Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/11AoHcu9HHsAqwnOCK2C53RusG0.roa
File:                     11AoHcu9HHsAqwnOCK2C53RusG0.roa (raw, json)
Hash identifier:          CzCM9g3hfH+6BXANO3VNQKmOKL0zNdPaqQ8E62eVRhI=
Subject key identifier:   D7:50:28:1D:CB:BD:1C:7B:00:AB:09:CE:08:AD:82:E7:74:6E:B0:6D
Certificate issuer:       /CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Certificate serial:       15338976
Authority key identifier: 63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/11AoHcu9HHsAqwnOCK2C53RusG0.roa
Signing time:             Sat 18 Jun 2022 21:25:45 +0000
ROA not before:           Sat 18 Jun 2022 21:25:45 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     20473
IP address blocks:        2a0e:b107:1870::/48 maxlen: 48
                          2a0e:b107:9f4::/48 maxlen: 48
                          2a10:cc42:1000::/36 maxlen: 48
                          2a0e:b107:1163::/48 maxlen: 48
                          2a0e:b107:5d0::/44 maxlen: 48
                          2a0e:b107:5e0::/44 maxlen: 48
                          2a0e:97c0:750::/48 maxlen: 48
                          2a0e:b107:900::/44 maxlen: 48
                          2a0e:b107:df2::/48 maxlen: 48
                          2a0e:97c0:736::/48 maxlen: 48
                          2a0e:b107:9f6::/48 maxlen: 48
                          2a0e:b102:12f::/48 maxlen: 48
                          2a0e:97c0:73f::/48 maxlen: 48
                          2a0e:97c0:76f::/48 maxlen: 48
                          2a0e:97c0:aca::/48 maxlen: 48

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 355699062 (0x15338976)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
        Validity
            Not Before: Jun 18 21:25:45 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=d750281dcbbd1c7b00ab09ce08ad82e7746eb06d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:31:1b:b0:8b:d3:26:14:9f:0c:2f:2c:04:ac:
                    01:47:cd:fb:dc:fb:7f:3d:5b:5c:6b:ff:fd:9c:64:
                    ae:32:9e:fd:e7:7d:24:3f:95:9e:7e:d5:7a:7f:6a:
                    44:69:78:27:06:73:c9:18:a5:79:19:a7:ce:9f:2d:
                    48:95:90:88:ac:d5:0b:d2:f4:25:97:0b:6f:66:ab:
                    d3:e0:33:3f:81:bf:a5:f1:cc:9d:4a:9c:4a:c5:4f:
                    2d:1a:ec:5c:08:65:9d:dd:3d:bd:b8:3f:3c:c6:92:
                    b3:a1:cb:24:f5:19:97:5c:f6:cd:0c:b1:8f:f6:c9:
                    a1:da:74:f8:59:b8:b6:50:71:c4:66:dc:d4:81:7b:
                    ed:cd:dc:e6:31:f4:8e:64:fa:d7:fd:a1:13:5f:19:
                    dc:49:90:cc:df:cb:a5:27:eb:f3:df:3c:59:da:c1:
                    0c:a5:df:89:bc:e6:79:a9:a5:b7:0a:2a:4f:e4:cc:
                    ab:6a:82:cd:34:87:66:42:f9:e5:01:5e:43:80:80:
                    9b:63:b6:f2:f0:e9:30:e0:c5:1a:a2:9b:d2:44:02:
                    42:e6:a7:42:4c:a8:38:fd:66:85:10:32:24:eb:c4:
                    bd:bf:b0:9c:86:a9:f1:d3:ce:de:11:c5:fc:e9:7f:
                    2d:eb:c7:24:e8:8f:ae:1b:ea:7b:d2:a6:3a:53:35:
                    56:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D7:50:28:1D:CB:BD:1C:7B:00:AB:09:CE:08:AD:82:E7:74:6E:B0:6D
            X509v3 Authority Key Identifier:
                keyid:63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/11AoHcu9HHsAqwnOCK2C53RusG0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a0e:97c0:736::/48
                  2a0e:97c0:73f::/48
                  2a0e:97c0:750::/48
                  2a0e:97c0:76f::/48
                  2a0e:97c0:aca::/48
                  2a0e:b102:12f::/48
                  2a0e:b107:5d0::-2a0e:b107:5ef:ffff:ffff:ffff:ffff:ffff
                  2a0e:b107:900::/44
                  2a0e:b107:9f4::/48
                  2a0e:b107:9f6::/48
                  2a0e:b107:df2::/48
                  2a0e:b107:1163::/48
                  2a0e:b107:1870::/48
                  2a10:cc42:1000::/36

    Signature Algorithm: sha256WithRSAEncryption
         72:ee:52:94:b6:da:c6:d5:4d:1c:9b:1e:ce:58:7b:3c:1f:f5:
         ea:e0:75:9b:6a:2e:a2:60:3d:45:ae:3d:7b:d5:d3:de:be:ad:
         26:85:27:08:58:a8:69:ea:e0:ab:31:76:79:4d:e6:23:ac:42:
         7b:23:b7:0f:b7:b5:be:c6:06:b3:8b:41:83:50:ef:29:06:ab:
         bd:21:d3:c1:c4:73:3c:19:d2:e5:a3:fc:dc:17:db:f9:26:2a:
         37:dd:d0:6d:76:e5:83:c9:53:ea:77:4e:c1:b0:83:cb:81:ae:
         84:0a:5e:e6:c6:78:f2:a8:98:55:27:37:93:5a:58:2d:2b:23:
         3e:35:c3:c6:3d:1b:9d:30:22:30:3e:dd:18:99:a9:00:64:06:
         18:ae:21:a4:f1:6c:f2:47:58:7d:22:a5:cc:9b:70:7b:bd:27:
         92:0f:6e:2f:ce:67:1a:5f:af:a6:fe:29:d6:31:57:c0:22:98:
         5a:56:f6:30:38:4a:f1:1a:a8:c6:f9:1d:e0:f5:e2:c7:ac:4e:
         fb:f8:45:fb:08:c0:c0:68:3b:73:8f:ce:ed:d8:c5:12:db:90:
         40:8f:f6:03:2a:d4:6d:7f:7e:60:93:a4:df:fa:75:02:2b:89:
         a0:60:56:cc:f7:5d:2f:da:cb:38:58:56:49:46:b8:cf:d6:a9:
         83:b4:b9:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----