Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/492590-a02f-443e-aaa3-feac26eaecc2/1/hWRKMOK2yshM3YaBAS-fKM3jYuQ.roa
File:                     hWRKMOK2yshM3YaBAS-fKM3jYuQ.roa (raw, json)
Hash identifier:          0C1DxvrCZpgFVotAS7rRq9sKrm4XFxQCSkhyVfkJ40w=
Subject key identifier:   85:64:4A:30:E2:B6:CA:C8:4C:DD:86:81:01:2F:9F:28:CD:E3:62:E4
Certificate issuer:       /CN=6c8fd1a8ae5996c1e5692c1a8c42bfe9c3ba5745
Certificate serial:       17A9C1D2
Authority key identifier: 6C:8F:D1:A8:AE:59:96:C1:E5:69:2C:1A:8C:42:BF:E9:C3:BA:57:45
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/bI_RqK5ZlsHlaSwajEK_6cO6V0U.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d0/492590-a02f-443e-aaa3-feac26eaecc2/1/hWRKMOK2yshM3YaBAS-fKM3jYuQ.roa
Signing time:             Sat 01 Jan 2022 04:54:07 +0000
ROA not before:           Sat 01 Jan 2022 04:54:07 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     42198
IP address blocks:        185.115.125.0/24 maxlen: 24
                          2a06:7246:1::/48 maxlen: 48
                          2a06:7246:4::/48 maxlen: 48
                          2a06:7246:3::/48 maxlen: 48
                          2a06:7246:6::/48 maxlen: 48
                          2a06:7246:2::/48 maxlen: 48

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 397001170 (0x17a9c1d2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6c8fd1a8ae5996c1e5692c1a8c42bfe9c3ba5745
        Validity
            Not Before: Jan  1 04:54:07 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=85644a30e2b6cac84cdd8681012f9f28cde362e4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f8:a2:0c:5b:ab:80:64:a8:af:4a:91:c3:a9:0e:
                    25:dc:14:73:b7:e3:e0:81:9e:59:5e:d4:0a:b3:c0:
                    03:11:30:95:a8:6b:ee:90:ef:ff:96:db:ac:0c:01:
                    e8:77:bf:8f:b2:b9:00:ef:ce:d0:5b:5a:a5:93:02:
                    b4:1e:88:19:1c:c5:6f:60:68:b3:1e:8a:37:eb:43:
                    39:bc:57:3d:9f:ac:24:6e:fd:a6:ae:d5:91:ec:2c:
                    1b:ca:74:04:97:f9:4e:1c:86:b0:90:67:7c:3e:28:
                    b7:6c:a4:34:54:37:fd:d8:7a:53:04:a3:9a:db:47:
                    77:ce:89:b6:40:89:12:cf:7c:23:75:8a:38:b8:9a:
                    37:d2:c8:4a:a2:0b:08:50:2c:27:0e:69:be:84:64:
                    5e:ff:f8:92:f6:5e:eb:ba:66:b1:79:90:5d:ba:e4:
                    70:fd:b7:92:bf:cf:71:5f:c4:08:dd:1e:9e:a8:53:
                    64:08:18:7a:99:a5:76:bb:3f:4b:de:52:cb:50:b9:
                    83:c8:02:16:bc:7a:f5:35:2b:c3:db:b1:c3:ae:d6:
                    85:ee:af:bb:0b:9c:02:f3:2e:c5:c8:4e:74:89:aa:
                    6c:96:86:79:10:11:41:a0:be:41:7d:10:68:34:79:
                    f6:44:29:ed:52:63:5e:3c:64:91:9e:be:3a:da:75:
                    53:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                85:64:4A:30:E2:B6:CA:C8:4C:DD:86:81:01:2F:9F:28:CD:E3:62:E4
            X509v3 Authority Key Identifier:
                keyid:6C:8F:D1:A8:AE:59:96:C1:E5:69:2C:1A:8C:42:BF:E9:C3:BA:57:45

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bI_RqK5ZlsHlaSwajEK_6cO6V0U.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/492590-a02f-443e-aaa3-feac26eaecc2/1/hWRKMOK2yshM3YaBAS-fKM3jYuQ.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/492590-a02f-443e-aaa3-feac26eaecc2/1/bI_RqK5ZlsHlaSwajEK_6cO6V0U.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.115.125.0/24
                IPv6:
                  2a06:7246:1::-2a06:7246:4:ffff:ffff:ffff:ffff:ffff
                  2a06:7246:6::/48

    Signature Algorithm: sha256WithRSAEncryption
         6c:1d:6a:34:a1:22:ed:c1:00:b1:90:ef:2b:dd:f8:13:8a:a8:
         4f:48:36:43:fb:f1:6f:10:76:ac:3e:58:10:25:9d:0f:32:f2:
         7e:0b:7b:c5:4d:13:38:72:d1:de:18:66:82:f0:f8:55:22:a8:
         0d:9b:a4:0b:71:30:af:42:d1:fa:c6:62:29:b7:8d:4d:3d:37:
         c2:5a:83:3f:d1:03:3e:f3:2f:b0:0d:63:c8:79:98:c4:be:11:
         21:c8:eb:a2:71:3d:8a:16:b2:1e:4a:ea:25:da:fe:56:55:3a:
         7c:7f:c7:c6:5f:38:e8:78:9e:d8:84:87:d4:b0:c3:d8:5f:25:
         93:66:25:e9:be:62:a9:25:f6:1b:f8:3a:a9:bf:61:7f:ba:ed:
         4d:c6:db:b5:a0:23:ea:47:a1:a2:45:e6:3e:65:97:38:54:ec:
         ce:30:66:7f:ce:c5:d3:ca:6b:65:6f:56:af:62:64:ef:b0:fb:
         0f:79:c8:66:38:43:a6:cc:da:9b:96:be:ee:73:17:e6:98:6d:
         9a:f3:d3:fe:43:c9:ce:2e:30:5e:60:42:56:69:76:9e:ae:44:
         bd:8b:03:52:4a:f7:0c:48:a0:cc:9e:43:5b:54:eb:f5:92:4b:
         bc:cb:0a:c0:cd:f7:46:c5:e4:b2:95:ae:e0:65:28:b0:6d:51:
         40:c7:22:94
-----BEGIN CERTIFICATE-----
MIIFFDCCA/ygAwIBAgIEF6nB0jANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg2
YzhmZDFhOGFlNTk5NmMxZTU2OTJjMWE4YzQyYmZlOWMzYmE1NzQ1MB4XDTIyMDEw
MTA0NTQwN1oXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoODU2NDRhMzBlMmI2
Y2FjODRjZGQ4NjgxMDEyZjlmMjhjZGUzNjJlNDCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAPiiDFurgGSor0qRw6kOJdwUc7fj4IGeWV7UCrPAAxEwlahr
7pDv/5bbrAwB6He/j7K5AO/O0FtapZMCtB6IGRzFb2Bosx6KN+tDObxXPZ+sJG79
pq7VkewsG8p0BJf5ThyGsJBnfD4ot2ykNFQ3/dh6UwSjmttHd86JtkCJEs98I3WK
OLiaN9LISqILCFAsJw5pvoRkXv/4kvZe67pmsXmQXbrkcP23kr/PcV/ECN0enqhT
ZAgYepmldrs/S95Sy1C5g8gCFrx69TUrw9uxw67Whe6vuwucAvMuxchOdImqbJaG
eRARQaC+QX0QaDR59kQp7VJjXjxkkZ6+Otp1U+0CAwEAAaOCAi4wggIqMB0GA1Ud
DgQWBBSFZEow4rbKyEzdhoEBL58ozeNi5DAfBgNVHSMEGDAWgBRsj9GorlmWweVp
LBqMQr/pw7pXRTAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L2JJX1JxSzVabHNIbGFTd2FqRUtfNmNPNlYwVS5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvZDAvNDkyNTkwLWEwMmYtNDQzZS1hYWEzLWZlYWMyNmVhZWNjMi8x
L2hXUktNT0syeXNoTTNZYUJBUy1mS00zall1US5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZDAv
NDkyNTkwLWEwMmYtNDQzZS1hYWEzLWZlYWMyNmVhZWNjMi8xL2JJX1JxSzVabHNI
bGFTd2FqRUtfNmNPNlYwVS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBE
BggrBgEFBQcBBwEB/wQ1MDMwDAQCAAEwBgMEALlzfTAjBAIAAjAdMBIDBwAqBnJG
AAEDBwAqBnJGAAQDBwAqBnJGAAYwDQYJKoZIhvcNAQELBQADggEBAGwdajShIu3B
ALGQ7yvd+BOKqE9INkP78W8Qdqw+WBAlnQ8y8n4Le8VNEzhy0d4YZoLw+FUiqA2b
pAtxMK9C0frGYim3jU09N8Jagz/RAz7zL7ANY8h5mMS+ESHI66JxPYoWsh5K6iXa
/lZVOnx/x8ZfOOh4ntiEh9Sww9hfJZNmJem+Yqkl9hv4Oqm/YX+67U3G27WgI+pH
oaJF5j5llzhU7M4wZn/OxdPKa2VvVq9iZO+w+w95yGY4Q6bM2puWvu5zF+aYbZrz
0/5Dyc4uMF5gQlZpdp6uRL2LA1JK9wxIoMyeQ1tU6/WSS7zLCsDN90bF5LKVruBl
KLBtUUDHIpQ=
-----END CERTIFICATE-----