Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/492590-a02f-443e-aaa3-feac26eaecc2/1/3UCwiUvso6OPtihq9LTUzfAn9Vg.roa
File:                     3UCwiUvso6OPtihq9LTUzfAn9Vg.roa (raw, json)
Hash identifier:          Icg8WI9Be4/cYnnEDVa/r9kvOULlfHEPAOGhlCJ1THU=
Subject key identifier:   DD:40:B0:89:4B:EC:A3:A3:8F:B6:28:6A:F4:B4:D4:CD:F0:27:F5:58
Certificate issuer:       /CN=6c8fd1a8ae5996c1e5692c1a8c42bfe9c3ba5745
Certificate serial:       17B1A78C
Authority key identifier: 6C:8F:D1:A8:AE:59:96:C1:E5:69:2C:1A:8C:42:BF:E9:C3:BA:57:45
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/bI_RqK5ZlsHlaSwajEK_6cO6V0U.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d0/492590-a02f-443e-aaa3-feac26eaecc2/1/3UCwiUvso6OPtihq9LTUzfAn9Vg.roa
Signing time:             Sat 01 Jan 2022 04:54:11 +0000
ROA not before:           Sat 01 Jan 2022 04:54:11 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     44486
IP address blocks:        5.181.151.0/24 maxlen: 32

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 397518732 (0x17b1a78c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6c8fd1a8ae5996c1e5692c1a8c42bfe9c3ba5745
        Validity
            Not Before: Jan  1 04:54:11 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=dd40b0894beca3a38fb6286af4b4d4cdf027f558
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e3:ea:df:fd:7e:a4:e1:8a:e9:46:a9:bc:14:0e:
                    cc:c1:87:af:fa:da:5e:76:1d:fd:e3:90:f4:4a:62:
                    b2:bd:e2:4a:39:74:9e:67:18:6d:84:ac:ab:c2:4b:
                    5b:cc:bb:43:eb:a7:68:ac:63:08:e5:30:fd:ef:11:
                    29:24:17:7f:c9:bd:ec:96:de:4e:ed:6e:ae:85:50:
                    c6:e9:11:fb:47:8a:7e:6c:98:c9:17:6b:e9:55:51:
                    0a:28:0e:8b:3d:ce:bb:b6:4e:eb:f5:29:e8:a5:91:
                    e0:b2:50:1a:df:75:bf:8b:c1:2a:59:6b:20:a9:a6:
                    14:03:1f:a0:5e:e3:56:b8:21:80:2d:80:38:e0:cf:
                    13:aa:75:ad:39:cb:52:1a:59:76:6e:0f:e8:df:d5:
                    c5:70:1c:44:fd:43:78:5f:eb:30:e8:13:5b:8d:c7:
                    dd:b5:aa:a2:f4:28:d2:cd:55:0c:73:d9:41:d5:12:
                    0a:92:c8:9e:e6:b3:7f:2a:22:d0:20:e9:31:9e:9f:
                    72:82:57:81:bc:ca:5a:5e:e0:3c:4c:eb:14:bb:66:
                    0f:93:09:93:da:4e:a2:85:1b:ff:b9:0b:93:f7:65:
                    dc:16:93:02:a1:1d:8c:a5:aa:11:fe:32:c8:fa:f2:
                    eb:67:cd:41:e7:9e:75:33:ab:71:7e:98:48:47:f4:
                    f6:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DD:40:B0:89:4B:EC:A3:A3:8F:B6:28:6A:F4:B4:D4:CD:F0:27:F5:58
            X509v3 Authority Key Identifier:
                keyid:6C:8F:D1:A8:AE:59:96:C1:E5:69:2C:1A:8C:42:BF:E9:C3:BA:57:45

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bI_RqK5ZlsHlaSwajEK_6cO6V0U.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/492590-a02f-443e-aaa3-feac26eaecc2/1/3UCwiUvso6OPtihq9LTUzfAn9Vg.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/492590-a02f-443e-aaa3-feac26eaecc2/1/bI_RqK5ZlsHlaSwajEK_6cO6V0U.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  5.181.151.0/24

    Signature Algorithm: sha256WithRSAEncryption
         71:e3:c2:53:ed:b4:e8:83:c9:7d:40:3e:1f:d9:c0:f7:b6:2a:
         28:d8:3c:25:9a:b9:ab:21:47:b4:fb:43:85:b6:8e:7e:43:99:
         1d:61:74:f6:ec:bd:ca:42:fd:11:2a:23:b5:eb:39:e0:e4:fa:
         5a:70:aa:58:e7:a3:fa:bc:96:c8:56:fb:a1:bd:ef:2f:79:8e:
         02:c0:84:f3:1a:27:fd:f6:1b:99:b1:cf:c9:bb:3e:08:99:e9:
         6f:8c:3f:d4:1e:a0:1f:5f:77:e4:37:bd:22:9b:d3:21:22:b9:
         d6:5c:3f:bb:d3:94:bd:9b:e1:e1:cd:d2:d1:95:9b:b2:1a:d7:
         d8:c8:1b:1f:a7:5f:e6:e2:bd:2d:56:c2:6b:43:95:f3:12:d2:
         85:7d:d0:8f:e4:10:0e:fd:78:65:c4:c2:96:d9:b3:13:65:80:
         2e:55:aa:b7:60:3b:77:f7:0c:f7:2d:28:51:49:b1:40:78:fa:
         ae:3e:47:f4:26:ee:43:f4:a5:e4:80:df:bc:fe:75:e8:d7:91:
         ff:f6:01:95:1c:05:28:4e:60:fb:09:62:58:75:d6:8d:99:c6:
         d2:03:9e:55:2e:79:12:37:40:8b:28:86:71:52:78:eb:63:18:
         b7:78:d5:e6:95:bc:dc:35:3e:e8:d0:98:e6:8c:26:b8:69:19:
         3f:9f:41:4d
-----BEGIN CERTIFICATE-----
MIIE7zCCA9egAwIBAgIEF7GnjDANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg2
YzhmZDFhOGFlNTk5NmMxZTU2OTJjMWE4YzQyYmZlOWMzYmE1NzQ1MB4XDTIyMDEw
MTA0NTQxMVoXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoZGQ0MGIwODk0YmVj
YTNhMzhmYjYyODZhZjRiNGQ0Y2RmMDI3ZjU1ODCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAOPq3/1+pOGK6UapvBQOzMGHr/raXnYd/eOQ9Episr3iSjl0
nmcYbYSsq8JLW8y7Q+unaKxjCOUw/e8RKSQXf8m97JbeTu1uroVQxukR+0eKfmyY
yRdr6VVRCigOiz3Ou7ZO6/Up6KWR4LJQGt91v4vBKllrIKmmFAMfoF7jVrghgC2A
OODPE6p1rTnLUhpZdm4P6N/VxXAcRP1DeF/rMOgTW43H3bWqovQo0s1VDHPZQdUS
CpLInuazfyoi0CDpMZ6fcoJXgbzKWl7gPEzrFLtmD5MJk9pOooUb/7kLk/dl3BaT
AqEdjKWqEf4yyPry62fNQeeedTOrcX6YSEf09v0CAwEAAaOCAgkwggIFMB0GA1Ud
DgQWBBTdQLCJS+yjo4+2KGr0tNTN8Cf1WDAfBgNVHSMEGDAWgBRsj9GorlmWweVp
LBqMQr/pw7pXRTAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L2JJX1JxSzVabHNIbGFTd2FqRUtfNmNPNlYwVS5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvZDAvNDkyNTkwLWEwMmYtNDQzZS1hYWEzLWZlYWMyNmVhZWNjMi8x
LzNVQ3dpVXZzbzZPUHRpaHE5TFRVemZBbjlWZy5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZDAv
NDkyNTkwLWEwMmYtNDQzZS1hYWEzLWZlYWMyNmVhZWNjMi8xL2JJX1JxSzVabHNI
bGFTd2FqRUtfNmNPNlYwVS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAf
BggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAAW1lzANBgkqhkiG9w0BAQsFAAOC
AQEAcePCU+206IPJfUA+H9nA97YqKNg8JZq5qyFHtPtDhbaOfkOZHWF09uy9ykL9
ESojtes54OT6WnCqWOej+ryWyFb7ob3vL3mOAsCE8xon/fYbmbHPybs+CJnpb4w/
1B6gH1935De9IpvTISK51lw/u9OUvZvh4c3S0ZWbshrX2MgbH6df5uK9LVbCa0OV
8xLShX3Qj+QQDv14ZcTCltmzE2WALlWqt2A7d/cM9y0oUUmxQHj6rj5H9CbuQ/Sl
5IDfvP516NeR//YBlRwFKE5g+wliWHXWjZnG0gOeVS55EjdAiyiGcVJ462MYt3jV
5pW83DU+6NCY5owmuGkZP59BTQ==
-----END CERTIFICATE-----