Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/EuieM1x6gnaGK7_8SCXjp-6wXP0.roa
File:                     EuieM1x6gnaGK7_8SCXjp-6wXP0.roa (raw, json)
Hash identifier:          179H8sM8/Rv9r8vCfiJ9i5olRLyjCkOOTCGr5codSpQ=
Subject key identifier:   12:E8:9E:33:5C:7A:82:76:86:2B:BF:FC:48:25:E3:A7:EE:B0:5C:FD
Certificate issuer:       /CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Certificate serial:       13089A88
Authority key identifier: 63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/EuieM1x6gnaGK7_8SCXjp-6wXP0.roa
Signing time:             Wed 23 Mar 2022 02:45:26 +0000
ROA not before:           Wed 23 Mar 2022 02:45:26 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     212292
IP address blocks:        2a10:2f00:15c::/48 maxlen: 48

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 319330952 (0x13089a88)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
        Validity
            Not Before: Mar 23 02:45:26 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=12e89e335c7a8276862bbffc4825e3a7eeb05cfd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:30:4b:fe:88:dd:a1:61:22:c5:62:ae:82:fa:
                    86:1d:ab:31:b6:9a:0a:5e:3d:80:0d:55:c4:db:82:
                    98:fb:32:79:ac:8e:a4:1c:03:72:47:5a:a9:1f:eb:
                    7f:ec:35:c9:3f:a0:a1:97:e2:b6:af:a1:c3:9d:4a:
                    2a:ec:39:34:03:e2:77:f3:72:64:d6:5b:ff:0a:7a:
                    d4:d7:7d:e8:17:0c:7c:4a:52:a0:d0:6f:dc:21:1d:
                    6e:2c:b7:5b:a4:84:13:8b:c5:92:9f:2d:0c:5e:18:
                    c9:f2:5a:87:1c:c1:9b:92:d4:0d:aa:65:59:19:63:
                    57:24:de:a4:2d:85:81:f6:90:da:ff:5c:2c:90:c0:
                    36:30:40:d3:df:15:39:36:13:46:7d:0d:93:05:71:
                    07:28:8e:2e:e0:45:8d:60:b1:f7:c3:2e:47:e3:67:
                    f1:8f:cc:db:b4:cd:a1:8c:e8:5f:ec:f0:05:e9:8c:
                    1a:1d:c9:25:f6:71:dd:c6:0c:23:aa:dc:ac:12:b2:
                    12:8e:2f:a4:c6:d3:3c:66:da:de:cf:46:22:6e:92:
                    30:47:18:5e:55:3f:d8:df:eb:6c:ca:3e:f3:bd:84:
                    d1:a3:38:b1:23:a5:93:af:63:ec:ac:b8:08:9d:96:
                    54:82:52:86:dc:22:37:64:8c:8c:de:5a:c6:4c:74:
                    44:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                12:E8:9E:33:5C:7A:82:76:86:2B:BF:FC:48:25:E3:A7:EE:B0:5C:FD
            X509v3 Authority Key Identifier:
                keyid:63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/EuieM1x6gnaGK7_8SCXjp-6wXP0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a10:2f00:15c::/48

    Signature Algorithm: sha256WithRSAEncryption
         6f:c7:88:61:f0:74:6e:e0:0a:24:9c:d9:e1:9c:27:8e:f4:a5:
         2a:d4:6b:b6:40:ef:52:db:6b:6b:cd:c4:99:6a:5f:45:aa:14:
         e3:d0:49:c4:f0:07:71:d8:77:35:30:59:7a:5e:bf:01:7e:0c:
         35:3f:d8:8d:c4:a2:9b:1f:ff:48:96:96:43:96:a9:60:e9:98:
         64:09:2b:1a:4c:2a:86:9f:85:40:0a:69:bc:03:33:f7:a6:71:
         13:b3:b6:2c:05:93:d1:de:a0:01:c4:37:99:66:5a:f6:44:c5:
         a8:18:0c:a4:11:d7:68:b7:2f:86:97:29:87:61:22:9c:a1:8c:
         11:ad:6e:2c:4c:83:e1:cd:59:5f:56:33:29:42:f7:71:49:57:
         ec:ee:36:d9:4a:d0:45:f9:a9:33:be:ca:ac:a8:6c:48:3d:6c:
         50:46:93:9e:54:3b:d7:9c:18:ab:93:cd:ce:fb:70:8e:77:60:
         fe:08:5e:c7:87:4d:dd:0c:22:7d:17:e9:b2:81:7c:28:34:ce:
         73:95:da:29:50:9c:92:ff:8a:48:26:cb:fd:70:eb:22:ad:23:
         91:38:93:de:6a:4e:93:b5:56:66:46:53:87:cd:94:60:73:b2:
         b9:b6:57:0e:3d:d0:49:c4:8e:db:58:2f:c1:b8:5e:1d:7d:40:
         29:79:f8:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----