Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/ZXJGiPqRh9w_PJDJQUcaxm4dSLs.roa
File:                     ZXJGiPqRh9w_PJDJQUcaxm4dSLs.roa (raw, json)
Hash identifier:          VfQD/UVrspSq07nKdJMGt0rvBFzlYakOZakii897mEg=
Subject key identifier:   65:72:46:88:FA:91:87:DC:3F:3C:90:C9:41:47:1A:C6:6E:1D:48:BB
Certificate issuer:       /CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Certificate serial:       120E788E
Authority key identifier: 63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/ZXJGiPqRh9w_PJDJQUcaxm4dSLs.roa
Signing time:             Sun 13 Feb 2022 23:50:41 +0000
ROA not before:           Sun 13 Feb 2022 23:50:41 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     211337
IP address blocks:        2a0e:97c0:1d0::/48 maxlen: 48
                          2a0e:97c0:1d1::/48 maxlen: 48

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 302938254 (0x120e788e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
        Validity
            Not Before: Feb 13 23:50:41 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=65724688fa9187dc3f3c90c941471ac66e1d48bb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:16:99:29:21:fa:69:09:70:c5:49:c0:61:43:
                    4b:10:68:1a:5a:a5:0b:83:a0:9b:19:89:6d:2f:c0:
                    8d:54:cd:2d:d6:91:5d:22:94:b3:7a:ee:7b:f1:f4:
                    db:42:38:2b:6d:25:b9:e7:94:b0:a0:f0:e2:4c:19:
                    98:7d:8f:78:32:08:0a:a4:8f:c1:0e:2b:34:c8:a4:
                    5b:f5:28:f7:0f:cc:32:b8:48:92:64:99:98:06:49:
                    46:88:5b:29:58:76:93:af:3c:dd:76:d8:5b:7a:c9:
                    34:6c:c2:27:b0:87:0f:03:ec:ef:37:4d:bf:21:ce:
                    f6:97:3a:f7:60:d1:ca:f7:45:bf:5a:a6:96:95:bb:
                    6c:d9:81:6e:10:64:74:ce:a8:82:e4:dd:22:27:59:
                    d9:a0:1d:91:76:73:4d:dd:34:99:b1:a1:e5:73:1f:
                    96:17:ef:da:3f:b8:ab:73:3c:c7:81:1e:7e:c5:e1:
                    7c:a6:7a:71:f3:4f:39:3a:96:c1:28:52:af:ac:d8:
                    0a:22:2a:6f:dd:e3:4e:60:74:ad:5a:d5:a5:4d:b3:
                    2b:bf:c2:80:3b:16:5d:1a:50:69:0b:df:f4:b4:ab:
                    83:6d:b0:14:03:f6:e2:08:b8:07:c5:22:1c:52:4c:
                    93:34:c1:02:b1:15:2f:57:b8:48:61:b0:49:77:22:
                    b4:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                65:72:46:88:FA:91:87:DC:3F:3C:90:C9:41:47:1A:C6:6E:1D:48:BB
            X509v3 Authority Key Identifier:
                keyid:63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/ZXJGiPqRh9w_PJDJQUcaxm4dSLs.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a0e:97c0:1d0::/47

    Signature Algorithm: sha256WithRSAEncryption
         12:e2:c4:5b:67:89:e6:32:cc:25:50:60:f0:2d:75:6d:93:2d:
         cd:06:dd:94:3a:91:2e:04:c7:db:f2:b3:b2:f3:3c:86:27:f8:
         2a:c9:f5:5b:d5:17:69:4e:16:35:95:ea:16:3f:b1:5e:0d:0c:
         60:53:8f:dd:42:9f:f2:5f:df:1b:29:96:c3:1c:66:6c:4a:1d:
         e1:76:88:aa:2b:aa:1e:48:c2:53:02:36:ae:12:62:c0:bc:0d:
         1d:7d:4f:96:38:5e:70:eb:37:5a:2b:6d:5a:9e:aa:3e:b8:69:
         68:06:b5:4f:f4:4a:05:d0:8f:2d:d6:94:d6:ee:e9:3a:d6:27:
         93:1d:77:76:be:4f:53:6d:ca:0d:26:1b:e5:c9:90:41:e9:44:
         2e:88:77:6a:11:5d:6f:82:55:4a:4b:db:1a:94:c3:4c:69:69:
         7a:1f:df:3a:e7:d4:3d:4d:4e:aa:eb:c3:c6:2a:68:e1:98:e8:
         ec:99:72:da:01:aa:37:c2:af:15:5f:c4:06:3c:b1:70:ab:64:
         d1:3e:25:2e:4b:3a:6a:c4:35:f0:7c:f2:73:51:b4:0c:4e:2e:
         c8:d7:17:0d:b1:a5:6c:6f:28:ce:3e:c3:e8:76:ca:02:6f:39:
         66:9a:64:4c:c9:ea:cf:4a:ff:92:1e:d5:2b:09:5c:f6:da:21:
         11:ff:ec:62
-----BEGIN CERTIFICATE-----
MIIE8jCCA9qgAwIBAgIEEg54jjANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg2
M2U5MTY3MTdhYjExY2NjZjExZWYxZmI1YzEyZWU0MTk1MGZhZDliMB4XDTIyMDIx
MzIzNTA0MVoXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoNjU3MjQ2ODhmYTkx
ODdkYzNmM2M5MGM5NDE0NzFhYzY2ZTFkNDhiYjCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAJcWmSkh+mkJcMVJwGFDSxBoGlqlC4OgmxmJbS/AjVTNLdaR
XSKUs3rue/H020I4K20lueeUsKDw4kwZmH2PeDIICqSPwQ4rNMikW/Uo9w/MMrhI
kmSZmAZJRohbKVh2k6883XbYW3rJNGzCJ7CHDwPs7zdNvyHO9pc692DRyvdFv1qm
lpW7bNmBbhBkdM6oguTdIidZ2aAdkXZzTd00mbGh5XMflhfv2j+4q3M8x4EefsXh
fKZ6cfNPOTqWwShSr6zYCiIqb93jTmB0rVrVpU2zK7/CgDsWXRpQaQvf9LSrg22w
FAP24gi4B8UiHFJMkzTBArEVL1e4SGGwSXcitIUCAwEAAaOCAgwwggIIMB0GA1Ud
DgQWBBRlckaI+pGH3D88kMlBRxrGbh1IuzAfBgNVHSMEGDAWgBRj6RZxerEczPEe
8ftcEu5BlQ+tmzAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L1kta1djWHF4SE16eEh2SDdYQkx1UVpVUHJacy5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvNTEvNDk1N2E0LWNlNTktNDMxNS05OTc2LWRjNWVjNzQ4ZjZhNS8x
L1pYSkdpUHFSaDl3X1BKREpRVWNheG00ZFNMcy5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNTEv
NDk1N2E0LWNlNTktNDMxNS05OTc2LWRjNWVjNzQ4ZjZhNS8xL1kta1djWHF4SE16
eEh2SDdYQkx1UVpVUHJacy5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAi
BggrBgEFBQcBBwEB/wQTMBEwDwQCAAIwCQMHASoOl8AB0DANBgkqhkiG9w0BAQsF
AAOCAQEAEuLEW2eJ5jLMJVBg8C11bZMtzQbdlDqRLgTH2/KzsvM8hif4Ksn1W9UX
aU4WNZXqFj+xXg0MYFOP3UKf8l/fGymWwxxmbEod4XaIqiuqHkjCUwI2rhJiwLwN
HX1PljhecOs3WittWp6qPrhpaAa1T/RKBdCPLdaU1u7pOtYnkx13dr5PU23KDSYb
5cmQQelELoh3ahFdb4JVSkvbGpTDTGlpeh/fOufUPU1OquvDxipo4Zjo7Jly2gGq
N8KvFV/EBjyxcKtk0T4lLks6asQ18Hzyc1G0DE4uyNcXDbGlbG8ozj7D6HbKAm85
ZppkTMnqz0r/kh7VKwlc9tohEf/sYg==
-----END CERTIFICATE-----