Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Fj5XWWZZ4FMsGE0fE46-SWrjpH8.roa
File:                     Fj5XWWZZ4FMsGE0fE46-SWrjpH8.roa (raw, json)
Hash identifier:          Yqx6TUest1C3wVxkJsM7yY3UycBzQmFdP45Mp4Wur+8=
Subject key identifier:   16:3E:57:59:66:59:E0:53:2C:18:4D:1F:13:8E:BE:49:6A:E3:A4:7F
Certificate issuer:       /CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Certificate serial:       113C39F4
Authority key identifier: 63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Fj5XWWZZ4FMsGE0fE46-SWrjpH8.roa
Signing time:             Sun 09 Jan 2022 21:08:17 +0000
ROA not before:           Sun 09 Jan 2022 21:08:17 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     58015
IP address blocks:        2a0e:b107:11d0::/47 maxlen: 48
                          2a0e:b107:11d2::/47 maxlen: 48

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 289159668 (0x113c39f4)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
        Validity
            Not Before: Jan  9 21:08:17 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=163e57596659e0532c184d1f138ebe496ae3a47f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:5e:b5:44:c4:ac:66:7c:65:2d:d0:09:c3:97:
                    dd:76:8b:be:59:07:31:a9:b2:1f:90:89:a2:6a:dd:
                    0d:7b:50:ce:50:fe:32:e2:78:9a:1d:35:d5:f4:d4:
                    0d:d5:90:46:b2:38:55:db:13:a2:95:93:fc:07:03:
                    bd:41:35:5c:51:22:ea:ed:10:05:76:6e:cc:92:5b:
                    5e:f1:02:c1:d2:9c:cd:ef:3f:66:13:b1:f3:45:b9:
                    93:a6:a7:36:82:7f:0b:ab:49:c8:37:d1:e5:70:c4:
                    a9:15:ce:21:2b:3c:ff:a7:a4:36:f1:1c:88:98:68:
                    2e:02:ca:ce:0f:02:df:48:8c:c7:b0:3e:48:b4:aa:
                    a3:ff:72:3b:00:07:06:50:d5:7f:fb:a1:81:37:ea:
                    4f:89:00:61:02:49:ed:1a:ae:f4:68:52:68:8d:d0:
                    02:51:b3:f0:52:54:2b:86:b3:5f:3f:a0:8d:c8:2c:
                    df:47:7f:5c:a5:22:56:47:74:25:f5:44:46:67:7a:
                    66:e9:c7:8e:7b:ff:06:07:72:07:44:20:00:44:4d:
                    36:2b:02:74:fb:91:62:c5:d0:8e:08:96:b0:87:90:
                    ad:b8:6c:b6:e0:a7:cb:ed:7e:95:bc:0a:b7:65:bb:
                    f3:64:02:30:26:e2:2d:d4:0e:7d:8d:d9:ff:f3:54:
                    d6:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                16:3E:57:59:66:59:E0:53:2C:18:4D:1F:13:8E:BE:49:6A:E3:A4:7F
            X509v3 Authority Key Identifier:
                keyid:63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Fj5XWWZZ4FMsGE0fE46-SWrjpH8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a0e:b107:11d0::/46

    Signature Algorithm: sha256WithRSAEncryption
         68:97:91:f2:b4:55:8e:62:60:2e:5e:8f:b2:8e:42:6d:63:30:
         1d:ca:5c:c4:39:4a:0f:44:12:7d:b1:83:55:93:46:7b:e9:82:
         2b:57:3e:10:47:fc:03:ec:8a:6c:ee:66:e7:64:9f:cc:1a:59:
         2e:32:be:89:ab:da:52:7c:d0:38:c4:85:5f:07:99:f8:ba:5e:
         fb:68:eb:55:ad:0b:2f:e3:b3:38:8e:4d:7d:8e:47:00:0e:14:
         0a:55:c3:5c:e9:5c:16:f7:80:75:ae:4f:30:b2:76:07:13:82:
         4a:82:f4:6d:2e:10:02:26:85:35:28:30:92:99:fe:67:f4:ab:
         ff:a7:a1:86:42:31:16:3a:d9:96:32:9f:9a:75:eb:4e:9d:19:
         48:af:71:d3:b7:db:4c:cc:69:30:0f:7c:20:3d:b5:e2:fd:10:
         84:7a:55:14:7d:80:5a:5b:62:64:e4:95:c6:fd:37:af:d6:fb:
         cd:fe:c8:8e:86:ea:d3:b3:dd:bc:1a:5f:93:44:0a:8b:95:5a:
         3e:aa:ed:75:b0:68:18:6f:80:a0:24:03:a0:a5:49:0d:00:42:
         09:00:f5:57:38:22:47:aa:a1:04:29:7e:1a:94:20:7b:89:06:
         4b:bb:5a:37:c8:5b:cf:46:5a:8a:ca:2a:b2:b4:2a:3d:ba:c2:
         70:0e:b2:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----