Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/9e0f5e-8141-43c9-8f44-33ebab24bbb3/1/YMefn9PYqSafDqusWUu3joiX330.roa
File:                     YMefn9PYqSafDqusWUu3joiX330.roa (raw, json)
Hash identifier:          DsvqLN7UKoXbXr4zlApkXDFM0ljulefeo9hpv9Jayvw=
Subject key identifier:   60:C7:9F:9F:D3:D8:A9:26:9F:0E:AB:AC:59:4B:B7:8E:88:97:DF:7D
Certificate issuer:       /CN=bb7d379c04f8175b35ef673d76c68e44c70e833f
Certificate serial:       08EA2B93
Authority key identifier: BB:7D:37:9C:04:F8:17:5B:35:EF:67:3D:76:C6:8E:44:C7:0E:83:3F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/u303nAT4F1s172c9dsaORMcOgz8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/bc/9e0f5e-8141-43c9-8f44-33ebab24bbb3/1/YMefn9PYqSafDqusWUu3joiX330.roa
Signing time:             Sat 01 Jan 2022 15:00:47 +0000
ROA not before:           Sat 01 Jan 2022 15:00:47 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     35336
IP address blocks:        2.56.40.0/22 maxlen: 22

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 149564307 (0x8ea2b93)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bb7d379c04f8175b35ef673d76c68e44c70e833f
        Validity
            Not Before: Jan  1 15:00:47 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=60c79f9fd3d8a9269f0eabac594bb78e8897df7d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:02:d3:26:c5:00:5e:9b:9c:6a:ba:f4:8f:5c:
                    60:74:e9:a3:b8:a5:c9:b2:14:d1:bf:47:03:a0:e8:
                    6c:19:62:d6:c3:63:34:6a:ec:02:ae:5e:42:cc:ce:
                    2d:66:0e:2e:a6:0b:1b:ec:f7:13:10:c1:5e:8f:43:
                    42:5e:15:06:a0:d0:27:53:17:32:fa:fa:0c:2a:46:
                    c4:f1:88:ac:af:8a:1f:80:ec:a1:84:2e:e7:13:c2:
                    e6:f4:70:32:c7:27:c2:e1:fc:b0:d2:c6:65:3b:63:
                    77:2c:d1:34:f6:3b:de:f1:9b:1f:ae:e6:8a:42:b5:
                    65:1e:d0:a2:a5:18:9c:f5:e5:6b:a2:0c:dd:bc:d2:
                    b6:98:47:88:64:1b:19:a3:b0:91:f9:8e:a4:6d:24:
                    73:1c:27:50:69:14:b8:85:1c:4d:d4:18:9c:7a:67:
                    e3:b4:75:b1:83:ea:39:96:70:0e:28:ae:af:2b:a5:
                    1a:26:0b:3c:17:f5:b0:87:b1:70:be:df:25:6f:11:
                    17:3b:9b:46:ee:9b:40:cd:35:c7:e1:89:5b:77:af:
                    ee:d4:93:54:95:5c:17:b7:e6:4c:93:4f:e6:d8:02:
                    93:cc:b2:85:25:a9:c1:3c:47:91:51:21:8e:d6:65:
                    3e:23:5d:bd:fe:58:5c:7a:34:27:8a:e3:cb:45:6e:
                    41:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                60:C7:9F:9F:D3:D8:A9:26:9F:0E:AB:AC:59:4B:B7:8E:88:97:DF:7D
            X509v3 Authority Key Identifier:
                keyid:BB:7D:37:9C:04:F8:17:5B:35:EF:67:3D:76:C6:8E:44:C7:0E:83:3F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/u303nAT4F1s172c9dsaORMcOgz8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/9e0f5e-8141-43c9-8f44-33ebab24bbb3/1/YMefn9PYqSafDqusWUu3joiX330.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/9e0f5e-8141-43c9-8f44-33ebab24bbb3/1/u303nAT4F1s172c9dsaORMcOgz8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  2.56.40.0/22

    Signature Algorithm: sha256WithRSAEncryption
         53:93:dd:cf:a2:60:2b:e5:b3:5b:52:0d:a1:97:70:48:9f:a0:
         89:af:ad:be:b6:c9:e9:69:2e:0f:d2:61:70:8b:eb:2e:1c:5a:
         66:ef:90:66:6e:c3:a7:6e:fb:0f:68:9e:07:86:63:1f:0c:a0:
         7b:7b:07:de:f6:ee:b7:49:ec:6c:3b:40:c0:23:88:8b:39:be:
         ba:9d:52:5b:47:90:d2:70:f9:4e:7b:a4:4e:02:88:02:0c:42:
         cf:c6:3b:f4:4a:13:6a:bf:47:f4:f6:d7:d7:31:d9:25:f4:92:
         ec:ad:2b:66:9d:94:d7:52:ef:dd:01:36:af:9c:2e:29:34:fc:
         ae:ea:be:ab:e0:b0:3b:42:9f:52:17:9f:c3:5d:d6:e5:af:8c:
         d5:61:6d:32:53:4c:88:94:11:32:71:66:5b:7f:f8:b1:95:8f:
         78:82:28:2d:67:94:23:77:f2:ae:62:a9:a7:2b:e7:e9:55:66:
         33:cf:03:75:6d:16:dd:78:30:84:4c:b4:28:4d:59:1b:41:b5:
         26:c8:64:52:41:ab:f6:1f:4d:f8:40:da:2a:9b:2c:82:95:db:
         e8:4a:f7:71:f8:9b:8b:05:0a:ef:f0:5a:18:e1:ff:a2:94:7c:
         4b:7b:f1:02:1d:67:ce:b0:02:84:ca:a8:c8:9c:e9:6a:1a:c1:
         d9:0d:46:61
-----BEGIN CERTIFICATE-----
MIIE7zCCA9egAwIBAgIECOorkzANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyhi
YjdkMzc5YzA0ZjgxNzViMzVlZjY3M2Q3NmM2OGU0NGM3MGU4MzNmMB4XDTIyMDEw
MTE1MDA0N1oXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoNjBjNzlmOWZkM2Q4
YTkyNjlmMGVhYmFjNTk0YmI3OGU4ODk3ZGY3ZDCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAM0C0ybFAF6bnGq69I9cYHTpo7ilybIU0b9HA6DobBli1sNj
NGrsAq5eQszOLWYOLqYLG+z3ExDBXo9DQl4VBqDQJ1MXMvr6DCpGxPGIrK+KH4Ds
oYQu5xPC5vRwMscnwuH8sNLGZTtjdyzRNPY73vGbH67mikK1ZR7QoqUYnPXla6IM
3bzStphHiGQbGaOwkfmOpG0kcxwnUGkUuIUcTdQYnHpn47R1sYPqOZZwDiiuryul
GiYLPBf1sIexcL7fJW8RFzubRu6bQM01x+GJW3ev7tSTVJVcF7fmTJNP5tgCk8yy
hSWpwTxHkVEhjtZlPiNdvf5YXHo0J4rjy0VuQUsCAwEAAaOCAgkwggIFMB0GA1Ud
DgQWBBRgx5+f09ipJp8Oq6xZS7eOiJfffTAfBgNVHSMEGDAWgBS7fTecBPgXWzXv
Zz12xo5Exw6DPzAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L3UzMDNuQVQ0RjFzMTcyYzlkc2FPUk1jT2d6OC5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvYmMvOWUwZjVlLTgxNDEtNDNjOS04ZjQ0LTMzZWJhYjI0YmJiMy8x
L1lNZWZuOVBZcVNhZkRxdXNXVXUzam9pWDMzMC5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYmMv
OWUwZjVlLTgxNDEtNDNjOS04ZjQ0LTMzZWJhYjI0YmJiMy8xL3UzMDNuQVQ0RjFz
MTcyYzlkc2FPUk1jT2d6OC5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAf
BggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAgI4KDANBgkqhkiG9w0BAQsFAAOC
AQEAU5Pdz6JgK+WzW1INoZdwSJ+gia+tvrbJ6WkuD9JhcIvrLhxaZu+QZm7Dp277
D2ieB4ZjHwyge3sH3vbut0nsbDtAwCOIizm+up1SW0eQ0nD5TnukTgKIAgxCz8Y7
9EoTar9H9PbX1zHZJfSS7K0rZp2U11Lv3QE2r5wuKTT8ruq+q+CwO0KfUhefw13W
5a+M1WFtMlNMiJQRMnFmW3/4sZWPeIIoLWeUI3fyrmKppyvn6VVmM88DdW0W3Xgw
hEy0KE1ZG0G1JshkUkGr9h9N+EDaKpssgpXb6Er3cfibiwUK7/BaGOH/opR8S3vx
Ah1nzrAChMqoyJzpahrB2Q1GYQ==
-----END CERTIFICATE-----