Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/iVbV-_wyTTwQ5Ktq4_2EjkOBdeI.roa
File:                     iVbV-_wyTTwQ5Ktq4_2EjkOBdeI.roa (raw, json)
Hash identifier:          ucnnsTFohgk7Zu+HIPmoY45XGbBp+GJaPeQNfE+SZD8=
Subject key identifier:   89:56:D5:FB:FC:32:4D:3C:10:E4:AB:6A:E3:FD:84:8E:43:81:75:E2
Certificate issuer:       /CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Certificate serial:       0181F3DAC9A2F0072A0CE55FB8011B79FB48
Authority key identifier: 63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/iVbV-_wyTTwQ5Ktq4_2EjkOBdeI.roa
Signing time:             Tue 12 Jul 2022 19:20:10 +0000
ROA not before:           Tue 12 Jul 2022 19:20:10 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     212895
IP address blocks:        2a0e:b102:100::/44 maxlen: 48

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:81:f3:da:c9:a2:f0:07:2a:0c:e5:5f:b8:01:1b:79:fb:48
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
        Validity
            Not Before: Jul 12 19:20:10 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=8956d5fbfc324d3c10e4ab6ae3fd848e438175e2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:30:0a:d7:74:bb:9b:0e:38:cd:42:d5:9e:6d:
                    a9:f4:61:d9:29:9a:3c:f6:05:0c:d3:8b:46:04:3e:
                    35:1e:02:46:a3:68:d8:e2:f5:0c:d7:11:c4:67:47:
                    66:a8:37:94:93:60:23:3f:2f:c5:54:9c:87:1b:5b:
                    6b:00:6d:dc:61:7a:3a:c0:03:08:ba:16:c8:93:ab:
                    f3:79:87:06:2f:5b:1c:d3:1a:68:96:ba:a7:a7:e1:
                    f4:a6:1d:2f:ba:05:59:f8:54:83:d9:14:96:02:b9:
                    83:e8:90:e5:b7:89:11:54:c0:5b:97:af:0c:0d:6e:
                    7f:f9:be:56:7f:28:75:2b:e2:58:45:12:1c:16:5c:
                    7f:b0:95:8c:64:db:0d:eb:ba:3b:b2:11:fb:c6:db:
                    b4:f8:93:3b:a3:1f:fc:59:91:2d:3d:12:6b:1d:fe:
                    29:23:f8:7a:1f:2d:ff:5b:18:d5:28:59:aa:b2:d0:
                    25:c7:d4:80:43:e3:9c:a6:f6:e4:bc:59:5a:6e:ea:
                    08:e8:42:1c:5f:c9:25:b5:a2:05:c6:cb:42:ee:b7:
                    96:e2:9a:07:0b:bb:e9:d8:3e:fe:f0:17:59:60:11:
                    b4:e4:e1:71:de:1a:2a:0a:a7:50:59:f1:e3:47:49:
                    91:15:a6:16:2c:8f:1b:53:07:c4:37:69:51:c3:42:
                    08:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                89:56:D5:FB:FC:32:4D:3C:10:E4:AB:6A:E3:FD:84:8E:43:81:75:E2
            X509v3 Authority Key Identifier:
                keyid:63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/iVbV-_wyTTwQ5Ktq4_2EjkOBdeI.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a0e:b102:100::/44

    Signature Algorithm: sha256WithRSAEncryption
         93:5d:8a:5d:ff:cd:fb:fc:4e:3d:bf:24:56:91:74:94:00:2d:
         61:09:33:de:0a:d2:59:ab:29:8d:c8:d7:d4:d9:e2:d8:57:18:
         bc:30:da:24:27:38:47:8a:15:d8:9e:86:1c:02:14:9c:44:d7:
         54:1c:f7:3a:ff:9a:03:9b:cd:e0:18:2c:d9:fc:b4:f2:e8:da:
         9b:b4:d0:b0:2c:9b:b7:52:df:d9:ed:f3:b3:1f:71:4f:c3:f0:
         c3:f0:f5:35:12:8c:5c:85:70:f1:96:3c:f8:d2:3a:90:40:a3:
         07:a7:03:21:28:6e:1d:4c:7f:9b:05:ca:5c:86:ff:be:56:63:
         65:0e:73:c0:ba:40:9e:83:8c:a6:de:8a:39:d7:96:4d:10:2c:
         7b:c2:74:73:ba:64:e1:d9:b4:80:28:ca:28:1b:ec:37:df:79:
         3a:e6:a6:b5:4e:1a:be:6a:55:8a:70:98:b4:01:87:9b:16:26:
         54:84:0e:a7:93:82:9f:ae:54:3e:35:65:b3:71:ba:0e:56:56:
         a1:79:71:b6:fc:18:99:df:31:cd:20:84:26:c7:04:15:a3:7c:
         a4:a9:bf:b8:20:c3:a1:86:50:fb:8d:8b:71:cf:75:c5:e5:04:
         75:54:52:d1:7c:60:78:4d:40:14:ca:79:df:f0:76:b7:b1:f1:
         9f:c4:64:4b
-----BEGIN CERTIFICATE-----
MIIFADCCA+igAwIBAgISAYHz2smi8AcqDOVfuAEbeftIMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDYzZTkxNjcxN2FiMTFjY2NmMTFlZjFmYjVjMTJlZTQxOTUw
ZmFkOWIwHhcNMjIwNzEyMTkyMDEwWhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg4OTU2ZDVmYmZjMzI0ZDNjMTBlNGFiNmFlM2ZkODQ4ZTQzODE3NWUyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArTAK13S7mw44zULVnm2p9GHZKZo8
9gUM04tGBD41HgJGo2jY4vUM1xHEZ0dmqDeUk2AjPy/FVJyHG1trAG3cYXo6wAMI
uhbIk6vzeYcGL1sc0xpolrqnp+H0ph0vugVZ+FSD2RSWArmD6JDlt4kRVMBbl68M
DW5/+b5Wfyh1K+JYRRIcFlx/sJWMZNsN67o7shH7xtu0+JM7ox/8WZEtPRJrHf4p
I/h6Hy3/WxjVKFmqstAlx9SAQ+OcpvbkvFlabuoI6EIcX8kltaIFxstC7reW4poH
C7vp2D7+8BdZYBG05OFx3hoqCqdQWfHjR0mRFaYWLI8bUwfEN2lRw0IIQQIDAQAB
o4ICDDCCAggwHQYDVR0OBBYEFIlW1fv8Mk08EOSrauP9hI5DgXXiMB8GA1UdIwQY
MBaAFGPpFnF6sRzM8R7x+1wS7kGVD62bMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWS1rV2NYcXhITXp4SHZIN1hCTHVRWlVQclpzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81MS80OTU3YTQtY2U1OS00MzE1LTk5NzYt
ZGM1ZWM3NDhmNmE1LzEvaVZiVi1fd3lUVHdRNUt0cTRfMkVqa09CZGVJLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81MS80OTU3YTQtY2U1OS00MzE1LTk5NzYtZGM1ZWM3NDhmNmE1
LzEvWS1rV2NYcXhITXp4SHZIN1hCTHVRWlVQclpzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcEKg6xAgEA
MA0GCSqGSIb3DQEBCwUAA4IBAQCTXYpd/837/E49vyRWkXSUAC1hCTPeCtJZqymN
yNfU2eLYVxi8MNokJzhHihXYnoYcAhScRNdUHPc6/5oDm83gGCzZ/LTy6NqbtNCw
LJu3Ut/Z7fOzH3FPw/DD8PU1EoxchXDxljz40jqQQKMHpwMhKG4dTH+bBcpchv++
VmNlDnPAukCeg4ym3oo515ZNECx7wnRzumTh2bSAKMooG+w333k65qa1Thq+alWK
cJi0AYebFiZUhA6nk4KfrlQ+NWWzcboOVlaheXG2/BiZ3zHNIIQmxwQVo3ykqb+4
IMOhhlD7jYtxz3XF5QR1VFLRfGB4TUAUynnf8Ha3sfGfxGRL
-----END CERTIFICATE-----