Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3c/5a9a99-43c2-4cc8-a37b-49501a7694c4/1/CKQOwf91rJkNRtTr4abPS2EpvGE.roa
File:                     CKQOwf91rJkNRtTr4abPS2EpvGE.roa (raw, json)
Hash identifier:          XZrZLmx+cGbijBNdk4JBEFYjiI6CnGN4XNx7vM4Gvoc=
Subject key identifier:   08:A4:0E:C1:FF:75:AC:99:0D:46:D4:EB:E1:A6:CF:4B:61:29:BC:61
Certificate issuer:       /CN=89dbc7156a4ee7c67d9e684767a2f4baf8a35bab
Certificate serial:       06455D02
Authority key identifier: 89:DB:C7:15:6A:4E:E7:C6:7D:9E:68:47:67:A2:F4:BA:F8:A3:5B:AB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/idvHFWpO58Z9nmhHZ6L0uvijW6s.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/3c/5a9a99-43c2-4cc8-a37b-49501a7694c4/1/CKQOwf91rJkNRtTr4abPS2EpvGE.roa
Signing time:             Sat 01 Jan 2022 11:05:13 +0000
ROA not before:           Sat 01 Jan 2022 11:05:13 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     208059
IP address blocks:        46.149.109.0/24 maxlen: 24
                          2a10:200::/36 maxlen: 48
                          2a10:200:affe::/48 maxlen: 48

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 105209090 (0x6455d02)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=89dbc7156a4ee7c67d9e684767a2f4baf8a35bab
        Validity
            Not Before: Jan  1 11:05:13 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=08a40ec1ff75ac990d46d4ebe1a6cf4b6129bc61
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:7e:47:2e:b3:d8:62:3e:3b:ee:33:d3:6a:b5:
                    ca:fa:0f:0c:20:69:e3:1e:90:96:72:e8:45:8a:1a:
                    ee:f7:9b:ab:09:58:5a:35:35:28:21:0b:e1:2e:ed:
                    b8:e4:db:ff:66:08:32:e5:46:a2:00:bf:38:e3:92:
                    dd:a2:e6:d6:30:b4:96:1f:9a:af:a2:26:e1:d5:d3:
                    fb:9c:c6:5f:1b:77:9a:37:e1:d5:91:7c:5d:1f:e2:
                    2b:6d:9a:83:f1:bb:12:78:01:f6:f7:d5:0a:36:8c:
                    a9:b5:0e:da:ff:b8:c2:53:b3:de:6d:88:cc:5d:be:
                    b9:a9:75:45:51:37:3f:67:9c:64:42:c8:bf:0d:bd:
                    7d:2e:a4:bb:8c:6b:8f:dc:d3:e2:a2:ef:6a:69:13:
                    3c:3a:aa:b1:05:ad:ec:53:46:f6:1e:94:ff:06:79:
                    03:1c:92:13:7e:48:85:65:3e:2b:c8:ae:93:75:51:
                    20:fb:3a:89:ef:c1:13:49:37:0a:bc:b9:e4:e1:1b:
                    b8:13:f2:96:6f:51:d2:b7:bf:86:40:bd:35:ef:84:
                    55:58:c2:ad:17:a2:89:80:15:96:a3:4a:ab:0f:55:
                    2d:cc:10:38:80:b9:85:56:a7:36:32:71:ef:e7:f9:
                    11:eb:15:5c:f6:d9:54:d3:ac:cd:70:aa:cd:84:da:
                    0c:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                08:A4:0E:C1:FF:75:AC:99:0D:46:D4:EB:E1:A6:CF:4B:61:29:BC:61
            X509v3 Authority Key Identifier:
                keyid:89:DB:C7:15:6A:4E:E7:C6:7D:9E:68:47:67:A2:F4:BA:F8:A3:5B:AB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/idvHFWpO58Z9nmhHZ6L0uvijW6s.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/5a9a99-43c2-4cc8-a37b-49501a7694c4/1/CKQOwf91rJkNRtTr4abPS2EpvGE.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/5a9a99-43c2-4cc8-a37b-49501a7694c4/1/idvHFWpO58Z9nmhHZ6L0uvijW6s.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  46.149.109.0/24
                IPv6:
                  2a10:200::/36
                  2a10:200:affe::/48

    Signature Algorithm: sha256WithRSAEncryption
         82:74:00:24:a7:d2:9a:62:77:a1:7e:2c:ed:93:41:73:53:1b:
         46:7d:e8:46:88:1c:a4:f5:28:86:f4:d9:3e:1f:46:39:17:30:
         44:1f:4f:e6:9e:80:a8:21:86:ee:c9:e1:7e:9b:38:e4:44:72:
         3c:6c:b0:5d:34:57:5a:d0:1f:41:84:19:86:5b:f3:3a:8c:39:
         d3:49:81:65:bb:53:c6:a6:04:c0:7e:1b:be:b6:eb:65:60:ed:
         3a:66:53:c0:c5:83:fc:6b:77:d8:3d:c6:16:ce:ee:d0:7a:26:
         db:1c:d3:28:17:70:31:18:66:15:6a:0c:d5:d9:65:62:70:87:
         c3:28:67:5a:3b:7a:64:4c:e0:4b:5e:f6:76:7c:1e:0a:4a:56:
         fe:48:92:24:58:72:65:a9:86:02:c5:c6:24:8b:5b:5c:a8:78:
         9d:14:9c:61:66:b1:4b:3c:70:13:04:64:4f:e5:99:be:ef:f0:
         bb:29:a7:8a:77:5d:51:91:53:cd:40:14:40:d9:70:00:62:e8:
         a3:e4:db:4e:f2:84:d3:71:d1:c0:dd:e5:15:9c:49:48:3e:98:
         6a:a1:c3:12:fe:ae:77:cb:54:89:df:75:7a:b5:80:f6:fa:8a:
         2b:94:48:e1:7a:1f:29:bb:34:c8:a9:72:23:92:39:b5:26:c7:
         b1:93:46:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----