Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/6fd5d2-b7ce-4b3d-8f2c-138bbaac7fe2/1/RHPSrkgtdWU82Ym0SJzDc9yRNkA.roa
File:                     RHPSrkgtdWU82Ym0SJzDc9yRNkA.roa (raw, json)
Hash identifier:          UNi/khtBUJLb3erwMeHYoWMhYGe4e7YQsXNysuTsPGg=
Subject key identifier:   44:73:D2:AE:48:2D:75:65:3C:D9:89:B4:48:9C:C3:73:DC:91:36:40
Certificate issuer:       /CN=e6e4687ab8b1eb6de1abd04a07617c86d118518d
Certificate serial:       03B4BAF7
Authority key identifier: E6:E4:68:7A:B8:B1:EB:6D:E1:AB:D0:4A:07:61:7C:86:D1:18:51:8D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/5uRoerix623hq9BKB2F8htEYUY0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c5/6fd5d2-b7ce-4b3d-8f2c-138bbaac7fe2/1/RHPSrkgtdWU82Ym0SJzDc9yRNkA.roa
Signing time:             Sat 01 Jan 2022 01:55:35 +0000
ROA not before:           Sat 01 Jan 2022 01:55:35 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     3356
IP address blocks:        185.217.166.0/24 maxlen: 24
                          2a10:d504::/48 maxlen: 48

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 62175991 (0x3b4baf7)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e6e4687ab8b1eb6de1abd04a07617c86d118518d
        Validity
            Not Before: Jan  1 01:55:35 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=4473d2ae482d75653cd989b4489cc373dc913640
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:af:3e:e0:3b:42:1c:02:00:2e:17:97:92:95:
                    7c:70:35:ee:de:48:e3:a6:ff:14:f0:57:05:66:56:
                    fe:d0:97:a8:77:dc:d8:0b:f8:7f:0e:4c:cc:e7:a4:
                    88:1d:07:fa:50:fd:57:fb:d5:61:88:32:c6:4c:f8:
                    cf:cc:b8:2f:59:a3:ec:4a:a4:30:96:7f:d5:9d:ce:
                    67:2d:bd:c5:a0:c4:32:3e:e2:db:12:a3:79:41:c3:
                    06:fe:e2:0d:0d:0c:7c:ef:73:5c:a4:56:be:e9:18:
                    b5:39:6c:3a:ef:8d:dd:8e:5e:27:d0:4f:87:77:83:
                    41:b1:f9:bf:47:57:e9:05:a2:38:36:3f:5e:b3:2f:
                    cc:89:8f:e4:24:98:87:61:41:8b:da:0f:ed:26:6b:
                    3f:e5:13:af:c5:cd:1b:7a:f2:32:fa:6c:67:5a:b7:
                    44:3e:47:bd:c9:43:d4:b1:93:d8:e4:7a:0e:0d:a2:
                    69:a1:59:b8:23:e1:a9:22:d4:0e:be:a7:95:6b:63:
                    3d:c3:d6:fb:f5:19:b3:2e:b4:dc:50:83:b1:61:aa:
                    6d:9c:7d:dd:11:b5:8c:54:fa:98:2a:8c:cc:af:e6:
                    36:59:56:11:77:52:0a:f4:4d:0b:70:51:77:8a:14:
                    cf:dc:fb:68:8d:ed:a9:b7:14:60:16:4e:78:48:4e:
                    2a:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                44:73:D2:AE:48:2D:75:65:3C:D9:89:B4:48:9C:C3:73:DC:91:36:40
            X509v3 Authority Key Identifier:
                keyid:E6:E4:68:7A:B8:B1:EB:6D:E1:AB:D0:4A:07:61:7C:86:D1:18:51:8D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5uRoerix623hq9BKB2F8htEYUY0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/6fd5d2-b7ce-4b3d-8f2c-138bbaac7fe2/1/RHPSrkgtdWU82Ym0SJzDc9yRNkA.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/6fd5d2-b7ce-4b3d-8f2c-138bbaac7fe2/1/5uRoerix623hq9BKB2F8htEYUY0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.217.166.0/24
                IPv6:
                  2a10:d504::/48

    Signature Algorithm: sha256WithRSAEncryption
         84:75:80:ae:40:be:1e:0b:5f:13:84:b3:bd:32:b4:3a:48:45:
         36:2e:8e:dd:66:70:57:19:f3:42:fe:06:8a:fa:ab:16:e4:d3:
         a0:43:a7:95:d1:13:fb:2d:01:a7:24:1e:a8:2e:f4:d1:f0:d1:
         60:b6:db:c8:97:7f:9d:1e:d6:1e:97:dc:1d:cf:ea:05:af:5c:
         dd:2a:7d:ee:2d:45:a7:23:79:c8:a7:3a:6d:91:c0:85:87:75:
         d5:79:fa:6a:8a:53:28:26:78:9c:6e:8b:d1:aa:fb:bf:ad:19:
         63:ca:34:60:a6:9a:ca:43:3c:19:d3:67:34:c4:17:03:64:47:
         0c:f9:ec:33:f1:de:08:f4:da:44:21:2d:1e:50:31:83:4c:8e:
         b3:63:32:fe:f6:13:de:18:30:84:83:be:ad:fc:a2:e5:20:d2:
         da:c1:41:ce:2b:95:33:72:c4:5b:0f:45:8c:60:e6:8d:52:54:
         b0:c6:81:ac:15:9c:03:c8:07:86:70:6d:1c:66:e6:20:51:3a:
         0d:d0:78:e0:d6:05:e9:40:98:be:b4:22:78:e4:c6:e0:07:59:
         74:7e:b4:1c:ba:72:51:eb:e2:a8:13:bc:05:db:73:52:95:dc:
         83:4c:16:84:b5:17:5a:17:44:d0:b8:9b:b6:97:79:14:2f:b7:
         6c:9d:1a:e1
-----BEGIN CERTIFICATE-----
MIIFADCCA+igAwIBAgIEA7S69zANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyhl
NmU0Njg3YWI4YjFlYjZkZTFhYmQwNGEwNzYxN2M4NmQxMTg1MThkMB4XDTIyMDEw
MTAxNTUzNVoXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoNDQ3M2QyYWU0ODJk
NzU2NTNjZDk4OWI0NDg5Y2MzNzNkYzkxMzY0MDCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAMqvPuA7QhwCAC4Xl5KVfHA17t5I46b/FPBXBWZW/tCXqHfc
2Av4fw5MzOekiB0H+lD9V/vVYYgyxkz4z8y4L1mj7EqkMJZ/1Z3OZy29xaDEMj7i
2xKjeUHDBv7iDQ0MfO9zXKRWvukYtTlsOu+N3Y5eJ9BPh3eDQbH5v0dX6QWiODY/
XrMvzImP5CSYh2FBi9oP7SZrP+UTr8XNG3ryMvpsZ1q3RD5HvclD1LGT2OR6Dg2i
aaFZuCPhqSLUDr6nlWtjPcPW+/UZsy603FCDsWGqbZx93RG1jFT6mCqMzK/mNllW
EXdSCvRNC3BRd4oUz9z7aI3tqbcUYBZOeEhOKokCAwEAAaOCAhowggIWMB0GA1Ud
DgQWBBREc9KuSC11ZTzZibRInMNz3JE2QDAfBgNVHSMEGDAWgBTm5Gh6uLHrbeGr
0EoHYXyG0RhRjTAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
LzV1Um9lcml4NjIzaHE5QktCMkY4aHRFWVVZMC5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvYzUvNmZkNWQyLWI3Y2UtNGIzZC04ZjJjLTEzOGJiYWFjN2ZlMi8x
L1JIUFNya2d0ZFdVODJZbTBTSnpEYzl5Uk5rQS5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYzUv
NmZkNWQyLWI3Y2UtNGIzZC04ZjJjLTEzOGJiYWFjN2ZlMi8xLzV1Um9lcml4NjIz
aHE5QktCMkY4aHRFWVVZMC5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAw
BggrBgEFBQcBBwEB/wQhMB8wDAQCAAEwBgMEALnZpjAPBAIAAjAJAwcAKhDVBAAA
MA0GCSqGSIb3DQEBCwUAA4IBAQCEdYCuQL4eC18ThLO9MrQ6SEU2Lo7dZnBXGfNC
/gaK+qsW5NOgQ6eV0RP7LQGnJB6oLvTR8NFgttvIl3+dHtYel9wdz+oFr1zdKn3u
LUWnI3nIpzptkcCFh3XVefpqilMoJnicbovRqvu/rRljyjRgpprKQzwZ02c0xBcD
ZEcM+ewz8d4I9NpEIS0eUDGDTI6zYzL+9hPeGDCEg76t/KLlINLawUHOK5UzcsRb
D0WMYOaNUlSwxoGsFZwDyAeGcG0cZuYgUToN0Hjg1gXpQJi+tCJ45MbgB1l0frQc
unJR6+KoE7wF23NSldyDTBaEtRdaF0TQuJu2l3kUL7dsnRrh
-----END CERTIFICATE-----