Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a6/93d297-8038-4b9a-8f7b-b36491ee6ee4/1/1-jg9U1412kRkXx9Bt7q9jCmZ5eg.roa
File:                     1-jg9U1412kRkXx9Bt7q9jCmZ5eg.roa (raw, json)
Hash identifier:          Jw1EKO+m1FzWs7MIMW79knccFjooH+8O49fDxMqXdRE=
Subject key identifier:   FA:38:3D:53:5E:35:DA:44:64:5F:1F:41:B7:BA:BD:8C:29:99:E5:E8
Certificate issuer:       /CN=134efe7c541f5406dc7e0ff268d05582baefc996
Certificate serial:       22E72E
Authority key identifier: 13:4E:FE:7C:54:1F:54:06:DC:7E:0F:F2:68:D0:55:82:BA:EF:C9:96
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/E07-fFQfVAbcfg_yaNBVgrrvyZY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a6/93d297-8038-4b9a-8f7b-b36491ee6ee4/1/1-jg9U1412kRkXx9Bt7q9jCmZ5eg.roa
Signing time:             Sat 01 Jan 2022 01:50:21 +0000
ROA not before:           Sat 01 Jan 2022 01:50:21 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     197816
IP address blocks:        94.140.4.0/24 maxlen: 24
                          2a10:13c0:ef1c::/48 maxlen: 48

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2287406 (0x22e72e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=134efe7c541f5406dc7e0ff268d05582baefc996
        Validity
            Not Before: Jan  1 01:50:21 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=fa383d535e35da44645f1f41b7babd8c2999e5e8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:fe:4c:d2:f4:2b:1c:01:9e:a0:0b:fb:c3:9e:
                    66:83:ef:1d:64:9d:40:0f:f7:d4:33:c6:ab:70:db:
                    4a:66:eb:d6:b8:05:c5:8d:7a:48:eb:c1:61:be:b4:
                    94:52:c0:eb:1a:2c:f9:34:09:e5:b0:1f:4e:55:56:
                    9c:f1:28:46:33:d3:ba:c6:3f:a7:3e:fa:3b:10:0c:
                    79:62:ad:fc:bd:d5:40:7a:6e:ac:c5:c2:be:9c:e8:
                    06:9a:39:ee:5c:6a:c1:8b:92:b8:72:b9:3b:31:71:
                    84:28:d4:b1:7e:f7:ba:b9:d3:d5:a4:1a:69:2a:51:
                    2d:42:ee:89:6c:72:fe:80:b8:c3:ad:57:71:84:a7:
                    82:b1:fc:5e:69:4f:7f:ea:a6:3b:73:48:34:d5:ed:
                    93:9e:d0:4d:e1:ab:1d:7a:88:49:6a:96:1f:b7:41:
                    86:05:f4:3a:b4:39:d6:78:da:7f:b9:0c:9f:0c:f3:
                    1b:ab:9e:f9:08:4b:c5:f3:08:72:93:05:09:d2:d1:
                    46:74:31:2c:e8:5b:5d:1f:29:f2:72:9e:7c:a7:7f:
                    09:ed:db:c9:44:6a:eb:a8:3d:e1:22:4f:e4:d2:be:
                    4c:f5:16:45:1e:84:e8:3d:f7:90:55:0d:f5:e2:35:
                    ee:8a:02:c6:83:72:e9:68:fc:a9:97:15:e4:09:16:
                    13:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FA:38:3D:53:5E:35:DA:44:64:5F:1F:41:B7:BA:BD:8C:29:99:E5:E8
            X509v3 Authority Key Identifier:
                keyid:13:4E:FE:7C:54:1F:54:06:DC:7E:0F:F2:68:D0:55:82:BA:EF:C9:96

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/E07-fFQfVAbcfg_yaNBVgrrvyZY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/93d297-8038-4b9a-8f7b-b36491ee6ee4/1/1-jg9U1412kRkXx9Bt7q9jCmZ5eg.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/93d297-8038-4b9a-8f7b-b36491ee6ee4/1/E07-fFQfVAbcfg_yaNBVgrrvyZY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  94.140.4.0/24
                IPv6:
                  2a10:13c0:ef1c::/48

    Signature Algorithm: sha256WithRSAEncryption
         97:5b:56:f4:ee:f5:04:e9:38:48:8b:a8:ac:c9:11:8e:95:3e:
         80:cc:12:56:3b:ca:3e:82:38:ba:ac:ea:12:89:f8:90:0a:f6:
         1a:f8:8d:2c:b3:72:01:c7:2d:a2:a8:6d:17:c0:76:61:ea:a7:
         11:3f:74:25:1a:22:c5:0d:a4:dd:c4:4d:83:78:98:e5:63:8d:
         a6:43:94:e8:6a:93:49:70:61:b5:4e:55:60:58:34:b1:e8:84:
         93:15:9b:3b:72:dd:8b:da:47:40:5d:fb:dd:c2:49:b9:55:26:
         63:72:83:f3:20:50:31:e4:ce:7c:de:5a:87:72:a8:25:89:ed:
         a1:5e:28:34:a7:d9:eb:02:63:d1:ea:f0:f7:8d:df:e0:ba:6e:
         28:88:0a:7f:c9:1c:d6:c9:d1:df:b3:3f:f5:24:7c:34:52:91:
         b7:39:a7:de:53:f1:ea:3c:25:fa:37:75:eb:3c:43:7e:0b:ed:
         2e:83:92:ea:a7:f1:b5:e2:be:3d:1d:46:2d:85:af:75:50:07:
         ab:f6:f5:5e:f4:42:b7:b7:89:0b:9d:98:4f:60:09:5c:a9:69:
         b2:f0:cb:fb:d1:07:45:f4:af:27:ea:fc:7c:53:2e:9e:20:98:
         d7:3c:74:56:c9:c0:69:39:d1:cc:82:7f:c6:86:f7:51:b0:da:
         32:47:18:04
-----BEGIN CERTIFICATE-----
MIIFADCCA+igAwIBAgIDIucuMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKDEz
NGVmZTdjNTQxZjU0MDZkYzdlMGZmMjY4ZDA1NTgyYmFlZmM5OTYwHhcNMjIwMTAx
MDE1MDIxWhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQDEyhmYTM4M2Q1MzVlMzVk
YTQ0NjQ1ZjFmNDFiN2JhYmQ4YzI5OTllNWU4MIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEAqv5M0vQrHAGeoAv7w55mg+8dZJ1AD/fUM8arcNtKZuvWuAXF
jXpI68FhvrSUUsDrGiz5NAnlsB9OVVac8ShGM9O6xj+nPvo7EAx5Yq38vdVAem6s
xcK+nOgGmjnuXGrBi5K4crk7MXGEKNSxfve6udPVpBppKlEtQu6JbHL+gLjDrVdx
hKeCsfxeaU9/6qY7c0g01e2TntBN4asdeohJapYft0GGBfQ6tDnWeNp/uQyfDPMb
q575CEvF8whykwUJ0tFGdDEs6FtdHynycp58p38J7dvJRGrrqD3hIk/k0r5M9RZF
HoToPfeQVQ314jXuigLGg3LpaPyplxXkCRYTfQIDAQABo4ICGzCCAhcwHQYDVR0O
BBYEFPo4PVNeNdpEZF8fQbe6vYwpmeXoMB8GA1UdIwQYMBaAFBNO/nxUH1QG3H4P
8mjQVYK678mWMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEFBQcBAQRYMFYwVAYIKwYB
BQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQv
RTA3LWZGUWZWQWJjZmdfeWFOQlZncnJ2eVpZLmNlcjCBjgYIKwYBBQUHAQsEgYEw
fzB9BggrBgEFBQcwC4ZxcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkv
REVGQVVMVC9hNi85M2QyOTctODAzOC00YjlhLThmN2ItYjM2NDkxZWU2ZWU0LzEv
MS1qZzlVMTQxMmtSa1h4OUJ0N3E5akNtWjVlZy5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYTYv
OTNkMjk3LTgwMzgtNGI5YS04ZjdiLWIzNjQ5MWVlNmVlNC8xL0UwNy1mRlFmVkFi
Y2ZnX3lhTkJWZ3JydnlaWS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAw
BggrBgEFBQcBBwEB/wQhMB8wDAQCAAEwBgMEAF6MBDAPBAIAAjAJAwcAKhATwO8c
MA0GCSqGSIb3DQEBCwUAA4IBAQCXW1b07vUE6ThIi6isyRGOlT6AzBJWO8o+gji6
rOoSifiQCvYa+I0ss3IBxy2iqG0XwHZh6qcRP3QlGiLFDaTdxE2DeJjlY42mQ5To
apNJcGG1TlVgWDSx6ISTFZs7ct2L2kdAXfvdwkm5VSZjcoPzIFAx5M583lqHcqgl
ie2hXig0p9nrAmPR6vD3jd/gum4oiAp/yRzWydHfsz/1JHw0UpG3OafeU/HqPCX6
N3XrPEN+C+0ug5Lqp/G14r49HUYtha91UAer9vVe9EK3t4kLnZhPYAlcqWmy8Mv7
0QdF9K8n6vx8Uy6eIJjXPHRWycBpOdHMgn/GhvdRsNoyRxgE
-----END CERTIFICATE-----