Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/qJq7x0j2NVVvh3B7ays1LsBu2Yg.roa
File:                     qJq7x0j2NVVvh3B7ays1LsBu2Yg.roa (raw, json)
Hash identifier:          ua3Oqd6cyReHQmbWURcI/wwriaIQ29zSILV7Snb3vMs=
Subject key identifier:   A8:9A:BB:C7:48:F6:35:55:6F:87:70:7B:6B:2B:35:2E:C0:6E:D9:88
Certificate issuer:       /CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Certificate serial:       12A5A85B
Authority key identifier: 63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/qJq7x0j2NVVvh3B7ays1LsBu2Yg.roa
Signing time:             Mon 07 Mar 2022 09:34:31 +0000
ROA not before:           Mon 07 Mar 2022 09:34:31 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     47316
IP address blocks:        2a0e:97c0:78d::/48 maxlen: 48
                          2a0e:97c0:788::/48 maxlen: 48
                          2a0e:97c0:783::/48 maxlen: 48
                          2a0e:97c0:78e::/48 maxlen: 48
                          2a0e:97c0:781::/48 maxlen: 48
                          2a0e:97c0:78c::/48 maxlen: 48
                          2a0e:97c0:787::/48 maxlen: 48
                          2a0e:97c0:782::/48 maxlen: 48
                          2a0e:97c0:785::/48 maxlen: 48
                          2a0e:97c0:780::/48 maxlen: 48
                          2a0e:97c0:78b::/48 maxlen: 48
                          2a0e:97c0:786::/48 maxlen: 48
                          2a0e:97c0:789::/48 maxlen: 48
                          2a0e:97c0:784::/48 maxlen: 48
                          2a0e:97c0:78f::/48 maxlen: 48
                          2a0e:97c0:78a::/48 maxlen: 48

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 312846427 (0x12a5a85b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
        Validity
            Not Before: Mar  7 09:34:31 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=a89abbc748f635556f87707b6b2b352ec06ed988
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ea:93:7d:67:3e:82:5b:7f:c0:f9:ef:42:a8:40:
                    ee:26:c1:ba:40:d4:cf:6f:a9:b8:b7:6d:fa:8d:2b:
                    41:d3:e1:32:64:a3:3e:5a:26:11:b7:8a:a4:ce:91:
                    31:7d:15:c0:ce:49:10:1f:93:56:84:4d:c3:c2:d3:
                    06:3d:65:69:6f:14:cb:a6:99:ca:9b:f9:c3:2f:4e:
                    57:86:5e:f9:e4:fa:9a:e0:8a:69:fb:ce:b9:ea:13:
                    97:5a:8c:f8:e5:a4:a7:97:10:b1:32:2f:2e:b7:6b:
                    07:78:5b:c6:a9:9e:c8:f8:6f:e0:27:70:8f:c4:b5:
                    eb:0d:b8:6d:f0:37:8e:83:c7:26:7a:ca:a7:c1:a9:
                    97:3b:02:9d:95:0a:00:b2:84:4c:43:12:89:6b:49:
                    79:f1:c9:1f:16:ba:b0:89:cc:fa:5c:24:2f:76:c0:
                    fe:1b:23:34:e9:21:97:f5:a0:d3:67:25:56:9f:ed:
                    eb:c4:eb:66:d0:5c:55:38:cc:45:ec:d0:d7:d0:1e:
                    77:17:a8:2f:89:79:a8:55:af:60:fe:c0:81:13:6f:
                    93:53:91:bf:c0:98:b2:09:b2:c5:c1:d0:57:41:3c:
                    fc:32:9f:4b:64:c5:e1:a7:08:45:b8:3d:87:2a:ec:
                    2b:7f:81:bf:b8:3a:89:76:77:34:d6:3d:5c:c0:2e:
                    d3:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A8:9A:BB:C7:48:F6:35:55:6F:87:70:7B:6B:2B:35:2E:C0:6E:D9:88
            X509v3 Authority Key Identifier:
                keyid:63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/qJq7x0j2NVVvh3B7ays1LsBu2Yg.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a0e:97c0:780::/44

    Signature Algorithm: sha256WithRSAEncryption
         06:1e:af:32:48:0b:76:1c:88:bc:f8:cd:e2:cd:7e:91:66:bf:
         d4:0a:5e:e4:18:0a:c1:8a:7f:92:5b:5c:0a:ef:43:90:f1:3b:
         be:c9:79:78:ca:5a:5d:a2:a7:df:04:e1:1d:6a:3d:a7:19:b9:
         37:8b:83:df:58:47:ef:6c:ce:18:58:ad:17:c1:b1:4f:e9:38:
         fd:8c:b0:e8:8d:0c:88:03:34:46:98:5e:7f:b0:3e:d5:d3:b5:
         89:f6:58:d2:20:bf:51:fe:57:7c:95:7c:49:90:d1:1a:5a:91:
         1a:c3:43:cd:28:53:a5:81:ae:a0:74:b2:e0:2e:8a:e5:24:7b:
         83:e5:89:f8:d8:30:5a:62:a1:d2:7f:39:ce:66:62:ce:31:ba:
         62:48:4d:d3:09:64:24:71:90:2d:d0:11:ba:c5:3b:61:95:ff:
         c1:40:75:04:eb:e4:ce:54:7e:ed:b5:cd:f9:5c:7c:10:89:23:
         e8:39:96:86:94:f7:06:a9:32:a2:ad:4a:0e:1c:32:f9:06:b0:
         58:01:72:f0:f3:74:16:85:94:3a:93:8e:a1:5d:ed:e2:a2:5b:
         7e:64:84:4e:01:f9:20:14:dc:80:86:66:e7:55:f0:eb:58:e8:
         6b:57:9a:0b:a7:b9:56:ee:48:8f:cb:0d:79:66:79:14:a3:df:
         f4:1e:95:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----