Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/0Z5mvNfqj4_n5HFui0VdPzpwLhY.roa
File:                     0Z5mvNfqj4_n5HFui0VdPzpwLhY.roa (raw, json)
Hash identifier:          xTky+I8nN/Eic3QjM0oHqDOlfMWG0V2VpTENAZj+nyw=
Subject key identifier:   D1:9E:66:BC:D7:EA:8F:8F:E7:E4:71:6E:8B:45:5D:3F:3A:70:2E:16
Certificate issuer:       /CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Certificate serial:       10E197A7
Authority key identifier: 63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/0Z5mvNfqj4_n5HFui0VdPzpwLhY.roa
Signing time:             Sat 01 Jan 2022 09:05:46 +0000
ROA not before:           Sat 01 Jan 2022 09:05:46 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     212425
IP address blocks:        2a10:2f00:157::/48 maxlen: 48

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 283219879 (0x10e197a7)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
        Validity
            Not Before: Jan  1 09:05:46 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=d19e66bcd7ea8f8fe7e4716e8b455d3f3a702e16
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:15:ed:df:10:28:ad:06:56:30:a5:9e:3a:29:
                    41:a6:09:65:ca:f0:a2:af:2d:c2:a1:b4:39:f9:20:
                    71:86:ba:29:fb:fe:fd:94:21:35:4c:53:f1:21:8e:
                    a6:e9:1f:14:ff:ad:8b:e6:78:58:ba:b4:16:80:30:
                    8a:72:0a:c6:ac:70:a0:d5:5c:4b:a7:f8:7b:bb:c9:
                    fa:96:db:48:d4:7c:12:b3:d9:e1:c4:4d:f3:09:f8:
                    f6:21:6c:a6:3b:9a:12:6b:c0:a6:39:c2:ca:7b:84:
                    1f:5b:eb:6c:8c:e1:c4:ec:09:ed:ab:67:ec:35:e9:
                    9d:85:ed:4c:a2:37:94:86:68:18:97:0f:07:d3:a5:
                    14:46:78:b3:4b:75:01:72:af:9e:52:32:4f:9c:96:
                    bb:6b:4c:88:40:fb:4e:87:b6:31:f1:a3:a9:e5:bd:
                    6d:60:2c:11:56:76:c4:2b:74:42:04:14:08:8c:d7:
                    27:c6:a9:ad:48:1f:6a:39:33:cc:8f:66:11:b0:d1:
                    09:50:76:0d:e5:69:be:91:94:62:55:0b:e1:bb:98:
                    47:92:65:37:a9:7e:50:96:30:ee:17:3e:5c:82:81:
                    b4:e4:bf:92:c4:2d:79:a3:d7:8a:8c:4e:06:d3:b0:
                    24:1a:7a:58:11:65:6b:a5:6a:db:3a:14:ac:c3:4d:
                    e6:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D1:9E:66:BC:D7:EA:8F:8F:E7:E4:71:6E:8B:45:5D:3F:3A:70:2E:16
            X509v3 Authority Key Identifier:
                keyid:63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/0Z5mvNfqj4_n5HFui0VdPzpwLhY.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a10:2f00:157::/48

    Signature Algorithm: sha256WithRSAEncryption
         21:3b:f6:18:f3:ba:58:51:0d:ee:75:61:89:ad:6e:b0:e7:94:
         98:44:9e:d4:49:41:c3:97:88:43:ef:28:69:f9:e7:b5:7d:b7:
         41:67:85:48:5c:30:eb:a8:d8:34:24:ba:af:ba:be:7c:a8:23:
         a5:69:67:74:72:ab:a7:35:0d:8f:50:7f:27:ae:dd:91:5d:4c:
         10:c4:fb:24:b4:c8:72:f1:ca:60:0e:18:9d:c9:7a:03:40:6b:
         49:46:bc:bb:32:a5:73:a0:ad:a7:21:94:1d:7d:6d:56:aa:d4:
         64:2e:df:85:3c:ca:b7:62:2a:60:fc:c5:f3:e7:72:b1:aa:a0:
         24:30:b3:d0:85:5c:c5:c2:9a:35:72:0e:4c:e4:28:fa:35:a7:
         05:19:53:d2:4a:0e:24:3a:d7:e9:e8:81:93:cc:e5:a1:60:50:
         78:76:70:d0:27:85:8e:0a:95:83:95:4a:4e:37:e1:07:70:3f:
         bd:71:2d:1f:5d:c3:3a:46:0f:e9:82:47:ab:99:1d:2a:87:5d:
         08:3c:5f:49:ff:ce:ef:08:ea:be:46:fc:bc:7e:ce:79:f9:ad:
         38:34:4d:18:7d:4a:86:b3:74:96:09:64:bf:cd:d3:38:56:77:
         77:7e:69:9b:48:19:9f:f3:ba:17:33:fd:05:4f:92:36:69:41:
         11:7f:6c:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----