Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/gsdgosfuP0MJny0TA3KREjrqCDM.roa
File:                     gsdgosfuP0MJny0TA3KREjrqCDM.roa (raw, json)
Hash identifier:          MyN5jPBnrnP4kEvDlj/AqwJ/A0xebtcc5evcWK8snNA=
Subject key identifier:   82:C7:60:A2:C7:EE:3F:43:09:9F:2D:13:03:72:91:12:3A:EA:08:33
Certificate issuer:       /CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Certificate serial:       127395E1
Authority key identifier: 63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/gsdgosfuP0MJny0TA3KREjrqCDM.roa
Signing time:             Sat 26 Feb 2022 23:37:47 +0000
ROA not before:           Sat 26 Feb 2022 23:37:47 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     47316
IP address blocks:        2a0e:97c0:78d::/48 maxlen: 48
                          2a0e:97c0:780::/44 maxlen: 48
                          2a0e:97c0:788::/48 maxlen: 48
                          2a0e:97c0:783::/48 maxlen: 48
                          2a0e:97c0:78e::/48 maxlen: 48
                          2a0e:97c0:781::/48 maxlen: 48
                          2a0e:97c0:78c::/48 maxlen: 48
                          2a0e:97c0:787::/48 maxlen: 48
                          2a0e:97c0:782::/48 maxlen: 48
                          2a0e:97c0:785::/48 maxlen: 48
                          2a0e:97c0:780::/48 maxlen: 48
                          2a0e:97c0:78b::/48 maxlen: 48
                          2a0e:97c0:786::/48 maxlen: 48
                          2a0e:97c0:789::/48 maxlen: 48
                          2a0e:97c0:784::/48 maxlen: 48
                          2a0e:97c0:78f::/48 maxlen: 48
                          2a0e:97c0:78a::/48 maxlen: 48

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 309564897 (0x127395e1)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
        Validity
            Not Before: Feb 26 23:37:47 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=82c760a2c7ee3f43099f2d13037291123aea0833
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:27:0d:3c:8a:4d:75:0a:21:29:1a:4e:d3:74:
                    6a:39:79:47:43:01:d8:d4:03:0c:2d:fa:1f:39:fd:
                    eb:f4:49:db:0a:61:96:63:d2:f3:e0:f2:7b:18:a9:
                    ae:9c:b8:84:86:22:ec:67:84:cf:ec:11:01:30:3e:
                    d0:2a:ec:87:8a:a6:5d:0a:3f:9b:a1:7d:57:6e:bf:
                    56:bb:eb:7f:1a:60:d4:a7:c2:11:12:61:ca:6a:c0:
                    c4:13:03:fe:22:db:2d:a7:44:09:8d:da:14:16:24:
                    4a:73:a9:83:fb:07:85:c2:fe:03:1c:6f:15:dc:22:
                    61:70:ab:83:1e:74:97:98:0d:dd:6e:98:af:ac:61:
                    8d:96:8c:cb:f9:89:ed:1b:92:11:1d:54:07:eb:b5:
                    ae:9f:a2:b0:15:8b:70:2d:95:a9:c7:17:9a:f2:75:
                    5f:d8:8c:c4:4d:94:ec:6b:07:35:7a:e9:67:1d:15:
                    be:82:6c:a7:aa:47:f4:c8:19:b0:64:5a:4e:19:c2:
                    4b:72:33:ec:0a:32:7a:7d:24:78:b9:18:56:80:77:
                    dd:9f:ec:99:be:32:fe:07:d4:ab:b9:b4:fa:79:11:
                    16:47:1f:3f:1b:0a:87:a0:6a:6b:9e:54:98:a3:92:
                    3a:64:95:15:df:ee:44:c2:2f:36:10:9a:5b:e0:f4:
                    3f:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                82:C7:60:A2:C7:EE:3F:43:09:9F:2D:13:03:72:91:12:3A:EA:08:33
            X509v3 Authority Key Identifier:
                keyid:63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/gsdgosfuP0MJny0TA3KREjrqCDM.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a0e:97c0:780::/44

    Signature Algorithm: sha256WithRSAEncryption
         69:e0:5e:a7:f5:3e:d7:45:e7:f7:8e:3f:b7:2e:2a:0f:2f:9f:
         4e:03:32:1a:ef:45:a9:ea:8f:25:dd:e3:10:b3:72:6e:0f:78:
         f6:98:27:78:d1:39:d7:71:b2:27:35:0e:bf:d1:51:77:3c:b3:
         ad:6f:70:ae:6f:9e:42:27:0e:f9:f3:71:5d:2b:13:90:b8:bd:
         a8:64:90:d0:e1:1f:96:51:98:2d:a9:70:0c:65:ec:ad:8b:3a:
         dd:14:65:52:33:0d:1b:a1:fb:c3:a7:30:97:b0:e8:a9:42:6a:
         42:4e:2b:54:3f:2d:26:03:24:49:bc:05:f9:03:79:0c:d6:45:
         9e:e8:d2:21:ce:a8:02:64:4d:3f:f7:70:e7:2e:fc:e3:80:09:
         7f:6b:c8:11:1e:bc:50:2f:67:9a:c6:bb:4a:d1:ad:5e:e8:e8:
         7a:5d:49:54:cd:cd:e8:2d:8a:40:5f:33:cd:a6:c7:7d:c2:8c:
         5f:0e:28:ce:68:1c:a2:4d:b4:c2:cb:bf:b3:a3:09:fd:3b:f7:
         c1:3a:b2:2f:16:74:a4:c0:95:55:ce:cc:35:e0:c2:55:11:d7:
         94:30:57:4f:3a:17:52:a2:af:e1:17:69:d5:d9:e5:11:51:23:
         8d:aa:b7:d8:60:ef:d5:ac:c6:31:2e:62:8d:27:3f:23:ed:bc:
         df:1f:2d:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----