Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/75/8065d5-04d0-43e5-a2f4-041a48d2123f/1/1-5e5olWtnrK8AaxjOh5lyFcTDCk.roa
File:                     1-5e5olWtnrK8AaxjOh5lyFcTDCk.roa (raw, json)
Hash identifier:          tqukViTTPFz89k8CbVWCLt4Uptv1XiJerqAG+a1B7C8=
Subject key identifier:   FB:97:B9:A2:55:AD:9E:B2:BC:01:AC:63:3A:1E:65:C8:57:13:0C:29
Certificate issuer:       /CN=a4767bc5fbcbcefb1c1c747bb0eb5337dab691c0
Certificate serial:       37ADC6F2
Authority key identifier: A4:76:7B:C5:FB:CB:CE:FB:1C:1C:74:7B:B0:EB:53:37:DA:B6:91:C0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/pHZ7xfvLzvscHHR7sOtTN9q2kcA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/75/8065d5-04d0-43e5-a2f4-041a48d2123f/1/1-5e5olWtnrK8AaxjOh5lyFcTDCk.roa
Signing time:             Sat 01 Jan 2022 12:05:32 +0000
ROA not before:           Sat 01 Jan 2022 12:05:32 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     33886
IP address blocks:        2a01:298:d34d::/48 maxlen: 48

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 934135538 (0x37adc6f2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a4767bc5fbcbcefb1c1c747bb0eb5337dab691c0
        Validity
            Not Before: Jan  1 12:05:32 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=fb97b9a255ad9eb2bc01ac633a1e65c857130c29
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:58:ba:31:5a:b4:5b:6c:1f:7a:47:7d:71:be:
                    ce:f9:e6:0a:e2:95:fc:9d:92:09:d9:d5:e6:58:75:
                    cf:db:5c:a0:07:1f:28:d4:f1:ad:7d:6f:c3:28:ef:
                    bb:3f:7a:1b:27:ea:e4:aa:5d:2c:f6:ee:55:6f:ee:
                    6a:a4:d8:c2:ca:be:4c:c6:ec:c5:4d:a3:81:e5:8b:
                    f0:8e:0f:14:f2:83:53:5d:48:bb:a2:a7:51:49:8d:
                    cc:64:c3:a4:77:0e:6e:0f:57:58:7e:65:dc:fc:62:
                    11:4e:66:1b:11:f0:ce:57:b0:f8:cd:62:98:6a:cc:
                    ca:3e:98:42:e9:f6:34:b2:6e:36:91:17:d9:63:fb:
                    92:c1:70:c1:33:f2:21:08:2f:95:b4:0c:6d:ba:68:
                    dc:3c:8b:b1:0e:0f:66:9d:23:a8:e1:2b:5c:14:16:
                    ac:89:a7:6d:cf:4f:34:f6:07:07:56:03:ef:27:d6:
                    ce:5c:06:88:49:83:8b:fa:38:0b:d7:44:93:69:9c:
                    c8:75:ca:36:6a:bb:ea:54:aa:60:75:03:37:8d:b7:
                    e9:fc:35:08:c5:39:76:37:9a:e7:f8:5a:3e:2f:a9:
                    14:7e:d3:1a:0f:fe:08:27:27:0e:2e:70:71:b9:76:
                    0c:58:be:8e:d1:82:be:34:ea:47:19:5c:cf:80:27:
                    2a:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FB:97:B9:A2:55:AD:9E:B2:BC:01:AC:63:3A:1E:65:C8:57:13:0C:29
            X509v3 Authority Key Identifier:
                keyid:A4:76:7B:C5:FB:CB:CE:FB:1C:1C:74:7B:B0:EB:53:37:DA:B6:91:C0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pHZ7xfvLzvscHHR7sOtTN9q2kcA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/75/8065d5-04d0-43e5-a2f4-041a48d2123f/1/1-5e5olWtnrK8AaxjOh5lyFcTDCk.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/75/8065d5-04d0-43e5-a2f4-041a48d2123f/1/pHZ7xfvLzvscHHR7sOtTN9q2kcA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a01:298:d34d::/48

    Signature Algorithm: sha256WithRSAEncryption
         67:57:08:7d:c9:fe:d7:b2:05:62:93:f5:4e:34:a1:0d:fe:bd:
         f5:6b:7d:75:f5:ee:42:b4:4c:24:c8:0a:05:1a:6c:a0:b6:23:
         c3:5a:da:7e:59:f0:25:50:49:6c:61:37:0b:5d:d8:77:37:11:
         15:cd:15:8b:85:ab:ec:ec:4e:9c:5d:72:bd:77:48:85:19:95:
         e8:e9:54:bc:6b:34:2a:88:54:29:08:de:08:53:05:56:68:2b:
         8b:5b:d6:27:9a:21:1a:df:21:03:fb:41:42:77:f3:17:4b:6f:
         c1:19:6c:1e:fd:c4:7d:c4:d1:eb:08:9b:5a:76:58:54:03:05:
         6b:59:43:05:4b:c5:37:c8:33:f8:4c:d2:e2:a0:fd:5a:ff:3f:
         3a:d2:ba:3f:ae:f2:cb:b9:f3:7f:82:f5:96:b5:84:fb:12:eb:
         c2:6a:1a:c1:4c:57:52:5c:5f:6f:d8:6e:1a:ba:61:36:3a:3c:
         4e:1b:06:ce:b6:a4:f7:15:76:d1:46:e6:56:0e:69:b2:c8:63:
         d5:8c:dd:52:89:19:b9:06:e5:c7:a2:dd:96:95:81:f8:92:b2:
         b4:d4:3a:84:e0:be:ee:df:af:34:2c:92:38:a2:d9:1b:e6:b7:
         64:c1:e1:5b:b0:2c:aa:95:a4:07:83:89:5f:1f:a7:a9:43:bb:
         1e:04:e4:03
-----BEGIN CERTIFICATE-----
MIIE8zCCA9ugAwIBAgIEN63G8jANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyhh
NDc2N2JjNWZiY2JjZWZiMWMxYzc0N2JiMGViNTMzN2RhYjY5MWMwMB4XDTIyMDEw
MTEyMDUzMloXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoZmI5N2I5YTI1NWFk
OWViMmJjMDFhYzYzM2ExZTY1Yzg1NzEzMGMyOTCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAKBYujFatFtsH3pHfXG+zvnmCuKV/J2SCdnV5lh1z9tcoAcf
KNTxrX1vwyjvuz96Gyfq5KpdLPbuVW/uaqTYwsq+TMbsxU2jgeWL8I4PFPKDU11I
u6KnUUmNzGTDpHcObg9XWH5l3PxiEU5mGxHwzlew+M1imGrMyj6YQun2NLJuNpEX
2WP7ksFwwTPyIQgvlbQMbbpo3DyLsQ4PZp0jqOErXBQWrImnbc9PNPYHB1YD7yfW
zlwGiEmDi/o4C9dEk2mcyHXKNmq76lSqYHUDN4236fw1CMU5djea5/haPi+pFH7T
Gg/+CCcnDi5wcbl2DFi+jtGCvjTqRxlcz4AnKh0CAwEAAaOCAg0wggIJMB0GA1Ud
DgQWBBT7l7miVa2esrwBrGM6HmXIVxMMKTAfBgNVHSMEGDAWgBSkdnvF+8vO+xwc
dHuw61M32raRwDAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L3BIWjd4ZnZMenZzY0hIUjdzT3RUTjlxMmtjQS5jZXIwgY4GCCsGAQUFBwELBIGB
MH8wfQYIKwYBBQUHMAuGcXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvNzUvODA2NWQ1LTA0ZDAtNDNlNS1hMmY0LTA0MWE0OGQyMTIzZi8x
LzEtNWU1b2xXdG5ySzhBYXhqT2g1bHlGY1REQ2sucm9hMIGBBgNVHR8EejB4MHag
dKByhnByc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzc1
LzgwNjVkNS0wNGQwLTQzZTUtYTJmNC0wNDFhNDhkMjEyM2YvMS9wSFo3eGZ2THp2
c2NISFI3c090VE45cTJrY0EuY3JsMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIw
IgYIKwYBBQUHAQcBAf8EEzARMA8EAgACMAkDBwAqAQKY000wDQYJKoZIhvcNAQEL
BQADggEBAGdXCH3J/teyBWKT9U40oQ3+vfVrfXX17kK0TCTICgUabKC2I8Na2n5Z
8CVQSWxhNwtd2Hc3ERXNFYuFq+zsTpxdcr13SIUZlejpVLxrNCqIVCkI3ghTBVZo
K4tb1ieaIRrfIQP7QUJ38xdLb8EZbB79xH3E0esIm1p2WFQDBWtZQwVLxTfIM/hM
0uKg/Vr/PzrSuj+u8su583+C9Za1hPsS68JqGsFMV1JcX2/Ybhq6YTY6PE4bBs62
pPcVdtFG5lYOabLIY9WM3VKJGbkG5cei3ZaVgfiSsrTUOoTgvu7frzQskjii2Rvm
t2TB4VuwLKqVpAeDiV8fp6lDux4E5AM=
-----END CERTIFICATE-----