Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/_MT781PaPG1tYCcM5mWUoJKUtzA.roa
File:                     _MT781PaPG1tYCcM5mWUoJKUtzA.roa (raw, json)
Hash identifier:          /WX0xqq173v4LT6jqvWbjncoN2rNowGxfYHnhDfyy9w=
Subject key identifier:   FC:C4:FB:F3:53:DA:3C:6D:6D:60:27:0C:E6:65:94:A0:92:94:B7:30
Certificate issuer:       /CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Certificate serial:       10C2D06D
Authority key identifier: 63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/_MT781PaPG1tYCcM5mWUoJKUtzA.roa
Signing time:             Sat 01 Jan 2022 09:05:27 +0000
ROA not before:           Sat 01 Jan 2022 09:05:27 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     211267
IP address blocks:        2a0e:b107:1370::/44 maxlen: 48

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 281202797 (0x10c2d06d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
        Validity
            Not Before: Jan  1 09:05:27 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=fcc4fbf353da3c6d6d60270ce66594a09294b730
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f4:25:f6:06:f1:71:c7:14:29:38:29:f3:22:bd:
                    69:85:c8:0e:d4:93:1d:05:ab:e0:27:9e:03:57:d0:
                    d8:51:2a:65:b4:54:23:8e:e0:30:39:5a:38:f0:ce:
                    ea:49:04:83:6d:38:48:35:62:f4:a3:6a:20:28:25:
                    2e:f6:c4:57:90:7c:64:f9:76:ed:a1:a3:18:00:6a:
                    d1:c6:b3:37:d8:fc:c1:0d:c9:24:43:28:a2:c8:00:
                    c0:0e:c5:0b:1f:d0:51:bf:17:7d:88:d6:20:38:23:
                    9e:59:70:e8:a1:6d:37:07:72:12:2e:f2:2f:78:a0:
                    bb:84:24:1c:49:d3:ad:62:d1:40:b0:b7:bf:31:b3:
                    1f:e2:20:58:05:f5:c7:da:c3:8b:0b:40:7d:aa:6d:
                    b7:25:42:8d:9b:19:e0:9d:58:ed:85:ec:1a:17:ab:
                    2b:db:1c:9c:72:ec:8b:ea:c4:71:b2:43:e7:77:ee:
                    d2:67:e5:9e:e2:e5:e9:da:5b:e6:0f:e2:e3:a1:30:
                    b9:1b:b4:ca:20:e2:49:96:1e:f6:3d:2a:b1:17:ee:
                    39:75:6b:51:95:bc:87:78:40:00:68:05:a5:7f:ae:
                    9c:2e:43:3f:46:b9:79:1c:6e:15:cf:20:bb:09:c6:
                    b9:4b:ce:b3:30:0b:b4:88:72:1c:5d:db:a6:77:d2:
                    8d:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FC:C4:FB:F3:53:DA:3C:6D:6D:60:27:0C:E6:65:94:A0:92:94:B7:30
            X509v3 Authority Key Identifier:
                keyid:63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/_MT781PaPG1tYCcM5mWUoJKUtzA.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a0e:b107:1370::/44

    Signature Algorithm: sha256WithRSAEncryption
         25:d5:88:55:b6:90:99:a9:51:3e:c8:e5:c2:58:ca:61:51:70:
         6b:55:12:77:bb:70:d6:1f:0d:0f:d0:5e:0c:23:72:ba:f0:d8:
         f9:d3:6f:65:01:04:e7:21:dd:90:4e:bc:d7:c7:1a:27:57:aa:
         29:1f:ea:d2:c1:47:fe:e4:87:78:3d:bf:6f:17:f4:77:63:14:
         cc:0e:7e:a9:a6:44:ef:c0:85:43:64:11:84:ef:c5:92:d4:21:
         24:6c:d8:db:3d:c4:85:ce:58:30:d1:33:65:cc:7b:04:82:7b:
         cb:18:1f:91:c1:b2:bb:e0:dc:11:03:f3:fc:7a:61:f1:3c:60:
         2a:9e:75:21:f3:61:20:6d:f8:46:e6:08:56:15:b7:06:74:a3:
         0b:72:bb:a4:2a:a1:bf:c9:66:3b:0a:4c:42:e8:aa:ab:42:ef:
         c8:72:1a:80:b7:62:2f:22:a4:eb:4a:0d:c0:b8:d0:f5:af:b6:
         d5:0e:ef:38:d5:cb:42:fc:ec:da:55:3d:2d:42:d7:14:33:4c:
         67:2c:42:59:6d:cd:e7:b6:c7:8b:5f:f7:44:22:c3:eb:d4:d6:
         f7:bd:11:8e:de:80:e4:15:70:da:d7:a2:1f:53:d4:5b:05:91:
         0f:d9:95:66:ea:f6:a8:74:85:ec:b4:e7:5f:2c:9b:7a:46:44:
         e1:1e:93:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----