Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/ZO6z5WF9d3AMboywqdd8c3hVeAE.roa
File:                     ZO6z5WF9d3AMboywqdd8c3hVeAE.roa (raw, json)
Hash identifier:          uscEbBencB8WVSOBck+F8gIHpFTsegLu++wzirSxRRk=
Subject key identifier:   64:EE:B3:E5:61:7D:77:70:0C:6E:8C:B0:A9:D7:7C:73:78:55:78:01
Certificate issuer:       /CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Certificate serial:       14B93D09
Authority key identifier: 63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/ZO6z5WF9d3AMboywqdd8c3hVeAE.roa
Signing time:             Wed 18 May 2022 15:56:00 +0000
ROA not before:           Wed 18 May 2022 15:56:00 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     205043
IP address blocks:        2a0e:97c0:b15::/48 maxlen: 48
                          2a0e:97c0:b10::/48 maxlen: 48
                          2a0e:97c0:b13::/48 maxlen: 48
                          2a0e:97c0:b11::/48 maxlen: 48
                          2a0e:97c0:b14::/48 maxlen: 48

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 347684105 (0x14b93d09)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
        Validity
            Not Before: May 18 15:56:00 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=64eeb3e5617d77700c6e8cb0a9d77c7378557801
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:81:a8:63:51:cf:ac:3b:cd:f1:e8:f2:b9:ab:
                    72:f7:44:47:4b:7f:1c:60:bf:b2:b6:89:af:50:ca:
                    7a:57:77:f9:8d:d0:9c:4e:5b:c6:3a:01:74:09:6a:
                    89:fb:98:90:f6:00:4c:e1:ab:28:20:49:8f:d7:bc:
                    ed:d7:21:d5:f7:bf:f4:08:ec:75:57:0e:67:a6:57:
                    b1:dd:c3:d8:71:3d:e4:2a:c3:22:04:99:e3:e6:5b:
                    6a:4a:a6:2d:b1:69:4c:40:dc:92:fc:d9:58:f1:a9:
                    9f:6d:aa:99:a8:e2:9c:6d:a5:55:3b:91:cb:b2:eb:
                    65:95:1c:18:59:dd:f1:ee:85:b1:3d:c4:ba:24:13:
                    ac:13:8c:92:a0:0f:d7:75:40:80:84:da:c1:7c:44:
                    ef:b4:96:98:36:88:6f:9c:92:b1:05:ba:88:fb:34:
                    06:19:f3:14:8b:57:18:cd:a8:1f:f2:b9:9b:11:3c:
                    55:9b:79:ad:fb:69:68:65:8b:fe:21:0e:4c:6c:1f:
                    79:98:40:1d:9c:2f:33:35:98:5a:26:fc:d8:db:8f:
                    df:6a:25:61:93:15:6a:8d:7f:f1:7b:f7:a1:5d:cf:
                    3b:91:d7:a9:33:03:88:30:0d:8d:a7:33:c5:a2:61:
                    99:9b:6c:92:29:3e:11:5f:6b:a1:cb:ee:8b:88:e2:
                    95:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                64:EE:B3:E5:61:7D:77:70:0C:6E:8C:B0:A9:D7:7C:73:78:55:78:01
            X509v3 Authority Key Identifier:
                keyid:63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/ZO6z5WF9d3AMboywqdd8c3hVeAE.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a0e:97c0:b10::/47
                  2a0e:97c0:b13::-2a0e:97c0:b15:ffff:ffff:ffff:ffff:ffff

    Signature Algorithm: sha256WithRSAEncryption
         06:19:3e:04:85:22:cd:4f:63:e7:0d:10:97:c3:21:5d:33:53:
         23:22:9d:75:43:4b:aa:e7:82:c3:b1:cf:cb:a2:78:ae:7a:19:
         04:36:2d:fd:38:7a:6e:51:6d:31:32:de:6c:7e:f7:db:e5:d3:
         4b:68:b6:49:2c:5e:dd:5c:f6:97:78:ff:f1:57:91:30:ba:9d:
         1a:b1:87:49:02:18:6e:ed:a9:87:f3:4e:8a:b5:0e:31:75:de:
         a7:cd:3a:88:89:60:43:be:44:92:5e:50:25:45:53:b1:2b:28:
         db:d4:fb:e8:5e:40:65:16:da:f6:87:27:d8:15:40:8c:e5:a0:
         61:c7:0e:95:92:7a:6f:8f:07:43:35:d3:8c:c7:92:e5:de:34:
         77:35:54:dc:3d:48:15:80:6f:39:c4:41:c0:1d:98:24:d0:29:
         df:2d:7d:45:78:0d:d8:3f:c2:86:08:60:04:fd:65:01:14:e0:
         e6:15:7c:aa:0b:89:0f:fa:bd:42:2f:36:f3:3d:39:e0:6d:4d:
         19:9d:b9:dd:7b:dc:02:3d:f9:a4:cd:9e:18:7b:82:67:62:ad:
         47:22:38:2e:46:7b:1e:5d:ef:c1:16:2b:17:b5:f9:e3:00:1f:
         6e:9a:84:8b:0f:df:7a:b8:b3:e6:6b:51:09:25:1b:15:8c:31:
         84:a5:14:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----