Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/x5RE1OTdt22pOakVT7lfGrT8Bgc.roa
File:                     x5RE1OTdt22pOakVT7lfGrT8Bgc.roa (raw, json)
Hash identifier:          EuXBdXV0Nr+dIQfnjPcY2wqXDexP5m6NT0Sx0HU8Hrc=
Subject key identifier:   C7:94:44:D4:E4:DD:B7:6D:A9:39:A9:15:4F:B9:5F:1A:B4:FC:06:07
Certificate issuer:       /CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Certificate serial:       01837436C286D44C2C364BE5B5A033740035
Authority key identifier: 63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/x5RE1OTdt22pOakVT7lfGrT8Bgc.roa
Signing time:             Sun 25 Sep 2022 10:34:49 +0000
ROA not before:           Sun 25 Sep 2022 10:34:49 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     211760
IP address blocks:        2a10:cc45:101::/48 maxlen: 48
                          2a10:cc45:106::/48 maxlen: 48
                          2a10:cc45:107::/48 maxlen: 48
                          2a10:cc45:10c::/48 maxlen: 48
                          2a10:cc45:105::/48 maxlen: 48
                          2a10:cc45:10a::/48 maxlen: 48
                          2a10:cc45:10b::/48 maxlen: 48
                          2a10:cc45:100::/48 maxlen: 48
                          2a10:cc45:109::/48 maxlen: 48
                          2a10:cc45:10e::/48 maxlen: 48
                          2a10:cc45:10f::/48 maxlen: 48
                          2a10:cc45:104::/48 maxlen: 48
                          2a10:cc45:10d::/48 maxlen: 48
                          2a10:cc45:102::/48 maxlen: 48
                          2a10:cc45:103::/48 maxlen: 48
                          2a10:cc45:100::/44 maxlen: 48
                          2a10:cc45:108::/48 maxlen: 48

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:83:74:36:c2:86:d4:4c:2c:36:4b:e5:b5:a0:33:74:00:35
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
        Validity
            Not Before: Sep 25 10:34:49 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=c79444d4e4ddb76da939a9154fb95f1ab4fc0607
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:80:fb:d7:f8:c1:70:3a:ec:ec:cd:4b:e7:7f:61:
                    2c:1d:cb:94:fb:fa:d3:c4:43:91:bc:75:b3:ca:5c:
                    71:c8:c2:62:d9:40:61:f2:63:a7:aa:71:da:81:e4:
                    e3:45:eb:b7:64:6e:e0:61:e7:33:77:a5:2c:e0:3d:
                    8b:02:f1:19:67:8f:4a:2c:60:9d:a9:fb:2b:75:51:
                    e2:45:45:91:b9:a0:a9:1e:a2:58:0d:36:02:d2:51:
                    2d:d9:7e:00:ea:98:b3:e6:04:91:41:36:65:99:b5:
                    4d:dd:a1:10:6c:08:7d:b6:89:a3:10:80:fb:6f:16:
                    7f:77:f6:ed:73:b4:5c:3d:a9:54:16:d8:ce:6d:4c:
                    2b:c2:7d:75:d1:23:34:97:c1:d9:9e:e3:32:c1:13:
                    61:db:26:9d:53:be:46:d8:c2:ba:ec:07:85:cb:e4:
                    c9:51:db:2d:a1:45:90:5c:69:b4:15:c1:1d:9a:65:
                    2d:e1:ad:24:28:ff:12:b7:27:6e:33:b3:b4:2f:fe:
                    68:07:88:d4:a0:48:4c:21:7e:2b:c4:03:7c:a6:ee:
                    94:eb:a1:69:ea:2e:1b:99:4a:f1:d5:48:f9:39:c2:
                    7b:8d:97:3e:e1:30:d5:3b:5d:b7:60:d3:42:df:e7:
                    23:9e:48:94:dc:33:c1:9e:a3:80:03:3a:9e:a2:4c:
                    72:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C7:94:44:D4:E4:DD:B7:6D:A9:39:A9:15:4F:B9:5F:1A:B4:FC:06:07
            X509v3 Authority Key Identifier:
                keyid:63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/x5RE1OTdt22pOakVT7lfGrT8Bgc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a10:cc45:100::/44

    Signature Algorithm: sha256WithRSAEncryption
         bd:9b:03:0b:c2:eb:d2:4e:b2:e1:ef:49:12:d0:a6:fe:98:99:
         97:38:a9:44:82:f2:17:e3:d7:61:4e:9a:e2:93:19:ed:d6:6c:
         c0:7d:37:46:a6:c6:d4:30:4d:6f:9a:3e:fa:39:5d:23:07:37:
         92:38:e0:0d:d5:89:ae:14:6b:c8:d6:34:f9:44:8c:53:20:1c:
         a8:53:3f:ba:25:3b:96:63:c8:e9:08:a5:47:02:de:b7:05:16:
         c6:61:82:00:1a:de:9a:03:a5:e6:c3:94:b0:02:eb:fd:b1:b6:
         09:f8:45:2a:7c:f0:8f:d5:bf:ff:7f:00:a9:b1:b6:3d:00:f8:
         1c:c8:36:c8:ee:53:1e:ab:8b:d9:76:67:c9:8f:18:45:06:04:
         12:44:83:81:72:04:9c:5e:b1:f9:70:8c:a5:20:1d:df:ee:20:
         4a:6e:6d:6c:bc:ea:40:31:0d:06:64:03:b3:94:03:2f:c1:33:
         5b:0f:dd:2b:ae:61:ba:48:a8:1a:6f:ce:23:c1:ae:55:a4:5f:
         5a:57:60:cb:dd:e0:f1:3a:f3:b5:0a:2b:9e:55:4c:63:c2:33:
         c3:f1:2a:20:a5:b7:34:0a:5b:12:db:e3:0f:a3:d1:fe:19:9b:
         c0:0f:84:83:68:8d:4c:bf:63:f9:f6:06:85:75:19:14:28:1e:
         5c:0a:fa:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----