Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/b88ff8-fa66-4b7b-a9a0-69c435d32bc4/1/kg8eE9Huxm58vscTZj8jaXVGnUc.roa
File:                     kg8eE9Huxm58vscTZj8jaXVGnUc.roa (raw, json)
Hash identifier:          abEFozsxH6UI3bnoazwsnKFmBlIXdea5GNYLvChj/4o=
Subject key identifier:   92:0F:1E:13:D1:EE:C6:6E:7C:BE:C7:13:66:3F:23:69:75:46:9D:47
Certificate issuer:       /CN=f2aa7841643ab912508e610cd00adb6d0088da48
Certificate serial:       07C6D1D7
Authority key identifier: F2:AA:78:41:64:3A:B9:12:50:8E:61:0C:D0:0A:DB:6D:00:88:DA:48
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/8qp4QWQ6uRJQjmEM0ArbbQCI2kg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f6/b88ff8-fa66-4b7b-a9a0-69c435d32bc4/1/kg8eE9Huxm58vscTZj8jaXVGnUc.roa
Signing time:             Sat 01 Jan 2022 01:03:04 +0000
ROA not before:           Sat 01 Jan 2022 01:03:04 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     34471
IP address blocks:        5.182.160.0/22 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 130470359 (0x7c6d1d7)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f2aa7841643ab912508e610cd00adb6d0088da48
        Validity
            Not Before: Jan  1 01:03:04 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=920f1e13d1eec66e7cbec713663f236975469d47
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:e1:9e:76:09:fd:4b:31:c3:4b:24:70:6a:1c:
                    a9:7c:9a:53:8d:af:80:aa:cb:7d:aa:dd:ba:d2:1d:
                    f1:ba:59:20:d0:95:4c:dc:ea:fc:14:c4:92:dc:c7:
                    0a:d3:54:6d:86:c6:a4:5f:ec:2f:e5:43:70:ce:73:
                    0b:34:76:03:01:86:ab:56:e3:fd:87:1c:10:2a:77:
                    fb:1b:43:7d:f5:2b:5e:e4:0d:76:9e:f7:48:6f:72:
                    19:5e:34:81:49:4a:e8:4f:54:6f:27:48:b8:3d:4b:
                    6b:d0:84:7e:59:3e:01:bf:05:97:37:2e:66:ae:5d:
                    d9:77:df:8e:a2:ed:da:61:e4:44:84:10:d7:dd:ad:
                    88:35:c7:41:a8:01:a9:63:11:8c:e9:3e:fd:8d:e8:
                    81:4f:3d:d6:de:c6:34:7d:78:95:85:dc:da:fe:1e:
                    75:50:03:95:31:54:4c:64:cf:ef:cd:23:a8:b8:0c:
                    ad:8e:66:98:7e:25:04:40:fe:85:5f:79:d3:53:03:
                    4d:d3:f6:db:d4:23:a2:5f:b5:be:b1:3a:dc:ea:fb:
                    07:e8:ab:25:13:eb:30:2d:7c:10:c8:5a:9f:ec:89:
                    0e:15:4a:b2:3b:46:e8:ad:d8:58:8d:33:76:79:65:
                    b1:1e:40:8b:8d:3c:f4:db:38:51:64:26:18:b4:ce:
                    56:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                92:0F:1E:13:D1:EE:C6:6E:7C:BE:C7:13:66:3F:23:69:75:46:9D:47
            X509v3 Authority Key Identifier:
                keyid:F2:AA:78:41:64:3A:B9:12:50:8E:61:0C:D0:0A:DB:6D:00:88:DA:48

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8qp4QWQ6uRJQjmEM0ArbbQCI2kg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/b88ff8-fa66-4b7b-a9a0-69c435d32bc4/1/kg8eE9Huxm58vscTZj8jaXVGnUc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/b88ff8-fa66-4b7b-a9a0-69c435d32bc4/1/8qp4QWQ6uRJQjmEM0ArbbQCI2kg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  5.182.160.0/22

    Signature Algorithm: sha256WithRSAEncryption
         0b:da:00:d1:2d:3e:bf:d1:fd:ca:73:a0:40:9b:75:09:5d:b2:
         94:72:6c:cb:e0:25:cf:81:c9:df:76:42:21:ae:be:e4:b5:cf:
         5d:05:aa:b5:da:ba:d4:f7:81:01:6b:62:2e:28:1f:59:b6:ae:
         35:ff:30:fe:36:72:f3:95:cd:61:46:80:02:e2:6a:64:fa:ef:
         42:ef:74:c7:2d:eb:e8:09:ff:3a:78:bb:2c:e2:a7:3c:ba:f5:
         4b:55:8f:b7:63:c9:ed:bc:84:cd:ee:ef:f7:94:cb:36:7f:34:
         69:ab:d7:8c:52:fa:1b:78:33:d3:b7:34:41:e2:29:8f:88:e7:
         83:7b:7a:77:83:bb:a7:05:aa:29:86:1d:b5:75:b4:4f:8f:cd:
         0d:3b:a0:2d:31:c6:71:a9:a1:80:83:d1:46:00:57:77:76:1a:
         5e:d1:6d:2a:c9:5e:37:d4:be:b0:f7:21:f8:2c:ee:2d:72:74:
         3d:8f:0e:79:7b:db:ce:ae:84:f5:53:91:41:45:d0:2d:79:de:
         ec:07:57:7e:50:f5:83:af:58:1c:cd:25:b3:dd:d7:c8:14:9e:
         1e:b9:8a:e9:89:03:40:ff:11:0a:53:cf:a0:15:44:a3:54:ec:
         62:e5:73:87:b9:e6:60:a9:a2:52:30:0c:5a:40:c6:97:19:ca:
         b8:87:2d:32
-----BEGIN CERTIFICATE-----
MIIE7zCCA9egAwIBAgIEB8bR1zANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyhm
MmFhNzg0MTY0M2FiOTEyNTA4ZTYxMGNkMDBhZGI2ZDAwODhkYTQ4MB4XDTIyMDEw
MTAxMDMwNFoXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoOTIwZjFlMTNkMWVl
YzY2ZTdjYmVjNzEzNjYzZjIzNjk3NTQ2OWQ0NzCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAK/hnnYJ/Usxw0skcGocqXyaU42vgKrLfardutId8bpZINCV
TNzq/BTEktzHCtNUbYbGpF/sL+VDcM5zCzR2AwGGq1bj/YccECp3+xtDffUrXuQN
dp73SG9yGV40gUlK6E9UbydIuD1La9CEflk+Ab8FlzcuZq5d2XffjqLt2mHkRIQQ
192tiDXHQagBqWMRjOk+/Y3ogU891t7GNH14lYXc2v4edVADlTFUTGTP780jqLgM
rY5mmH4lBED+hV9501MDTdP229Qjol+1vrE63Or7B+irJRPrMC18EMhan+yJDhVK
sjtG6K3YWI0zdnllsR5Ai4089Ns4UWQmGLTOVpsCAwEAAaOCAgkwggIFMB0GA1Ud
DgQWBBSSDx4T0e7Gbny+xxNmPyNpdUadRzAfBgNVHSMEGDAWgBTyqnhBZDq5ElCO
YQzQCtttAIjaSDAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
LzhxcDRRV1E2dVJKUWptRU0wQXJiYlFDSTJrZy5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvZjYvYjg4ZmY4LWZhNjYtNGI3Yi1hOWEwLTY5YzQzNWQzMmJjNC8x
L2tnOGVFOUh1eG01OHZzY1RaajhqYVhWR25VYy5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZjYv
Yjg4ZmY4LWZhNjYtNGI3Yi1hOWEwLTY5YzQzNWQzMmJjNC8xLzhxcDRRV1E2dVJK
UWptRU0wQXJiYlFDSTJrZy5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAf
BggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAgW2oDANBgkqhkiG9w0BAQsFAAOC
AQEAC9oA0S0+v9H9ynOgQJt1CV2ylHJsy+Alz4HJ33ZCIa6+5LXPXQWqtdq61PeB
AWtiLigfWbauNf8w/jZy85XNYUaAAuJqZPrvQu90xy3r6An/Oni7LOKnPLr1S1WP
t2PJ7byEze7v95TLNn80aavXjFL6G3gz07c0QeIpj4jng3t6d4O7pwWqKYYdtXW0
T4/NDTugLTHGcamhgIPRRgBXd3YaXtFtKsleN9S+sPch+CzuLXJ0PY8OeXvbzq6E
9VORQUXQLXne7AdXflD1g69YHM0ls93XyBSeHrmK6YkDQP8RClPPoBVEo1TsYuVz
h7nmYKmiUjAMWkDGlxnKuIctMg==
-----END CERTIFICATE-----