Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f5/4377d6-515c-420a-9134-69e337884cc9/1/XYI54e1U4Cfq6Y9gxkk88HSM0Ds.roa
File:                     XYI54e1U4Cfq6Y9gxkk88HSM0Ds.roa (raw, json)
Hash identifier:          dXSIu9aNyfyRyoQ7thcoOgADB2XqSsGesxyMBs169+I=
Subject key identifier:   5D:82:39:E1:ED:54:E0:27:EA:E9:8F:60:C6:49:3C:F0:74:8C:D0:3B
Certificate issuer:       /CN=de92a1ac8910cf5c865de5b0231b09d04e1132f3
Certificate serial:       01849FE1097D661438B3F1CA76970E9CF9C0
Authority key identifier: DE:92:A1:AC:89:10:CF:5C:86:5D:E5:B0:23:1B:09:D0:4E:11:32:F3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/3pKhrIkQz1yGXeWwIxsJ0E4RMvM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f5/4377d6-515c-420a-9134-69e337884cc9/1/XYI54e1U4Cfq6Y9gxkk88HSM0Ds.roa
Signing time:             Tue 22 Nov 2022 15:07:16 +0000
ROA not before:           Tue 22 Nov 2022 15:07:16 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     201320
IP address blocks:        194.48.93.0/24 maxlen: 32

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:84:9f:e1:09:7d:66:14:38:b3:f1:ca:76:97:0e:9c:f9:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=de92a1ac8910cf5c865de5b0231b09d04e1132f3
        Validity
            Not Before: Nov 22 15:07:16 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=5d8239e1ed54e027eae98f60c6493cf0748cd03b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:54:3a:31:58:d8:23:da:f5:23:f5:bb:ec:71:
                    3a:9d:1d:2d:3a:01:b9:00:01:7a:39:f7:b5:68:83:
                    cc:dc:23:ca:3b:57:68:a0:61:e4:ac:cc:9d:18:fe:
                    4a:f0:f7:a4:ad:e2:85:4a:ab:48:ca:91:30:f9:e8:
                    b1:03:40:62:8d:10:56:55:1e:3e:b0:91:a9:84:db:
                    ac:f6:9f:51:b8:57:02:53:bd:b7:b6:47:73:0f:2f:
                    09:4c:13:7f:50:f0:e4:4f:ff:6b:92:2d:bc:68:85:
                    d7:14:8e:90:84:72:25:97:22:79:1b:b9:4d:95:24:
                    a0:a7:88:b4:5d:9b:9c:98:5d:fe:c5:61:94:63:92:
                    b1:df:28:7c:44:82:68:1a:80:77:01:d3:f0:b9:6a:
                    de:0d:0f:e2:66:4b:5d:d0:da:af:18:06:6b:2e:a5:
                    82:17:35:6e:9e:69:4c:0a:d1:a1:85:6f:c9:fd:89:
                    06:82:04:06:d1:6f:fe:25:16:d5:7b:01:ca:a8:70:
                    09:4b:fe:cc:e3:ea:97:a5:0f:ed:7b:8d:82:c5:95:
                    83:1e:83:04:08:e0:a5:5e:41:8d:56:f3:03:6d:9a:
                    18:82:ef:5b:80:f2:55:80:40:ca:fc:ed:72:33:44:
                    2f:0f:c5:fe:d0:09:12:f7:b9:19:07:04:5e:27:fa:
                    c4:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5D:82:39:E1:ED:54:E0:27:EA:E9:8F:60:C6:49:3C:F0:74:8C:D0:3B
            X509v3 Authority Key Identifier:
                keyid:DE:92:A1:AC:89:10:CF:5C:86:5D:E5:B0:23:1B:09:D0:4E:11:32:F3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3pKhrIkQz1yGXeWwIxsJ0E4RMvM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/4377d6-515c-420a-9134-69e337884cc9/1/XYI54e1U4Cfq6Y9gxkk88HSM0Ds.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/4377d6-515c-420a-9134-69e337884cc9/1/3pKhrIkQz1yGXeWwIxsJ0E4RMvM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  194.48.93.0/24

    Signature Algorithm: sha256WithRSAEncryption
         57:5c:56:e1:6a:e8:cb:62:43:f2:55:b1:81:ff:b3:02:d5:bb:
         05:0b:02:65:e6:99:e9:10:54:dc:5b:8d:e6:f5:09:3f:1e:65:
         d2:07:a8:9e:6e:78:8d:00:56:b5:ca:8e:2b:1c:33:b6:d3:ee:
         42:e7:db:f4:dd:73:e1:be:a3:e9:58:4b:4c:3f:85:e7:39:65:
         8d:4f:e8:c5:3c:1a:79:37:dc:25:78:16:19:48:2e:3b:2f:14:
         37:65:5d:42:a1:ac:a9:a1:53:db:6a:7d:e2:6d:b0:24:b6:c9:
         72:9c:47:72:b0:e5:44:0a:9e:62:f6:b8:69:20:fe:70:f7:be:
         54:e9:47:d2:fc:9a:61:41:fb:18:53:6d:24:3e:39:d6:29:69:
         9d:da:1c:09:ce:ea:fc:b2:ba:aa:94:6b:bc:91:d8:6a:55:82:
         51:4f:16:c0:5a:8a:d4:ba:a8:dc:97:62:cd:bb:76:6a:b5:e4:
         bc:43:da:a1:59:02:38:73:c6:0a:76:ed:de:cb:d9:ee:46:aa:
         3f:7c:0c:8f:5d:58:cd:0f:38:38:78:88:2a:aa:88:56:aa:ba:
         03:9b:af:a5:b9:90:71:79:95:4f:ac:b1:0c:8f:bf:f9:20:90:
         96:39:95:b0:cf:bf:e9:1a:f7:55:0a:38:83:f9:53:72:65:93:
         3f:82:34:64
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYSf4Ql9ZhQ4s/HKdpcOnPnAMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRlOTJhMWFjODkxMGNmNWM4NjVkZTViMDIzMWIwOWQwNGUx
MTMyZjMwHhcNMjIxMTIyMTUwNzE2WhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg1ZDgyMzllMWVkNTRlMDI3ZWFlOThmNjBjNjQ5M2NmMDc0OGNkMDNiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl1Q6MVjYI9r1I/W77HE6nR0tOgG5
AAF6Ofe1aIPM3CPKO1dooGHkrMydGP5K8PekreKFSqtIypEw+eixA0BijRBWVR4+
sJGphNus9p9RuFcCU723tkdzDy8JTBN/UPDkT/9rki28aIXXFI6QhHIllyJ5G7lN
lSSgp4i0XZucmF3+xWGUY5Kx3yh8RIJoGoB3AdPwuWreDQ/iZktd0NqvGAZrLqWC
FzVunmlMCtGhhW/J/YkGggQG0W/+JRbVewHKqHAJS/7M4+qXpQ/te42CxZWDHoME
COClXkGNVvMDbZoYgu9bgPJVgEDK/O1yM0QvD8X+0AkS97kZBwReJ/rEgQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFF2COeHtVOAn6umPYMZJPPB0jNA7MB8GA1UdIwQY
MBaAFN6SoayJEM9chl3lsCMbCdBOETLzMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvM3BLaHJJa1F6MXlHWGVXd0l4c0owRTRSTXZNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNS80Mzc3ZDYtNTE1Yy00MjBhLTkxMzQt
NjllMzM3ODg0Y2M5LzEvWFlJNTRlMVU0Q2ZxNlk5Z3hrazg4SFNNMERzLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mNS80Mzc3ZDYtNTE1Yy00MjBhLTkxMzQtNjllMzM3ODg0Y2M5
LzEvM3BLaHJJa1F6MXlHWGVXd0l4c0owRTRSTXZNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwjBdMA0G
CSqGSIb3DQEBCwUAA4IBAQBXXFbhaujLYkPyVbGB/7MC1bsFCwJl5pnpEFTcW43m
9Qk/HmXSB6iebniNAFa1yo4rHDO20+5C59v03XPhvqPpWEtMP4XnOWWNT+jFPBp5
N9wleBYZSC47LxQ3ZV1CoaypoVPban3ibbAktslynEdysOVECp5i9rhpIP5w975U
6UfS/JphQfsYU20kPjnWKWmd2hwJzur8srqqlGu8kdhqVYJRTxbAWorUuqjcl2LN
u3ZqteS8Q9qhWQI4c8YKdu3ey9nuRqo/fAyPXVjNDzg4eIgqqohWqroDm6+luZBx
eZVPrLEMj7/5IJCWOZWwz7/pGvdVCjiD+VNyZZM/gjRk
-----END CERTIFICATE-----