Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/mTsM-ecjJEZ507JtqUEB5UPzoV0.roa
File:                     mTsM-ecjJEZ507JtqUEB5UPzoV0.roa (raw, json)
Hash identifier:          BmkoDyQQxoh2CZZQlF6mwUu9s0tKJDLyQkPwIt0CxJY=
Subject key identifier:   99:3B:0C:F9:E7:23:24:46:79:D3:B2:6D:A9:41:01:E5:43:F3:A1:5D
Certificate issuer:       /CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Certificate serial:       136C797F
Authority key identifier: 63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/mTsM-ecjJEZ507JtqUEB5UPzoV0.roa
Signing time:             Sun 03 Apr 2022 11:31:51 +0000
ROA not before:           Sun 03 Apr 2022 11:31:51 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     16509
IP address blocks:        2a0e:b107:e70::/48 maxlen: 48

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 325876095 (0x136c797f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
        Validity
            Not Before: Apr  3 11:31:51 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=993b0cf9e723244679d3b26da94101e543f3a15d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:a2:41:63:39:6b:57:85:d1:10:0f:38:5c:22:
                    15:51:1d:43:65:44:37:5a:22:af:8c:47:7b:6f:50:
                    de:e8:84:18:c7:46:88:4d:5a:e7:41:3a:f0:82:57:
                    08:d1:27:bb:45:ad:2c:01:8e:87:6b:54:5b:1e:7b:
                    1c:ee:bb:fc:5f:ae:f6:19:6f:d1:00:f4:56:3b:f5:
                    f6:70:0e:18:35:09:7b:a5:8a:81:6b:5f:6d:a9:9b:
                    0a:a8:e6:c8:4c:2e:d2:e8:f7:8f:4a:ac:6a:6a:0d:
                    cc:92:62:a2:9d:21:75:32:12:9b:23:8c:99:27:76:
                    be:b0:94:ef:c3:f7:8b:07:14:c9:60:d5:bd:bf:c9:
                    8e:cb:75:05:03:24:8b:49:c1:14:ee:14:5a:08:6a:
                    ae:40:cc:4f:9f:58:9f:56:bb:77:5e:ba:87:b4:58:
                    b5:5a:b3:30:ea:c4:b4:94:d2:fb:48:85:1e:34:eb:
                    2c:58:be:95:b5:5c:5c:c9:d3:af:37:5b:58:ed:62:
                    18:c9:4a:a5:22:5a:db:71:e9:98:05:81:5b:1d:4a:
                    d8:be:fb:9f:19:c8:07:c1:13:0b:ac:a3:c9:cd:46:
                    9a:c1:6d:11:ab:a6:4d:3d:41:d7:4d:fe:78:2c:95:
                    ce:52:d8:6f:52:b6:20:04:77:61:a6:d4:96:19:4b:
                    0c:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                99:3B:0C:F9:E7:23:24:46:79:D3:B2:6D:A9:41:01:E5:43:F3:A1:5D
            X509v3 Authority Key Identifier:
                keyid:63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/mTsM-ecjJEZ507JtqUEB5UPzoV0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a0e:b107:e70::/48

    Signature Algorithm: sha256WithRSAEncryption
         97:28:85:44:30:48:ec:73:5d:1a:16:4c:eb:08:b3:88:1b:51:
         d3:a4:00:f0:ff:13:24:fc:3f:0e:f2:aa:6b:32:18:1f:31:7e:
         11:53:de:37:53:63:af:ee:20:5b:9e:a9:f8:dd:58:42:f1:0e:
         ed:97:0c:d2:e5:67:99:da:a7:70:df:50:66:48:d1:5b:b6:c8:
         b5:35:69:5c:ef:a0:f0:64:69:5c:dc:7d:6e:5d:a1:0a:4a:76:
         34:c8:37:a6:45:45:d1:c2:69:4c:36:c8:c2:8f:55:bc:50:db:
         fc:91:98:9a:db:9d:19:e4:4c:b0:26:ef:05:3e:bc:c7:18:00:
         9d:d4:de:a2:95:3a:e8:1e:ac:73:a0:42:b1:dd:6a:b2:ae:74:
         9a:79:58:85:33:79:ec:5b:5d:ea:7e:6c:3b:61:56:0a:75:d2:
         cc:cf:7a:b8:cb:db:5a:da:fc:40:ef:cb:35:b1:bf:d4:3e:18:
         bf:fc:90:c4:eb:a4:6b:e1:60:84:21:b3:44:5c:e0:c9:37:86:
         d1:d7:38:37:5e:02:de:bc:b4:c9:45:88:e6:5c:45:9a:8f:93:
         a5:36:db:24:c9:15:5c:fc:86:0b:c2:53:61:a7:22:0d:e6:75:
         0f:65:26:61:39:6c:97:65:f4:09:2c:2c:ad:07:e5:a7:80:49:
         b9:86:38:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----