Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/V-8Tk-3lPINY4_LLgP6yWuHtHlI.roa
File:                     V-8Tk-3lPINY4_LLgP6yWuHtHlI.roa (raw, json)
Hash identifier:          84M0QtV6HTFPr1FdX/cjwsELBnPwiTMFHHl12L+D9mY=
Subject key identifier:   57:EF:13:93:ED:E5:3C:83:58:E3:F2:CB:80:FE:B2:5A:E1:ED:1E:52
Certificate issuer:       /CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Certificate serial:       0183FC4AA271B6F688285F87426B7DE186F2
Authority key identifier: 63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/V-8Tk-3lPINY4_LLgP6yWuHtHlI.roa
Signing time:             Fri 21 Oct 2022 20:44:53 +0000
ROA not before:           Fri 21 Oct 2022 20:44:53 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     212948
IP address blocks:        2a0e:b107:cb0::/44 maxlen: 48

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:83:fc:4a:a2:71:b6:f6:88:28:5f:87:42:6b:7d:e1:86:f2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
        Validity
            Not Before: Oct 21 20:44:53 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=57ef1393ede53c8358e3f2cb80feb25ae1ed1e52
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:13:c9:fb:8c:6b:67:e0:fd:a8:a0:9d:f8:91:
                    5d:39:76:9a:2a:45:70:74:cd:0e:c8:ca:9b:7b:fa:
                    8b:6e:99:cd:34:f9:ba:73:8e:d9:a0:89:2d:b5:65:
                    4f:0a:28:90:e7:d9:95:f6:fc:02:dd:db:6a:a9:fa:
                    37:a8:20:bd:88:5a:a0:7a:0f:e1:c9:cd:62:2d:22:
                    79:ca:ce:9c:67:13:82:01:91:52:1d:96:92:a4:bb:
                    e4:ed:ed:50:92:cc:cd:b3:74:8f:8c:6f:b6:7f:6a:
                    bc:45:35:4a:ee:7b:14:17:4f:eb:10:25:40:55:66:
                    e6:c4:5d:f4:6d:1d:96:22:ae:4f:4b:36:31:42:13:
                    c2:6a:e2:b4:9c:8f:ad:45:d1:e9:8b:87:a7:8a:0c:
                    4a:c5:15:fc:2e:ba:36:20:a3:77:be:f9:25:da:0f:
                    6d:9f:dd:46:db:7f:f7:30:d5:63:60:b9:fa:99:4c:
                    dd:3e:9f:d1:72:2b:64:c6:8c:25:77:42:12:b6:bf:
                    58:cd:29:25:ea:22:da:1a:09:08:24:ef:b3:44:46:
                    31:06:d7:33:fd:77:94:e7:16:e2:0f:3f:d7:cf:25:
                    8b:e0:11:e7:6f:e8:cf:80:d8:1f:74:80:d8:88:3c:
                    76:34:fb:ab:1e:40:50:cf:60:6a:bf:f9:65:14:4a:
                    66:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                57:EF:13:93:ED:E5:3C:83:58:E3:F2:CB:80:FE:B2:5A:E1:ED:1E:52
            X509v3 Authority Key Identifier:
                keyid:63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/V-8Tk-3lPINY4_LLgP6yWuHtHlI.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a0e:b107:cb0::/44

    Signature Algorithm: sha256WithRSAEncryption
         98:9b:d5:db:06:49:1d:58:21:45:db:63:de:e9:b0:c6:a0:2d:
         e0:b6:21:85:e5:f3:18:68:af:67:fb:e7:f0:39:86:ee:ca:93:
         ae:99:ed:15:12:b1:8b:60:af:0d:8d:57:c6:db:57:79:04:2b:
         7a:91:4c:23:1d:ba:15:64:72:b5:c5:cd:9d:7e:51:97:d7:72:
         77:24:cc:3a:5a:02:e7:5a:61:7a:06:3a:92:86:73:30:9e:8b:
         dc:84:96:59:3e:8a:86:0d:de:cb:5e:6a:f6:d3:b0:01:a7:60:
         8f:95:9b:40:3e:22:41:2e:52:ea:fc:7a:d6:95:05:4c:48:93:
         65:c8:8a:d7:d6:76:13:86:59:40:e6:ee:eb:b5:32:18:fa:39:
         d2:50:2c:2d:93:68:9f:b8:68:c9:ba:ee:ca:d5:61:28:36:14:
         b4:84:ef:a3:19:e3:3a:9d:a7:c3:4f:50:e5:57:59:e4:1c:b1:
         21:93:5b:a1:f9:b8:bc:79:78:94:39:3e:95:03:f5:a5:c0:c7:
         e8:7b:6a:2b:fc:6c:f1:f7:ae:12:41:1e:32:6d:8c:e6:ca:6e:
         ff:71:69:c1:14:71:7a:e3:31:2a:32:f3:ec:44:f8:00:ef:88:
         98:24:44:97:6d:3e:d5:df:8a:e6:36:3c:0a:33:d6:21:1d:cb:
         7a:ee:04:65
-----BEGIN CERTIFICATE-----
MIIFADCCA+igAwIBAgISAYP8SqJxtvaIKF+HQmt94YbyMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDYzZTkxNjcxN2FiMTFjY2NmMTFlZjFmYjVjMTJlZTQxOTUw
ZmFkOWIwHhcNMjIxMDIxMjA0NDUzWhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg1N2VmMTM5M2VkZTUzYzgzNThlM2YyY2I4MGZlYjI1YWUxZWQxZTUyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtxPJ+4xrZ+D9qKCd+JFdOXaaKkVw
dM0OyMqbe/qLbpnNNPm6c47ZoIkttWVPCiiQ59mV9vwC3dtqqfo3qCC9iFqgeg/h
yc1iLSJ5ys6cZxOCAZFSHZaSpLvk7e1QkszNs3SPjG+2f2q8RTVK7nsUF0/rECVA
VWbmxF30bR2WIq5PSzYxQhPCauK0nI+tRdHpi4enigxKxRX8Lro2IKN3vvkl2g9t
n91G23/3MNVjYLn6mUzdPp/Rcitkxowld0IStr9YzSkl6iLaGgkIJO+zREYxBtcz
/XeU5xbiDz/XzyWL4BHnb+jPgNgfdIDYiDx2NPurHkBQz2Bqv/llFEpmWwIDAQAB
o4ICDDCCAggwHQYDVR0OBBYEFFfvE5Pt5TyDWOPyy4D+slrh7R5SMB8GA1UdIwQY
MBaAFGPpFnF6sRzM8R7x+1wS7kGVD62bMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWS1rV2NYcXhITXp4SHZIN1hCTHVRWlVQclpzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81MS80OTU3YTQtY2U1OS00MzE1LTk5NzYt
ZGM1ZWM3NDhmNmE1LzEvVi04VGstM2xQSU5ZNF9MTGdQNnlXdUh0SGxJLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81MS80OTU3YTQtY2U1OS00MzE1LTk5NzYtZGM1ZWM3NDhmNmE1
LzEvWS1rV2NYcXhITXp4SHZIN1hCTHVRWlVQclpzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcEKg6xBwyw
MA0GCSqGSIb3DQEBCwUAA4IBAQCYm9XbBkkdWCFF22Pe6bDGoC3gtiGF5fMYaK9n
++fwOYbuypOume0VErGLYK8NjVfG21d5BCt6kUwjHboVZHK1xc2dflGX13J3JMw6
WgLnWmF6BjqShnMwnovchJZZPoqGDd7LXmr207ABp2CPlZtAPiJBLlLq/HrWlQVM
SJNlyIrX1nYThllA5u7rtTIY+jnSUCwtk2ifuGjJuu7K1WEoNhS0hO+jGeM6nafD
T1DlV1nkHLEhk1uh+bi8eXiUOT6VA/WlwMfoe2or/Gzx964SQR4ybYzmym7/cWnB
FHF64zEqMvPsRPgA74iYJESXbT7V34rmNjwKM9YhHct67gRl
-----END CERTIFICATE-----