Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/0wrzhbfWmdSoPbPnIPRIbw3W5nc.roa
File:                     0wrzhbfWmdSoPbPnIPRIbw3W5nc.roa (raw, json)
Hash identifier:          86L+2HzCEhlTNBkUa3bUDgNstol934fkPCZTr7QiusI=
Subject key identifier:   D3:0A:F3:85:B7:D6:99:D4:A8:3D:B3:E7:20:F4:48:6F:0D:D6:E6:77
Certificate issuer:       /CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Certificate serial:       1420284F
Authority key identifier: 63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/0wrzhbfWmdSoPbPnIPRIbw3W5nc.roa
Signing time:             Sun 01 May 2022 02:03:30 +0000
ROA not before:           Sun 01 May 2022 02:03:30 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     210761
IP address blocks:        2a0e:b107:19c7::/48 maxlen: 48

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 337651791 (0x1420284f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
        Validity
            Not Before: May  1 02:03:30 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=d30af385b7d699d4a83db3e720f4486f0dd6e677
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:7a:3a:1c:db:5d:dd:31:e5:8d:39:d0:fc:06:
                    39:71:0a:1c:13:fa:05:b5:b5:66:e9:97:3b:01:1f:
                    e3:88:a1:8d:b4:a9:1b:1e:c8:fd:9e:11:ea:a0:69:
                    4d:40:f2:c5:4d:80:1a:97:32:cb:48:a3:99:08:2e:
                    94:29:32:37:88:d3:fd:46:62:9e:1b:04:22:44:f3:
                    b2:2d:d1:69:54:1e:f5:cc:79:79:ec:04:83:ef:da:
                    6b:25:ed:35:9d:ab:e2:50:53:96:1e:72:29:a4:d7:
                    db:df:d0:3e:4f:e8:e9:aa:f1:65:18:cf:62:3a:56:
                    f7:4a:14:72:bd:f9:71:bd:d1:61:be:79:53:c3:cd:
                    b1:16:9f:45:4b:d4:e7:d2:05:b4:80:d6:72:c9:78:
                    f7:85:d0:92:22:61:46:69:3f:00:13:e7:30:48:ea:
                    5e:ee:2e:5f:fa:46:98:68:c8:5c:43:8b:25:14:77:
                    82:6d:ae:94:fb:09:6c:bd:92:5d:5b:0b:36:71:ee:
                    66:35:08:9c:a1:42:2f:70:ff:c7:47:7b:37:a5:fa:
                    ec:fe:40:81:4b:a5:b6:6c:81:f0:e5:2a:f1:0d:00:
                    05:a4:d5:c5:8d:e3:01:cd:55:a8:fe:fb:9c:a8:ff:
                    84:92:b6:f9:bb:21:48:88:e7:35:8c:f1:23:92:8b:
                    e7:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D3:0A:F3:85:B7:D6:99:D4:A8:3D:B3:E7:20:F4:48:6F:0D:D6:E6:77
            X509v3 Authority Key Identifier:
                keyid:63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/0wrzhbfWmdSoPbPnIPRIbw3W5nc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a0e:b107:19c7::/48

    Signature Algorithm: sha256WithRSAEncryption
         51:bb:5e:1b:96:3e:a2:e9:b7:84:9f:0e:69:4e:3e:42:2d:fe:
         98:c7:e6:5f:c5:6c:3a:07:aa:04:7f:7e:f8:0f:56:47:3f:12:
         90:01:6d:a0:f4:7b:6a:2e:6c:86:39:9c:fc:82:f0:ca:fd:5a:
         6b:a8:da:c0:70:3e:a6:f2:74:5e:e6:72:0c:12:5c:d0:12:06:
         f8:54:bb:6c:05:bd:02:c2:11:ac:3a:12:77:31:05:e6:55:99:
         06:bf:8d:8a:46:5d:cd:71:d5:0d:9a:a9:be:57:74:eb:37:e1:
         37:54:12:93:59:11:54:61:ab:56:b4:5e:ae:72:6c:db:a4:68:
         f2:6f:50:44:21:7c:52:6d:f0:fd:ca:82:a0:27:0e:9d:5e:69:
         fb:5c:fb:b2:e7:a0:7a:ad:1f:a6:da:e9:fe:2c:16:66:08:26:
         ba:ff:81:ad:b1:b6:3f:bd:ca:de:d3:64:45:62:f7:dd:62:f4:
         9f:be:11:b5:70:f4:f5:39:b2:28:d5:ba:35:b9:cd:c3:84:d7:
         81:77:6c:c3:39:f8:b3:51:a8:4c:92:b2:35:c6:05:4d:20:11:
         1e:ec:8a:c5:13:e7:04:12:08:bb:72:1e:b5:d0:fd:0f:98:c1:
         e6:c0:31:38:93:39:14:b1:11:69:76:ba:87:9b:cc:a2:9d:10:
         b6:12:53:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----