Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/cnfbeQbKNANDeRcPVDvpDwCbraQ.roa
File:                     cnfbeQbKNANDeRcPVDvpDwCbraQ.roa (raw, json)
Hash identifier:          Vkkm14zw6+wO9Q2LCTNjEPo7zXO7JPbME+TNltFg8aM=
Subject key identifier:   72:77:DB:79:06:CA:34:03:43:79:17:0F:54:3B:E9:0F:00:9B:AD:A4
Certificate issuer:       /CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Certificate serial:       14A592B3
Authority key identifier: 63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/cnfbeQbKNANDeRcPVDvpDwCbraQ.roa
Signing time:             Sun 15 May 2022 04:39:40 +0000
ROA not before:           Sun 15 May 2022 04:39:40 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     211571
IP address blocks:        2a10:cc40:190::/44 maxlen: 48

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 346395315 (0x14a592b3)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
        Validity
            Not Before: May 15 04:39:40 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=7277db7906ca34034379170f543be90f009bada4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:0a:c2:f4:61:25:2c:de:ff:4c:60:22:7c:c0:
                    f1:f0:8a:cd:80:e1:96:7e:99:7c:f6:11:43:45:c3:
                    0b:d8:27:17:16:f5:76:ff:f4:65:9d:c5:d3:07:2e:
                    75:3d:25:e2:ab:b3:38:6e:58:75:86:1c:0d:f3:57:
                    48:26:34:a7:b9:88:cf:ae:42:f1:4d:a7:af:ee:21:
                    97:cb:18:51:69:24:48:49:c3:3b:62:91:fe:8f:f4:
                    d5:22:ee:b6:53:9e:5c:fc:5c:f6:c9:fe:40:95:c2:
                    3c:26:3f:57:9e:bb:a4:54:4f:10:4a:81:5a:1a:a1:
                    47:15:0e:ba:24:b9:72:17:9c:3f:d2:a7:aa:46:dc:
                    9c:89:63:0c:0c:3f:a1:d2:98:c9:1d:b5:bb:52:b6:
                    75:d5:2b:4c:77:e6:2b:f4:5a:38:b8:67:19:12:ca:
                    cd:ec:6d:00:30:c7:d8:dc:25:44:f0:1b:51:13:e9:
                    52:e9:93:a2:6f:35:89:8d:ab:f6:56:42:f5:0b:00:
                    9c:f5:74:c5:17:7b:0a:31:81:e6:e4:13:bf:f1:71:
                    9e:35:7d:8d:41:ce:5f:de:4c:42:21:1a:1c:8e:b6:
                    46:30:76:e4:bf:d5:4d:31:07:58:87:1c:53:46:ea:
                    6c:fe:6d:c0:5a:22:22:14:75:99:cf:68:a3:b3:e7:
                    6c:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                72:77:DB:79:06:CA:34:03:43:79:17:0F:54:3B:E9:0F:00:9B:AD:A4
            X509v3 Authority Key Identifier:
                keyid:63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/cnfbeQbKNANDeRcPVDvpDwCbraQ.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a10:cc40:190::/44

    Signature Algorithm: sha256WithRSAEncryption
         04:22:ca:85:60:30:fb:63:40:69:a9:cb:66:ee:b1:0d:f6:99:
         80:f6:0d:64:56:90:27:5b:06:66:61:e3:9d:ff:72:4c:24:7d:
         f3:a1:19:49:56:f1:a9:c4:15:b2:1b:5c:6e:17:7a:1d:51:82:
         d6:e7:71:02:d4:b3:75:86:18:5e:92:b7:57:5b:5c:61:91:3a:
         98:3b:40:92:c9:6c:72:ea:ce:04:16:58:04:46:38:10:66:f8:
         d0:34:75:44:71:22:f8:f9:0f:b1:ec:e6:b9:4c:7e:9c:0a:bf:
         70:24:69:35:f1:9d:e8:2a:ba:37:52:c1:7f:c0:68:d9:0e:96:
         45:17:62:44:d9:77:4c:06:ec:88:c0:9e:82:6b:ac:4e:9f:6f:
         d1:cc:1e:b4:01:87:c7:4d:6c:e3:a7:a1:bc:ff:55:60:f2:49:
         83:08:17:4d:d3:3b:8e:70:e9:bf:fa:5f:ad:4b:d4:ba:95:02:
         03:78:8e:58:e7:b9:d9:44:6b:41:c1:b8:2f:76:10:fe:84:59:
         e5:df:6f:ad:fe:4f:bd:4e:01:e7:77:01:7d:e9:73:31:a8:ce:
         c2:80:38:58:3e:85:b5:82:3f:e9:05:24:bc:62:dc:63:43:1e:
         d6:f7:aa:e7:9b:4a:57:ed:47:67:68:cf:20:d0:7a:c2:8e:98:
         f6:b7:96:8d
-----BEGIN CERTIFICATE-----
MIIE8jCCA9qgAwIBAgIEFKWSszANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg2
M2U5MTY3MTdhYjExY2NjZjExZWYxZmI1YzEyZWU0MTk1MGZhZDliMB4XDTIyMDUx
NTA0Mzk0MFoXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoNzI3N2RiNzkwNmNh
MzQwMzQzNzkxNzBmNTQzYmU5MGYwMDliYWRhNDCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAJQKwvRhJSze/0xgInzA8fCKzYDhln6ZfPYRQ0XDC9gnFxb1
dv/0ZZ3F0wcudT0l4quzOG5YdYYcDfNXSCY0p7mIz65C8U2nr+4hl8sYUWkkSEnD
O2KR/o/01SLutlOeXPxc9sn+QJXCPCY/V567pFRPEEqBWhqhRxUOuiS5checP9Kn
qkbcnIljDAw/odKYyR21u1K2ddUrTHfmK/RaOLhnGRLKzextADDH2NwlRPAbURPp
UumTom81iY2r9lZC9QsAnPV0xRd7CjGB5uQTv/FxnjV9jUHOX95MQiEaHI62RjB2
5L/VTTEHWIccU0bqbP5twFoiIhR1mc9oo7PnbCkCAwEAAaOCAgwwggIIMB0GA1Ud
DgQWBBRyd9t5Bso0A0N5Fw9UO+kPAJutpDAfBgNVHSMEGDAWgBRj6RZxerEczPEe
8ftcEu5BlQ+tmzAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L1kta1djWHF4SE16eEh2SDdYQkx1UVpVUHJacy5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvNTEvNDk1N2E0LWNlNTktNDMxNS05OTc2LWRjNWVjNzQ4ZjZhNS8x
L2NuZmJlUWJLTkFORGVSY1BWRHZwRHdDYnJhUS5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNTEv
NDk1N2E0LWNlNTktNDMxNS05OTc2LWRjNWVjNzQ4ZjZhNS8xL1kta1djWHF4SE16
eEh2SDdYQkx1UVpVUHJacy5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAi
BggrBgEFBQcBBwEB/wQTMBEwDwQCAAIwCQMHBCoQzEABkDANBgkqhkiG9w0BAQsF
AAOCAQEABCLKhWAw+2NAaanLZu6xDfaZgPYNZFaQJ1sGZmHjnf9yTCR986EZSVbx
qcQVshtcbhd6HVGC1udxAtSzdYYYXpK3V1tcYZE6mDtAkslscurOBBZYBEY4EGb4
0DR1RHEi+PkPsezmuUx+nAq/cCRpNfGd6Cq6N1LBf8Bo2Q6WRRdiRNl3TAbsiMCe
gmusTp9v0cwetAGHx01s46ehvP9VYPJJgwgXTdM7jnDpv/pfrUvUupUCA3iOWOe5
2URrQcG4L3YQ/oRZ5d9vrf5PvU4B53cBfelzMajOwoA4WD6FtYI/6QUkvGLcY0Me
1veq55tKV+1HZ2jPINB6wo6Y9reWjQ==
-----END CERTIFICATE-----