Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/be/1f6458-dc75-4add-ae72-91e3184bb0ab/1/elb45R17mGXSxEnzxKchDMDCDJI.roa
File:                     elb45R17mGXSxEnzxKchDMDCDJI.roa (raw, json)
Hash identifier:          f+f/smdt00NjVNPpyroSutMFru2LyTfwDAJCrS9qD3I=
Subject key identifier:   7A:56:F8:E5:1D:7B:98:65:D2:C4:49:F3:C4:A7:21:0C:C0:C2:0C:92
Certificate issuer:       /CN=1aca63df248b7adf3ddd07e8c2d3eedd02cef933
Certificate serial:       39F9E0F8
Authority key identifier: 1A:CA:63:DF:24:8B:7A:DF:3D:DD:07:E8:C2:D3:EE:DD:02:CE:F9:33
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Gspj3ySLet893QfowtPu3QLO-TM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/be/1f6458-dc75-4add-ae72-91e3184bb0ab/1/elb45R17mGXSxEnzxKchDMDCDJI.roa
Signing time:             Sat 01 Jan 2022 14:00:33 +0000
ROA not before:           Sat 01 Jan 2022 14:00:33 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     57321
IP address blocks:        157.25.134.0/23 maxlen: 23

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 972677368 (0x39f9e0f8)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1aca63df248b7adf3ddd07e8c2d3eedd02cef933
        Validity
            Not Before: Jan  1 14:00:33 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=7a56f8e51d7b9865d2c449f3c4a7210cc0c20c92
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:82:78:56:9e:e4:28:4a:ca:f4:8d:cf:7b:67:
                    60:e3:70:96:80:6e:a2:ca:cd:67:69:2e:bd:10:68:
                    9a:b3:bf:93:db:ef:9e:a2:19:51:6b:26:e7:be:25:
                    fa:23:03:f5:97:a5:3d:87:06:42:e0:0d:de:65:c5:
                    f2:da:d5:02:30:23:05:62:4d:c6:13:13:c5:77:cf:
                    4d:f7:45:5d:21:d2:f1:9e:61:8b:7c:d4:41:dc:8a:
                    f3:1f:02:99:44:ec:51:20:2c:02:7f:96:0d:f9:d0:
                    d3:18:c3:66:4d:a5:c8:61:9a:f5:be:d2:e9:6d:7e:
                    f3:b2:8b:c9:77:11:d5:35:f7:2a:67:4d:2a:d7:a1:
                    9c:0e:e5:39:6b:ea:3e:6e:63:bb:c2:b2:9a:fd:8f:
                    29:37:32:81:3f:f3:1b:4c:09:96:70:e0:52:5c:68:
                    01:fc:99:37:2a:cd:70:29:22:64:85:d7:fc:27:ed:
                    17:18:bc:31:9c:99:41:a6:33:a8:0c:b8:7e:1b:c8:
                    1d:72:a6:d3:24:12:ab:a6:d7:02:85:8d:ff:7c:98:
                    c4:cd:81:f2:8b:c0:2b:22:f8:77:d9:eb:f0:70:f0:
                    08:e0:9e:e3:f3:81:02:16:d7:72:78:d2:7b:8b:9c:
                    81:7f:00:1e:fc:bc:ee:cc:c4:1d:7f:89:a2:a8:21:
                    a2:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7A:56:F8:E5:1D:7B:98:65:D2:C4:49:F3:C4:A7:21:0C:C0:C2:0C:92
            X509v3 Authority Key Identifier:
                keyid:1A:CA:63:DF:24:8B:7A:DF:3D:DD:07:E8:C2:D3:EE:DD:02:CE:F9:33

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Gspj3ySLet893QfowtPu3QLO-TM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/1f6458-dc75-4add-ae72-91e3184bb0ab/1/elb45R17mGXSxEnzxKchDMDCDJI.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/be/1f6458-dc75-4add-ae72-91e3184bb0ab/1/Gspj3ySLet893QfowtPu3QLO-TM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  157.25.134.0/23

    Signature Algorithm: sha256WithRSAEncryption
         a1:a7:aa:8b:7c:36:6a:5e:1d:bf:68:43:d7:74:61:7d:a9:ac:
         c5:38:cf:a6:92:83:5c:72:7b:5d:c4:db:aa:3a:e9:ea:3d:cd:
         bd:33:47:c0:88:4e:12:a9:ba:d6:b4:4c:d5:2a:ac:04:6a:9f:
         00:a0:8a:62:a8:76:e2:08:7f:39:fd:12:b4:30:5e:94:88:dd:
         55:a6:82:53:06:60:2a:24:18:00:14:9b:e7:dc:f1:62:e5:05:
         c9:b2:ec:f8:13:8b:00:45:73:3f:e6:57:02:df:1d:98:74:97:
         21:d3:7e:a4:65:4e:75:74:ca:8f:ae:3c:b0:21:96:44:31:40:
         6e:1e:3d:30:53:66:e7:20:ed:7e:d5:e5:2e:3b:a3:eb:c1:f2:
         68:6b:94:d0:9c:3f:d1:2f:93:f8:04:b0:44:33:8a:5d:70:5b:
         d2:d3:ff:2d:60:e6:cf:7b:7b:ba:d4:79:bd:86:24:01:4a:e1:
         57:10:07:8a:76:f9:ba:f0:ce:3f:a7:43:a5:c9:18:fc:5e:47:
         1e:2f:24:05:89:9d:cd:d0:6d:4a:29:d4:47:05:80:17:b6:98:
         c8:d2:d1:fe:1d:c8:91:e6:1d:b1:0b:6e:7a:85:cf:4f:28:a8:
         71:90:7e:17:8a:25:69:b9:63:44:4a:80:d5:cc:c1:44:8d:2b:
         cc:50:d3:46
-----BEGIN CERTIFICATE-----
MIIE7zCCA9egAwIBAgIEOfng+DANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEygx
YWNhNjNkZjI0OGI3YWRmM2RkZDA3ZThjMmQzZWVkZDAyY2VmOTMzMB4XDTIyMDEw
MTE0MDAzM1oXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoN2E1NmY4ZTUxZDdi
OTg2NWQyYzQ0OWYzYzRhNzIxMGNjMGMyMGM5MjCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAOGCeFae5ChKyvSNz3tnYONwloBuosrNZ2kuvRBomrO/k9vv
nqIZUWsm574l+iMD9ZelPYcGQuAN3mXF8trVAjAjBWJNxhMTxXfPTfdFXSHS8Z5h
i3zUQdyK8x8CmUTsUSAsAn+WDfnQ0xjDZk2lyGGa9b7S6W1+87KLyXcR1TX3KmdN
KtehnA7lOWvqPm5ju8Kymv2PKTcygT/zG0wJlnDgUlxoAfyZNyrNcCkiZIXX/Cft
Fxi8MZyZQaYzqAy4fhvIHXKm0yQSq6bXAoWN/3yYxM2B8ovAKyL4d9nr8HDwCOCe
4/OBAhbXcnjSe4ucgX8AHvy87szEHX+JoqghohUCAwEAAaOCAgkwggIFMB0GA1Ud
DgQWBBR6VvjlHXuYZdLESfPEpyEMwMIMkjAfBgNVHSMEGDAWgBQaymPfJIt63z3d
B+jC0+7dAs75MzAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L0dzcGozeVNMZXQ4OTNRZm93dFB1M1FMTy1UTS5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvYmUvMWY2NDU4LWRjNzUtNGFkZC1hZTcyLTkxZTMxODRiYjBhYi8x
L2VsYjQ1UjE3bUdYU3hFbnp4S2NoRE1EQ0RKSS5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYmUv
MWY2NDU4LWRjNzUtNGFkZC1hZTcyLTkxZTMxODRiYjBhYi8xL0dzcGozeVNMZXQ4
OTNRZm93dFB1M1FMTy1UTS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAf
BggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAZ0ZhjANBgkqhkiG9w0BAQsFAAOC
AQEAoaeqi3w2al4dv2hD13RhfamsxTjPppKDXHJ7XcTbqjrp6j3NvTNHwIhOEqm6
1rRM1SqsBGqfAKCKYqh24gh/Of0StDBelIjdVaaCUwZgKiQYABSb59zxYuUFybLs
+BOLAEVzP+ZXAt8dmHSXIdN+pGVOdXTKj648sCGWRDFAbh49MFNm5yDtftXlLjuj
68HyaGuU0Jw/0S+T+ASwRDOKXXBb0tP/LWDmz3t7utR5vYYkAUrhVxAHinb5uvDO
P6dDpckY/F5HHi8kBYmdzdBtSinURwWAF7aYyNLR/h3IkeYdsQtueoXPTyiocZB+
F4olabljREqA1czBRI0rzFDTRg==
-----END CERTIFICATE-----