Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/a32872-88a3-4e84-9f83-aa7353d4d98f/1/HFYXmRy5atiybvjCmn8mq3ZSgX8.roa
File:                     HFYXmRy5atiybvjCmn8mq3ZSgX8.roa (raw, json)
Hash identifier:          305xl10JjKmMj5f1kOihxQlMk0ZMd1nBCKw0c/NJbXQ=
Subject key identifier:   1C:56:17:99:1C:B9:6A:D8:B2:6E:F8:C2:9A:7F:26:AB:76:52:81:7F
Certificate issuer:       /CN=ac1a0b9cc5ce8bfd9ee26d09d7e91151a42d370d
Certificate serial:       1B2B5592
Authority key identifier: AC:1A:0B:9C:C5:CE:8B:FD:9E:E2:6D:09:D7:E9:11:51:A4:2D:37:0D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/rBoLnMXOi_2e4m0J1-kRUaQtNw0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d0/a32872-88a3-4e84-9f83-aa7353d4d98f/1/HFYXmRy5atiybvjCmn8mq3ZSgX8.roa
Signing time:             Sat 01 Jan 2022 03:00:05 +0000
ROA not before:           Sat 01 Jan 2022 03:00:05 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     60645
IP address blocks:        185.32.4.0/22 maxlen: 22
                          2a04:3dc0::/29 maxlen: 29

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 455824786 (0x1b2b5592)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ac1a0b9cc5ce8bfd9ee26d09d7e91151a42d370d
        Validity
            Not Before: Jan  1 03:00:05 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=1c5617991cb96ad8b26ef8c29a7f26ab7652817f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ee:a0:4a:46:86:59:d9:89:43:81:4c:37:56:0f:
                    92:4c:f8:19:68:c6:02:c9:5a:d5:19:6c:20:73:12:
                    7d:9d:3d:6d:17:20:b5:51:d8:73:5e:a6:87:2c:70:
                    7e:5d:58:26:34:6a:27:d3:09:8c:cc:84:08:6e:f5:
                    cc:54:cd:4a:c0:83:55:cf:12:79:9a:c4:c8:d8:ce:
                    dc:9d:e7:a3:cc:81:62:e5:81:ec:3a:4a:ec:74:b3:
                    73:5d:b6:d9:97:5c:97:4b:42:0a:8a:dc:d5:2b:7a:
                    1d:84:3a:b4:f8:86:2f:ab:5e:7b:e6:5c:20:f1:c5:
                    eb:05:a9:ab:76:b7:91:86:81:39:5d:35:af:c1:dd:
                    67:40:e7:73:78:ef:35:68:52:95:46:0d:2c:b2:b6:
                    3f:c8:78:02:02:8c:eb:a8:2e:72:a5:b6:10:4b:37:
                    03:f1:a3:ac:d6:28:60:c2:d4:50:cd:c9:17:06:ec:
                    79:02:93:20:dc:7f:9c:77:c9:74:c4:28:c9:50:0d:
                    f2:67:66:e8:bb:de:cc:94:08:d6:2f:dc:5d:b5:13:
                    e7:97:73:be:67:ed:f0:16:e6:4c:88:95:dd:1a:80:
                    4b:fb:bc:6d:d0:b0:dc:99:99:46:8d:bb:d8:ec:ac:
                    34:39:70:26:16:a4:0c:94:c4:a4:bf:5c:67:e6:ca:
                    ed:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1C:56:17:99:1C:B9:6A:D8:B2:6E:F8:C2:9A:7F:26:AB:76:52:81:7F
            X509v3 Authority Key Identifier:
                keyid:AC:1A:0B:9C:C5:CE:8B:FD:9E:E2:6D:09:D7:E9:11:51:A4:2D:37:0D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rBoLnMXOi_2e4m0J1-kRUaQtNw0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/a32872-88a3-4e84-9f83-aa7353d4d98f/1/HFYXmRy5atiybvjCmn8mq3ZSgX8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/a32872-88a3-4e84-9f83-aa7353d4d98f/1/rBoLnMXOi_2e4m0J1-kRUaQtNw0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.32.4.0/22
                IPv6:
                  2a04:3dc0::/29

    Signature Algorithm: sha256WithRSAEncryption
         98:7d:37:96:9d:e0:1b:e1:58:24:2f:14:e3:73:6e:79:b8:ec:
         5e:b8:6a:f7:dc:ed:7f:7b:77:22:c3:d6:72:01:1d:98:e5:39:
         d7:8b:70:19:d6:0c:2b:6e:5a:f0:0b:eb:52:23:b1:d9:7d:12:
         04:c4:8c:ce:20:25:a2:1f:1d:7f:8a:c3:2c:c6:f2:83:04:22:
         cf:2e:d3:6f:8d:ae:27:03:c7:41:db:74:2c:71:51:1d:36:6c:
         bd:e1:21:ac:77:f1:79:d9:49:34:b4:4f:b5:ad:c6:08:2a:6a:
         92:2d:fd:6c:ee:37:22:bb:80:f8:0c:af:3f:83:db:ac:03:b3:
         7a:df:7d:c9:02:98:17:64:20:fe:b9:e6:d4:1d:f0:ab:53:2e:
         d3:3d:6d:ff:01:ac:b7:23:7b:f2:dd:2f:aa:df:85:be:54:5c:
         8c:0b:53:42:90:8e:1a:99:3f:e6:57:aa:15:58:19:4f:12:37:
         72:18:6e:50:2c:88:c4:33:33:5c:c1:be:9b:48:c4:65:36:2f:
         8d:b6:d9:2c:2f:38:e4:89:52:f9:f3:5a:78:9f:3a:b9:38:18:
         9d:4a:b4:60:fc:b3:5b:b4:8d:90:fe:32:bb:60:17:83:ba:43:
         61:ca:a0:58:c2:67:32:23:17:32:a5:25:30:8f:14:08:7a:6c:
         80:11:76:29
-----BEGIN CERTIFICATE-----
MIIE/jCCA+agAwIBAgIEGytVkjANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyhh
YzFhMGI5Y2M1Y2U4YmZkOWVlMjZkMDlkN2U5MTE1MWE0MmQzNzBkMB4XDTIyMDEw
MTAzMDAwNVoXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoMWM1NjE3OTkxY2I5
NmFkOGIyNmVmOGMyOWE3ZjI2YWI3NjUyODE3ZjCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAO6gSkaGWdmJQ4FMN1YPkkz4GWjGAsla1RlsIHMSfZ09bRcg
tVHYc16mhyxwfl1YJjRqJ9MJjMyECG71zFTNSsCDVc8SeZrEyNjO3J3no8yBYuWB
7DpK7HSzc1222Zdcl0tCCorc1St6HYQ6tPiGL6tee+ZcIPHF6wWpq3a3kYaBOV01
r8HdZ0Dnc3jvNWhSlUYNLLK2P8h4AgKM66gucqW2EEs3A/GjrNYoYMLUUM3JFwbs
eQKTINx/nHfJdMQoyVAN8mdm6LvezJQI1i/cXbUT55dzvmft8BbmTIiV3RqAS/u8
bdCw3JmZRo272OysNDlwJhakDJTEpL9cZ+bK7WUCAwEAAaOCAhgwggIUMB0GA1Ud
DgQWBBQcVheZHLlq2LJu+MKafyardlKBfzAfBgNVHSMEGDAWgBSsGgucxc6L/Z7i
bQnX6RFRpC03DTAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L3JCb0xuTVhPaV8yZTRtMEoxLWtSVWFRdE53MC5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvZDAvYTMyODcyLTg4YTMtNGU4NC05ZjgzLWFhNzM1M2Q0ZDk4Zi8x
L0hGWVhtUnk1YXRpeWJ2akNtbjhtcTNaU2dYOC5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZDAv
YTMyODcyLTg4YTMtNGU4NC05ZjgzLWFhNzM1M2Q0ZDk4Zi8xL3JCb0xuTVhPaV8y
ZTRtMEoxLWtSVWFRdE53MC5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAu
BggrBgEFBQcBBwEB/wQfMB0wDAQCAAEwBgMEArkgBDANBAIAAjAHAwUDKgQ9wDAN
BgkqhkiG9w0BAQsFAAOCAQEAmH03lp3gG+FYJC8U43NuebjsXrhq99ztf3t3IsPW
cgEdmOU514twGdYMK25a8AvrUiOx2X0SBMSMziAloh8df4rDLMbygwQizy7Tb42u
JwPHQdt0LHFRHTZsveEhrHfxedlJNLRPta3GCCpqki39bO43IruA+AyvP4PbrAOz
et99yQKYF2Qg/rnm1B3wq1Mu0z1t/wGstyN78t0vqt+FvlRcjAtTQpCOGpk/5leq
FVgZTxI3chhuUCyIxDMzXMG+m0jEZTYvjbbZLC845IlS+fNaeJ86uTgYnUq0YPyz
W7SNkP4yu2AXg7pDYcqgWMJnMiMXMqUlMI8UCHpsgBF2KQ==
-----END CERTIFICATE-----