Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/290e44-b479-46cf-ab4b-b38e2677b3dc/1/DEL_TplseJ07syRvO7JpQBu0pMk.roa
File:                     DEL_TplseJ07syRvO7JpQBu0pMk.roa (raw, json)
Hash identifier:          ugj3heNYcOFvghq9Cqvf+NZxyYU1lykRCZtP6P7/WQA=
Subject key identifier:   0C:42:FF:4E:99:6C:78:9D:3B:B3:24:6F:3B:B2:69:40:1B:B4:A4:C9
Certificate issuer:       /CN=d217b472c841c1d68550a24f1936d29cc6c28f6a
Certificate serial:       43D733A0
Authority key identifier: D2:17:B4:72:C8:41:C1:D6:85:50:A2:4F:19:36:D2:9C:C6:C2:8F:6A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/0he0cshBwdaFUKJPGTbSnMbCj2o.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/10/290e44-b479-46cf-ab4b-b38e2677b3dc/1/DEL_TplseJ07syRvO7JpQBu0pMk.roa
Signing time:             Thu 17 Feb 2022 08:03:42 +0000
ROA not before:           Thu 17 Feb 2022 08:03:42 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     198412
IP address blocks:        2a03:f87:ba14::/48 maxlen: 48
                          2a03:f87:ba54::/48 maxlen: 48
                          2a03:f87:ba59::/48 maxlen: 48
                          2a03:f87:ba43::/48 maxlen: 48
                          2a03:f87:3::/48 maxlen: 48
                          2a03:f87:baa8::/48 maxlen: 48
                          2a03:f87:ba12::/48 maxlen: 48
                          2a03:f87:ba52::/48 maxlen: 48
                          2a03:f87:ba57::/48 maxlen: 48
                          2a03:f87:ba17::/48 maxlen: 48
                          2a03:f87:baa1::/48 maxlen: 48
                          2a03:f87:baab::/48 maxlen: 48
                          2a03:f87:ba10::/48 maxlen: 48
                          2a03:f87:ba50::/48 maxlen: 48
                          2a03:f87:ba55::/48 maxlen: 48
                          2a03:f87:ba15::/48 maxlen: 48
                          2a03:f87:baa9::/48 maxlen: 48
                          2a03:f87:ba49::/48 maxlen: 48
                          2a03:f87:ba13::/48 maxlen: 48
                          2a03:f87:ba53::/48 maxlen: 48
                          2a03:f87:ba18::/48 maxlen: 48
                          2a03:f87:baa2::/48 maxlen: 48
                          2a03:f87:ba47::/48 maxlen: 48
                          2a03:f87:baac::/48 maxlen: 48
                          2a03:f87:ba11::/48 maxlen: 48
                          2a03:f87:ba51::/48 maxlen: 48
                          2a03:f87:ba56::/48 maxlen: 48
                          2a03:f87:ba16::/48 maxlen: 48
                          2a03:f87:ba60::/48 maxlen: 48
                          2a03:f87:ba45::/48 maxlen: 48
                          2a03:f87::/32 maxlen: 32
                          2a03:f87:baaa::/48 maxlen: 48

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1138176928 (0x43d733a0)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d217b472c841c1d68550a24f1936d29cc6c28f6a
        Validity
            Not Before: Feb 17 08:03:42 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=0c42ff4e996c789d3bb3246f3bb269401bb4a4c9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:5f:b4:f6:c3:2a:4f:d4:2a:5d:23:4b:9e:8a:
                    2a:6e:fe:bd:c7:39:e2:ba:c1:6c:6f:5e:28:c3:3f:
                    bf:4d:b1:f4:ba:6c:9e:8b:59:be:95:e1:9f:48:2c:
                    a2:61:74:00:2e:66:ad:a0:85:5b:ce:89:bf:a2:9f:
                    ec:6a:72:8d:e2:20:da:61:34:e7:31:69:e1:d0:44:
                    62:47:4e:fe:0d:33:c9:ee:eb:ba:7a:fd:fb:8e:16:
                    7a:02:33:2b:f4:c4:c0:47:2f:9c:f0:06:c8:17:36:
                    0a:16:05:80:bc:fd:b2:72:96:68:fb:4f:ed:2c:43:
                    ad:e0:cb:59:28:f8:53:71:60:ca:a6:af:32:46:4a:
                    32:1e:a8:a2:e8:a1:74:5e:74:6e:92:6f:5d:f0:90:
                    6b:d5:d9:67:ca:81:39:a1:09:8b:18:74:1a:81:7f:
                    f9:65:6a:a5:d6:51:20:a6:60:ce:4f:fe:6e:37:8d:
                    8a:f9:87:f1:82:11:8d:58:90:10:49:ad:0c:70:ab:
                    69:4d:33:9f:f7:4b:50:16:9b:a7:d2:cd:3c:e3:ec:
                    2b:2c:ad:43:f9:6c:65:e2:45:21:d3:3c:fd:0a:4c:
                    ca:cd:b7:85:e0:7d:ce:cb:a8:5c:33:87:bb:c7:6c:
                    7b:62:ae:b1:82:a8:a5:39:8c:31:39:da:3a:d7:a3:
                    d1:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0C:42:FF:4E:99:6C:78:9D:3B:B3:24:6F:3B:B2:69:40:1B:B4:A4:C9
            X509v3 Authority Key Identifier:
                keyid:D2:17:B4:72:C8:41:C1:D6:85:50:A2:4F:19:36:D2:9C:C6:C2:8F:6A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0he0cshBwdaFUKJPGTbSnMbCj2o.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/290e44-b479-46cf-ab4b-b38e2677b3dc/1/DEL_TplseJ07syRvO7JpQBu0pMk.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/10/290e44-b479-46cf-ab4b-b38e2677b3dc/1/0he0cshBwdaFUKJPGTbSnMbCj2o.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a03:f87::/32

    Signature Algorithm: sha256WithRSAEncryption
         79:44:75:9a:7c:f7:d1:0a:b4:77:38:bb:82:f9:39:46:0c:2e:
         7c:a5:30:07:88:2e:b5:c6:2c:fe:51:e3:c9:3c:20:e0:fc:ad:
         e5:0c:24:df:b7:51:0d:3c:b8:55:7d:5e:e6:78:25:a0:d8:e1:
         70:1d:99:4a:3a:35:6a:b5:5a:90:3f:fa:79:86:16:6c:24:60:
         e2:ab:ae:ae:aa:59:17:49:5d:2a:37:e5:70:39:18:4e:97:8d:
         15:27:cf:2d:56:46:fc:9f:67:6e:27:c4:2a:29:b6:ee:ed:7a:
         a1:d4:6f:2e:68:35:9c:c9:8d:3e:15:f1:a5:ec:45:33:9b:87:
         78:56:a2:37:77:dd:5a:fb:21:c7:37:3b:65:81:60:19:32:8a:
         15:8b:43:09:7c:d6:e6:5f:cc:08:43:2e:94:47:6f:c5:bd:c1:
         b6:d4:3c:df:82:05:23:82:03:86:35:98:47:6d:4b:5d:01:95:
         01:6b:4d:53:33:44:e1:3a:78:8f:ad:e7:86:5d:69:61:fd:bb:
         e8:37:c0:cc:89:ff:12:74:e0:7e:17:c8:0d:4c:79:47:c4:f4:
         23:57:94:b4:9d:57:c7:de:db:59:46:9b:78:ec:9b:c7:6c:c9:
         d7:d7:4d:ab:81:75:ac:e2:4b:48:18:16:de:53:60:99:6e:77:
         71:bd:3d:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----