Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/IgLpjlzS0WB6xD1Ce_7dKRz6eMs.roa
File:                     IgLpjlzS0WB6xD1Ce_7dKRz6eMs.roa (raw, json)
Hash identifier:          icCX0fqCGX33cetCPC048+ee4CVkXD7mJweRgEHMnbo=
Subject key identifier:   22:02:E9:8E:5C:D2:D1:60:7A:C4:3D:42:7B:FE:DD:29:1C:FA:78:CB
Certificate issuer:       /CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Certificate serial:       10CA7AC2
Authority key identifier: 63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/IgLpjlzS0WB6xD1Ce_7dKRz6eMs.roa
Signing time:             Sat 01 Jan 2022 09:05:33 +0000
ROA not before:           Sat 01 Jan 2022 09:05:33 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     211548
IP address blocks:        2a0e:97c0:2c0::/44 maxlen: 48

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 281705154 (0x10ca7ac2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
        Validity
            Not Before: Jan  1 09:05:33 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=2202e98e5cd2d1607ac43d427bfedd291cfa78cb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:e6:2d:75:7b:f5:d2:e0:71:7a:20:09:36:b8:
                    01:7c:5e:64:32:46:0d:21:fc:50:af:92:55:4b:98:
                    c2:c7:ac:8e:8e:95:b9:fa:c8:82:2c:14:16:fe:0d:
                    2d:5f:c3:50:1f:4d:4d:fb:f8:9f:a8:7c:6f:38:cd:
                    f7:b7:a4:1b:2e:06:2d:58:3e:bc:ab:82:bc:81:37:
                    8f:ed:25:08:69:88:68:7f:1e:5d:18:dc:d7:32:83:
                    e9:53:d6:63:10:4a:bc:57:e5:e0:77:2b:73:e3:22:
                    7f:10:36:7a:40:fa:cb:d4:c1:4a:d7:17:d3:c8:66:
                    86:2b:37:86:15:e0:b0:99:80:53:96:39:32:67:fa:
                    6e:4c:af:b3:59:3f:91:d0:c6:f9:7b:ac:6e:69:f9:
                    cd:3c:b0:d7:75:69:7e:17:a0:ad:83:d9:c0:85:93:
                    30:6a:ac:87:9a:e2:c7:72:68:1b:1c:3e:e5:2f:bf:
                    60:d1:a7:fe:cc:4a:29:f3:f3:af:94:cf:ce:77:15:
                    75:96:04:55:78:19:f4:00:df:02:b9:c3:ba:0e:e8:
                    73:0a:2c:b4:2b:cd:30:29:e5:5a:e0:b0:f6:75:31:
                    0b:29:f6:11:c3:50:a2:46:b8:0f:7e:b1:04:a9:29:
                    49:bb:6e:2c:ed:2b:bd:24:a5:45:72:1a:e9:ad:7b:
                    84:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                22:02:E9:8E:5C:D2:D1:60:7A:C4:3D:42:7B:FE:DD:29:1C:FA:78:CB
            X509v3 Authority Key Identifier:
                keyid:63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/IgLpjlzS0WB6xD1Ce_7dKRz6eMs.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a0e:97c0:2c0::/44

    Signature Algorithm: sha256WithRSAEncryption
         13:14:46:4f:a0:72:a1:b6:bb:af:ef:dd:f7:0e:3f:54:e4:14:
         5b:23:d4:02:3c:b2:25:13:f4:fd:b1:dd:04:e3:ed:2d:f1:30:
         cf:8f:48:bd:a6:5e:6f:80:49:62:16:2b:b7:46:62:e1:85:af:
         99:b0:02:63:7f:9f:9a:05:d9:76:54:cb:ac:0b:db:54:9d:b9:
         22:60:d2:9f:2e:9c:4f:0a:33:35:0b:69:7a:94:f7:3c:e1:6e:
         df:a9:a6:3e:f2:a9:38:91:2b:1d:49:0f:da:d4:d7:d3:15:eb:
         c9:ef:8e:06:c8:b1:d7:46:51:50:4f:b8:b5:8e:87:53:54:4a:
         1a:76:5c:12:b5:dc:27:a8:24:5f:af:7d:ff:f1:e4:45:69:bd:
         74:6d:30:61:39:40:4c:54:3c:0f:c5:59:cd:87:70:58:57:83:
         91:23:7e:fc:13:93:c8:99:82:a4:d9:6f:08:57:5b:de:da:ba:
         a1:06:93:bd:0d:20:14:74:73:b5:c6:06:ef:32:47:33:35:f8:
         fa:ce:f3:1c:98:30:7b:7a:b3:9e:56:06:cb:f1:d2:e1:e7:70:
         e5:ed:64:d4:96:ac:8d:53:0b:ba:19:b4:1b:25:97:7b:2f:45:
         e5:e3:00:4f:52:33:bc:0f:ee:62:6f:cc:0d:fc:25:a1:53:0f:
         24:1a:45:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----