Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/FARfv1ouCj-EEAJ5lLfUZhC6LUQ.roa
File:                     FARfv1ouCj-EEAJ5lLfUZhC6LUQ.roa (raw, json)
Hash identifier:          AGTL2AKkycfROKRQpeqP+IJQC8ZLTvY7ijSqcNjWZhk=
Subject key identifier:   14:04:5F:BF:5A:2E:0A:3F:84:10:02:79:94:B7:D4:66:10:BA:2D:44
Certificate issuer:       /CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Certificate serial:       121F5551
Authority key identifier: 63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/FARfv1ouCj-EEAJ5lLfUZhC6LUQ.roa
Signing time:             Wed 16 Feb 2022 13:12:57 +0000
ROA not before:           Wed 16 Feb 2022 13:12:57 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     210980
IP address blocks:        2a0e:b107:ae0::/44 maxlen: 48

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 304043345 (0x121f5551)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
        Validity
            Not Before: Feb 16 13:12:57 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=14045fbf5a2e0a3f8410027994b7d46610ba2d44
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:ca:42:ce:b9:9e:1f:e4:50:78:db:95:90:31:
                    c5:f9:5c:58:b6:49:b3:79:8c:48:dd:4b:60:bd:93:
                    a0:3f:e4:38:85:65:53:68:a2:21:4e:57:a9:63:cd:
                    c3:a0:33:a2:9d:c6:7f:7b:1d:7a:d6:ca:ac:df:b2:
                    71:c4:6d:70:86:64:4c:65:94:2a:bb:af:04:7e:20:
                    dd:a0:1d:dd:87:3a:73:2f:c1:3a:50:2b:38:bb:59:
                    80:19:ef:e9:33:a0:88:25:33:72:c7:e6:91:30:04:
                    a5:a6:c6:33:a1:52:13:55:4c:f1:e7:1d:ba:6c:dc:
                    71:48:5d:41:7d:6f:98:f6:af:9f:cf:28:41:65:d0:
                    53:fd:66:fa:63:0c:2c:3d:f9:ca:8c:d0:85:dc:4c:
                    37:d7:7a:51:7e:fa:1c:ae:99:af:27:03:00:92:5f:
                    21:d0:39:90:f7:3a:24:c9:e4:df:9c:7c:3d:c1:90:
                    38:82:61:b1:50:4c:8c:d8:5e:26:19:e7:d2:4b:78:
                    0d:15:01:99:69:f1:8f:e8:27:29:5d:ba:ef:20:78:
                    0a:07:f3:10:54:7f:d1:7d:86:50:24:91:dc:44:ed:
                    a9:5a:50:e3:ac:ec:46:f3:41:44:5b:65:12:14:73:
                    0c:39:13:9e:2b:5e:ef:19:85:4e:f4:7b:d0:6b:c7:
                    69:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                14:04:5F:BF:5A:2E:0A:3F:84:10:02:79:94:B7:D4:66:10:BA:2D:44
            X509v3 Authority Key Identifier:
                keyid:63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/FARfv1ouCj-EEAJ5lLfUZhC6LUQ.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a0e:b107:ae0::/44

    Signature Algorithm: sha256WithRSAEncryption
         51:c4:3f:da:10:34:25:61:c6:04:2f:fe:39:b5:e0:1d:99:9a:
         89:a6:da:7a:0b:b8:06:42:84:9a:c8:81:72:41:f6:07:d2:29:
         09:db:2e:9f:70:a6:ac:e7:d2:2c:db:66:99:10:44:c8:11:46:
         fc:f6:46:bf:a0:67:92:23:18:16:8f:a4:2c:a8:96:0e:48:34:
         8c:e3:7a:61:a4:bf:0d:15:e2:ab:d9:ba:29:bf:f6:d0:a7:58:
         71:ad:34:bb:5a:10:83:d6:03:ea:12:84:2f:92:23:9f:6c:c0:
         1c:36:63:c9:d2:ba:cd:6e:f9:8a:aa:d0:2d:87:b7:b2:b0:9b:
         45:95:59:6b:1a:ea:08:a7:8d:82:67:29:04:6b:60:c1:57:22:
         1a:03:42:20:4d:62:6d:4e:70:bf:34:5f:67:22:ad:aa:ee:55:
         95:48:12:e3:a2:16:10:2c:38:c4:89:8f:9d:b1:dd:de:c8:f5:
         e7:c8:19:5f:ad:29:2f:e9:ce:76:84:bb:cf:0c:56:10:26:67:
         5c:c4:e9:c4:96:ce:6b:d7:21:81:7d:06:6a:58:7a:ff:71:1c:
         e4:35:11:84:60:40:64:76:c7:63:b3:2c:03:84:ea:37:27:50:
         f8:a8:03:07:8a:ba:44:be:04:34:11:ea:38:ac:c1:fd:de:97:
         17:e2:8d:a5
-----BEGIN CERTIFICATE-----
MIIE8jCCA9qgAwIBAgIEEh9VUTANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg2
M2U5MTY3MTdhYjExY2NjZjExZWYxZmI1YzEyZWU0MTk1MGZhZDliMB4XDTIyMDIx
NjEzMTI1N1oXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoMTQwNDVmYmY1YTJl
MGEzZjg0MTAwMjc5OTRiN2Q0NjYxMGJhMmQ0NDCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAMjKQs65nh/kUHjblZAxxflcWLZJs3mMSN1LYL2ToD/kOIVl
U2iiIU5XqWPNw6Azop3Gf3sdetbKrN+yccRtcIZkTGWUKruvBH4g3aAd3Yc6cy/B
OlArOLtZgBnv6TOgiCUzcsfmkTAEpabGM6FSE1VM8ecdumzccUhdQX1vmPavn88o
QWXQU/1m+mMMLD35yozQhdxMN9d6UX76HK6ZrycDAJJfIdA5kPc6JMnk35x8PcGQ
OIJhsVBMjNheJhnn0kt4DRUBmWnxj+gnKV267yB4CgfzEFR/0X2GUCSR3ETtqVpQ
46zsRvNBRFtlEhRzDDkTnite7xmFTvR70GvHaY8CAwEAAaOCAgwwggIIMB0GA1Ud
DgQWBBQUBF+/Wi4KP4QQAnmUt9RmELotRDAfBgNVHSMEGDAWgBRj6RZxerEczPEe
8ftcEu5BlQ+tmzAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L1kta1djWHF4SE16eEh2SDdYQkx1UVpVUHJacy5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvNTEvNDk1N2E0LWNlNTktNDMxNS05OTc2LWRjNWVjNzQ4ZjZhNS8x
L0ZBUmZ2MW91Q2otRUVBSjVsTGZVWmhDNkxVUS5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNTEv
NDk1N2E0LWNlNTktNDMxNS05OTc2LWRjNWVjNzQ4ZjZhNS8xL1kta1djWHF4SE16
eEh2SDdYQkx1UVpVUHJacy5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAi
BggrBgEFBQcBBwEB/wQTMBEwDwQCAAIwCQMHBCoOsQcK4DANBgkqhkiG9w0BAQsF
AAOCAQEAUcQ/2hA0JWHGBC/+ObXgHZmaiabaegu4BkKEmsiBckH2B9IpCdsun3Cm
rOfSLNtmmRBEyBFG/PZGv6BnkiMYFo+kLKiWDkg0jON6YaS/DRXiq9m6Kb/20KdY
ca00u1oQg9YD6hKEL5Ijn2zAHDZjydK6zW75iqrQLYe3srCbRZVZaxrqCKeNgmcp
BGtgwVciGgNCIE1ibU5wvzRfZyKtqu5VlUgS46IWECw4xImPnbHd3sj158gZX60p
L+nOdoS7zwxWECZnXMTpxJbOa9chgX0Galh6/3Ec5DURhGBAZHbHY7MsA4TqNydQ
+KgDB4q6RL4ENBHqOKzB/d6XF+KNpQ==
-----END CERTIFICATE-----