Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ce/5b21e3-3944-4ce6-aaf5-c0ba2f3fc72a/1/WMI3aUydTnivNU1xsUiQxIPXOtM.roa
File:                     WMI3aUydTnivNU1xsUiQxIPXOtM.roa (raw, json)
Hash identifier:          sg4WZIogqRuVp2f8/Ce2jH4YmivuRd0BTNxex4ivtwk=
Subject key identifier:   58:C2:37:69:4C:9D:4E:78:AF:35:4D:71:B1:48:90:C4:83:D7:3A:D3
Certificate issuer:       /CN=5776d9a0b55bd495a1be3c5c03fa251d3de8b8c5
Certificate serial:       02B6846B
Authority key identifier: 57:76:D9:A0:B5:5B:D4:95:A1:BE:3C:5C:03:FA:25:1D:3D:E8:B8:C5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/V3bZoLVb1JWhvjxcA_olHT3ouMU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ce/5b21e3-3944-4ce6-aaf5-c0ba2f3fc72a/1/WMI3aUydTnivNU1xsUiQxIPXOtM.roa
Signing time:             Sat 01 Jan 2022 11:55:19 +0000
ROA not before:           Sat 01 Jan 2022 11:55:19 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     47753
IP address blocks:        185.249.254.0/24 maxlen: 24
                          2a10:a647::/32 maxlen: 32
                          2a10:a641::/40 maxlen: 40

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 45515883 (0x2b6846b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5776d9a0b55bd495a1be3c5c03fa251d3de8b8c5
        Validity
            Not Before: Jan  1 11:55:19 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=58c237694c9d4e78af354d71b14890c483d73ad3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:05:c8:ca:62:d4:94:01:3d:4b:46:88:94:4d:
                    b6:b1:17:6f:f8:28:b5:37:77:50:43:94:b8:6e:5d:
                    7f:a9:52:6b:e8:e6:b1:04:06:60:5e:14:be:be:03:
                    02:22:06:40:55:5b:a7:05:a9:e3:88:54:69:f1:48:
                    ce:39:d0:86:6a:cd:ef:f0:f7:b1:01:9c:3c:1a:6f:
                    3e:74:32:af:87:ba:b7:8d:cc:58:4e:98:68:af:bb:
                    05:85:18:7b:ab:e1:34:4f:e4:dc:ac:db:0f:96:64:
                    49:8f:c9:88:ec:78:77:34:5f:87:3e:a6:79:e1:4a:
                    b1:d1:4a:3e:e0:a2:5b:50:ee:d8:56:7e:9d:76:cb:
                    af:69:00:e3:cd:0c:2a:b9:88:c7:fc:74:ba:f3:19:
                    83:0b:b9:2b:86:46:d4:19:b8:80:a9:db:8e:5f:b7:
                    e0:fe:33:4c:2c:4c:c6:08:c2:bd:f7:49:93:a9:56:
                    dd:eb:20:83:c4:b8:40:5c:c2:36:76:3f:18:ac:4b:
                    00:c4:f0:1a:68:f3:f3:c8:b3:ab:ff:48:7e:ce:2e:
                    ad:ef:c5:4f:3a:89:80:2a:ab:48:74:4f:f0:9d:52:
                    b3:8b:d3:34:cf:55:08:a1:77:75:be:2b:53:45:b2:
                    da:60:ed:28:7e:66:34:c6:06:59:a4:92:4d:c4:bc:
                    de:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                58:C2:37:69:4C:9D:4E:78:AF:35:4D:71:B1:48:90:C4:83:D7:3A:D3
            X509v3 Authority Key Identifier:
                keyid:57:76:D9:A0:B5:5B:D4:95:A1:BE:3C:5C:03:FA:25:1D:3D:E8:B8:C5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/V3bZoLVb1JWhvjxcA_olHT3ouMU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/5b21e3-3944-4ce6-aaf5-c0ba2f3fc72a/1/WMI3aUydTnivNU1xsUiQxIPXOtM.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/5b21e3-3944-4ce6-aaf5-c0ba2f3fc72a/1/V3bZoLVb1JWhvjxcA_olHT3ouMU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.249.254.0/24
                IPv6:
                  2a10:a641::/40
                  2a10:a647::/32

    Signature Algorithm: sha256WithRSAEncryption
         2e:5b:bc:95:43:0d:8a:c4:6a:8c:76:c7:97:29:aa:9c:88:79:
         39:18:f7:98:1f:ef:e8:b6:13:6a:34:32:66:b4:e8:b8:3f:b2:
         00:b4:2e:f6:9d:d6:c5:5e:db:1a:62:81:b6:92:c5:e0:82:45:
         11:b9:5b:57:fc:46:53:58:9a:09:86:59:6b:fd:f5:2a:85:0c:
         79:f8:30:48:53:55:e4:56:70:20:fa:57:ed:a6:01:69:b8:0a:
         46:36:eb:33:b8:72:73:17:33:cc:00:fe:c5:30:ca:14:e3:eb:
         38:d3:db:d2:1a:e1:96:00:00:d9:d0:58:6f:69:82:f4:82:ef:
         dc:be:37:61:8f:38:02:64:cd:b9:60:1d:22:22:8a:c9:a8:04:
         3d:7b:74:e2:ee:75:f7:1f:f2:82:4d:f6:00:27:fc:06:58:7c:
         f9:92:3e:5a:1b:7c:5e:17:ea:b1:8a:a5:d9:19:35:52:a4:b1:
         12:d9:ab:82:18:b3:01:59:23:40:68:9a:0e:e6:a1:5f:ea:e2:
         7b:1a:2f:fc:55:cc:33:10:ad:5b:c2:e9:61:f6:df:65:4a:79:
         a2:04:2c:27:f2:01:b9:2a:8d:44:e6:37:fb:5c:2a:22:47:f6:
         0b:d0:ea:e2:de:dc:7f:0e:5d:60:f8:98:76:eb:38:d6:9e:da:
         bf:e6:51:1f
-----BEGIN CERTIFICATE-----
MIIFBjCCA+6gAwIBAgIEAraEazANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg1
Nzc2ZDlhMGI1NWJkNDk1YTFiZTNjNWMwM2ZhMjUxZDNkZThiOGM1MB4XDTIyMDEw
MTExNTUxOVoXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoNThjMjM3Njk0Yzlk
NGU3OGFmMzU0ZDcxYjE0ODkwYzQ4M2Q3M2FkMzCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAJEFyMpi1JQBPUtGiJRNtrEXb/gotTd3UEOUuG5df6lSa+jm
sQQGYF4Uvr4DAiIGQFVbpwWp44hUafFIzjnQhmrN7/D3sQGcPBpvPnQyr4e6t43M
WE6YaK+7BYUYe6vhNE/k3KzbD5ZkSY/JiOx4dzRfhz6meeFKsdFKPuCiW1Du2FZ+
nXbLr2kA480MKrmIx/x0uvMZgwu5K4ZG1Bm4gKnbjl+34P4zTCxMxgjCvfdJk6lW
3esgg8S4QFzCNnY/GKxLAMTwGmjz88izq/9Ifs4ure/FTzqJgCqrSHRP8J1Ss4vT
NM9VCKF3db4rU0Wy2mDtKH5mNMYGWaSSTcS83g8CAwEAAaOCAiAwggIcMB0GA1Ud
DgQWBBRYwjdpTJ1OeK81TXGxSJDEg9c60zAfBgNVHSMEGDAWgBRXdtmgtVvUlaG+
PFwD+iUdPei4xTAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L1YzYlpvTFZiMUpXaHZqeGNBX29sSFQzb3VNVS5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvY2UvNWIyMWUzLTM5NDQtNGNlNi1hYWY1LWMwYmEyZjNmYzcyYS8x
L1dNSTNhVXlkVG5pdk5VMXhzVWlReElQWE90TS5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvY2Uv
NWIyMWUzLTM5NDQtNGNlNi1hYWY1LWMwYmEyZjNmYzcyYS8xL1YzYlpvTFZiMUpX
aHZqeGNBX29sSFQzb3VNVS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjA2
BggrBgEFBQcBBwEB/wQnMCUwDAQCAAEwBgMEALn5/jAVBAIAAjAPAwYAKhCmQQAD
BQAqEKZHMA0GCSqGSIb3DQEBCwUAA4IBAQAuW7yVQw2KxGqMdseXKaqciHk5GPeY
H+/othNqNDJmtOi4P7IAtC72ndbFXtsaYoG2ksXggkURuVtX/EZTWJoJhllr/fUq
hQx5+DBIU1XkVnAg+lftpgFpuApGNuszuHJzFzPMAP7FMMoU4+s409vSGuGWAADZ
0FhvaYL0gu/cvjdhjzgCZM25YB0iIorJqAQ9e3Ti7nX3H/KCTfYAJ/wGWHz5kj5a
G3xeF+qxiqXZGTVSpLES2auCGLMBWSNAaJoO5qFf6uJ7Gi/8VcwzEK1bwulh9t9l
SnmiBCwn8gG5Ko1E5jf7XCoiR/YL0Ori3tx/Dl1g+Jh26zjWntq/5lEf
-----END CERTIFICATE-----