Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/PJLfWcIEFR1M6r1DLj-2ksWFGB4.roa
File:                     PJLfWcIEFR1M6r1DLj-2ksWFGB4.roa (raw, json)
Hash identifier:          zPxCeBh1hPOxAGQIjZhAblmEWqP//G1v1yyXhMeYneI=
Subject key identifier:   3C:92:DF:59:C2:04:15:1D:4C:EA:BD:43:2E:3F:B6:92:C5:85:18:1E
Certificate issuer:       /CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Certificate serial:       10B1EC0F
Authority key identifier: 63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/PJLfWcIEFR1M6r1DLj-2ksWFGB4.roa
Signing time:             Sat 01 Jan 2022 09:05:19 +0000
ROA not before:           Sat 01 Jan 2022 09:05:19 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     210667
IP address blocks:        2a0e:b107:1788::/48 maxlen: 48

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 280095759 (0x10b1ec0f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
        Validity
            Not Before: Jan  1 09:05:19 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=3c92df59c204151d4ceabd432e3fb692c585181e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:dd:95:30:db:d4:7c:c2:c3:73:c1:08:be:0b:
                    f5:9f:61:e7:bb:9d:b3:57:fd:d7:74:b0:57:da:01:
                    76:a9:f9:91:13:3d:38:cf:59:da:84:4c:76:52:6c:
                    56:f8:ad:08:19:e7:11:fe:6d:9d:b2:5b:78:a3:70:
                    40:8f:c8:16:0a:a2:c0:f6:37:50:8a:a4:3a:04:fa:
                    fc:06:95:9a:f0:5e:67:ac:81:ff:f1:3f:5c:6a:64:
                    44:0f:62:d6:0d:4b:6a:c1:f6:e9:33:24:c0:a6:97:
                    91:87:9a:0d:de:79:5f:4e:f4:ab:9c:d5:a6:2d:76:
                    44:d9:6d:4f:dc:9a:27:5d:05:0d:4b:6c:2f:02:0b:
                    d4:ce:14:40:f8:b5:c2:49:f0:c9:19:26:ee:8d:64:
                    3b:96:62:01:f5:9a:14:fa:7d:27:83:3f:50:f3:b0:
                    d2:62:c7:da:8d:eb:92:65:ed:ec:42:28:59:9e:a0:
                    e6:ac:d3:dd:f1:5d:09:af:15:0d:88:21:d9:8d:48:
                    66:67:da:fa:d7:c4:1c:01:c7:dd:0b:ee:7c:bb:47:
                    5f:1b:24:15:ec:b0:4a:06:f5:ab:a6:a5:a3:21:59:
                    29:dc:dc:a1:82:ba:d0:c3:50:15:2b:9a:0b:a6:e9:
                    90:eb:db:46:d0:a5:5d:fe:67:65:c1:3f:3b:00:93:
                    64:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3C:92:DF:59:C2:04:15:1D:4C:EA:BD:43:2E:3F:B6:92:C5:85:18:1E
            X509v3 Authority Key Identifier:
                keyid:63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/PJLfWcIEFR1M6r1DLj-2ksWFGB4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a0e:b107:1788::/48

    Signature Algorithm: sha256WithRSAEncryption
         99:18:6e:12:23:60:1c:72:98:31:f1:7d:6a:ff:23:e9:e3:bf:
         80:57:8e:28:94:8c:3e:71:1c:f6:5d:70:d4:9a:f9:c8:05:d0:
         ec:b3:1f:f4:53:52:e6:6c:0a:fc:5a:87:c1:c3:21:a2:c5:d9:
         59:b6:c6:0d:24:86:4c:80:2e:70:01:e3:db:5e:83:a2:49:c0:
         18:26:fe:0b:85:00:db:bd:0f:66:92:93:5c:fc:f9:f8:ad:77:
         ce:b9:ad:5f:19:e6:88:bc:72:7a:43:6d:d1:42:d1:35:f1:1c:
         14:b6:2c:18:16:00:6c:d2:0e:c7:27:68:89:71:d7:95:eb:2d:
         d1:18:bb:e4:b0:83:16:06:8a:61:ae:ba:51:3e:fc:bf:f2:c2:
         57:a8:0c:31:26:9c:4c:7c:d9:b7:a3:85:a6:ad:18:ab:c6:6e:
         63:bd:f2:01:f8:a8:a2:59:57:e7:03:15:08:29:ec:61:b6:61:
         21:43:c8:1b:dc:4f:8e:8c:92:e0:f8:ca:45:de:c9:3c:f3:e3:
         19:c0:bd:0f:32:57:fd:4e:16:cc:74:25:dd:31:8d:39:da:4f:
         3f:a4:56:13:1d:4b:60:ef:5e:29:bb:0e:9d:2a:b7:38:4c:d1:
         6a:8f:6b:f4:f8:d0:e9:93:3c:a5:42:63:75:83:fd:2f:c5:01:
         61:ab:06:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----