Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/cmoDfgb0oyH8JQGfpXqlYRDfI1k.roa
File:                     cmoDfgb0oyH8JQGfpXqlYRDfI1k.roa (raw, json)
Hash identifier:          pAWc9AChLqMz+xZ/cVlma3RF7qRfJ9ezDas1QNCEtqo=
Subject key identifier:   72:6A:03:7E:06:F4:A3:21:FC:25:01:9F:A5:7A:A5:61:10:DF:23:59
Certificate issuer:       /CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Certificate serial:       1442A770
Authority key identifier: 63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/cmoDfgb0oyH8JQGfpXqlYRDfI1k.roa
Signing time:             Mon 02 May 2022 03:55:59 +0000
ROA not before:           Mon 02 May 2022 03:55:59 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     210320
IP address blocks:        2a0e:b107:18c0::/48 maxlen: 48
                          2a0e:b107:18c8::/48 maxlen: 48
                          2a0e:b107:18c5::/48 maxlen: 48
                          2a0e:b107:18c2::/48 maxlen: 48
                          2a0e:b107:18c7::/48 maxlen: 48
                          2a0e:b107:18c4::/48 maxlen: 48
                          2a0e:b107:18c1::/48 maxlen: 48
                          2a0e:b107:18c9::/48 maxlen: 48
                          2a0e:b107:18c6::/48 maxlen: 48
                          2a0e:b107:18c3::/48 maxlen: 48

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 339912560 (0x1442a770)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
        Validity
            Not Before: May  2 03:55:59 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=726a037e06f4a321fc25019fa57aa56110df2359
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:bd:28:bb:f2:75:fd:5d:f8:e5:d6:12:16:1e:
                    e3:11:5d:8c:54:aa:ff:6c:b9:97:fe:d0:b0:32:e5:
                    cf:1c:37:4b:9a:d1:9a:3f:6c:14:97:ae:c0:b5:53:
                    e8:2a:5e:ac:5e:ba:fa:cd:94:7b:da:9d:8e:ac:82:
                    fe:98:31:a7:22:93:c8:cf:2d:fc:36:03:00:29:3b:
                    3f:6b:4a:83:f6:c9:e3:ef:f3:74:7c:b1:bc:e4:77:
                    23:31:35:03:46:f1:3e:0b:3f:f6:98:8d:10:41:26:
                    37:e6:48:0e:0e:b7:e9:d5:d7:1e:ac:b5:27:e3:55:
                    f7:7f:f2:6e:2f:82:66:68:29:2f:e9:93:fb:d5:53:
                    44:b2:d5:da:6f:f3:98:fd:0a:f5:77:49:f2:71:9f:
                    21:d3:c8:81:3e:c2:d8:c3:4c:d4:5d:1e:54:f1:5a:
                    4b:c0:13:d8:b4:bc:aa:7a:e4:f2:10:1f:9e:16:cf:
                    2a:66:b5:26:ad:f6:64:5f:98:3a:9c:72:8b:dc:fb:
                    8a:01:a3:7a:97:28:40:cb:4e:e3:4c:3a:e9:17:4c:
                    42:9f:19:d2:05:7a:c3:71:c6:41:bc:b5:67:87:a3:
                    4d:84:4e:7b:9c:a3:97:7a:09:00:a0:09:30:2c:9d:
                    34:cf:67:5e:45:07:96:3c:28:5c:76:cd:7c:e4:8e:
                    1d:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                72:6A:03:7E:06:F4:A3:21:FC:25:01:9F:A5:7A:A5:61:10:DF:23:59
            X509v3 Authority Key Identifier:
                keyid:63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/cmoDfgb0oyH8JQGfpXqlYRDfI1k.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a0e:b107:18c0::-2a0e:b107:18c9:ffff:ffff:ffff:ffff:ffff

    Signature Algorithm: sha256WithRSAEncryption
         44:dc:83:58:b5:94:e4:79:60:33:66:b2:a1:69:bd:71:75:c3:
         ae:b4:5b:cb:f0:a4:93:88:55:1c:be:ec:3b:4a:7a:94:53:b3:
         5f:00:f2:bc:63:a9:cd:48:3e:b2:da:bc:7d:8b:0a:64:7a:e0:
         21:20:d6:2e:5b:d3:fd:90:61:da:1f:46:06:74:9e:93:a7:d2:
         72:23:c7:9d:38:ea:56:83:9e:e0:d9:29:8f:7e:ab:be:5c:80:
         6a:36:4c:94:d0:8a:21:87:00:9b:ad:f7:9d:23:74:36:9b:a0:
         ba:cb:a1:8a:65:19:0c:80:81:97:ee:bc:e9:84:13:a1:29:46:
         6d:af:99:08:79:dd:66:73:7e:bb:be:80:13:4c:92:75:6a:e7:
         77:fc:7f:db:b1:50:0e:0b:61:68:c4:34:56:a9:3d:a2:af:18:
         37:fe:35:85:02:e4:85:2e:23:49:59:7e:d9:28:86:59:9c:6c:
         18:ab:96:29:f3:ac:de:b8:73:0a:81:7e:ae:1a:46:f2:9c:bd:
         51:9c:17:1c:10:15:97:19:cb:4c:99:3a:3c:78:d6:87:82:9b:
         5d:56:a9:7e:d2:45:ad:78:97:b0:ee:aa:34:14:06:d2:e1:10:
         55:db:4a:82:46:28:fa:4b:92:ce:c1:63:2e:e2:a8:c0:e3:ac:
         8c:61:bb:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----