Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/db/826b7c-4754-4abd-9875-e1b20077ed93/1/YgndZW5OXkCVNwhV6I39JjSWcEU.roa
File:                     YgndZW5OXkCVNwhV6I39JjSWcEU.roa (raw, json)
Hash identifier:          MikB4l4TjoB7OFDCDO5n65zKenwP6KMB0ljtHvev0rE=
Subject key identifier:   62:09:DD:65:6E:4E:5E:40:95:37:08:55:E8:8D:FD:26:34:96:70:45
Certificate issuer:       /CN=5289a5765a9e836fd0fa811f760f0dcebe8f18ce
Certificate serial:       41B1A0FD
Authority key identifier: 52:89:A5:76:5A:9E:83:6F:D0:FA:81:1F:76:0F:0D:CE:BE:8F:18:CE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Uomldlqeg2_Q-oEfdg8Nzr6PGM4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/db/826b7c-4754-4abd-9875-e1b20077ed93/1/YgndZW5OXkCVNwhV6I39JjSWcEU.roa
Signing time:             Sat 01 Jan 2022 10:54:30 +0000
ROA not before:           Sat 01 Jan 2022 10:54:30 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     197996
IP address blocks:        2a03:1880::/32 maxlen: 32

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1102160125 (0x41b1a0fd)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5289a5765a9e836fd0fa811f760f0dcebe8f18ce
        Validity
            Not Before: Jan  1 10:54:30 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=6209dd656e4e5e4095370855e88dfd2634967045
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:f1:53:bd:6a:de:99:bf:de:cb:2e:8f:5d:d1:
                    55:69:dd:25:bf:a1:7a:d6:d9:e3:ff:84:b5:6a:ac:
                    8b:91:50:13:6f:11:63:59:83:1a:df:66:23:57:95:
                    32:ba:f5:39:27:33:ce:79:fb:24:cb:c4:85:b3:2d:
                    ad:9e:0d:45:68:c8:7b:f6:55:54:81:ca:d9:c9:ac:
                    4d:b7:d8:9a:02:55:35:69:f9:8c:49:ec:fa:e4:f1:
                    8f:06:9a:44:a8:d6:52:be:6f:96:af:2b:83:f7:8e:
                    d6:38:f5:5a:f1:ab:06:e1:8b:89:39:a7:3f:dd:8b:
                    f2:c9:f9:e1:34:28:36:cd:40:b0:5c:ca:10:07:3e:
                    98:1a:3d:18:5c:14:c9:f3:c9:ac:7c:47:d2:a9:19:
                    39:fe:c0:74:9e:9c:6d:ab:9b:10:b6:8c:95:34:78:
                    8d:c3:74:3c:26:18:73:11:33:29:c7:00:4a:9d:be:
                    1e:4c:e6:34:54:2f:29:0f:36:d3:71:98:a7:5c:78:
                    66:63:1e:c5:ab:84:72:08:98:e1:e2:9b:1e:30:e4:
                    bb:1e:5c:56:54:3c:de:ff:91:ef:74:07:0c:32:24:
                    00:2e:05:74:00:f9:7f:c5:cf:ee:e2:86:ec:3b:5c:
                    49:31:d7:5d:9c:2c:03:67:d4:0d:dc:7c:65:e0:24:
                    2c:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                62:09:DD:65:6E:4E:5E:40:95:37:08:55:E8:8D:FD:26:34:96:70:45
            X509v3 Authority Key Identifier:
                keyid:52:89:A5:76:5A:9E:83:6F:D0:FA:81:1F:76:0F:0D:CE:BE:8F:18:CE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Uomldlqeg2_Q-oEfdg8Nzr6PGM4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/826b7c-4754-4abd-9875-e1b20077ed93/1/YgndZW5OXkCVNwhV6I39JjSWcEU.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/db/826b7c-4754-4abd-9875-e1b20077ed93/1/Uomldlqeg2_Q-oEfdg8Nzr6PGM4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a03:1880::/32

    Signature Algorithm: sha256WithRSAEncryption
         82:10:d3:09:cf:38:85:2d:5e:36:48:96:c6:1e:a4:53:dc:23:
         8b:3b:73:2d:83:c9:67:19:1b:dd:7e:9d:e2:c9:74:c1:d8:58:
         d7:e9:93:50:0b:47:39:15:09:78:37:43:9b:d3:31:c3:0e:15:
         ef:e0:e9:91:c8:68:ca:4c:57:87:21:1f:a4:e2:2c:d9:b7:11:
         b6:db:c6:9c:95:30:28:50:25:09:d7:03:48:af:9d:c3:de:58:
         ea:33:90:f3:ba:82:18:01:20:6c:d9:c4:be:d6:57:7c:64:e9:
         af:02:84:46:6b:c8:5e:7e:8a:37:3c:dd:1c:7c:ac:5c:e2:01:
         e1:83:f2:71:57:7f:4a:84:9c:28:0c:47:2c:37:77:87:72:e5:
         35:2d:f4:d1:ac:8b:4a:7f:a6:9e:65:50:3f:c0:da:0f:d6:01:
         8a:0d:6b:90:be:2b:77:c5:ce:19:50:7d:a4:16:91:88:76:99:
         4f:f6:f7:c0:09:3f:49:13:a8:cb:02:6e:33:e7:b2:ec:12:1b:
         56:e0:ad:99:50:75:49:cd:2e:e5:35:bd:3f:18:8c:3a:33:1b:
         5f:9d:f2:64:69:eb:95:33:35:d6:8e:ef:33:66:78:c1:af:c5:
         e5:29:5a:04:cc:c8:ab:46:df:3b:b2:ff:36:9b:8d:82:a6:56:
         52:bf:e1:5a
-----BEGIN CERTIFICATE-----
MIIE8DCCA9igAwIBAgIEQbGg/TANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg1
Mjg5YTU3NjVhOWU4MzZmZDBmYTgxMWY3NjBmMGRjZWJlOGYxOGNlMB4XDTIyMDEw
MTEwNTQzMFoXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoNjIwOWRkNjU2ZTRl
NWU0MDk1MzcwODU1ZTg4ZGZkMjYzNDk2NzA0NTCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAL/xU71q3pm/3ssuj13RVWndJb+hetbZ4/+EtWqsi5FQE28R
Y1mDGt9mI1eVMrr1OSczznn7JMvEhbMtrZ4NRWjIe/ZVVIHK2cmsTbfYmgJVNWn5
jEns+uTxjwaaRKjWUr5vlq8rg/eO1jj1WvGrBuGLiTmnP92L8sn54TQoNs1AsFzK
EAc+mBo9GFwUyfPJrHxH0qkZOf7AdJ6cbaubELaMlTR4jcN0PCYYcxEzKccASp2+
HkzmNFQvKQ8203GYp1x4ZmMexauEcgiY4eKbHjDkux5cVlQ83v+R73QHDDIkAC4F
dAD5f8XP7uKG7DtcSTHXXZwsA2fUDdx8ZeAkLC0CAwEAAaOCAgowggIGMB0GA1Ud
DgQWBBRiCd1lbk5eQJU3CFXojf0mNJZwRTAfBgNVHSMEGDAWgBRSiaV2Wp6Db9D6
gR92Dw3Ovo8YzjAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L1VvbWxkbHFlZzJfUS1vRWZkZzhOenI2UEdNNC5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvZGIvODI2YjdjLTQ3NTQtNGFiZC05ODc1LWUxYjIwMDc3ZWQ5My8x
L1lnbmRaVzVPWGtDVk53aFY2STM5SmpTV2NFVS5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZGIv
ODI2YjdjLTQ3NTQtNGFiZC05ODc1LWUxYjIwMDc3ZWQ5My8xL1VvbWxkbHFlZzJf
US1vRWZkZzhOenI2UEdNNC5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAg
BggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMFACoDGIAwDQYJKoZIhvcNAQELBQAD
ggEBAIIQ0wnPOIUtXjZIlsYepFPcI4s7cy2DyWcZG91+neLJdMHYWNfpk1ALRzkV
CXg3Q5vTMcMOFe/g6ZHIaMpMV4chH6TiLNm3EbbbxpyVMChQJQnXA0ivncPeWOoz
kPO6ghgBIGzZxL7WV3xk6a8ChEZryF5+ijc83Rx8rFziAeGD8nFXf0qEnCgMRyw3
d4dy5TUt9NGsi0p/pp5lUD/A2g/WAYoNa5C+K3fFzhlQfaQWkYh2mU/298AJP0kT
qMsCbjPnsuwSG1bgrZlQdUnNLuU1vT8YjDozG1+d8mRp65UzNdaO7zNmeMGvxeUp
WgTMyKtG3zuy/zabjYKmVlK/4Vo=
-----END CERTIFICATE-----