Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/h-3E72JkT4QCh79-u7phIxlNYEE.roa
File:                     h-3E72JkT4QCh79-u7phIxlNYEE.roa (raw, json)
Hash identifier:          VZ9K9qISPxbXqEQjF8BURc8uK+wclE1B8Zcj1Q+ZUCw=
Subject key identifier:   87:ED:C4:EF:62:64:4F:84:02:87:BF:7E:BB:BA:61:23:19:4D:60:41
Certificate issuer:       /CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Certificate serial:       10C97C0F
Authority key identifier: 63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/h-3E72JkT4QCh79-u7phIxlNYEE.roa
Signing time:             Sat 01 Jan 2022 09:05:32 +0000
ROA not before:           Sat 01 Jan 2022 09:05:32 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     211540
IP address blocks:        2a0e:97c0:2f0::/44 maxlen: 48

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 281639951 (0x10c97c0f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
        Validity
            Not Before: Jan  1 09:05:32 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=87edc4ef62644f840287bf7ebbba6123194d6041
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:61:32:b3:18:68:b8:14:a2:88:fb:20:f1:f1:
                    ff:c5:fc:7d:10:a7:d6:0f:18:ca:38:3b:60:60:7b:
                    04:6d:e2:70:6e:f0:30:cf:2c:73:44:16:70:30:21:
                    89:fe:80:3a:81:e3:9c:26:ac:6a:1e:f7:55:11:6f:
                    41:e8:31:26:16:eb:30:a3:fd:9a:18:4f:45:51:b0:
                    8e:bd:0a:32:50:c2:0a:7a:5c:e4:19:e1:af:2a:98:
                    ff:1a:61:21:aa:7e:3b:47:53:fb:1b:03:e6:af:f6:
                    66:ae:5c:1d:44:60:22:43:7e:3a:b9:5b:bb:59:48:
                    f7:46:c0:b4:d7:94:62:e2:e9:e6:3f:e4:78:96:e9:
                    2a:c2:32:ff:14:c7:eb:58:ac:7a:03:95:66:23:41:
                    02:81:92:3c:45:75:70:c9:dd:d5:bb:05:eb:1d:32:
                    30:db:50:43:b7:3d:45:6d:9f:da:68:41:66:29:e0:
                    8f:34:1e:ff:de:36:a5:f6:0c:f4:4f:19:8e:42:03:
                    5c:36:c7:69:9e:d0:61:86:dd:8f:de:fd:5f:05:99:
                    4c:d9:4f:64:9d:a3:55:0c:02:c5:27:8f:e1:5e:e9:
                    30:c2:3b:39:d0:3a:72:38:37:b9:fe:4f:ba:ce:db:
                    dc:ce:7b:26:d6:cf:44:b8:7b:80:a3:c3:2a:75:21:
                    87:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                87:ED:C4:EF:62:64:4F:84:02:87:BF:7E:BB:BA:61:23:19:4D:60:41
            X509v3 Authority Key Identifier:
                keyid:63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/h-3E72JkT4QCh79-u7phIxlNYEE.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a0e:97c0:2f0::/44

    Signature Algorithm: sha256WithRSAEncryption
         ba:ac:30:d1:49:64:c5:5c:b8:09:9c:cc:f5:da:51:7e:55:16:
         c3:45:d6:c6:02:a9:fe:34:58:18:83:2d:62:52:d0:27:89:4c:
         23:7e:70:f9:7a:1a:62:cb:9e:da:61:54:e5:4e:df:e7:93:74:
         3d:b9:a2:a4:e6:85:82:68:0a:f9:c1:07:32:49:5a:c3:6b:ba:
         85:c8:ab:f6:d9:ab:59:6b:82:db:03:82:3a:ef:e6:98:0c:c9:
         df:98:14:5d:ae:37:1d:a1:7c:b4:fb:9f:12:6a:ff:17:97:48:
         c2:00:46:df:28:2c:8e:d9:2e:ef:24:31:93:61:a0:19:8c:d0:
         99:d4:89:9f:4b:28:fd:c9:b2:01:bb:21:e0:b3:1c:e3:44:7f:
         74:f5:e0:c2:93:32:81:8a:d6:fb:c9:37:cf:bd:68:8a:9f:36:
         65:00:a8:4d:c6:f3:2e:76:37:2b:ec:83:ff:c5:0a:bb:20:ea:
         9a:c3:a9:09:91:d4:64:b2:ad:66:fd:08:28:b6:cc:bf:3c:49:
         49:25:45:fe:6f:da:b3:15:b4:a1:d9:a3:5e:b8:6b:5d:54:40:
         0a:78:48:f1:3c:8e:46:88:9c:66:c1:da:2c:94:e7:a8:60:bd:
         ae:5e:d5:61:43:24:a5:ab:f4:ac:69:97:09:c7:40:96:8f:d6:
         27:59:1b:e7
-----BEGIN CERTIFICATE-----
MIIE8jCCA9qgAwIBAgIEEMl8DzANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg2
M2U5MTY3MTdhYjExY2NjZjExZWYxZmI1YzEyZWU0MTk1MGZhZDliMB4XDTIyMDEw
MTA5MDUzMloXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoODdlZGM0ZWY2MjY0
NGY4NDAyODdiZjdlYmJiYTYxMjMxOTRkNjA0MTCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAKphMrMYaLgUooj7IPHx/8X8fRCn1g8Yyjg7YGB7BG3icG7w
MM8sc0QWcDAhif6AOoHjnCasah73VRFvQegxJhbrMKP9mhhPRVGwjr0KMlDCCnpc
5BnhryqY/xphIap+O0dT+xsD5q/2Zq5cHURgIkN+Orlbu1lI90bAtNeUYuLp5j/k
eJbpKsIy/xTH61isegOVZiNBAoGSPEV1cMnd1bsF6x0yMNtQQ7c9RW2f2mhBZing
jzQe/942pfYM9E8ZjkIDXDbHaZ7QYYbdj979XwWZTNlPZJ2jVQwCxSeP4V7pMMI7
OdA6cjg3uf5Pus7b3M57JtbPRLh7gKPDKnUhhyUCAwEAAaOCAgwwggIIMB0GA1Ud
DgQWBBSH7cTvYmRPhAKHv367umEjGU1gQTAfBgNVHSMEGDAWgBRj6RZxerEczPEe
8ftcEu5BlQ+tmzAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L1kta1djWHF4SE16eEh2SDdYQkx1UVpVUHJacy5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvNTEvNDk1N2E0LWNlNTktNDMxNS05OTc2LWRjNWVjNzQ4ZjZhNS8x
L2gtM0U3MkprVDRRQ2g3OS11N3BoSXhsTllFRS5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNTEv
NDk1N2E0LWNlNTktNDMxNS05OTc2LWRjNWVjNzQ4ZjZhNS8xL1kta1djWHF4SE16
eEh2SDdYQkx1UVpVUHJacy5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAi
BggrBgEFBQcBBwEB/wQTMBEwDwQCAAIwCQMHBCoOl8AC8DANBgkqhkiG9w0BAQsF
AAOCAQEAuqww0UlkxVy4CZzM9dpRflUWw0XWxgKp/jRYGIMtYlLQJ4lMI35w+Xoa
Ysue2mFU5U7f55N0PbmipOaFgmgK+cEHMklaw2u6hcir9tmrWWuC2wOCOu/mmAzJ
35gUXa43HaF8tPufEmr/F5dIwgBG3ygsjtku7yQxk2GgGYzQmdSJn0so/cmyAbsh
4LMc40R/dPXgwpMygYrW+8k3z71oip82ZQCoTcbzLnY3K+yD/8UKuyDqmsOpCZHU
ZLKtZv0IKLbMvzxJSSVF/m/asxW0odmjXrhrXVRACnhI8TyORoicZsHaLJTnqGC9
rl7VYUMkpav0rGmXCcdAlo/WJ1kb5w==
-----END CERTIFICATE-----