Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/O6SmWszk1FwLIHtLBtNeHgrhDqw.roa
File:                     O6SmWszk1FwLIHtLBtNeHgrhDqw.roa (raw, json)
Hash identifier:          H8Rim/tQIQKeekj07c+p5NKPe2Xlg4FN6cn3PCx4dX0=
Subject key identifier:   3B:A4:A6:5A:CC:E4:D4:5C:0B:20:7B:4B:06:D3:5E:1E:0A:E1:0E:AC
Certificate issuer:       /CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Certificate serial:       10CF1FFE
Authority key identifier: 63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/O6SmWszk1FwLIHtLBtNeHgrhDqw.roa
Signing time:             Sat 01 Jan 2022 09:05:35 +0000
ROA not before:           Sat 01 Jan 2022 09:05:35 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     211665
IP address blocks:        2a10:2f00:169::/48 maxlen: 48

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 282009598 (0x10cf1ffe)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
        Validity
            Not Before: Jan  1 09:05:35 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=3ba4a65acce4d45c0b207b4b06d35e1e0ae10eac
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:99:45:4d:f5:c1:8e:5e:40:dc:56:b0:3e:dc:
                    1f:50:86:8a:1a:32:a4:7a:d3:a9:92:bc:e1:d1:cd:
                    d3:2a:15:21:67:b1:ac:d3:b2:91:43:d1:f9:82:c8:
                    11:5a:a3:eb:58:4b:a0:77:32:33:70:1e:9e:02:e0:
                    f5:a8:89:27:76:76:ab:8c:b8:ff:37:3e:a7:e4:8e:
                    50:4d:90:ec:cb:ac:6e:3b:a3:da:27:98:ad:03:2f:
                    7e:28:c1:b1:3a:22:bf:84:d0:51:75:72:9d:88:ea:
                    b5:ce:79:aa:43:40:a7:db:5b:76:32:c2:12:2b:f2:
                    4d:aa:f0:61:ca:fc:44:a5:96:44:64:12:7d:34:39:
                    0e:74:7c:4c:9f:77:ac:94:82:d1:f7:6e:74:3c:7d:
                    a0:6d:79:7f:ff:2f:13:68:be:c6:4a:c4:3d:65:8b:
                    84:76:b0:fc:04:4a:a0:9c:dd:0f:b5:60:4c:b8:39:
                    dd:5d:4e:5c:00:bd:68:40:e6:7a:74:01:f5:ef:10:
                    7f:61:04:78:5d:b6:1a:56:19:10:76:f7:e2:7f:36:
                    c9:f6:76:64:07:dc:40:b4:7e:5f:ff:0e:eb:52:7e:
                    0f:f7:8e:c4:be:e8:f3:0d:c9:48:99:cf:41:98:4a:
                    60:8e:ac:4f:4f:32:c3:68:9d:74:d1:de:5b:c0:98:
                    c4:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3B:A4:A6:5A:CC:E4:D4:5C:0B:20:7B:4B:06:D3:5E:1E:0A:E1:0E:AC
            X509v3 Authority Key Identifier:
                keyid:63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/O6SmWszk1FwLIHtLBtNeHgrhDqw.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a10:2f00:169::/48

    Signature Algorithm: sha256WithRSAEncryption
         2c:8b:bb:74:eb:41:7b:f8:4b:d1:29:f6:b5:df:14:4e:ea:87:
         d5:bc:89:55:ff:08:64:2e:af:c6:6b:47:33:b2:a7:d2:91:c9:
         f1:3f:1f:10:1a:a0:0b:86:3a:27:d4:a5:35:79:84:ab:89:1c:
         1d:73:e8:01:13:8c:5e:9a:3b:ec:47:6f:96:14:ef:5f:e3:9e:
         df:03:dd:dd:25:38:ee:29:a9:4c:3c:80:84:ae:ec:c6:f4:8c:
         40:9e:9b:13:ff:13:7c:76:7f:6a:59:f8:69:ca:67:1a:22:83:
         9a:32:00:9d:dc:47:92:f2:6f:c2:7d:96:8f:9b:b8:e9:5d:4f:
         d7:28:69:e3:93:f4:9f:7a:49:d1:7b:1d:09:3b:f6:6f:3e:b3:
         b7:24:73:83:8f:1a:8b:46:74:fe:b1:89:bd:56:ce:17:71:20:
         cc:38:fc:1a:4d:4d:95:cd:be:35:5e:b2:42:36:aa:b6:9b:e5:
         b6:ce:aa:a3:40:ef:14:c8:18:ee:e0:30:ab:78:72:fe:e9:8c:
         4c:6a:ea:47:b3:2c:f3:05:34:b7:1f:0e:73:7b:f2:4b:9e:90:
         3a:cd:a0:e0:6a:0c:6e:8f:22:84:6e:aa:9a:c5:50:c2:c1:31:
         41:6a:1e:6b:16:83:53:1b:d2:64:a7:69:e6:74:f6:24:22:5e:
         53:9e:6e:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----