Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/PPiSQRYu4Fxa4nYzFyoaIijwxnw.roa
File:                     PPiSQRYu4Fxa4nYzFyoaIijwxnw.roa (raw, json)
Hash identifier:          vhLQiPhg70PH+E/IuS/NRkGaf2kfgNpuWJ9mh/NU8nk=
Subject key identifier:   3C:F8:92:41:16:2E:E0:5C:5A:E2:76:33:17:2A:1A:22:28:F0:C6:7C
Certificate issuer:       /CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Certificate serial:       0184525547661831CB1287D1B7E951D4AF90
Authority key identifier: 63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/PPiSQRYu4Fxa4nYzFyoaIijwxnw.roa
Signing time:             Mon 07 Nov 2022 13:43:51 +0000
ROA not before:           Mon 07 Nov 2022 13:43:51 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     202256
IP address blocks:        2a10:cc44:800::/37 maxlen: 48
                          2a0e:97c1:800::/37 maxlen: 48
                          2a0e:97c7:800::/37 maxlen: 48
                          2a10:cc42:1000::/36 maxlen: 48
                          2a10:cc42:1800::/37 maxlen: 48

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:84:52:55:47:66:18:31:cb:12:87:d1:b7:e9:51:d4:af:90
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
        Validity
            Not Before: Nov  7 13:43:51 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=3cf89241162ee05c5ae27633172a1a2228f0c67c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:82:8f:97:36:dc:ff:1d:7f:67:3c:31:34:18:8b:
                    87:f6:2f:56:b7:6f:7a:c6:ea:b8:37:a7:08:60:53:
                    29:71:28:78:41:f1:76:2d:0d:fc:13:ed:1f:31:de:
                    b7:f9:0d:c9:83:ed:a7:6d:d9:94:fc:c3:f8:de:57:
                    f3:63:16:81:60:19:21:12:26:66:14:05:82:20:b7:
                    34:b5:d7:da:27:8d:9b:d0:d7:5b:83:2f:5f:86:51:
                    64:0b:c9:9c:32:cb:23:cc:ba:c4:f0:6a:02:d0:20:
                    ab:d3:ab:75:ac:83:88:a9:0e:e7:17:28:90:4a:70:
                    83:15:2a:65:fd:11:80:16:4c:d3:31:33:68:15:8d:
                    7b:9b:a3:75:e9:4b:f4:ef:61:12:29:f6:15:5a:b4:
                    67:cc:ae:63:d0:af:f7:ca:62:b3:19:16:f3:b0:20:
                    06:3f:fa:ad:8a:1b:c4:3e:88:1d:eb:7c:c9:b5:f8:
                    1e:ab:93:b0:e8:94:33:54:6f:f1:0f:46:07:a8:15:
                    1f:a2:84:8b:7a:6b:24:2c:25:62:66:57:67:e4:2a:
                    23:14:83:4a:db:cc:56:aa:1e:bc:05:5a:a7:50:d7:
                    e3:89:45:6d:f6:9f:4d:37:a9:d8:46:f5:4a:ec:0b:
                    10:02:ee:bd:c3:65:a5:9b:ca:8b:23:54:9d:8a:d6:
                    f9:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3C:F8:92:41:16:2E:E0:5C:5A:E2:76:33:17:2A:1A:22:28:F0:C6:7C
            X509v3 Authority Key Identifier:
                keyid:63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/PPiSQRYu4Fxa4nYzFyoaIijwxnw.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a0e:97c1:800::/37
                  2a0e:97c7:800::/37
                  2a10:cc42:1000::/36
                  2a10:cc44:800::/37

    Signature Algorithm: sha256WithRSAEncryption
         86:28:d3:4c:d2:59:42:93:e9:72:92:8f:07:15:27:86:d7:43:
         e2:5d:dc:19:bc:b4:98:2a:8f:7c:fa:1a:9c:1c:d0:22:19:8d:
         03:8e:78:90:cc:18:1e:bf:b3:6f:bc:8e:0b:53:9d:de:9f:80:
         33:6c:0a:6c:59:ee:56:f0:db:c1:05:ff:9f:a6:df:2f:22:34:
         51:b9:fc:da:7a:81:9f:89:61:97:66:d0:94:e2:b3:50:c4:e2:
         e2:98:6e:3a:df:7f:a2:8d:9b:3c:80:6d:03:a3:e4:90:3d:bb:
         57:a0:9b:28:7a:c3:ea:6f:df:86:1a:49:e8:92:34:7e:3a:4f:
         90:95:9d:db:62:95:d7:16:a3:bc:ea:89:78:ac:ee:17:03:d8:
         3f:3a:16:6b:30:21:06:f9:4f:dc:df:92:1d:bd:bf:aa:95:87:
         94:af:32:ff:21:90:8e:0e:04:17:aa:11:ef:89:1a:3f:8c:0d:
         3a:17:ae:fb:e8:e6:c9:45:ea:4a:4c:d6:4e:e6:7f:41:0f:7b:
         e1:82:f5:da:cd:d9:ab:2d:9d:e9:f1:92:34:66:eb:c4:71:3c:
         7c:47:e0:75:de:9f:47:2b:47:41:98:28:a5:5a:bc:b9:52:07:
         ef:91:5b:c9:87:c9:71:a1:15:0e:ee:23:71:ad:1f:9f:06:22:
         cd:72:4c:5c
-----BEGIN CERTIFICATE-----
MIIFFzCCA/+gAwIBAgISAYRSVUdmGDHLEofRt+lR1K+QMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDYzZTkxNjcxN2FiMTFjY2NmMTFlZjFmYjVjMTJlZTQxOTUw
ZmFkOWIwHhcNMjIxMTA3MTM0MzUxWhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygzY2Y4OTI0MTE2MmVlMDVjNWFlMjc2MzMxNzJhMWEyMjI4ZjBjNjdjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgo+XNtz/HX9nPDE0GIuH9i9Wt296
xuq4N6cIYFMpcSh4QfF2LQ38E+0fMd63+Q3Jg+2nbdmU/MP43lfzYxaBYBkhEiZm
FAWCILc0tdfaJ42b0Ndbgy9fhlFkC8mcMssjzLrE8GoC0CCr06t1rIOIqQ7nFyiQ
SnCDFSpl/RGAFkzTMTNoFY17m6N16Uv072ESKfYVWrRnzK5j0K/3ymKzGRbzsCAG
P/qtihvEPogd63zJtfgeq5Ow6JQzVG/xD0YHqBUfooSLemskLCViZldn5CojFINK
28xWqh68BVqnUNfjiUVt9p9NN6nYRvVK7AsQAu69w2Wlm8qLI1Sditb5LQIDAQAB
o4ICIzCCAh8wHQYDVR0OBBYEFDz4kkEWLuBcWuJ2MxcqGiIo8MZ8MB8GA1UdIwQY
MBaAFGPpFnF6sRzM8R7x+1wS7kGVD62bMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWS1rV2NYcXhITXp4SHZIN1hCTHVRWlVQclpzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81MS80OTU3YTQtY2U1OS00MzE1LTk5NzYt
ZGM1ZWM3NDhmNmE1LzEvUFBpU1FSWXU0RnhhNG5ZekZ5b2FJaWp3eG53LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81MS80OTU3YTQtY2U1OS00MzE1LTk5NzYtZGM1ZWM3NDhmNmE1
LzEvWS1rV2NYcXhITXp4SHZIN1hCTHVRWlVQclpzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDkGCCsGAQUFBwEHAQH/BCowKDAmBAIAAjAgAwYDKg6XwQgD
BgMqDpfHCAMGBCoQzEIQAwYDKhDMRAgwDQYJKoZIhvcNAQELBQADggEBAIYo00zS
WUKT6XKSjwcVJ4bXQ+Jd3Bm8tJgqj3z6Gpwc0CIZjQOOeJDMGB6/s2+8jgtTnd6f
gDNsCmxZ7lbw28EF/5+m3y8iNFG5/Np6gZ+JYZdm0JTis1DE4uKYbjrff6KNmzyA
bQOj5JA9u1egmyh6w+pv34YaSeiSNH46T5CVndtildcWo7zqiXis7hcD2D86Fmsw
IQb5T9zfkh29v6qVh5SvMv8hkI4OBBeqEe+JGj+MDToXrvvo5slF6kpM1k7mf0EP
e+GC9drN2astnenxkjRm68RxPHxH4HXen0crR0GYKKVavLlSB++RW8mHyXGhFQ7u
I3GtH58GIs1yTFw=
-----END CERTIFICATE-----