Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/gnSHnZgarCXKkOroai1VPlZQzhQ.roa
File:                     gnSHnZgarCXKkOroai1VPlZQzhQ.roa (raw, json)
Hash identifier:          ZXUQ8W4XQcVs9ElUXLFaviI5FAIkPAx9uUam95UbN5s=
Subject key identifier:   82:74:87:9D:98:1A:AC:25:CA:90:EA:E8:6A:2D:55:3E:56:50:CE:14
Certificate issuer:       /CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Certificate serial:       109FEE41
Authority key identifier: 63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/gnSHnZgarCXKkOroai1VPlZQzhQ.roa
Signing time:             Sat 01 Jan 2022 09:05:09 +0000
ROA not before:           Sat 01 Jan 2022 09:05:09 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     208680
IP address blocks:        2a0e:b107:790::/48 maxlen: 48
                          2a0e:b107:795::/48 maxlen: 48
                          2a0e:b107:79a::/48 maxlen: 48
                          2a0e:b107:79f::/48 maxlen: 48
                          2a0e:b107:794::/48 maxlen: 48
                          2a0e:b107:799::/48 maxlen: 48
                          2a0e:b107:79e::/48 maxlen: 48
                          2a0e:b107:793::/48 maxlen: 48
                          2a0e:b107:798::/48 maxlen: 48
                          2a0e:b107:79d::/48 maxlen: 48
                          2a0e:b107:792::/48 maxlen: 48
                          2a0e:b107:797::/48 maxlen: 48
                          2a0e:b107:79c::/48 maxlen: 48
                          2a0e:b107:791::/48 maxlen: 48
                          2a0e:b107:796::/48 maxlen: 48
                          2a0e:b107:79b::/48 maxlen: 48

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 278916673 (0x109fee41)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
        Validity
            Not Before: Jan  1 09:05:09 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=8274879d981aac25ca90eae86a2d553e5650ce14
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:59:60:37:d1:74:6b:f6:1d:bd:7a:12:71:75:
                    9f:1f:b1:22:06:e2:28:24:90:87:fc:86:82:7a:48:
                    d9:a9:7c:2a:e6:85:5f:d8:f1:5d:23:41:d8:40:ca:
                    ec:82:93:f3:1b:76:27:65:a3:67:77:bb:ca:1a:f0:
                    ca:d3:43:60:a9:9d:b3:84:5a:4a:27:7e:f1:99:f9:
                    d5:98:72:3e:0d:04:e7:5a:03:b0:dc:ba:71:ea:3f:
                    a1:2e:6e:b9:53:26:20:20:5b:9a:9f:62:e9:84:37:
                    c8:7f:1d:1d:f9:18:91:92:76:64:54:64:ea:25:5b:
                    08:c2:68:0a:18:bf:2f:65:ea:02:2c:09:42:4e:5b:
                    64:02:ff:f6:e8:10:56:81:c6:12:4b:5a:b7:6e:53:
                    88:10:5d:d1:b8:10:f8:6c:f7:69:d0:93:46:8f:ac:
                    9e:2f:13:a1:87:48:91:21:8a:2c:75:d4:89:c5:36:
                    48:85:a3:60:26:a5:8e:15:89:d4:5f:12:e1:58:29:
                    eb:78:30:06:db:2c:0a:8d:12:11:42:6b:61:55:b0:
                    86:99:c5:82:d8:8e:d9:67:d6:5d:b7:91:50:da:d2:
                    54:67:fd:10:db:a8:b8:06:ab:67:80:68:4a:fa:c9:
                    bf:bf:67:e6:ae:4b:c1:32:ec:85:54:47:4a:c2:08:
                    80:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                82:74:87:9D:98:1A:AC:25:CA:90:EA:E8:6A:2D:55:3E:56:50:CE:14
            X509v3 Authority Key Identifier:
                keyid:63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/gnSHnZgarCXKkOroai1VPlZQzhQ.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a0e:b107:790::/44

    Signature Algorithm: sha256WithRSAEncryption
         6b:8d:84:2b:5a:8e:48:29:93:2a:71:2a:b2:b5:27:9b:b9:0e:
         5a:11:45:04:a4:bd:2e:59:df:88:18:22:2d:fc:bc:3f:6a:21:
         a4:5a:17:c5:57:d1:c5:cc:d1:a2:1e:0e:3d:de:4b:47:11:02:
         cc:5c:d0:70:5b:43:43:4f:ae:5f:be:7e:eb:a9:9b:c5:b2:5d:
         16:95:e3:2a:12:63:86:68:0a:9b:4e:ea:da:a7:ef:50:1c:86:
         8d:6c:1d:6f:59:8f:89:d8:00:c9:b7:4e:5d:d4:00:d6:a4:38:
         d5:e0:62:74:25:ec:a2:9e:34:fb:f1:24:ba:34:cb:b3:6f:21:
         3c:d3:b7:14:21:59:9f:99:65:88:0d:1b:87:0c:75:9c:d4:f4:
         0c:fe:af:03:aa:d3:a3:7a:50:c4:1e:c1:8c:29:86:e5:dc:cf:
         a7:41:f9:5a:d9:af:de:43:b9:40:af:db:bc:de:ea:80:44:80:
         f1:16:b0:92:21:08:02:05:84:c2:d7:0a:28:80:b8:95:03:34:
         ee:5f:40:c4:fd:ee:7e:03:aa:5b:f2:01:3f:0a:31:77:e7:e9:
         02:bd:bf:80:37:99:75:e3:4b:71:d4:42:42:91:2f:20:54:85:
         ee:7a:3e:3d:a5:a3:34:67:80:c5:8f:fe:b2:fd:31:f2:87:ea:
         98:b8:fd:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----