Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/yKLJ7OTzi4CrcBS2M6CXb0Aq2VE.roa
File:                     yKLJ7OTzi4CrcBS2M6CXb0Aq2VE.roa (raw, json)
Hash identifier:          wnL9UKEWn/uIoc8YN2iedlxcKiYoYWlapt2aHOG8YvE=
Subject key identifier:   C8:A2:C9:EC:E4:F3:8B:80:AB:70:14:B6:33:A0:97:6F:40:2A:D9:51
Certificate issuer:       /CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Certificate serial:       14541CEF
Authority key identifier: 63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/yKLJ7OTzi4CrcBS2M6CXb0Aq2VE.roa
Signing time:             Wed 04 May 2022 08:57:44 +0000
ROA not before:           Wed 04 May 2022 08:57:44 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     205740
IP address blocks:        2a0e:97c0:a6d::/48 maxlen: 48
                          2a0e:97c0:a68::/48 maxlen: 48
                          2a0e:97c0:a63::/48 maxlen: 48
                          2a0e:97c0:a6e::/48 maxlen: 48
                          2a0e:97c0:a61::/48 maxlen: 48
                          2a0e:97c0:a6c::/48 maxlen: 48
                          2a0e:97c0:a67::/48 maxlen: 48
                          2a0e:97c0:a62::/48 maxlen: 48
                          2a0e:97c0:a65::/48 maxlen: 48
                          2a0e:97c0:a60::/48 maxlen: 48
                          2a0e:97c0:a6b::/48 maxlen: 48
                          2a0e:97c0:a66::/48 maxlen: 48
                          2a0e:97c0:a69::/48 maxlen: 48
                          2a0e:97c0:a64::/48 maxlen: 48
                          2a0e:97c0:a6f::/48 maxlen: 48
                          2a0e:97c0:a6a::/48 maxlen: 48

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 341056751 (0x14541cef)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
        Validity
            Not Before: May  4 08:57:44 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=c8a2c9ece4f38b80ab7014b633a0976f402ad951
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:ab:42:45:cb:5d:6f:57:3e:b0:06:bc:77:df:
                    bd:d0:42:40:15:fe:2b:82:84:b3:dd:b5:e4:28:eb:
                    2c:71:50:65:f8:5b:c6:6d:55:c0:1c:7b:da:38:58:
                    07:bf:62:d3:ee:4b:dd:90:57:ab:d9:32:f1:10:24:
                    cd:eb:14:cc:ab:5d:84:32:b1:70:25:92:fe:9c:1c:
                    59:ac:ac:4b:7a:87:ef:d0:bd:6e:6b:4e:3d:4f:7f:
                    e9:fa:15:42:22:a1:1c:34:71:9b:cf:a5:d8:5b:77:
                    1c:c6:08:f6:d6:ee:57:32:c8:e0:d6:00:f9:a0:f5:
                    03:2b:a4:12:71:8c:49:06:b5:0e:5e:4b:bf:a5:2a:
                    c7:21:d6:5d:bf:0b:74:bf:26:d3:f7:40:2c:cf:00:
                    11:f8:ee:a2:d3:ef:e9:9f:07:ec:1f:75:24:0e:14:
                    7e:df:39:90:d5:a9:8e:7a:5b:d5:f9:58:36:66:41:
                    04:8e:a9:dd:b3:18:76:57:8c:9c:b3:b1:1a:1a:cb:
                    4b:47:59:80:81:66:6b:88:09:3b:e2:e9:b2:d1:54:
                    72:d8:60:f2:6b:51:55:80:4e:53:fb:4b:7c:5d:bf:
                    6a:08:17:a7:90:0f:e7:e6:b9:26:3d:ab:f8:d9:79:
                    1d:90:a1:49:de:06:fb:ab:89:57:7c:b4:d7:20:4b:
                    fb:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C8:A2:C9:EC:E4:F3:8B:80:AB:70:14:B6:33:A0:97:6F:40:2A:D9:51
            X509v3 Authority Key Identifier:
                keyid:63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/yKLJ7OTzi4CrcBS2M6CXb0Aq2VE.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a0e:97c0:a60::/44

    Signature Algorithm: sha256WithRSAEncryption
         8d:2f:04:5d:b4:65:3f:9d:31:50:e9:38:01:97:0b:07:90:a5:
         ac:58:0e:d8:90:b3:18:ba:4f:8a:3e:d1:8b:1c:c2:cc:37:1c:
         ad:5d:c0:a7:bd:2b:44:e8:0c:a9:1f:d7:68:2e:b5:66:0c:d4:
         ba:d7:f7:41:8d:c8:da:eb:2a:21:3e:2b:84:9b:7d:04:6f:45:
         e8:86:ec:86:71:a1:6c:6c:96:0d:1b:69:38:ac:57:98:2e:dd:
         88:49:f8:b8:6f:9b:39:ef:43:7a:a0:57:3f:36:f6:92:04:d2:
         a4:6e:f5:ef:3b:99:b0:ba:99:11:ce:16:62:8c:12:d6:d4:37:
         3c:04:26:7a:78:1d:5b:e3:3b:8f:00:a9:35:76:b7:b2:4b:0f:
         ba:ac:24:4e:bf:11:b5:21:8b:1a:ff:bc:31:a9:d8:9f:1c:48:
         49:5f:f6:75:11:e0:e4:17:15:f8:22:ef:f9:2e:36:b0:b1:91:
         ca:14:2b:b7:9b:2c:a4:b4:f9:90:6f:59:ef:78:22:3b:1c:6e:
         79:ac:0a:a7:c7:19:75:b1:74:7a:f2:0c:6d:97:27:24:ed:e2:
         de:b3:1f:9c:2e:97:11:49:c5:dc:29:29:85:1e:32:1f:44:83:
         9e:83:53:61:8f:f1:a0:ff:46:88:25:cf:e0:de:dd:b4:9d:01:
         2e:4c:8e:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----