Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/df/376662-87eb-4c97-9373-a1dce6ad150c/1/Ch_vdhrXHM171QokEjhwh9gRpQM.roa
File:                     Ch_vdhrXHM171QokEjhwh9gRpQM.roa (raw, json)
Hash identifier:          mvf0Fx9Rt+1ruQbxNEBkpEZxE7w9CSQlRce+pobQcTo=
Subject key identifier:   0A:1F:EF:76:1A:D7:1C:CD:7B:D5:0A:24:12:38:70:87:D8:11:A5:03
Certificate issuer:       /CN=e858338dea6ae4ddbb24850a0707f43aa1794c3f
Certificate serial:       05C4FC68
Authority key identifier: E8:58:33:8D:EA:6A:E4:DD:BB:24:85:0A:07:07:F4:3A:A1:79:4C:3F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/6Fgzjepq5N27JIUKBwf0OqF5TD8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/df/376662-87eb-4c97-9373-a1dce6ad150c/1/Ch_vdhrXHM171QokEjhwh9gRpQM.roa
Signing time:             Sat 01 Jan 2022 16:04:48 +0000
ROA not before:           Sat 01 Jan 2022 16:04:48 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     205262
IP address blocks:        185.246.100.0/22 maxlen: 22

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 96795752 (0x5c4fc68)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e858338dea6ae4ddbb24850a0707f43aa1794c3f
        Validity
            Not Before: Jan  1 16:04:48 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=0a1fef761ad71ccd7bd50a2412387087d811a503
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:43:67:c4:93:e7:71:ba:27:77:45:59:13:d6:
                    99:b3:d4:10:80:fd:33:49:28:26:54:1c:4e:ab:72:
                    c3:d4:2a:60:64:6f:aa:42:a8:95:0b:b2:15:f6:59:
                    4a:9d:82:24:42:9c:eb:22:b5:59:76:82:14:f8:af:
                    b5:c1:ff:5b:3e:fe:34:81:94:c3:c7:8f:f9:43:da:
                    78:e7:66:03:7e:7c:7c:9f:25:49:ad:50:fd:76:d9:
                    41:b1:48:d3:0c:41:58:78:e5:9b:aa:39:2c:35:8f:
                    d1:fb:19:b3:47:fd:fc:07:06:e3:23:a1:8f:51:8f:
                    e8:20:ab:2c:b6:cf:13:09:ee:ad:9e:93:8f:8a:d2:
                    56:fc:d6:42:4e:c3:d0:b5:93:3c:3a:f1:51:74:87:
                    9d:a1:c0:e3:f5:0d:0d:08:ed:91:76:10:e8:f9:a8:
                    40:ec:35:d7:22:8f:e3:4f:f8:d9:ea:7b:ff:ae:09:
                    1b:50:8c:ed:eb:25:f4:e3:5b:ac:4a:f0:fd:36:bf:
                    69:b7:a9:0a:7f:c9:2b:0c:cc:32:87:12:c7:60:74:
                    c9:2b:87:4f:b6:48:aa:e6:34:ae:5b:f3:3e:82:9a:
                    d6:ba:ad:cb:40:f9:0d:96:45:d8:55:fe:1c:78:c9:
                    eb:cc:64:cc:ae:f5:b3:1f:b7:52:fe:03:8e:44:ec:
                    34:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0A:1F:EF:76:1A:D7:1C:CD:7B:D5:0A:24:12:38:70:87:D8:11:A5:03
            X509v3 Authority Key Identifier:
                keyid:E8:58:33:8D:EA:6A:E4:DD:BB:24:85:0A:07:07:F4:3A:A1:79:4C:3F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6Fgzjepq5N27JIUKBwf0OqF5TD8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/376662-87eb-4c97-9373-a1dce6ad150c/1/Ch_vdhrXHM171QokEjhwh9gRpQM.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/df/376662-87eb-4c97-9373-a1dce6ad150c/1/6Fgzjepq5N27JIUKBwf0OqF5TD8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.246.100.0/22

    Signature Algorithm: sha256WithRSAEncryption
         12:bf:00:5e:5c:95:c6:3e:43:e5:a1:e7:ee:a3:d2:a4:19:ad:
         d4:9a:a7:ce:aa:84:a8:70:35:52:d4:81:5f:8a:7f:52:ce:0e:
         c8:c6:e9:44:1e:94:95:e7:54:5c:55:a3:e0:d7:5e:fa:c9:b9:
         7a:cd:85:d6:d6:9c:99:2c:45:2a:8a:ee:fe:7d:af:89:83:10:
         36:17:cf:38:a3:06:d8:34:c7:36:c2:9b:d2:c6:e4:0c:50:67:
         63:0e:c2:bc:d6:5e:54:d7:b1:23:21:bc:50:fe:c2:a4:67:4c:
         18:86:34:35:57:a7:f1:00:55:ed:59:13:bf:9c:7a:9d:c2:32:
         38:22:65:44:7c:f1:78:ac:c3:0b:ab:f3:07:64:b4:2b:14:cc:
         d6:96:85:05:4e:f0:30:30:0f:a3:c1:7b:e7:bb:2f:0f:4a:57:
         e7:5c:8f:f3:fb:95:5d:f3:75:b8:fd:6b:67:28:87:81:4d:7d:
         50:14:89:06:1d:0b:36:5a:11:b5:82:c0:75:1d:39:5c:18:cb:
         8e:5f:93:ec:0d:fa:26:a6:cf:fb:7b:92:d5:ba:c2:93:8f:49:
         df:67:ef:fd:d2:31:60:5d:84:6e:a4:97:f1:9f:ca:5f:12:6e:
         84:f9:e5:d2:12:34:4f:62:bf:20:f6:12:1d:31:d6:99:06:5b:
         88:5c:f8:86
-----BEGIN CERTIFICATE-----
MIIE7zCCA9egAwIBAgIEBcT8aDANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyhl
ODU4MzM4ZGVhNmFlNGRkYmIyNDg1MGEwNzA3ZjQzYWExNzk0YzNmMB4XDTIyMDEw
MTE2MDQ0OFoXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoMGExZmVmNzYxYWQ3
MWNjZDdiZDUwYTI0MTIzODcwODdkODExYTUwMzCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAL5DZ8ST53G6J3dFWRPWmbPUEID9M0koJlQcTqtyw9QqYGRv
qkKolQuyFfZZSp2CJEKc6yK1WXaCFPivtcH/Wz7+NIGUw8eP+UPaeOdmA358fJ8l
Sa1Q/XbZQbFI0wxBWHjlm6o5LDWP0fsZs0f9/AcG4yOhj1GP6CCrLLbPEwnurZ6T
j4rSVvzWQk7D0LWTPDrxUXSHnaHA4/UNDQjtkXYQ6PmoQOw11yKP40/42ep7/64J
G1CM7esl9ONbrErw/Ta/abepCn/JKwzMMocSx2B0ySuHT7ZIquY0rlvzPoKa1rqt
y0D5DZZF2FX+HHjJ68xkzK71sx+3Uv4DjkTsNC0CAwEAAaOCAgkwggIFMB0GA1Ud
DgQWBBQKH+92GtcczXvVCiQSOHCH2BGlAzAfBgNVHSMEGDAWgBToWDON6mrk3bsk
hQoHB/Q6oXlMPzAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
LzZGZ3pqZXBxNU4yN0pJVUtCd2YwT3FGNVREOC5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvZGYvMzc2NjYyLTg3ZWItNGM5Ny05MzczLWExZGNlNmFkMTUwYy8x
L0NoX3ZkaHJYSE0xNzFRb2tFamh3aDlnUnBRTS5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZGYv
Mzc2NjYyLTg3ZWItNGM5Ny05MzczLWExZGNlNmFkMTUwYy8xLzZGZ3pqZXBxNU4y
N0pJVUtCd2YwT3FGNVREOC5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAf
BggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEArn2ZDANBgkqhkiG9w0BAQsFAAOC
AQEAEr8AXlyVxj5D5aHn7qPSpBmt1JqnzqqEqHA1UtSBX4p/Us4OyMbpRB6UledU
XFWj4Nde+sm5es2F1tacmSxFKoru/n2viYMQNhfPOKMG2DTHNsKb0sbkDFBnYw7C
vNZeVNexIyG8UP7CpGdMGIY0NVen8QBV7VkTv5x6ncIyOCJlRHzxeKzDC6vzB2S0
KxTM1paFBU7wMDAPo8F757svD0pX51yP8/uVXfN1uP1rZyiHgU19UBSJBh0LNloR
tYLAdR05XBjLjl+T7A36JqbP+3uS1brCk49J32fv/dIxYF2EbqSX8Z/KXxJuhPnl
0hI0T2K/IPYSHTHWmQZbiFz4hg==
-----END CERTIFICATE-----