:3e:0a:8d:8d:0d:ba:48:ce:14:ec:50:
         8b:15:e4:34:29:08:1a:1c:e6:3e:f6:fe:dd:e2:91:c5:3b:14:
         a4:95:f6:74:e5:0a:d6:5d:93:01:a1:a7:17:e0:89:5f:e4:55:
         6f:2b:93:b2:7d:c0:e8:7e:0e:b4:71:89:fd:bb:f5:16:c6:a5:
         19:3f:2e:92:9d:ab:e7:54:36:00:1b:cc:ea:2a:9c:46:26:d2:
         04:7c:69:e2:e9:bb:62:98:25:69:87:a6:e0:92:41:38:e2:58:
         c2:7e:04:a0:62:c7:dc:7d:53:e0:4a:e3:56:ce:2b:d5:22:21:
         0a:e0:9c:ae:75:5c:44:8b:6c:40:10:22:33:16:e7:79:c2:7f:
         ac:2a:37:12:8e:a2:12:08:59:30:b5:2e:48:90:9b:79:2d:97:
         bd:2a:83:29:ec:d0:fa:d9:27:89:1d:b9:5e:2d:ac:4a:29:fd:
         7f:59:f1:f4:a5:54:d3:63:2f:83:c7:5f:dd:22:14:ef:95:53:
         72:42:3f:79:85:a5:64:a4:e0:20:b7:6f:59:6f:f7:fb:52:7a:
         a6:be:b3:b6:d7:7b:04:69:9f:26:e7:59:a7:f3:10:b9:43:55:
         28:c9:16:8f:45:99:dc:e1:64:48:70:42:32:75:df:7b:b5:fc:
         6a:12:a2:58
-----BEGIN CERTIFICATE-----
MIIE8jCCA9qgAwIBAgIEAohYdTANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEygy
MGM4ZDVjMzczYTZiZjNiYWIyMjkzOTQzNjBiODZkMDA5NmFlY2JkMB4XDTIyMDEw
MTA1NTc1OVoXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoMmEyODRhODExZTYx
NDE1MmZmMGMwN2VmNzVjM2UxNWJlY2RhNjc5MjCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBANKSkhoI0k4uksSXH2T7lyLVYNx6KPf32cKojkW1wb+NQK6d
tNN7fVe+A18kIetnm607Rlre5y/qI16IokSW9VNDE1WvIDhjsOgvhos0MROklez/
5k311WukX0T9cotH9ZPf/bNDOsKM6nCHbm6Kqz7g9r/62J4qnWv8wATipg9lZxaD
lCZHPxHJ8cVgHfJgvgAbsY397m2WRCgSKM5UCNEe1pPWavavaXLx8+57prkSIL7T
htOuJGccWJ9N9tmSLdSke9Gg4Kt3BuwUqFc20T4WFPYtwyucGxCB5nehm8OzCdc9
1hsASfPxME1SeVh/XvXYpERFYpbnduvMP0GyNXsCAwEAAaOCAgwwggIIMB0GA1Ud
DgQWBBQqKEqBHmFBUv8MB+91w+Fb7NpnkjAfBgNVHSMEGDAWgBQgyNXDc6a/O6si
k5Q2C4bQCWrsvTAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L0lNalZ3M09tdnp1cklwT1VOZ3VHMEFscTdMMC5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvOGMvOGU5ODU1LTU5ODktNDg2ZS05NDM2LTUwYTdjOTI1OTFkMC8x
L0tpaEtnUjVoUVZMX0RBZnZkY1BoVy16YVo1SS5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvOGMv
OGU5ODU1LTU5ODktNDg2ZS05NDM2LTUwYTdjOTI1OTFkMC8xL0lNalZ3M09tdnp1
cklwT1VOZ3VHMEFscTdMMC5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAi
BggrBgEFBQcBBwEB/wQTMBEwDwQCAAIwCQMHACABBnwpPDANBgkqhkiG9w0BAQsF
AAOCAQEAYsfetPW/GD4KjY0NukjOFOxQixXkNCkIGhzmPvb+3eKRxTsUpJX2dOUK
1l2TAaGnF+CJX+RVbyuTsn3A6H4OtHGJ/bv1FsalGT8ukp2r51Q2ABvM6iqcRibS
BHxp4um7YpglaYem4JJBOOJYwn4EoGLH3H1T4ErjVs4r1SIhCuCcrnVcRItsQBAi
MxbnecJ/rCo3Eo6iEghZMLUuSJCbeS2XvSqDKezQ+tkniR25Xi2sSin9f1nx9KVU
02Mvg8df3SIU75VTckI/eYWlZKTgILdvWW/3+1J6pr6zttd7BGmfJudZp/MQuUNV
KMkWj0WZ3OFkSHBCMnXfe7X8ahKiWA==
-----END CERTIFICATE-----