Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/GHFQ-itEP9oY4Dy8-ngnB30h0_0.roa
File:                     GHFQ-itEP9oY4Dy8-ngnB30h0_0.roa (raw, json)
Hash identifier:          9aJY2QogDXUVZJ6PpLKg7cjJ+LvYJaozLHr9+5+pMW4=
Subject key identifier:   18:71:50:FA:2B:44:3F:DA:18:E0:3C:BC:FA:78:27:07:7D:21:D3:FD
Certificate issuer:       /CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Certificate serial:       10CA1B3A
Authority key identifier: 63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/GHFQ-itEP9oY4Dy8-ngnB30h0_0.roa
Signing time:             Sat 01 Jan 2022 09:05:33 +0000
ROA not before:           Sat 01 Jan 2022 09:05:33 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     211544
IP address blocks:        2a0e:97c0:2e0::/44 maxlen: 48

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 281680698 (0x10ca1b3a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
        Validity
            Not Before: Jan  1 09:05:33 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=187150fa2b443fda18e03cbcfa7827077d21d3fd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:e0:5b:b0:88:c6:96:44:08:cd:4f:a5:23:71:
                    3f:93:2e:ef:bf:25:1e:cd:ab:83:13:9e:ee:79:d5:
                    71:05:1b:ab:dc:af:14:1e:78:57:ad:4d:63:b6:c2:
                    56:a0:ab:55:94:9b:c6:d0:85:be:d0:63:03:76:2f:
                    60:01:08:7e:2e:18:b2:7d:46:f5:4d:e7:58:7f:9b:
                    44:cf:bb:ad:03:ab:0c:3e:f3:c9:18:a8:8d:2b:32:
                    17:98:84:cf:6a:74:bf:16:a5:4e:2d:eb:1c:46:97:
                    e1:43:37:58:38:3f:ca:16:7f:91:19:91:f4:e1:cf:
                    af:7a:42:c8:67:c1:d0:e7:b6:fd:f2:97:a9:fd:33:
                    7b:12:aa:4f:95:19:7a:b4:6a:55:6c:a6:e2:b5:10:
                    e4:52:ff:64:11:f1:ff:bf:62:20:d7:53:35:49:92:
                    a4:df:69:27:31:ab:a3:35:b0:f2:3a:fb:53:e4:b0:
                    56:4a:12:4a:2a:86:04:98:e6:5b:64:82:5d:bd:8a:
                    ec:b6:06:e2:56:82:2d:4a:46:ea:45:08:00:68:77:
                    c5:8e:08:2e:0a:b9:0d:7b:ac:43:e9:49:9a:ab:92:
                    39:9a:76:16:03:0e:91:c9:c3:5b:f1:3a:0a:73:ea:
                    94:a2:0c:e8:85:2a:ae:4a:a2:31:df:b3:53:d9:16:
                    db:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                18:71:50:FA:2B:44:3F:DA:18:E0:3C:BC:FA:78:27:07:7D:21:D3:FD
            X509v3 Authority Key Identifier:
                keyid:63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/GHFQ-itEP9oY4Dy8-ngnB30h0_0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a0e:97c0:2e0::/44

    Signature Algorithm: sha256WithRSAEncryption
         25:e7:7d:53:bf:04:8b:3e:ba:36:66:d8:6a:6c:f0:8f:03:0f:
         60:a1:74:dd:97:8d:bc:8b:5f:97:6e:e2:4f:14:52:b5:30:fd:
         dc:11:31:52:6b:2c:57:50:c4:7d:87:00:8f:c3:85:52:d2:5b:
         85:a1:8d:c6:e1:b0:4e:56:c6:d8:9d:d8:62:90:84:7e:ef:5f:
         4f:3c:06:15:e8:09:f5:b5:c6:ac:c2:60:6b:6e:e3:9a:85:50:
         e6:f0:b9:6a:c2:6e:f3:5b:d4:90:4f:b1:0c:d2:77:b4:0b:19:
         cf:dc:5e:b4:c6:35:9f:dd:9b:6c:25:1f:ba:f7:f1:94:18:48:
         86:7f:de:c8:e3:93:1e:47:7e:80:02:70:86:a9:6c:e0:5d:c5:
         ab:6b:13:09:f6:aa:99:14:86:cc:8d:5c:1d:a5:3b:21:f3:11:
         39:9e:63:81:68:47:b6:72:86:2a:ee:61:18:cb:d2:35:66:9e:
         6e:d1:74:fe:f2:50:7a:3d:c3:1d:57:0e:d7:90:90:70:1a:0e:
         fc:b6:42:64:05:e2:91:a2:04:04:86:db:2f:7d:56:ea:a1:e5:
         18:7b:ea:f6:55:3c:de:18:6c:58:16:4b:65:bb:da:6a:e0:f1:
         b9:b9:27:7c:a5:ef:26:ee:d2:5c:bc:23:de:ce:21:80:d6:93:
         73:64:84:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----