Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fe/b2c749-3f9b-49a8-953b-77f6763f4d2b/1/oM1Dp5fDIwchj13kTF_aY3bOzbA.roa
File:                     oM1Dp5fDIwchj13kTF_aY3bOzbA.roa (raw, json)
Hash identifier:          P5+7NfGlWn5YI6zJy5+FdJRdDtpI0OI1r2TS5EQhccM=
Subject key identifier:   A0:CD:43:A7:97:C3:23:07:21:8F:5D:E4:4C:5F:DA:63:76:CE:CD:B0
Certificate issuer:       /CN=7bdb3c5d951ebebb86a99a84d238e7fca758e296
Certificate serial:       B8F1
Authority key identifier: 7B:DB:3C:5D:95:1E:BE:BB:86:A9:9A:84:D2:38:E7:FC:A7:58:E2:96
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/e9s8XZUevruGqZqE0jjn_KdY4pY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/fe/b2c749-3f9b-49a8-953b-77f6763f4d2b/1/oM1Dp5fDIwchj13kTF_aY3bOzbA.roa
Signing time:             Tue 24 May 2022 13:27:58 +0000
ROA not before:           Tue 24 May 2022 13:27:58 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     21453
IP address blocks:        31.31.64.0/21 maxlen: 21

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 47345 (0xb8f1)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7bdb3c5d951ebebb86a99a84d238e7fca758e296
        Validity
            Not Before: May 24 13:27:58 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=a0cd43a797c32307218f5de44c5fda6376cecdb0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:e7:29:fe:94:59:ea:9b:83:ff:b6:32:e2:92:
                    ae:71:18:c3:dd:01:4d:05:85:53:01:4c:fc:5b:b2:
                    9f:d9:f8:be:3c:d3:75:06:bf:63:f2:e8:8b:6f:44:
                    60:d6:a2:a0:1d:28:2c:a1:6c:81:42:69:80:8b:b2:
                    19:24:f8:30:ea:de:77:c1:37:30:90:0a:ad:af:51:
                    2c:a9:40:b6:b0:d1:e7:5a:cd:49:7c:54:8e:df:d8:
                    98:c0:5b:89:2e:7d:61:95:38:80:56:7e:84:e5:d4:
                    0a:af:fc:15:f2:75:df:d0:fc:b3:26:a2:44:a0:e1:
                    61:2e:a0:22:cd:17:9c:83:3f:8d:12:28:1d:89:0a:
                    08:bf:77:c3:6e:b5:ca:65:58:c9:df:3f:05:07:35:
                    5c:00:f2:14:28:5d:a1:e2:a0:0f:61:3d:79:ad:eb:
                    d1:70:84:91:08:71:5e:bc:75:31:22:21:1a:b8:cd:
                    34:ee:9e:e7:79:3d:8c:d0:6b:e2:4c:4f:6a:0b:82:
                    0e:06:aa:87:de:16:eb:ce:2f:1f:b8:a0:3e:f8:8e:
                    41:66:5a:1b:ba:48:82:24:a4:b8:19:0d:21:8d:78:
                    b3:dd:13:b2:89:12:a8:13:ed:ae:33:af:64:40:66:
                    14:f5:a3:76:0c:f0:26:be:74:83:63:1a:f1:3f:8d:
                    63:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A0:CD:43:A7:97:C3:23:07:21:8F:5D:E4:4C:5F:DA:63:76:CE:CD:B0
            X509v3 Authority Key Identifier:
                keyid:7B:DB:3C:5D:95:1E:BE:BB:86:A9:9A:84:D2:38:E7:FC:A7:58:E2:96

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9s8XZUevruGqZqE0jjn_KdY4pY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/b2c749-3f9b-49a8-953b-77f6763f4d2b/1/oM1Dp5fDIwchj13kTF_aY3bOzbA.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/b2c749-3f9b-49a8-953b-77f6763f4d2b/1/e9s8XZUevruGqZqE0jjn_KdY4pY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  31.31.64.0/21

    Signature Algorithm: sha256WithRSAEncryption
         63:7d:cd:d2:eb:fd:2b:6b:c5:28:4d:67:df:87:7b:9d:59:b8:
         37:19:74:62:46:d8:8e:12:08:90:72:ae:a5:ab:5d:6c:ca:ee:
         5a:a3:b8:a3:66:8e:2e:90:4f:f6:25:10:ce:11:75:86:02:00:
         38:64:17:78:36:c5:e3:5f:ad:48:5a:0b:b3:48:53:60:01:d1:
         97:d5:1f:66:49:27:15:df:36:64:5f:be:f1:1f:14:fe:6b:e8:
         af:6d:f4:82:6e:df:de:a9:ec:6e:e8:c1:30:08:e8:2b:49:f4:
         87:49:89:cb:8f:d1:81:1b:db:cf:5e:b0:8f:d1:06:8f:f6:a2:
         01:ef:a1:f6:76:87:6c:14:8b:dd:74:32:cd:a9:2b:17:c7:38:
         bd:a8:a7:99:fb:55:59:4c:8f:bb:d9:02:89:55:51:80:e6:9a:
         f9:88:9d:bb:ec:56:21:00:f2:db:91:89:7e:f1:ab:d7:e5:42:
         94:40:8a:f9:64:ef:50:6f:74:8f:f6:d5:0e:91:25:b5:68:c7:
         3c:ae:c6:1b:3a:40:56:55:3e:8b:fb:36:7d:64:83:ae:13:6d:
         5e:f9:e4:e3:27:82:f4:b6:14:4c:98:df:d8:d8:bd:65:9c:d7:
         af:f3:37:37:8b:9d:f0:e0:6d:dc:e0:7e:5b:2d:06:ce:ca:21:
         86:7c:86:08
-----BEGIN CERTIFICATE-----
MIIE7jCCA9agAwIBAgIDALjxMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKDdi
ZGIzYzVkOTUxZWJlYmI4NmE5OWE4NGQyMzhlN2ZjYTc1OGUyOTYwHhcNMjIwNTI0
MTMyNzU4WhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQDEyhhMGNkNDNhNzk3YzMy
MzA3MjE4ZjVkZTQ0YzVmZGE2Mzc2Y2VjZGIwMIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEAnecp/pRZ6puD/7Yy4pKucRjD3QFNBYVTAUz8W7Kf2fi+PNN1
Br9j8uiLb0Rg1qKgHSgsoWyBQmmAi7IZJPgw6t53wTcwkAqtr1EsqUC2sNHnWs1J
fFSO39iYwFuJLn1hlTiAVn6E5dQKr/wV8nXf0PyzJqJEoOFhLqAizRecgz+NEigd
iQoIv3fDbrXKZVjJ3z8FBzVcAPIUKF2h4qAPYT15revRcISRCHFevHUxIiEauM00
7p7neT2M0GviTE9qC4IOBqqH3hbrzi8fuKA++I5BZlobukiCJKS4GQ0hjXiz3ROy
iRKoE+2uM69kQGYU9aN2DPAmvnSDYxrxP41jaQIDAQABo4ICCTCCAgUwHQYDVR0O
BBYEFKDNQ6eXwyMHIY9d5Exf2mN2zs2wMB8GA1UdIwQYMBaAFHvbPF2VHr67hqma
hNI45/ynWOKWMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEFBQcBAQRYMFYwVAYIKwYB
BQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQv
ZTlzOFhaVWV2cnVHcVpxRTBqam5fS2RZNHBZLmNlcjCBjQYIKwYBBQUHAQsEgYAw
fjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkv
REVGQVVMVC9mZS9iMmM3NDktM2Y5Yi00OWE4LTk1M2ItNzdmNjc2M2Y0ZDJiLzEv
b00xRHA1ZkRJd2NoajEza1RGX2FZM2JPemJBLnJvYTCBgQYDVR0fBHoweDB2oHSg
coZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mZS9i
MmM3NDktM2Y5Yi00OWE4LTk1M2ItNzdmNjc2M2Y0ZDJiLzEvZTlzOFhaVWV2cnVH
cVpxRTBqam5fS2RZNHBZLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8G
CCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDHx9AMA0GCSqGSIb3DQEBCwUAA4IB
AQBjfc3S6/0ra8UoTWffh3udWbg3GXRiRtiOEgiQcq6lq11syu5ao7ijZo4ukE/2
JRDOEXWGAgA4ZBd4NsXjX61IWguzSFNgAdGX1R9mSScV3zZkX77xHxT+a+ivbfSC
bt/eqexu6MEwCOgrSfSHSYnLj9GBG9vPXrCP0QaP9qIB76H2dodsFIvddDLNqSsX
xzi9qKeZ+1VZTI+72QKJVVGA5pr5iJ277FYhAPLbkYl+8avX5UKUQIr5ZO9Qb3SP
9tUOkSW1aMc8rsYbOkBWVT6L+zZ9ZIOuE21e+eTjJ4L0thRMmN/Y2L1lnNev8zc3
i53w4G3c4H5bLQbOyiGGfIYI
-----END CERTIFICATE-----