Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a0/c4f80c-7b69-4fec-aa54-e5f98ddafc98/1/tSm0tJo0QHMm82u5RJEMW81a50Q.roa
File:                     tSm0tJo0QHMm82u5RJEMW81a50Q.roa (raw, json)
Hash identifier:          NH6rLJ2VCblDf3DByt/XB8aFnFdH9+O2MgzfGPpS9Ng=
Subject key identifier:   B5:29:B4:B4:9A:34:40:73:26:F3:6B:B9:44:91:0C:5B:CD:5A:E7:44
Certificate issuer:       /CN=1517d4f58af84f50ce42f13293ede4aff12d173f
Certificate serial:       1B406B19
Authority key identifier: 15:17:D4:F5:8A:F8:4F:50:CE:42:F1:32:93:ED:E4:AF:F1:2D:17:3F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/FRfU9Yr4T1DOQvEyk-3kr_EtFz8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a0/c4f80c-7b69-4fec-aa54-e5f98ddafc98/1/tSm0tJo0QHMm82u5RJEMW81a50Q.roa
Signing time:             Sat 01 Jan 2022 06:06:03 +0000
ROA not before:           Sat 01 Jan 2022 06:06:03 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     29447
IP address blocks:        37.160.0.0/14 maxlen: 18

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 457206553 (0x1b406b19)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1517d4f58af84f50ce42f13293ede4aff12d173f
        Validity
            Not Before: Jan  1 06:06:03 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=b529b4b49a34407326f36bb944910c5bcd5ae744
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f5:c3:5f:20:fa:4f:5d:0c:6a:8e:cb:dc:e9:c8:
                    77:55:5b:a2:5e:37:52:15:7a:85:b8:6b:b3:67:62:
                    b2:6e:6f:d0:61:02:c2:37:65:ea:20:11:3c:e6:49:
                    23:bb:7a:fa:55:69:97:97:5d:38:8b:b2:f0:6d:dd:
                    95:c3:6c:ed:b3:24:63:7c:79:36:87:56:5c:48:8f:
                    73:94:20:cf:71:13:db:d7:06:28:89:71:6c:c0:c7:
                    79:bc:6d:06:37:ac:db:d1:7b:e4:7d:25:33:0b:f4:
                    fe:a8:06:da:fc:0c:8b:a3:d4:4b:7e:3e:03:72:15:
                    18:c7:87:71:ee:40:61:3c:80:a7:05:c3:29:d0:2c:
                    ce:52:7a:dc:0a:17:67:50:8d:80:31:93:33:bb:9f:
                    da:49:9a:d1:47:8b:95:9d:85:ac:18:20:4d:b8:d8:
                    96:f0:34:a9:12:5b:64:d4:eb:0c:43:93:51:ec:96:
                    a9:49:11:9a:6c:13:53:fa:8a:ef:7c:70:da:b5:bb:
                    76:bd:09:a4:af:4c:e8:ec:ec:57:29:a3:83:71:7e:
                    31:30:c6:ce:79:ca:95:f1:ec:a6:90:2e:25:7b:80:
                    4d:50:b8:37:c1:5c:6f:56:95:74:d9:dc:ec:91:c9:
                    f3:71:99:dc:d4:ec:83:88:c9:fb:5c:ac:e3:ee:54:
                    4b:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B5:29:B4:B4:9A:34:40:73:26:F3:6B:B9:44:91:0C:5B:CD:5A:E7:44
            X509v3 Authority Key Identifier:
                keyid:15:17:D4:F5:8A:F8:4F:50:CE:42:F1:32:93:ED:E4:AF:F1:2D:17:3F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FRfU9Yr4T1DOQvEyk-3kr_EtFz8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/c4f80c-7b69-4fec-aa54-e5f98ddafc98/1/tSm0tJo0QHMm82u5RJEMW81a50Q.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/c4f80c-7b69-4fec-aa54-e5f98ddafc98/1/FRfU9Yr4T1DOQvEyk-3kr_EtFz8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  37.160.0.0/14

    Signature Algorithm: sha256WithRSAEncryption
         92:09:d9:ab:04:73:06:0b:64:e2:44:8a:dc:f5:5a:1c:bc:a7:
         06:f4:10:91:c0:c4:f2:7f:0f:27:bb:a4:63:48:72:7d:6f:9f:
         2d:f0:2d:35:6b:2d:fe:16:e7:ec:77:c1:6f:65:1d:6d:68:fa:
         c5:70:3c:b5:4c:ec:0f:0e:7c:67:15:9a:b9:c0:a2:2a:29:9a:
         e3:d9:38:d8:1a:34:80:06:bd:68:6a:08:e7:eb:b9:4e:b0:a7:
         3a:08:97:8f:ca:90:b2:17:23:98:01:ad:c5:2e:10:f0:11:0b:
         f1:23:f6:c7:ea:57:7f:3d:03:ae:1f:8f:53:96:84:81:43:b6:
         3a:7f:d3:5b:84:79:e9:91:23:e9:3b:65:0e:f5:e9:95:72:3c:
         0e:16:75:2c:0b:6d:90:55:66:94:26:b9:01:62:2b:ed:72:0b:
         6f:43:94:ee:ef:0c:5e:53:2c:35:9b:29:21:79:51:14:f8:b8:
         7f:36:8c:f1:ee:90:3e:9a:1d:fd:d2:d2:f7:20:b6:7e:69:9d:
         96:f8:4b:2a:cd:d7:c2:d3:1b:3e:4d:0f:18:69:1e:a0:75:61:
         98:b3:7c:0e:cc:da:d8:17:d5:5b:c7:8a:50:4d:86:f2:95:8b:
         32:91:46:d0:83:9f:69:56:15:76:b4:5d:df:a4:51:71:e3:40:
         71:c9:99:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----