Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Udh3uqxNOG6riBqExkrNXsKqf4Q.roa
File:                     Udh3uqxNOG6riBqExkrNXsKqf4Q.roa (raw, json)
Hash identifier:          2Iw8cxmlTeeBBoc+rELXrBo/wfxP8m6DzZjiXyl0GAw=
Subject key identifier:   51:D8:77:BA:AC:4D:38:6E:AB:88:1A:84:C6:4A:CD:5E:C2:AA:7F:84
Certificate issuer:       /CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Certificate serial:       10F87CE7
Authority key identifier: 63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Udh3uqxNOG6riBqExkrNXsKqf4Q.roa
Signing time:             Sat 01 Jan 2022 09:06:01 +0000
ROA not before:           Sat 01 Jan 2022 09:06:01 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     213316
IP address blocks:        2a10:2f01:240::/45 maxlen: 48

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 284720359 (0x10f87ce7)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
        Validity
            Not Before: Jan  1 09:06:01 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=51d877baac4d386eab881a84c64acd5ec2aa7f84
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:2b:2b:2b:f2:51:ed:98:62:59:18:82:c7:0d:
                    e3:18:5e:c5:42:5f:e0:ab:63:d8:57:87:f9:e0:b2:
                    e0:72:e7:3c:dd:bd:5a:30:2e:21:4c:ff:ce:0e:d4:
                    4e:6c:c8:d3:15:b9:f6:0c:ab:fe:e5:c2:09:10:ab:
                    e8:c9:c0:b6:2a:56:10:35:fe:c0:d8:d2:e6:96:49:
                    72:b9:62:c9:df:b7:19:a0:ee:75:52:ff:dc:e3:27:
                    bf:6c:e3:73:a9:68:f9:bf:bf:b5:91:1d:0d:96:9f:
                    f8:ea:8a:25:e4:b0:2d:c1:7e:13:5b:6c:99:f5:81:
                    48:db:cf:41:94:c9:cf:90:ad:b3:68:a2:81:be:39:
                    fb:67:c7:48:ba:ff:ca:38:70:41:e7:4f:91:29:a5:
                    f5:24:b1:ce:c3:7e:13:3a:e2:e6:b8:02:dc:59:10:
                    0a:8f:53:9e:d8:df:88:ce:0c:df:c1:4c:38:6e:a3:
                    ad:da:15:23:b9:71:66:21:bb:a4:57:4e:a5:27:e5:
                    a2:45:0e:05:52:8d:37:ea:a7:9d:6b:2f:0f:95:fd:
                    66:4f:74:e0:f6:0f:b4:b7:d4:67:6e:ca:fa:8f:94:
                    f8:fe:66:4c:fa:1b:c2:cc:7c:d0:7b:ad:e1:9a:51:
                    95:3f:cc:97:db:fa:c9:7a:24:2f:6f:5b:05:e8:e5:
                    30:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                51:D8:77:BA:AC:4D:38:6E:AB:88:1A:84:C6:4A:CD:5E:C2:AA:7F:84
            X509v3 Authority Key Identifier:
                keyid:63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Udh3uqxNOG6riBqExkrNXsKqf4Q.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a10:2f01:240::/45

    Signature Algorithm: sha256WithRSAEncryption
         5b:a5:56:e8:fb:7f:b5:fb:33:88:e3:69:c8:d8:24:31:0a:9e:
         5c:04:c6:b6:7d:88:ed:0d:e1:ec:16:b3:8c:1c:ae:82:bd:55:
         b8:a7:0f:88:dd:d6:af:44:b3:13:fb:ee:ee:58:3c:6a:b7:71:
         c8:17:b5:e4:65:12:80:2f:27:b5:4f:b3:8c:65:c7:cd:02:94:
         9c:b8:7b:27:4d:dd:3e:3f:02:b8:93:03:49:c9:0c:95:09:9d:
         38:d9:73:84:54:c9:ca:63:52:0a:31:f0:0f:0d:b2:85:cc:c3:
         c0:04:61:cc:de:82:f7:a3:65:3d:65:e7:d0:44:23:98:59:1f:
         d6:df:e7:34:db:86:d3:90:81:d5:f2:05:47:5c:0e:4f:f0:5e:
         0c:1b:74:dc:7f:68:bc:4f:1e:2b:1c:bc:5e:8a:e0:4c:17:f1:
         57:c4:44:07:0c:c4:15:16:38:a7:00:aa:69:dc:cc:63:32:bc:
         cb:60:9e:80:55:b6:50:b7:f3:8d:f0:07:a8:fd:d8:f8:21:bc:
         8f:28:8f:86:04:9b:0b:30:c9:8e:ce:50:3c:a8:eb:37:b7:83:
         0d:d1:1a:71:04:57:b1:85:ca:be:71:50:1e:01:14:1a:b7:8c:
         43:44:0c:0f:65:02:3f:d9:a4:8f:d6:78:6b:9d:14:48:51:a8:
         41:50:b2:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----