Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/lDMw6iN9AKTkVl25ULXFKtDqYSo.roa
File:                     lDMw6iN9AKTkVl25ULXFKtDqYSo.roa (raw, json)
Hash identifier:          QTXdNJSWfDrFr9vvljZri3UjuF9vAlVnNA/uUt8yifU=
Subject key identifier:   94:33:30:EA:23:7D:00:A4:E4:56:5D:B9:50:B5:C5:2A:D0:EA:61:2A
Certificate issuer:       /CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Certificate serial:       0183BEC9D75554B13D9B262C19A00065245B
Authority key identifier: 63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/lDMw6iN9AKTkVl25ULXFKtDqYSo.roa
Signing time:             Sun 09 Oct 2022 22:07:22 +0000
ROA not before:           Sun 09 Oct 2022 22:07:22 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     20473
IP address blocks:        2a0e:b107:1870::/48 maxlen: 48
                          2a0e:b107:5d0::/44 maxlen: 48
                          2a0e:b107:5e0::/44 maxlen: 48
                          2a0e:97c0:750::/48 maxlen: 48
                          2a0e:b107:900::/44 maxlen: 48
                          2a0e:b107:df2::/48 maxlen: 48
                          2a0e:97c0:736::/48 maxlen: 48
                          2a0e:b107:9f4::/48 maxlen: 48
                          2a0e:b107:9f6::/48 maxlen: 48
                          2a0e:b102:12f::/48 maxlen: 48
                          2a0e:97c0:76f::/48 maxlen: 48
                          2a0e:97c0:73f::/48 maxlen: 48

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:83:be:c9:d7:55:54:b1:3d:9b:26:2c:19:a0:00:65:24:5b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
        Validity
            Not Before: Oct  9 22:07:22 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=943330ea237d00a4e4565db950b5c52ad0ea612a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:ca:68:9f:5f:ad:a3:a0:21:54:88:a1:e9:2d:
                    f8:a6:f3:57:3f:68:02:d6:91:45:59:6f:f6:d3:b9:
                    3e:3b:62:0f:07:b4:4d:4e:39:1b:82:ad:13:b2:7d:
                    0b:ab:50:66:55:d7:c9:29:fc:0c:bc:3a:18:aa:22:
                    5e:88:48:30:5f:42:ef:7a:6a:b5:6d:3f:2d:0b:54:
                    09:43:2f:bc:d7:28:55:7e:40:0e:e7:70:da:ef:86:
                    72:28:59:12:4c:b9:84:37:32:47:22:b9:a4:a5:14:
                    4d:50:64:5b:93:87:6b:a6:f9:91:bb:ba:34:07:42:
                    4d:15:6f:3b:06:fd:7e:b3:ec:63:fb:27:9f:7b:8a:
                    97:f4:4b:f3:c1:7d:c7:3d:a2:a3:1e:42:6b:e4:02:
                    68:c4:99:4f:19:1e:18:4d:1d:8d:8a:50:0b:28:d6:
                    0c:17:a6:e7:49:ef:5b:f2:5e:df:8d:17:d5:43:21:
                    1e:b9:e0:2e:60:a3:c7:07:25:e3:24:08:53:3f:17:
                    fd:76:40:1a:b4:5e:33:d3:5d:0a:f2:4c:0f:83:c4:
                    25:c3:6b:84:95:bd:6f:2b:c2:41:b4:be:1d:5c:65:
                    37:a2:be:ea:ab:38:9d:e9:00:f3:01:39:ec:3e:ef:
                    e6:5b:02:25:19:8e:ed:41:ad:fe:a2:c8:23:12:16:
                    19:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                94:33:30:EA:23:7D:00:A4:E4:56:5D:B9:50:B5:C5:2A:D0:EA:61:2A
            X509v3 Authority Key Identifier:
                keyid:63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/lDMw6iN9AKTkVl25ULXFKtDqYSo.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a0e:97c0:736::/48
                  2a0e:97c0:73f::/48
                  2a0e:97c0:750::/48
                  2a0e:97c0:76f::/48
                  2a0e:b102:12f::/48
                  2a0e:b107:5d0::-2a0e:b107:5ef:ffff:ffff:ffff:ffff:ffff
                  2a0e:b107:900::/44
                  2a0e:b107:9f4::/48
                  2a0e:b107:9f6::/48
                  2a0e:b107:df2::/48
                  2a0e:b107:1870::/48

    Signature Algorithm: sha256WithRSAEncryption
         c7:55:31:a8:f8:ce:13:6b:6c:69:5d:1e:b7:b0:f0:dc:61:6d:
         7c:03:59:bc:67:b2:91:28:36:0c:66:ee:3a:56:be:ee:06:f0:
         cd:91:a9:2c:4a:d1:9a:7b:cb:64:20:94:e8:9b:66:4c:cc:07:
         0a:4f:c7:e6:81:8c:e2:e3:40:2b:2a:f7:8c:3c:f7:5c:f3:76:
         b3:95:29:a2:ad:fc:10:d2:3a:de:47:63:af:37:41:42:b8:45:
         ed:e4:bf:31:b1:c1:6a:19:38:82:51:2d:b8:6c:6b:12:36:39:
         2e:7a:78:f3:a2:9f:7e:ea:22:60:9a:ca:93:17:ac:ea:17:1f:
         b0:b7:fb:27:e8:9b:e1:21:ef:2a:3d:f1:8d:10:61:11:7a:8d:
         f1:5f:61:9a:f4:13:f0:ad:88:1c:d8:5d:4e:de:ad:ef:80:c1:
         2d:1d:91:d5:79:ff:31:88:da:80:02:41:ed:c5:53:df:ae:64:
         a3:bc:4f:88:a3:b1:f3:91:2e:7f:55:60:7e:9d:45:c1:30:b5:
         bf:c4:ee:3e:8f:a7:35:2a:55:7d:0a:62:82:a5:e7:e0:c3:83:
         0e:84:4e:f9:8e:63:6c:1e:c4:96:e3:19:0f:f4:e0:7e:03:61:
         90:a8:13:79:a1:70:7e:9f:43:46:d4:fc:09:3d:42:dd:2b:89:
         32:36:fe:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----