Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/W-0fmA3dmDhD1x6KXvxOjxlZrl8.roa
File:                     W-0fmA3dmDhD1x6KXvxOjxlZrl8.roa (raw, json)
Hash identifier:          kAkWvoCh/PD9VUkFLKKdDBLvVnauGhzUVcTaUngPYL4=
Subject key identifier:   5B:ED:1F:98:0D:DD:98:38:43:D7:1E:8A:5E:FC:4E:8F:19:59:AE:5F
Certificate issuer:       /CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Certificate serial:       1087A011
Authority key identifier: 63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/W-0fmA3dmDhD1x6KXvxOjxlZrl8.roa
Signing time:             Sat 01 Jan 2022 09:04:54 +0000
ROA not before:           Sat 01 Jan 2022 09:04:54 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     141237
IP address blocks:        2a0e:b107:df4::/48 maxlen: 48
                          2a0e:b107:9dc::/48 maxlen: 48
                          2a0e:b107:df1::/48 maxlen: 48
                          2a0e:b107:df3::/48 maxlen: 48

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 277323793 (0x1087a011)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
        Validity
            Not Before: Jan  1 09:04:54 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=5bed1f980ddd983843d71e8a5efc4e8f1959ae5f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:eb:b3:81:f2:9b:ea:0c:ba:d1:7d:09:10:5d:
                    d3:cd:55:0b:da:b8:a4:26:0c:ec:36:30:4d:8a:01:
                    06:67:fa:04:8a:98:a3:97:b1:8c:c2:fe:cd:e5:db:
                    22:12:7d:8c:ce:06:32:f0:0f:05:26:62:ff:47:6e:
                    42:e4:74:a0:cb:bc:64:dd:bd:dd:8c:9a:00:ee:ca:
                    6e:fc:7c:3f:64:2e:f7:80:9b:69:a9:56:96:97:b7:
                    a7:df:db:b1:8c:d7:7a:de:2b:7d:58:21:0e:4c:74:
                    bd:aa:fc:bb:1d:8c:48:46:14:2f:6a:fa:c1:f8:57:
                    b8:ed:97:7c:aa:d8:27:58:6f:de:4e:20:70:05:86:
                    07:f4:84:25:af:29:c4:2a:2e:92:72:10:aa:fc:49:
                    69:46:18:95:63:8d:d4:ef:12:29:e3:34:e9:6f:60:
                    76:fb:33:3f:c6:78:40:8c:b9:a3:ec:fd:1f:a0:88:
                    42:90:d0:89:27:b7:a6:e4:4a:8d:9d:97:bb:09:b6:
                    0a:b0:38:89:55:f1:36:b4:a6:fc:f8:2d:64:60:18:
                    f2:c8:44:9a:fa:ff:0d:68:6b:2d:4e:a3:8a:ba:d6:
                    c4:3e:02:f8:5a:c6:63:77:3f:35:d1:e2:21:af:4b:
                    51:fc:7f:1b:cf:8c:32:5f:f0:16:96:42:99:cf:26:
                    5d:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5B:ED:1F:98:0D:DD:98:38:43:D7:1E:8A:5E:FC:4E:8F:19:59:AE:5F
            X509v3 Authority Key Identifier:
                keyid:63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/W-0fmA3dmDhD1x6KXvxOjxlZrl8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a0e:b107:9dc::/48
                  2a0e:b107:df1::/48
                  2a0e:b107:df3::-2a0e:b107:df4:ffff:ffff:ffff:ffff:ffff

    Signature Algorithm: sha256WithRSAEncryption
         27:eb:7f:fb:38:84:84:6e:6c:8e:6d:f1:39:3d:a8:ce:3f:74:
         11:b5:19:22:a1:52:09:c9:fc:10:43:a0:ea:6c:8d:51:ba:26:
         9e:0f:15:c5:30:10:69:e2:10:4f:9d:49:f7:f9:35:8d:b7:87:
         61:50:e8:dc:c0:2f:28:e4:15:41:1e:94:64:61:29:d9:29:a0:
         dd:06:96:eb:4f:da:14:94:ff:ba:19:82:11:25:c1:e0:97:b5:
         a1:a7:97:c4:63:63:b5:2e:ff:12:af:d9:02:01:63:94:5a:89:
         37:c8:1c:fb:ee:97:6e:9e:56:66:32:a4:c7:3b:8b:59:76:9f:
         ed:5d:fe:a2:4a:be:cd:3f:86:fc:b1:d3:10:ae:32:73:46:c2:
         4f:fa:8a:9e:c6:15:54:81:60:c2:86:7c:33:86:1c:00:2d:39:
         59:06:53:30:4b:2d:66:c2:da:82:e2:49:32:70:ae:ca:ca:ef:
         59:81:a9:44:51:bc:b6:86:7a:8c:e6:79:8e:27:4d:7e:4f:4a:
         b2:a0:a4:b8:78:91:a4:8b:99:06:c3:19:09:c4:b9:b3:ab:7c:
         8a:a7:8c:3a:5c:c9:0d:dc:42:0b:cb:07:f9:d2:75:30:4d:1f:
         3b:6a:95:8f:d3:fd:3d:9a:2f:6b:de:f9:28:96:d5:02:67:84:
         dd:e2:40:15
-----BEGIN CERTIFICATE-----
MIIFDzCCA/egAwIBAgIEEIegETANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg2
M2U5MTY3MTdhYjExY2NjZjExZWYxZmI1YzEyZWU0MTk1MGZhZDliMB4XDTIyMDEw
MTA5MDQ1NFoXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoNWJlZDFmOTgwZGRk
OTgzODQzZDcxZThhNWVmYzRlOGYxOTU5YWU1ZjCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAL/rs4Hym+oMutF9CRBd081VC9q4pCYM7DYwTYoBBmf6BIqY
o5exjML+zeXbIhJ9jM4GMvAPBSZi/0duQuR0oMu8ZN293YyaAO7Kbvx8P2Qu94Cb
aalWlpe3p9/bsYzXet4rfVghDkx0var8ux2MSEYUL2r6wfhXuO2XfKrYJ1hv3k4g
cAWGB/SEJa8pxCouknIQqvxJaUYYlWON1O8SKeM06W9gdvszP8Z4QIy5o+z9H6CI
QpDQiSe3puRKjZ2Xuwm2CrA4iVXxNrSm/PgtZGAY8shEmvr/DWhrLU6jirrWxD4C
+FrGY3c/NdHiIa9LUfx/G8+MMl/wFpZCmc8mXW8CAwEAAaOCAikwggIlMB0GA1Ud
DgQWBBRb7R+YDd2YOEPXHope/E6PGVmuXzAfBgNVHSMEGDAWgBRj6RZxerEczPEe
8ftcEu5BlQ+tmzAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L1kta1djWHF4SE16eEh2SDdYQkx1UVpVUHJacy5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvNTEvNDk1N2E0LWNlNTktNDMxNS05OTc2LWRjNWVjNzQ4ZjZhNS8x
L1ctMGZtQTNkbURoRDF4NktYdnhPanhsWnJsOC5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNTEv
NDk1N2E0LWNlNTktNDMxNS05OTc2LWRjNWVjNzQ4ZjZhNS8xL1kta1djWHF4SE16
eEh2SDdYQkx1UVpVUHJacy5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjA/
BggrBgEFBQcBBwEB/wQwMC4wLAQCAAIwJgMHACoOsQcJ3AMHACoOsQcN8TASAwcA
Kg6xBw3zAwcAKg6xBw30MA0GCSqGSIb3DQEBCwUAA4IBAQAn63/7OISEbmyObfE5
PajOP3QRtRkioVIJyfwQQ6DqbI1RuiaeDxXFMBBp4hBPnUn3+TWNt4dhUOjcwC8o
5BVBHpRkYSnZKaDdBpbrT9oUlP+6GYIRJcHgl7Whp5fEY2O1Lv8Sr9kCAWOUWok3
yBz77pdunlZmMqTHO4tZdp/tXf6iSr7NP4b8sdMQrjJzRsJP+oqexhVUgWDChnwz
hhwALTlZBlMwSy1mwtqC4kkycK7Kyu9ZgalEUby2hnqM5nmOJ01+T0qyoKS4eJGk
i5kGwxkJxLmzq3yKp4w6XMkN3EILywf50nUwTR87apWP0/09mi9r3vkoltUCZ4Td
4kAV
-----END CERTIFICATE-----