Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/yQta9DZNMgeP9J_QqVJpNkt5BVY.roa
File:                     yQta9DZNMgeP9J_QqVJpNkt5BVY.roa (raw, json)
Hash identifier:          ZXS51HIW011sPBplhHXZjcoZhj/E5glbzjQEnbAehfA=
Subject key identifier:   C9:0B:5A:F4:36:4D:32:07:8F:F4:9F:D0:A9:52:69:36:4B:79:05:56
Certificate issuer:       /CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Certificate serial:       10A73FD2
Authority key identifier: 63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/yQta9DZNMgeP9J_QqVJpNkt5BVY.roa
Signing time:             Sat 01 Jan 2022 09:05:13 +0000
ROA not before:           Sat 01 Jan 2022 09:05:13 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     210440
IP address blocks:        2a0e:97c0:365::/48 maxlen: 48

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 279396306 (0x10a73fd2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
        Validity
            Not Before: Jan  1 09:05:13 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=c90b5af4364d32078ff49fd0a95269364b790556
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:ec:87:b8:6e:67:40:8c:2b:b9:ec:e4:66:bc:
                    0e:f1:59:8b:f7:0f:d0:01:8b:e9:cf:46:d7:dc:f3:
                    de:a2:44:d6:23:0b:44:15:2e:5d:97:92:83:73:6e:
                    aa:21:43:47:e7:7c:8e:47:bb:bd:94:e2:35:c0:4d:
                    9a:f6:70:a1:5f:d4:b8:01:d6:89:e6:7a:2e:46:a5:
                    e4:7c:3e:81:66:ea:48:bb:23:41:89:56:b5:59:6b:
                    a1:f5:ca:0c:95:df:90:2a:f5:ba:6e:48:f8:ea:cb:
                    00:40:76:e4:a7:01:83:a6:10:2a:ed:62:45:83:94:
                    46:14:a0:27:69:f5:ea:0f:e4:08:e1:b8:35:97:5d:
                    00:df:f7:5e:32:56:73:b9:75:ed:35:19:bf:8d:78:
                    1d:03:d6:ce:39:5e:47:75:64:9f:4c:61:e7:36:df:
                    4f:89:50:3f:28:20:52:6f:c3:cb:ea:53:33:db:25:
                    31:fb:89:2e:3f:80:81:b9:25:26:3f:d4:8d:0b:43:
                    ae:46:ab:a9:00:9f:74:8a:75:a9:94:95:8b:9a:b1:
                    39:ed:94:78:6d:19:24:ec:71:ba:28:5a:ef:c7:9c:
                    11:16:4e:2c:fd:28:fc:83:fa:09:d6:b0:ef:e5:92:
                    8e:f4:7a:d1:52:a6:81:72:1b:99:07:74:48:7e:e3:
                    e2:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C9:0B:5A:F4:36:4D:32:07:8F:F4:9F:D0:A9:52:69:36:4B:79:05:56
            X509v3 Authority Key Identifier:
                keyid:63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/yQta9DZNMgeP9J_QqVJpNkt5BVY.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a0e:97c0:365::/48

    Signature Algorithm: sha256WithRSAEncryption
         b9:23:4e:c4:ea:ee:c7:90:52:30:d9:01:75:c5:7f:e6:ac:20:
         0d:00:01:b7:b8:bd:37:9a:39:fc:04:9a:c7:96:3d:e7:67:ce:
         7a:bf:91:28:9b:4a:80:2d:34:6c:5a:b9:1c:43:fd:ff:c5:b5:
         e3:d6:60:96:d3:80:b6:6d:1d:9f:2b:65:da:05:5f:f4:a4:be:
         84:d6:76:3b:fd:7c:78:c1:fc:a8:04:35:58:2d:86:a3:5b:e1:
         14:8a:a5:60:13:ba:19:79:61:b8:e6:04:7a:90:81:c0:4d:3d:
         ce:0f:3b:90:ac:f9:79:4f:b5:3c:7b:fb:51:3e:4b:99:36:ef:
         be:05:33:fb:5c:5e:57:06:d0:1a:7d:8d:41:6c:41:40:7d:c6:
         c3:d6:fe:e6:8b:48:70:86:7e:b5:a4:b4:4c:63:14:bc:61:dd:
         cc:5e:06:17:f9:17:c8:98:8c:25:6f:3d:54:73:3d:16:ea:ac:
         10:8f:a8:c5:8c:16:40:a4:1f:58:13:e0:0b:03:83:30:0c:d5:
         4e:7b:5d:97:01:e0:58:1b:27:75:bd:7b:cc:c5:77:55:0e:1f:
         c9:2f:0b:d1:32:6f:ce:96:21:a4:d5:55:3d:1f:c5:d4:9e:4a:
         04:f0:e4:9f:09:29:64:04:da:cf:a5:ca:64:f7:b4:b3:8e:58:
         81:99:e1:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----