Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/exSRVJMOf_jh87w6adgdKCm2BKc.roa
File:                     exSRVJMOf_jh87w6adgdKCm2BKc.roa (raw, json)
Hash identifier:          ++gzIe2VYQwpnF6pb4NScxV9MBJZSBvuDWuSYXfg8ng=
Subject key identifier:   7B:14:91:54:93:0E:7F:F8:E1:F3:BC:3A:69:D8:1D:28:29:B6:04:A7
Certificate issuer:       /CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Certificate serial:       1167142A
Authority key identifier: 63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/exSRVJMOf_jh87w6adgdKCm2BKc.roa
Signing time:             Wed 19 Jan 2022 15:33:54 +0000
ROA not before:           Wed 19 Jan 2022 15:33:54 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     20473
IP address blocks:        2a0e:b107:1870::/48 maxlen: 48
                          2a0e:b107:5d0::/44 maxlen: 48
                          2a0e:b107:5e0::/44 maxlen: 48
                          2a0e:b107:900::/44 maxlen: 48
                          2a0e:b107:df2::/48 maxlen: 48
                          2a0e:97c0:6d1::/48 maxlen: 48
                          2a0e:b107:9f6::/48 maxlen: 48
                          2a10:cc42:1000::/36 maxlen: 48

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 291968042 (0x1167142a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
        Validity
            Not Before: Jan 19 15:33:54 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=7b149154930e7ff8e1f3bc3a69d81d2829b604a7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:f8:68:65:26:59:d7:99:9c:14:43:e2:b5:19:
                    61:17:49:5e:c3:3c:f4:68:6d:41:9e:04:53:04:27:
                    01:4a:0a:7d:57:fe:aa:1a:1e:18:60:0c:5b:52:c1:
                    c8:cf:54:60:19:43:26:06:77:c8:39:0b:c1:43:6a:
                    fe:5f:d1:e4:f5:2b:86:20:d2:fa:34:92:60:a1:db:
                    3e:61:63:20:bc:83:08:5d:c7:8f:18:0e:67:00:3c:
                    96:5c:8e:53:fa:c7:19:b7:12:4e:66:fb:26:85:be:
                    67:3b:41:4f:5a:9b:ab:28:22:1b:28:82:88:7c:fa:
                    54:e5:7e:5e:5a:92:83:86:40:52:fb:9e:b7:f2:2f:
                    72:19:ee:a5:eb:26:49:4b:89:6a:2f:d8:b2:19:c5:
                    d4:fc:2f:9d:7c:a2:3e:ee:e7:0c:00:c6:41:1f:91:
                    85:53:9c:3a:f4:9a:09:4b:ee:e8:01:24:04:ba:ab:
                    5a:79:db:27:41:86:12:e7:f6:0c:99:5d:d0:29:d2:
                    42:36:27:f3:f1:e6:77:8c:0f:79:19:47:e3:9b:19:
                    bd:34:d1:a7:30:e5:b6:fa:f9:e6:9f:3d:6e:f7:68:
                    52:ee:d5:e8:f3:92:31:b8:7a:e7:88:04:aa:84:3f:
                    c6:d5:e4:18:f7:69:64:da:e1:7f:1d:f9:d0:57:7d:
                    ed:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7B:14:91:54:93:0E:7F:F8:E1:F3:BC:3A:69:D8:1D:28:29:B6:04:A7
            X509v3 Authority Key Identifier:
                keyid:63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/exSRVJMOf_jh87w6adgdKCm2BKc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a0e:97c0:6d1::/48
                  2a0e:b107:5d0::-2a0e:b107:5ef:ffff:ffff:ffff:ffff:ffff
                  2a0e:b107:900::/44
                  2a0e:b107:9f6::/48
                  2a0e:b107:df2::/48
                  2a0e:b107:1870::/48
                  2a10:cc42:1000::/36

    Signature Algorithm: sha256WithRSAEncryption
         06:63:57:ef:9f:2b:48:3b:5a:bc:39:6b:1b:d3:bc:fb:4a:e9:
         24:43:1e:e1:bf:e0:7c:fc:2b:0e:02:9e:fb:3a:af:4d:55:f7:
         57:52:11:2e:ae:af:51:c0:84:f9:56:51:74:ce:43:60:b8:af:
         fe:93:c6:6d:a4:84:9c:de:87:b9:bb:1a:29:8a:43:64:93:2c:
         47:94:19:f2:7e:cf:61:ff:d1:6b:a1:6f:3a:c4:3d:c4:bb:55:
         1d:b2:9d:84:a5:98:6d:5d:fd:fb:77:50:3d:4e:50:70:ac:5b:
         cf:84:16:b4:11:aa:91:fd:05:0a:b3:a8:8d:bd:b0:78:f4:ff:
         ea:52:00:ed:5b:a5:99:1c:93:34:e3:a5:89:37:5b:ca:b0:74:
         43:22:59:20:7e:12:6a:43:ac:0d:e0:07:d4:01:96:73:44:ad:
         05:95:16:1e:c3:a8:b3:1c:4c:45:47:0a:62:47:61:cb:07:06:
         f2:a9:d9:6c:f9:05:23:4d:cd:1d:47:bc:9f:87:2f:3f:b5:6c:
         bd:d2:0e:9a:cd:b6:cb:0d:69:d7:75:60:c1:9a:d1:ba:a3:69:
         e6:4f:ee:f4:6f:72:d0:4a:3d:c8:24:69:69:ca:24:09:ae:3d:
         63:5e:35:c7:9a:99:47:7e:c6:6a:90:c1:6c:bf:91:2c:1c:01:
         0d:1f:a1:36
-----BEGIN CERTIFICATE-----
MIIFMjCCBBqgAwIBAgIEEWcUKjANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg2
M2U5MTY3MTdhYjExY2NjZjExZWYxZmI1YzEyZWU0MTk1MGZhZDliMB4XDTIyMDEx
OTE1MzM1NFoXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoN2IxNDkxNTQ5MzBl
N2ZmOGUxZjNiYzNhNjlkODFkMjgyOWI2MDRhNzCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAJ74aGUmWdeZnBRD4rUZYRdJXsM89GhtQZ4EUwQnAUoKfVf+
qhoeGGAMW1LByM9UYBlDJgZ3yDkLwUNq/l/R5PUrhiDS+jSSYKHbPmFjILyDCF3H
jxgOZwA8llyOU/rHGbcSTmb7JoW+ZztBT1qbqygiGyiCiHz6VOV+XlqSg4ZAUvue
t/IvchnupesmSUuJai/YshnF1PwvnXyiPu7nDADGQR+RhVOcOvSaCUvu6AEkBLqr
WnnbJ0GGEuf2DJld0CnSQjYn8/Hmd4wPeRlH45sZvTTRpzDltvr55p89bvdoUu7V
6POSMbh654gEqoQ/xtXkGPdpZNrhfx350Fd97VUCAwEAAaOCAkwwggJIMB0GA1Ud
DgQWBBR7FJFUkw5/+OHzvDpp2B0oKbYEpzAfBgNVHSMEGDAWgBRj6RZxerEczPEe
8ftcEu5BlQ+tmzAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L1kta1djWHF4SE16eEh2SDdYQkx1UVpVUHJacy5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvNTEvNDk1N2E0LWNlNTktNDMxNS05OTc2LWRjNWVjNzQ4ZjZhNS8x
L2V4U1JWSk1PZl9qaDg3dzZhZGdkS0NtMkJLYy5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNTEv
NDk1N2E0LWNlNTktNDMxNS05OTc2LWRjNWVjNzQ4ZjZhNS8xL1kta1djWHF4SE16
eEh2SDdYQkx1UVpVUHJacy5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBi
BggrBgEFBQcBBwEB/wRTMFEwTwQCAAIwSQMHACoOl8AG0TASAwcEKg6xBwXQAwcE
Kg6xBwXgAwcEKg6xBwkAAwcAKg6xBwn2AwcAKg6xBw3yAwcAKg6xBxhwAwYEKhDM
QhAwDQYJKoZIhvcNAQELBQADggEBAAZjV++fK0g7Wrw5axvTvPtK6SRDHuG/4Hz8
Kw4Cnvs6r01V91dSES6ur1HAhPlWUXTOQ2C4r/6Txm2khJzeh7m7GimKQ2STLEeU
GfJ+z2H/0WuhbzrEPcS7VR2ynYSlmG1d/ft3UD1OUHCsW8+EFrQRqpH9BQqzqI29
sHj0/+pSAO1bpZkckzTjpYk3W8qwdEMiWSB+EmpDrA3gB9QBlnNErQWVFh7DqLMc
TEVHCmJHYcsHBvKp2Wz5BSNNzR1HvJ+HLz+1bL3SDprNtssNadd1YMGa0bqjaeZP
7vRvctBKPcgkaWnKJAmuPWNeNceamUd+xmqQwWy/kSwcAQ0foTY=
-----END CERTIFICATE-----