Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/C6YG-OiytmMn3BAVdVHDrkUnDJQ.roa
File:                     C6YG-OiytmMn3BAVdVHDrkUnDJQ.roa (raw, json)
Hash identifier:          8PThlBqP10OseeQcg37CImRcxU+JQphuOGu0BXYH+Wo=
Subject key identifier:   0B:A6:06:F8:E8:B2:B6:63:27:DC:10:15:75:51:C3:AE:45:27:0C:94
Certificate issuer:       /CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Certificate serial:       0183CFE1619B02E7B759CE07480808EE7948
Authority key identifier: 63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/C6YG-OiytmMn3BAVdVHDrkUnDJQ.roa
Signing time:             Thu 13 Oct 2022 05:46:37 +0000
ROA not before:           Thu 13 Oct 2022 05:46:37 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     20473
IP address blocks:        2a0e:b107:1870::/48 maxlen: 48
                          2a0e:b107:5d0::/44 maxlen: 48
                          2a0e:b107:5e0::/44 maxlen: 48
                          2a0e:97c0:750::/48 maxlen: 48
                          2a0e:b107:900::/44 maxlen: 48
                          2a0e:b107:df2::/48 maxlen: 48
                          2a0e:97c0:736::/48 maxlen: 48
                          2a0e:b107:9f4::/48 maxlen: 48
                          2a0e:b107:9f6::/48 maxlen: 48
                          2a0e:b102:12f::/48 maxlen: 48
                          2a0e:97c0:76f::/48 maxlen: 48
                          2a0e:97c0:73f::/48 maxlen: 48

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:83:cf:e1:61:9b:02:e7:b7:59:ce:07:48:08:08:ee:79:48
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
        Validity
            Not Before: Oct 13 05:46:37 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=0ba606f8e8b2b66327dc10157551c3ae45270c94
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:1d:f9:9c:56:b6:b1:48:f0:49:84:c2:56:3f:
                    3e:c1:a8:b6:1b:b8:1b:50:49:5b:ba:a5:e7:f0:2e:
                    da:91:a5:84:e9:da:45:64:9c:54:ad:e5:6d:63:d0:
                    cc:7e:80:f7:e1:78:41:a8:d2:eb:65:e5:0d:b9:d0:
                    ac:2f:09:80:ed:be:15:28:0f:fb:bd:aa:0f:06:d3:
                    2b:69:d7:db:a4:f4:0a:0c:01:d5:11:85:09:0f:aa:
                    a9:78:2c:17:c3:04:30:5f:0a:45:71:27:55:4a:00:
                    fa:a2:ea:97:60:e6:a6:08:74:00:07:d0:bf:1f:17:
                    aa:ba:88:67:11:37:95:55:6c:71:a9:6e:82:f1:c0:
                    49:aa:0c:a2:00:63:a4:f0:0d:fc:58:b7:f5:8a:59:
                    0b:f2:b9:6b:44:60:16:eb:35:57:3e:36:7c:40:0e:
                    3e:16:2e:5b:1c:8b:4b:92:28:0d:57:24:b0:84:36:
                    b7:3f:69:44:b1:f9:f5:e6:b1:b7:75:1d:cf:ca:41:
                    e3:42:ae:30:63:61:df:8f:d0:03:31:0d:a0:db:4f:
                    b5:dd:84:7a:44:ae:a0:87:ae:2b:ba:0b:b6:b6:d6:
                    08:94:2f:6a:63:2d:b4:39:e1:76:b4:28:e2:8f:b7:
                    8a:53:e4:34:21:b0:de:36:d5:00:f8:61:84:fa:e6:
                    0d:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0B:A6:06:F8:E8:B2:B6:63:27:DC:10:15:75:51:C3:AE:45:27:0C:94
            X509v3 Authority Key Identifier:
                keyid:63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/C6YG-OiytmMn3BAVdVHDrkUnDJQ.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a0e:97c0:736::/48
                  2a0e:97c0:73f::/48
                  2a0e:97c0:750::/48
                  2a0e:97c0:76f::/48
                  2a0e:b102:12f::/48
                  2a0e:b107:5d0::-2a0e:b107:5ef:ffff:ffff:ffff:ffff:ffff
                  2a0e:b107:900::/44
                  2a0e:b107:9f4::/48
                  2a0e:b107:9f6::/48
                  2a0e:b107:df2::/48
                  2a0e:b107:1870::/48

    Signature Algorithm: sha256WithRSAEncryption
         29:78:16:1e:62:42:22:86:71:9c:84:95:74:19:c6:61:0c:fb:
         da:c1:24:50:76:4b:6b:b2:44:e4:43:ca:3d:49:f3:42:9e:ec:
         89:22:dc:b6:92:e1:a7:a4:81:a8:f9:7f:69:e4:54:a2:c0:6a:
         71:8e:c9:e5:d5:29:4f:dd:99:0b:c6:33:bd:0c:9c:d2:d8:e3:
         38:e2:09:98:fb:0e:93:9a:ea:0a:b4:19:89:b7:82:8d:63:55:
         2b:50:ab:a5:88:dd:97:20:b6:a4:ac:15:4f:f8:38:ed:9c:11:
         c1:57:e8:68:4f:50:e7:80:55:c7:de:0d:46:a0:aa:2c:22:22:
         9e:b1:54:17:fe:ae:b7:fd:a2:14:ac:fb:a6:49:36:55:cd:ae:
         b9:45:a6:b7:48:3c:3d:c5:9c:d0:1f:0c:d1:cd:97:0c:d7:e2:
         bc:fb:87:71:95:99:74:b9:27:af:d0:ed:e5:3f:7e:d0:f5:24:
         7a:b6:42:c1:26:3d:a0:b9:ff:c0:7e:f6:b2:e1:eb:69:3a:77:
         d1:4e:c0:89:07:df:09:7f:dc:b8:85:70:e4:4d:85:50:37:91:
         42:62:2d:24:25:93:ab:4a:88:48:c1:c4:79:a4:30:cd:8d:69:
         8c:19:c7:a7:4a:61:ed:c4:5d:fc:67:e3:b2:1b:c6:62:5f:a9:
         5a:65:f1:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----