Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cc/e4a7ac-1b5b-4bac-8557-63f6202e4bf4/1/V5PLpI-wKb7tC7r9ocAXfEiG7So.roa
File:                     V5PLpI-wKb7tC7r9ocAXfEiG7So.roa (raw, json)
Hash identifier:          RSspfzNS5qFnCifi8adejbSXVFhNrlUaJsiAI2ylOW0=
Subject key identifier:   57:93:CB:A4:8F:B0:29:BE:ED:0B:BA:FD:A1:C0:17:7C:48:86:ED:2A
Certificate issuer:       /CN=210f7948f5e7dccbb62ba8f53c35ba5525631b70
Certificate serial:       02CFC728
Authority key identifier: 21:0F:79:48:F5:E7:DC:CB:B6:2B:A8:F5:3C:35:BA:55:25:63:1B:70
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/IQ95SPXn3Mu2K6j1PDW6VSVjG3A.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/cc/e4a7ac-1b5b-4bac-8557-63f6202e4bf4/1/V5PLpI-wKb7tC7r9ocAXfEiG7So.roa
Signing time:             Sat 01 Jan 2022 07:00:00 +0000
ROA not before:           Sat 01 Jan 2022 07:00:00 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     208248
IP address blocks:        45.151.48.0/22 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 47171368 (0x2cfc728)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=210f7948f5e7dccbb62ba8f53c35ba5525631b70
        Validity
            Not Before: Jan  1 07:00:00 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=5793cba48fb029beed0bbafda1c0177c4886ed2a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:a2:a8:39:19:c0:d2:6a:19:01:1b:16:8b:ca:
                    7d:0f:71:3a:69:50:49:4b:e9:ce:f1:84:f1:cc:ca:
                    c8:2d:df:fe:ca:25:a5:c7:c2:86:74:26:ce:75:b7:
                    f6:39:ba:40:12:75:8d:05:bc:a4:d1:13:8d:38:86:
                    e5:dc:6f:22:ac:6b:aa:13:7c:20:07:b8:a8:84:4a:
                    ac:10:5a:a7:e6:5c:ac:61:28:04:d1:3a:c4:c0:6f:
                    e4:a7:26:c2:08:ad:ad:a8:c8:7f:16:4e:a3:3d:39:
                    ea:32:8a:4d:8f:de:7a:9a:1f:7f:4e:d1:5d:3a:57:
                    73:82:bb:9f:be:76:46:53:6f:38:b0:3b:ee:46:85:
                    38:a2:10:01:b8:75:61:9b:d5:bb:f3:45:b9:13:00:
                    5c:12:c4:b4:ca:e9:67:ac:72:06:6e:2b:93:44:dc:
                    58:9f:9f:06:68:c1:a7:d9:45:45:bb:61:52:7d:9f:
                    8b:e1:32:d7:0f:30:6b:5d:6e:df:06:17:99:b3:13:
                    8f:b2:e0:ae:88:58:9e:1a:da:42:48:40:17:46:14:
                    69:dd:f1:03:38:5a:15:c3:ea:30:6b:4e:d8:0c:64:
                    6a:fc:53:82:38:14:3a:21:df:ba:c8:89:62:68:e1:
                    9a:2b:2a:eb:d8:b7:f7:73:fe:72:84:d6:28:dc:d6:
                    3c:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                57:93:CB:A4:8F:B0:29:BE:ED:0B:BA:FD:A1:C0:17:7C:48:86:ED:2A
            X509v3 Authority Key Identifier:
                keyid:21:0F:79:48:F5:E7:DC:CB:B6:2B:A8:F5:3C:35:BA:55:25:63:1B:70

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IQ95SPXn3Mu2K6j1PDW6VSVjG3A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/e4a7ac-1b5b-4bac-8557-63f6202e4bf4/1/V5PLpI-wKb7tC7r9ocAXfEiG7So.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/e4a7ac-1b5b-4bac-8557-63f6202e4bf4/1/IQ95SPXn3Mu2K6j1PDW6VSVjG3A.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.151.48.0/22

    Signature Algorithm: sha256WithRSAEncryption
         10:18:d6:9c:b4:7e:1d:52:b4:f0:e7:6c:8a:9c:cc:a3:ee:0f:
         9e:89:95:91:dc:e2:42:e7:3d:9d:ff:9d:40:d2:9a:26:f7:87:
         6f:82:7a:c3:e0:1d:41:d3:d9:d0:03:8f:5e:a0:ca:b7:31:a2:
         19:69:cb:82:85:c7:a1:b8:ef:a3:01:84:61:dd:57:49:4c:ff:
         a6:c2:00:cf:e7:f6:00:eb:b3:4f:91:53:1b:7e:ac:96:41:f7:
         1c:7d:ff:d4:e3:54:8a:e0:78:ad:2a:ea:71:0d:51:e5:25:7c:
         68:29:28:f2:a2:c0:e4:16:cb:e9:49:34:04:1d:6b:ef:83:26:
         74:0c:10:5b:9f:3c:45:f8:a6:96:18:6c:94:f3:6d:4f:61:8d:
         a2:af:15:ad:ff:ba:b7:76:74:5f:77:2d:3f:ef:ad:e1:17:38:
         01:72:45:9c:9c:15:14:61:89:fe:80:38:d3:de:fa:5a:54:82:
         9f:18:36:14:4b:eb:c1:14:d4:7f:20:61:e9:ad:34:54:a5:da:
         a1:79:18:94:ef:5e:7c:ea:41:17:ef:1f:be:1d:4d:b3:cd:56:
         48:e8:2d:0b:51:b0:8a:fc:de:1b:42:b2:7c:5e:9c:79:4c:50:
         3a:8d:d6:6c:b7:55:d4:a5:23:f3:b1:96:81:0b:0e:23:38:1b:
         df:04:86:b9
-----BEGIN CERTIFICATE-----
MIIE7zCCA9egAwIBAgIEAs/HKDANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEygy
MTBmNzk0OGY1ZTdkY2NiYjYyYmE4ZjUzYzM1YmE1NTI1NjMxYjcwMB4XDTIyMDEw
MTA3MDAwMFoXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoNTc5M2NiYTQ4ZmIw
MjliZWVkMGJiYWZkYTFjMDE3N2M0ODg2ZWQyYTCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBANGiqDkZwNJqGQEbFovKfQ9xOmlQSUvpzvGE8czKyC3f/sol
pcfChnQmznW39jm6QBJ1jQW8pNETjTiG5dxvIqxrqhN8IAe4qIRKrBBap+ZcrGEo
BNE6xMBv5KcmwgitrajIfxZOoz056jKKTY/eepoff07RXTpXc4K7n752RlNvOLA7
7kaFOKIQAbh1YZvVu/NFuRMAXBLEtMrpZ6xyBm4rk0TcWJ+fBmjBp9lFRbthUn2f
i+Ey1w8wa11u3wYXmbMTj7LgrohYnhraQkhAF0YUad3xAzhaFcPqMGtO2AxkavxT
gjgUOiHfusiJYmjhmisq69i393P+coTWKNzWPJUCAwEAAaOCAgkwggIFMB0GA1Ud
DgQWBBRXk8ukj7Apvu0Luv2hwBd8SIbtKjAfBgNVHSMEGDAWgBQhD3lI9efcy7Yr
qPU8NbpVJWMbcDAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L0lROTVTUFhuM011Mks2ajFQRFc2VlNWakczQS5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvY2MvZTRhN2FjLTFiNWItNGJhYy04NTU3LTYzZjYyMDJlNGJmNC8x
L1Y1UExwSS13S2I3dEM3cjlvY0FYZkVpRzdTby5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvY2Mv
ZTRhN2FjLTFiNWItNGJhYy04NTU3LTYzZjYyMDJlNGJmNC8xL0lROTVTUFhuM011
Mks2ajFQRFc2VlNWakczQS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAf
BggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAi2XMDANBgkqhkiG9w0BAQsFAAOC
AQEAEBjWnLR+HVK08OdsipzMo+4PnomVkdziQuc9nf+dQNKaJveHb4J6w+AdQdPZ
0AOPXqDKtzGiGWnLgoXHobjvowGEYd1XSUz/psIAz+f2AOuzT5FTG36slkH3HH3/
1ONUiuB4rSrqcQ1R5SV8aCko8qLA5BbL6Uk0BB1r74MmdAwQW588RfimlhhslPNt
T2GNoq8Vrf+6t3Z0X3ctP++t4Rc4AXJFnJwVFGGJ/oA40976WlSCnxg2FEvrwRTU
fyBh6a00VKXaoXkYlO9efOpBF+8fvh1Ns81WSOgtC1GwivzeG0KyfF6ceUxQOo3W
bLdV1KUj87GWgQsOIzgb3wSGuQ==
-----END CERTIFICATE-----