Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/vOewT4eYeQxmxY5p85LAn5u-ElE.roa
File:                     vOewT4eYeQxmxY5p85LAn5u-ElE.roa (raw, json)
Hash identifier:          lOW9AWxFuj9TFeCFi0nCFUmHkHHmLPiKMQgdcQ3C5Bc=
Subject key identifier:   BC:E7:B0:4F:87:98:79:0C:66:C5:8E:69:F3:92:C0:9F:9B:BE:12:51
Certificate issuer:       /CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Certificate serial:       10DDE680
Authority key identifier: 63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/vOewT4eYeQxmxY5p85LAn5u-ElE.roa
Signing time:             Sat 01 Jan 2022 09:05:44 +0000
ROA not before:           Sat 01 Jan 2022 09:05:44 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     212270
IP address blocks:        2a0e:b107:f50::/44 maxlen: 48

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 282977920 (0x10dde680)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
        Validity
            Not Before: Jan  1 09:05:44 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=bce7b04f8798790c66c58e69f392c09f9bbe1251
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:b0:d2:c1:6d:3d:06:dd:d5:e9:93:66:3e:cc:
                    9e:c3:6d:07:47:85:11:1f:e3:33:11:5b:34:9f:c8:
                    58:32:e6:69:9c:5a:a6:a6:a6:14:34:e2:55:73:f1:
                    19:f2:4f:cd:63:72:4a:0a:3b:d0:f0:4e:83:7e:d3:
                    d4:bf:99:0b:04:1b:8b:ca:24:67:44:da:d0:bd:e3:
                    27:c6:33:fa:97:3d:79:ae:1e:1a:8f:5f:bb:f8:e7:
                    0c:79:44:63:36:9a:dc:19:66:66:ec:af:e9:01:67:
                    99:3f:a4:67:76:5c:df:67:21:92:75:d3:a2:a6:7b:
                    f8:9b:e6:9a:16:b3:4f:98:c1:e2:f9:09:c0:c7:45:
                    ac:b2:b4:fa:33:31:ca:73:e5:18:08:7f:6c:c6:46:
                    40:43:c6:71:94:09:40:8c:f4:41:b6:93:42:10:fb:
                    ac:2f:e4:84:b8:8d:b6:82:9c:dc:50:07:90:76:23:
                    25:52:c8:a0:3a:e8:cf:69:57:71:ef:c7:29:85:00:
                    d5:fd:2c:59:e1:4b:09:de:31:9b:38:d7:02:d2:e6:
                    d1:db:cd:de:eb:34:a2:42:ee:85:56:a6:73:23:fe:
                    23:16:9f:b2:90:0b:43:e9:b3:ef:94:99:f6:c2:18:
                    71:01:a8:d1:2a:68:e7:47:7a:40:71:80:a6:6d:31:
                    94:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BC:E7:B0:4F:87:98:79:0C:66:C5:8E:69:F3:92:C0:9F:9B:BE:12:51
            X509v3 Authority Key Identifier:
                keyid:63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/vOewT4eYeQxmxY5p85LAn5u-ElE.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a0e:b107:f50::/44

    Signature Algorithm: sha256WithRSAEncryption
         cc:7e:d8:2a:cb:ba:c6:9a:5f:71:55:02:e4:31:73:20:c2:a2:
         ea:36:be:6d:d5:d7:5f:50:3c:28:76:d8:d6:b7:2c:52:7e:83:
         34:2c:d4:13:aa:17:24:c2:43:53:a1:59:78:1d:15:ba:92:db:
         c8:4b:68:96:11:c2:ce:8c:7b:fc:f7:9a:3e:1a:81:0e:8a:ec:
         86:89:31:a1:f7:22:30:74:88:43:2b:be:ae:95:f8:aa:14:97:
         ba:d7:a3:e7:21:7e:3d:ac:84:39:e1:cb:f5:d6:f0:88:07:be:
         58:4a:a3:7b:dd:f7:c6:56:62:ac:39:ed:f5:36:ec:0e:6f:3b:
         c5:f0:f4:d6:4c:ef:4e:cc:1c:c6:21:50:b0:8e:2b:89:d9:ca:
         ea:89:67:43:e7:45:c9:1b:b4:be:4b:c9:44:65:ca:6c:a7:8d:
         3b:3c:a6:28:42:6c:11:12:b8:db:53:21:4c:4f:37:44:e4:d7:
         ae:03:dd:d5:03:09:65:02:d5:f8:cf:02:48:73:90:bb:25:d6:
         74:6b:58:5f:5a:11:ec:ef:c8:ab:80:e4:4c:f1:20:c6:a9:47:
         1d:d5:62:bb:4e:5b:fc:27:24:ff:ce:9d:96:5f:26:5e:85:bf:
         eb:8f:76:d5:c2:21:52:ce:24:d2:b0:ac:1b:e1:53:56:f7:54:
         f6:ec:c7:62
-----BEGIN CERTIFICATE-----
MIIE8jCCA9qgAwIBAgIEEN3mgDANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg2
M2U5MTY3MTdhYjExY2NjZjExZWYxZmI1YzEyZWU0MTk1MGZhZDliMB4XDTIyMDEw
MTA5MDU0NFoXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoYmNlN2IwNGY4Nzk4
NzkwYzY2YzU4ZTY5ZjM5MmMwOWY5YmJlMTI1MTCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAKmw0sFtPQbd1emTZj7MnsNtB0eFER/jMxFbNJ/IWDLmaZxa
pqamFDTiVXPxGfJPzWNySgo70PBOg37T1L+ZCwQbi8okZ0Ta0L3jJ8Yz+pc9ea4e
Go9fu/jnDHlEYzaa3BlmZuyv6QFnmT+kZ3Zc32chknXToqZ7+JvmmhazT5jB4vkJ
wMdFrLK0+jMxynPlGAh/bMZGQEPGcZQJQIz0QbaTQhD7rC/khLiNtoKc3FAHkHYj
JVLIoDroz2lXce/HKYUA1f0sWeFLCd4xmzjXAtLm0dvN3us0okLuhVamcyP+Ixaf
spALQ+mz75SZ9sIYcQGo0Spo50d6QHGApm0xlNsCAwEAAaOCAgwwggIIMB0GA1Ud
DgQWBBS857BPh5h5DGbFjmnzksCfm74SUTAfBgNVHSMEGDAWgBRj6RZxerEczPEe
8ftcEu5BlQ+tmzAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L1kta1djWHF4SE16eEh2SDdYQkx1UVpVUHJacy5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvNTEvNDk1N2E0LWNlNTktNDMxNS05OTc2LWRjNWVjNzQ4ZjZhNS8x
L3ZPZXdUNGVZZVF4bXhZNXA4NUxBbjV1LUVsRS5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNTEv
NDk1N2E0LWNlNTktNDMxNS05OTc2LWRjNWVjNzQ4ZjZhNS8xL1kta1djWHF4SE16
eEh2SDdYQkx1UVpVUHJacy5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAi
BggrBgEFBQcBBwEB/wQTMBEwDwQCAAIwCQMHBCoOsQcPUDANBgkqhkiG9w0BAQsF
AAOCAQEAzH7YKsu6xppfcVUC5DFzIMKi6ja+bdXXX1A8KHbY1rcsUn6DNCzUE6oX
JMJDU6FZeB0VupLbyEtolhHCzox7/PeaPhqBDorshokxofciMHSIQyu+rpX4qhSX
utej5yF+PayEOeHL9dbwiAe+WEqje933xlZirDnt9TbsDm87xfD01kzvTswcxiFQ
sI4ridnK6olnQ+dFyRu0vkvJRGXKbKeNOzymKEJsERK421MhTE83ROTXrgPd1QMJ
ZQLV+M8CSHOQuyXWdGtYX1oR7O/Iq4DkTPEgxqlHHdViu05b/Cck/86dll8mXoW/
64921cIhUs4k0rCsG+FTVvdU9uzHYg==
-----END CERTIFICATE-----