Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/HJPsUZtDHkOKiy9qlgVRrSFdZrY.roa
File:                     HJPsUZtDHkOKiy9qlgVRrSFdZrY.roa (raw, json)
Hash identifier:          jE592uLuyfnHZ5QqR0KIaMu9WHlMkUmrdIvVWMtChQg=
Subject key identifier:   1C:93:EC:51:9B:43:1E:43:8A:8B:2F:6A:96:05:51:AD:21:5D:66:B6
Certificate issuer:       /CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Certificate serial:       10E794B3
Authority key identifier: 63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/HJPsUZtDHkOKiy9qlgVRrSFdZrY.roa
Signing time:             Sat 01 Jan 2022 09:05:50 +0000
ROA not before:           Sat 01 Jan 2022 09:05:50 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     212767
IP address blocks:        2a10:2f00:14a::/48 maxlen: 48

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 283612339 (0x10e794b3)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
        Validity
            Not Before: Jan  1 09:05:50 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=1c93ec519b431e438a8b2f6a960551ad215d66b6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:a6:f4:76:82:31:35:d9:89:5a:1e:1a:ea:e2:
                    c3:a8:d2:f8:8e:71:2d:8a:41:c0:f5:7a:32:04:73:
                    72:87:27:9c:3b:2f:76:70:a6:2b:aa:62:62:2b:30:
                    0e:bd:a9:9d:01:d5:60:9e:85:3a:f7:c9:ac:95:d9:
                    52:b5:4c:b5:35:0f:59:21:db:1d:d4:a8:79:7d:19:
                    3b:d1:50:4f:11:73:ed:34:4d:b6:39:35:f3:e9:61:
                    69:70:1b:e2:56:a2:75:ab:e2:0c:20:f0:17:cb:75:
                    80:28:ad:c0:69:f8:93:5b:77:70:db:a5:2a:c6:02:
                    bd:72:9f:5a:3a:03:8d:6e:8a:bd:2b:62:e1:6d:70:
                    1e:99:9c:e7:72:3e:93:db:6f:d3:f7:5b:18:13:06:
                    9f:85:92:cf:93:24:5c:74:60:11:c1:2b:e1:8c:14:
                    99:4d:f4:e0:26:9a:83:3a:56:76:d6:6f:08:5b:c9:
                    94:21:10:10:d0:be:5a:d3:02:4e:36:62:b8:93:c1:
                    a1:6b:33:98:50:d6:2d:99:69:79:45:6a:04:19:78:
                    28:ca:c6:e4:ad:ad:72:16:ee:74:5a:c2:7c:58:e2:
                    21:53:74:95:6c:36:6d:44:80:ac:d7:0d:97:2e:54:
                    6a:fa:96:47:63:45:f5:8e:79:42:3c:07:66:c8:52:
                    73:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1C:93:EC:51:9B:43:1E:43:8A:8B:2F:6A:96:05:51:AD:21:5D:66:B6
            X509v3 Authority Key Identifier:
                keyid:63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/HJPsUZtDHkOKiy9qlgVRrSFdZrY.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a10:2f00:14a::/48

    Signature Algorithm: sha256WithRSAEncryption
         57:16:1d:00:20:f4:9c:46:1e:81:4e:69:fa:33:f9:64:82:35:
         ab:6a:a4:90:2a:de:14:b4:ea:24:df:76:7e:1e:21:66:26:52:
         8e:61:75:b8:6f:17:7f:f4:da:04:22:5d:ce:18:7e:da:19:2b:
         82:46:3e:c5:2a:0a:23:b9:32:34:07:5d:6c:f3:20:7f:c6:6c:
         22:22:02:ab:7a:e8:27:3f:90:71:5d:37:84:9a:a1:d5:06:29:
         03:f6:59:4e:1b:34:4d:09:f0:ec:7d:53:e8:dc:4f:22:af:18:
         97:a3:5a:6c:48:c3:6a:0f:18:2b:4a:03:29:9d:76:46:48:dc:
         a8:9f:50:37:57:eb:36:79:18:a8:99:1a:7e:6e:37:b9:b1:74:
         5a:a6:c6:36:2e:97:fb:66:91:98:2b:14:de:eb:e5:d6:89:76:
         fd:69:e5:03:32:e6:ed:02:bb:7a:cc:29:01:0d:71:15:92:41:
         42:7a:bc:05:40:03:61:57:7b:a7:af:19:95:56:c9:ed:0e:ca:
         85:fd:c1:92:51:3b:15:27:9d:aa:53:21:89:70:5b:94:73:11:
         a7:4a:06:38:52:ac:86:30:b1:3f:9f:f7:31:5d:63:84:ee:ec:
         3d:fc:c1:bd:6f:9a:1f:d7:a2:b8:84:92:ed:a5:15:27:55:be:
         46:0b:80:94
-----BEGIN CERTIFICATE-----
MIIE8jCCA9qgAwIBAgIEEOeUszANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg2
M2U5MTY3MTdhYjExY2NjZjExZWYxZmI1YzEyZWU0MTk1MGZhZDliMB4XDTIyMDEw
MTA5MDU1MFoXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoMWM5M2VjNTE5YjQz
MWU0MzhhOGIyZjZhOTYwNTUxYWQyMTVkNjZiNjCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBALqm9HaCMTXZiVoeGuriw6jS+I5xLYpBwPV6MgRzcocnnDsv
dnCmK6piYiswDr2pnQHVYJ6FOvfJrJXZUrVMtTUPWSHbHdSoeX0ZO9FQTxFz7TRN
tjk18+lhaXAb4laidaviDCDwF8t1gCitwGn4k1t3cNulKsYCvXKfWjoDjW6KvSti
4W1wHpmc53I+k9tv0/dbGBMGn4WSz5MkXHRgEcEr4YwUmU304CaagzpWdtZvCFvJ
lCEQENC+WtMCTjZiuJPBoWszmFDWLZlpeUVqBBl4KMrG5K2tchbudFrCfFjiIVN0
lWw2bUSArNcNly5UavqWR2NF9Y55QjwHZshSc08CAwEAAaOCAgwwggIIMB0GA1Ud
DgQWBBQck+xRm0MeQ4qLL2qWBVGtIV1mtjAfBgNVHSMEGDAWgBRj6RZxerEczPEe
8ftcEu5BlQ+tmzAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L1kta1djWHF4SE16eEh2SDdYQkx1UVpVUHJacy5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvNTEvNDk1N2E0LWNlNTktNDMxNS05OTc2LWRjNWVjNzQ4ZjZhNS8x
L0hKUHNVWnRESGtPS2l5OXFsZ1ZSclNGZFpyWS5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNTEv
NDk1N2E0LWNlNTktNDMxNS05OTc2LWRjNWVjNzQ4ZjZhNS8xL1kta1djWHF4SE16
eEh2SDdYQkx1UVpVUHJacy5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAi
BggrBgEFBQcBBwEB/wQTMBEwDwQCAAIwCQMHACoQLwABSjANBgkqhkiG9w0BAQsF
AAOCAQEAVxYdACD0nEYegU5p+jP5ZII1q2qkkCreFLTqJN92fh4hZiZSjmF1uG8X
f/TaBCJdzhh+2hkrgkY+xSoKI7kyNAddbPMgf8ZsIiICq3roJz+QcV03hJqh1QYp
A/ZZThs0TQnw7H1T6NxPIq8Yl6NabEjDag8YK0oDKZ12RkjcqJ9QN1frNnkYqJka
fm43ubF0WqbGNi6X+2aRmCsU3uvl1ol2/WnlAzLm7QK7eswpAQ1xFZJBQnq8BUAD
YVd7p68ZlVbJ7Q7Khf3BklE7FSedqlMhiXBblHMRp0oGOFKshjCxP5/3MV1jhO7s
PfzBvW+aH9eiuISS7aUVJ1W+RguAlA==
-----END CERTIFICATE-----