Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/d1350b-1b5d-420e-9c61-050cb256367a/1/AErWqC3soY2_7mchSlwv9rHLOtg.roa
File:                     AErWqC3soY2_7mchSlwv9rHLOtg.roa (raw, json)
Hash identifier:          kXBgc7NPrzs8Cxy1oVpFzHhGepTXAfLpELXCrHum74k=
Subject key identifier:   00:4A:D6:A8:2D:EC:A1:8D:BF:EE:67:21:4A:5C:2F:F6:B1:CB:3A:D8
Certificate issuer:       /CN=1250c17ee23ef7f35ca4c79d1d7adc87c7810869
Certificate serial:       013C59
Authority key identifier: 12:50:C1:7E:E2:3E:F7:F3:5C:A4:C7:9D:1D:7A:DC:87:C7:81:08:69
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ElDBfuI-9_NcpMedHXrch8eBCGk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d9/d1350b-1b5d-420e-9c61-050cb256367a/1/AErWqC3soY2_7mchSlwv9rHLOtg.roa
Signing time:             Sun 06 Mar 2022 07:52:37 +0000
ROA not before:           Sun 06 Mar 2022 07:52:37 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     50131
IP address blocks:        62.204.54.0/24 maxlen: 32

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 80985 (0x13c59)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1250c17ee23ef7f35ca4c79d1d7adc87c7810869
        Validity
            Not Before: Mar  6 07:52:37 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=004ad6a82deca18dbfee67214a5c2ff6b1cb3ad8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:28:fa:a1:5d:38:4b:13:84:17:36:e6:21:14:
                    8b:6b:a0:1e:4a:05:d7:a9:54:35:2a:5d:25:3b:4b:
                    13:72:70:e3:c8:66:33:69:94:57:bc:9d:01:95:47:
                    ed:4b:4c:61:69:f4:e8:07:7f:99:e3:3b:60:8a:d5:
                    41:17:53:58:db:a2:0c:89:4e:3b:fc:56:4e:35:fa:
                    34:9b:06:a3:25:07:c3:25:94:89:0c:a8:c1:d3:85:
                    56:6e:cf:5a:6d:46:c8:e3:c7:3c:2f:2e:8e:55:9f:
                    17:58:db:74:6e:e7:6b:e8:d4:1d:26:b1:03:72:9b:
                    c5:2c:87:a2:f5:e9:81:24:bb:fc:49:03:7e:0e:8f:
                    49:6e:45:8e:63:f8:67:c9:fb:df:16:a2:4d:a4:f6:
                    09:0b:02:ae:5c:fb:5f:40:88:28:fb:83:c3:69:22:
                    22:ad:d7:ac:ec:f9:df:8f:ce:e3:5d:35:1c:6b:0b:
                    2a:25:2f:a9:84:f9:f0:9f:ea:a6:16:a8:1c:34:f4:
                    d6:cc:17:b5:06:a9:24:6a:8b:22:00:b5:09:fd:a5:
                    cd:62:fe:51:ec:8b:82:c0:6a:99:75:d5:1f:5e:bb:
                    c3:4a:c0:3d:30:59:4c:89:c6:be:02:0e:25:1f:eb:
                    02:55:a2:42:6d:ad:2b:d9:88:e7:b8:53:41:df:0d:
                    09:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                00:4A:D6:A8:2D:EC:A1:8D:BF:EE:67:21:4A:5C:2F:F6:B1:CB:3A:D8
            X509v3 Authority Key Identifier:
                keyid:12:50:C1:7E:E2:3E:F7:F3:5C:A4:C7:9D:1D:7A:DC:87:C7:81:08:69

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ElDBfuI-9_NcpMedHXrch8eBCGk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/d1350b-1b5d-420e-9c61-050cb256367a/1/AErWqC3soY2_7mchSlwv9rHLOtg.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/d1350b-1b5d-420e-9c61-050cb256367a/1/ElDBfuI-9_NcpMedHXrch8eBCGk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  62.204.54.0/24

    Signature Algorithm: sha256WithRSAEncryption
         1c:d2:43:09:1e:10:a1:b5:bb:4f:74:9d:a0:67:5b:5b:1b:84:
         13:78:62:a2:6f:21:01:c0:46:cc:7a:8b:77:ac:68:4c:38:c0:
         87:ea:19:ac:27:52:fb:19:81:2c:14:91:9f:fc:09:dd:3e:bb:
         5e:70:d1:db:00:58:46:8a:87:b9:2e:2f:7d:f7:ee:c4:51:33:
         59:59:57:db:d0:7c:e3:de:48:61:7a:32:25:9f:85:05:c6:e6:
         4e:bd:c0:d8:c0:ab:2b:5d:10:f8:47:4b:2f:83:b0:23:83:d0:
         85:d8:d5:06:96:12:ee:3f:17:87:87:72:43:8e:1a:70:18:ed:
         aa:db:a7:23:5e:a0:bb:0f:af:ae:de:f8:eb:64:be:b3:29:9b:
         12:1c:4b:9f:29:0b:77:dd:c1:e0:77:d3:49:8a:05:22:78:60:
         e7:d5:96:08:60:b3:07:bc:0a:f8:72:30:2a:48:33:7b:3a:c9:
         b1:9d:e8:a7:98:8b:ce:05:df:de:d1:0b:61:a5:2f:f7:b8:4f:
         8e:74:5e:5a:81:bb:67:b7:04:78:c4:8a:43:8b:b5:8e:4e:6b:
         79:15:6f:f0:6c:20:71:b2:93:bb:32:ea:67:10:2d:d5:45:38:
         4a:d6:a2:c7:41:08:94:d2:fa:2d:f2:53:6a:2c:e3:10:76:ba:
         64:8b:de:d7
-----BEGIN CERTIFICATE-----
MIIE7jCCA9agAwIBAgIDATxZMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKDEy
NTBjMTdlZTIzZWY3ZjM1Y2E0Yzc5ZDFkN2FkYzg3Yzc4MTA4NjkwHhcNMjIwMzA2
MDc1MjM3WhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQDEygwMDRhZDZhODJkZWNh
MThkYmZlZTY3MjE0YTVjMmZmNmIxY2IzYWQ4MIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEAkSj6oV04SxOEFzbmIRSLa6AeSgXXqVQ1Kl0lO0sTcnDjyGYz
aZRXvJ0BlUftS0xhafToB3+Z4ztgitVBF1NY26IMiU47/FZONfo0mwajJQfDJZSJ
DKjB04VWbs9abUbI48c8Ly6OVZ8XWNt0budr6NQdJrEDcpvFLIei9emBJLv8SQN+
Do9JbkWOY/hnyfvfFqJNpPYJCwKuXPtfQIgo+4PDaSIirdes7Pnfj87jXTUcawsq
JS+phPnwn+qmFqgcNPTWzBe1BqkkaosiALUJ/aXNYv5R7IuCwGqZddUfXrvDSsA9
MFlMica+Ag4lH+sCVaJCba0r2YjnuFNB3w0JewIDAQABo4ICCTCCAgUwHQYDVR0O
BBYEFABK1qgt7KGNv+5nIUpcL/axyzrYMB8GA1UdIwQYMBaAFBJQwX7iPvfzXKTH
nR163IfHgQhpMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEFBQcBAQRYMFYwVAYIKwYB
BQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQv
RWxEQmZ1SS05X05jcE1lZEhYcmNoOGVCQ0drLmNlcjCBjQYIKwYBBQUHAQsEgYAw
fjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkv
REVGQVVMVC9kOS9kMTM1MGItMWI1ZC00MjBlLTljNjEtMDUwY2IyNTYzNjdhLzEv
QUVyV3FDM3NvWTJfN21jaFNsd3Y5ckhMT3RnLnJvYTCBgQYDVR0fBHoweDB2oHSg
coZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kOS9k
MTM1MGItMWI1ZC00MjBlLTljNjEtMDUwY2IyNTYzNjdhLzEvRWxEQmZ1SS05X05j
cE1lZEhYcmNoOGVCQ0drLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8G
CCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAPsw2MA0GCSqGSIb3DQEBCwUAA4IB
AQAc0kMJHhChtbtPdJ2gZ1tbG4QTeGKibyEBwEbMeot3rGhMOMCH6hmsJ1L7GYEs
FJGf/AndPrtecNHbAFhGioe5Li999+7EUTNZWVfb0Hzj3khhejIln4UFxuZOvcDY
wKsrXRD4R0svg7Ajg9CF2NUGlhLuPxeHh3JDjhpwGO2q26cjXqC7D6+u3vjrZL6z
KZsSHEufKQt33cHgd9NJigUieGDn1ZYIYLMHvAr4cjAqSDN7OsmxneinmIvOBd/e
0QthpS/3uE+OdF5agbtntwR4xIpDi7WOTmt5FW/wbCBxspO7MupnEC3VRThK1qLH
QQiU0vot8lNqLOMQdrpki97X
-----END CERTIFICATE-----