Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/94YWEYDk0_cyHz8g4R0_qDHYKBs.roa
File:                     94YWEYDk0_cyHz8g4R0_qDHYKBs.roa (raw, json)
Hash identifier:          4DwsTmhT0puLWXtT8FltLuTmEfTzPuCP/4PebLVzpNE=
Subject key identifier:   F7:86:16:11:80:E4:D3:F7:32:1F:3F:20:E1:1D:3F:A8:31:D8:28:1B
Certificate issuer:       /CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Certificate serial:       111AAC96
Authority key identifier: 63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/94YWEYDk0_cyHz8g4R0_qDHYKBs.roa
Signing time:             Tue 04 Jan 2022 19:44:19 +0000
ROA not before:           Tue 04 Jan 2022 19:44:19 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     210074
IP address blocks:        2a0e:b107:9f5::/48 maxlen: 48
                          2a10:2f00:17b::/48 maxlen: 48

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 286960790 (0x111aac96)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
        Validity
            Not Before: Jan  4 19:44:19 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=f786161180e4d3f7321f3f20e11d3fa831d8281b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:42:58:f8:1c:ac:09:db:c8:7c:4c:43:ad:50:
                    3b:74:c5:2a:15:76:70:b8:7f:9a:a0:84:8b:35:52:
                    78:10:23:df:9b:99:73:c1:e1:9a:22:4d:27:89:23:
                    f9:da:33:ac:ff:a3:6a:85:4b:95:85:a0:f2:53:93:
                    41:70:d7:a6:d2:18:e2:84:04:a2:87:a3:3d:ec:fb:
                    40:5d:15:5c:41:5a:8a:9d:50:d3:82:82:5e:c0:4a:
                    8c:52:90:9f:c1:2a:15:96:da:60:48:f6:e7:f6:85:
                    df:ea:b4:bb:3d:94:41:39:ce:f9:fb:43:a3:47:31:
                    c1:be:fb:23:7c:29:9f:8b:ac:0b:cc:df:91:dd:22:
                    0d:5c:ee:2b:eb:94:59:92:53:cb:15:62:01:2b:10:
                    a2:a2:9e:24:a3:30:a4:18:0b:f2:03:c8:fc:c0:a0:
                    55:93:2f:b4:9b:50:98:dc:97:4b:78:f4:3a:d1:27:
                    42:1f:37:50:00:03:a6:18:6e:e7:eb:4f:9d:ed:03:
                    cb:92:cc:6b:61:31:b7:9b:91:a3:38:9a:7d:3c:6e:
                    5f:bc:48:43:59:be:1d:50:62:72:1a:14:16:1a:1a:
                    ae:26:bd:48:65:bf:fb:46:f7:c4:60:5f:78:0b:d8:
                    86:12:40:e0:79:89:b9:45:12:53:c9:1f:15:e3:9b:
                    cc:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F7:86:16:11:80:E4:D3:F7:32:1F:3F:20:E1:1D:3F:A8:31:D8:28:1B
            X509v3 Authority Key Identifier:
                keyid:63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/94YWEYDk0_cyHz8g4R0_qDHYKBs.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a0e:b107:9f5::/48
                  2a10:2f00:17b::/48

    Signature Algorithm: sha256WithRSAEncryption
         26:b2:b2:45:ad:04:5b:8f:23:83:b6:cf:7c:67:24:c6:41:09:
         79:a8:53:3c:e7:bc:d1:9d:6c:f0:80:f7:f3:be:e6:02:42:da:
         ef:ee:34:e4:56:3f:97:e8:43:4d:bb:f4:88:7e:eb:c4:9c:b2:
         91:6b:33:87:08:63:a7:0d:cb:01:d0:03:fd:b8:12:5d:3b:d4:
         4d:41:d0:57:18:4d:47:df:a1:39:6c:35:05:5f:c4:06:48:52:
         3f:a6:d5:3f:ab:c8:eb:13:37:9f:c9:33:80:57:d3:df:9a:05:
         a3:20:2e:02:84:0b:f3:97:70:4e:b8:67:fc:17:49:2f:3f:87:
         a2:a1:f6:e7:f2:43:7b:96:61:a2:e4:4f:e1:1d:ac:65:60:dd:
         95:ec:cd:d8:81:cd:02:93:87:0e:e0:94:99:ce:d3:bb:4a:73:
         64:4b:91:1e:fc:79:33:e9:e3:5d:16:80:92:b3:f3:51:3c:cc:
         bd:41:77:ca:7b:e0:3c:43:b4:f6:14:2f:88:11:a4:aa:1c:8a:
         4d:de:98:6d:8c:3f:a5:f6:da:fb:4b:a6:42:73:7c:ac:77:62:
         89:5c:64:8b:a3:d0:61:fe:99:b2:8a:f5:cd:69:92:63:0f:b8:
         86:7b:a7:d9:b0:68:ad:c5:23:20:25:81:63:7c:77:ee:1a:d1:
         bc:52:e7:a5
-----BEGIN CERTIFICATE-----
MIIE+zCCA+OgAwIBAgIEERqsljANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg2
M2U5MTY3MTdhYjExY2NjZjExZWYxZmI1YzEyZWU0MTk1MGZhZDliMB4XDTIyMDEw
NDE5NDQxOVoXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoZjc4NjE2MTE4MGU0
ZDNmNzMyMWYzZjIwZTExZDNmYTgzMWQ4MjgxYjCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBANdCWPgcrAnbyHxMQ61QO3TFKhV2cLh/mqCEizVSeBAj35uZ
c8HhmiJNJ4kj+dozrP+jaoVLlYWg8lOTQXDXptIY4oQEooejPez7QF0VXEFaip1Q
04KCXsBKjFKQn8EqFZbaYEj25/aF3+q0uz2UQTnO+ftDo0cxwb77I3wpn4usC8zf
kd0iDVzuK+uUWZJTyxViASsQoqKeJKMwpBgL8gPI/MCgVZMvtJtQmNyXS3j0OtEn
Qh83UAADphhu5+tPne0Dy5LMa2Ext5uRoziafTxuX7xIQ1m+HVBichoUFhoaria9
SGW/+0b3xGBfeAvYhhJA4HmJuUUSU8kfFeObzFkCAwEAAaOCAhUwggIRMB0GA1Ud
DgQWBBT3hhYRgOTT9zIfPyDhHT+oMdgoGzAfBgNVHSMEGDAWgBRj6RZxerEczPEe
8ftcEu5BlQ+tmzAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L1kta1djWHF4SE16eEh2SDdYQkx1UVpVUHJacy5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvNTEvNDk1N2E0LWNlNTktNDMxNS05OTc2LWRjNWVjNzQ4ZjZhNS8x
Lzk0WVdFWURrMF9jeUh6OGc0UjBfcURIWUtCcy5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNTEv
NDk1N2E0LWNlNTktNDMxNS05OTc2LWRjNWVjNzQ4ZjZhNS8xL1kta1djWHF4SE16
eEh2SDdYQkx1UVpVUHJacy5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAr
BggrBgEFBQcBBwEB/wQcMBowGAQCAAIwEgMHACoOsQcJ9QMHACoQLwABezANBgkq
hkiG9w0BAQsFAAOCAQEAJrKyRa0EW48jg7bPfGckxkEJeahTPOe80Z1s8ID3877m
AkLa7+405FY/l+hDTbv0iH7rxJyykWszhwhjpw3LAdAD/bgSXTvUTUHQVxhNR9+h
OWw1BV/EBkhSP6bVP6vI6xM3n8kzgFfT35oFoyAuAoQL85dwTrhn/BdJLz+HoqH2
5/JDe5ZhouRP4R2sZWDdlezN2IHNApOHDuCUmc7Tu0pzZEuRHvx5M+njXRaAkrPz
UTzMvUF3ynvgPEO09hQviBGkqhyKTd6YbYw/pfba+0umQnN8rHdiiVxki6PQYf6Z
sor1zWmSYw+4hnun2bBorcUjICWBY3x37hrRvFLnpQ==
-----END CERTIFICATE-----