Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d5/467a5f-fadb-4d5e-82f1-45d42d4be187/1/fFELDsoUE5KXe2gbXJG_5ktx12o.roa
File:                     fFELDsoUE5KXe2gbXJG_5ktx12o.roa (raw, json)
Hash identifier:          pFC8DC3OCFuoUGlreDhI/hgwuRHMILpGpOGiKh5w9W0=
Subject key identifier:   7C:51:0B:0E:CA:14:13:92:97:7B:68:1B:5C:91:BF:E6:4B:71:D7:6A
Certificate issuer:       /CN=135f438c4fccfb18e0e2ed3fc8dd9ee9f347c9b9
Certificate serial:       600C78
Authority key identifier: 13:5F:43:8C:4F:CC:FB:18:E0:E2:ED:3F:C8:DD:9E:E9:F3:47:C9:B9
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/E19DjE_M-xjg4u0_yN2e6fNHybk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d5/467a5f-fadb-4d5e-82f1-45d42d4be187/1/fFELDsoUE5KXe2gbXJG_5ktx12o.roa
Signing time:             Sat 01 Jan 2022 01:56:47 +0000
ROA not before:           Sat 01 Jan 2022 01:56:47 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     62240
IP address blocks:        146.19.76.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 6294648 (0x600c78)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=135f438c4fccfb18e0e2ed3fc8dd9ee9f347c9b9
        Validity
            Not Before: Jan  1 01:56:47 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=7c510b0eca141392977b681b5c91bfe64b71d76a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:e9:71:34:de:1b:f6:df:0b:d0:ef:a2:07:71:
                    ac:7e:44:9f:65:6b:8a:58:c9:c1:49:03:8e:5d:1a:
                    15:57:9f:3c:0c:2d:04:a6:c7:c4:13:94:fb:bc:cb:
                    ac:a6:57:b4:e9:fc:a3:a5:8d:4c:28:db:82:27:ee:
                    0e:6a:ee:f1:c3:5e:0a:81:aa:0d:b1:fa:91:e5:c5:
                    02:90:93:b0:51:f6:ae:d3:93:34:b5:51:48:41:78:
                    2d:d0:50:c1:08:62:f7:f4:b0:f6:e9:61:25:e3:4a:
                    a3:ac:ef:02:cd:4c:54:e7:32:8c:21:7d:8d:0c:e3:
                    8a:93:14:51:3d:4f:1a:2e:c6:70:3d:c5:c0:f0:ae:
                    65:f6:a5:a8:26:3a:1c:31:a5:ce:a6:bc:7b:59:5a:
                    24:ee:01:e0:c7:a6:c3:f6:07:e3:d9:03:2f:2a:fc:
                    39:3c:c8:ac:f2:29:10:6a:77:57:a8:82:24:6f:02:
                    80:40:6d:a7:37:a1:1e:79:35:17:fa:50:89:ec:23:
                    f2:24:e3:e1:9e:08:f8:9b:12:5e:e4:05:a8:4c:5c:
                    56:d7:fc:cd:0f:2d:74:0f:0b:ed:8c:f9:64:cf:5a:
                    e0:a8:6c:96:a9:a9:e7:8d:bd:36:86:c0:49:69:08:
                    a6:aa:d5:41:12:4d:24:25:c7:59:9d:7e:ed:4c:42:
                    f8:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7C:51:0B:0E:CA:14:13:92:97:7B:68:1B:5C:91:BF:E6:4B:71:D7:6A
            X509v3 Authority Key Identifier:
                keyid:13:5F:43:8C:4F:CC:FB:18:E0:E2:ED:3F:C8:DD:9E:E9:F3:47:C9:B9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/E19DjE_M-xjg4u0_yN2e6fNHybk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/467a5f-fadb-4d5e-82f1-45d42d4be187/1/fFELDsoUE5KXe2gbXJG_5ktx12o.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/467a5f-fadb-4d5e-82f1-45d42d4be187/1/E19DjE_M-xjg4u0_yN2e6fNHybk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  146.19.76.0/24

    Signature Algorithm: sha256WithRSAEncryption
         6d:ee:be:68:6f:f4:b7:50:ab:ae:71:c8:24:a7:ce:a3:3a:cb:
         7d:08:a5:c1:86:f4:1c:5d:60:fc:08:2a:3d:1d:a3:96:0a:7d:
         f5:ca:20:0c:02:88:c3:22:e3:9e:4c:30:05:b2:3e:c3:28:ab:
         16:fa:14:63:d4:7d:4e:52:74:f9:07:c8:a2:8c:6a:8d:9e:31:
         c5:e2:e9:fa:66:19:bb:80:b7:c3:44:87:b7:6a:fd:1a:8a:bf:
         7e:55:5f:3a:01:7c:1a:77:59:03:19:54:4f:6d:83:a6:d4:7e:
         64:a5:4c:22:d2:78:e0:8b:ed:34:c7:4a:ae:84:6e:29:45:45:
         98:34:26:d3:0e:87:c7:f7:6c:d5:d1:f4:fa:b8:7f:bd:a6:21:
         d1:85:db:d7:5b:7b:78:22:d3:68:39:a0:5c:3e:42:39:ab:b9:
         c0:fe:39:ab:be:2e:6e:9b:75:ae:df:f6:b0:c0:89:73:f4:72:
         91:5c:9f:f1:db:45:a4:99:ce:93:63:a8:71:d3:f8:b9:b8:1b:
         4a:5d:cf:42:d9:f6:65:ab:70:05:3b:be:67:1d:eb:1f:0f:6f:
         3c:5c:4e:f0:56:f5:58:92:ac:81:11:77:28:24:0a:46:a5:1c:
         2a:c9:c0:43:ff:6d:bc:b2:dc:6c:16:32:91:93:eb:67:01:c2:
         04:70:b9:b7
-----BEGIN CERTIFICATE-----
MIIE7jCCA9agAwIBAgIDYAx4MA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKDEz
NWY0MzhjNGZjY2ZiMThlMGUyZWQzZmM4ZGQ5ZWU5ZjM0N2M5YjkwHhcNMjIwMTAx
MDE1NjQ3WhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQDEyg3YzUxMGIwZWNhMTQx
MzkyOTc3YjY4MWI1YzkxYmZlNjRiNzFkNzZhMIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEA1ulxNN4b9t8L0O+iB3GsfkSfZWuKWMnBSQOOXRoVV588DC0E
psfEE5T7vMusple06fyjpY1MKNuCJ+4Oau7xw14KgaoNsfqR5cUCkJOwUfau05M0
tVFIQXgt0FDBCGL39LD26WEl40qjrO8CzUxU5zKMIX2NDOOKkxRRPU8aLsZwPcXA
8K5l9qWoJjocMaXOprx7WVok7gHgx6bD9gfj2QMvKvw5PMis8ikQandXqIIkbwKA
QG2nN6EeeTUX+lCJ7CPyJOPhngj4mxJe5AWoTFxW1/zNDy10DwvtjPlkz1rgqGyW
qannjb02hsBJaQimqtVBEk0kJcdZnX7tTEL4TwIDAQABo4ICCTCCAgUwHQYDVR0O
BBYEFHxRCw7KFBOSl3toG1yRv+ZLcddqMB8GA1UdIwQYMBaAFBNfQ4xPzPsY4OLt
P8jdnunzR8m5MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEFBQcBAQRYMFYwVAYIKwYB
BQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQv
RTE5RGpFX00teGpnNHUwX3lOMmU2Zk5IeWJrLmNlcjCBjQYIKwYBBQUHAQsEgYAw
fjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkv
REVGQVVMVC9kNS80NjdhNWYtZmFkYi00ZDVlLTgyZjEtNDVkNDJkNGJlMTg3LzEv
ZkZFTERzb1VFNUtYZTJnYlhKR181a3R4MTJvLnJvYTCBgQYDVR0fBHoweDB2oHSg
coZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNS80
NjdhNWYtZmFkYi00ZDVlLTgyZjEtNDVkNDJkNGJlMTg3LzEvRTE5RGpFX00teGpn
NHUwX3lOMmU2Zk5IeWJrLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8G
CCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAkhNMMA0GCSqGSIb3DQEBCwUAA4IB
AQBt7r5ob/S3UKuuccgkp86jOst9CKXBhvQcXWD8CCo9HaOWCn31yiAMAojDIuOe
TDAFsj7DKKsW+hRj1H1OUnT5B8iijGqNnjHF4un6Zhm7gLfDRIe3av0air9+VV86
AXwad1kDGVRPbYOm1H5kpUwi0njgi+00x0quhG4pRUWYNCbTDofH92zV0fT6uH+9
piHRhdvXW3t4ItNoOaBcPkI5q7nA/jmrvi5um3Wu3/awwIlz9HKRXJ/x20Wkmc6T
Y6hx0/i5uBtKXc9C2fZlq3AFO75nHesfD288XE7wVvVYkqyBEXcoJApGpRwqycBD
/228stxsFjKRk+tnAcIEcLm3
-----END CERTIFICATE-----