Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/yiR09JfXXepQNrWaRWpcrxaqpLQ.roa
File:                     yiR09JfXXepQNrWaRWpcrxaqpLQ.roa (raw, json)
Hash identifier:          ehXii3MQB1VzQ4NQoMwZITRrjwTjYfpGaggZcU53GwY=
Subject key identifier:   CA:24:74:F4:97:D7:5D:EA:50:36:B5:9A:45:6A:5C:AF:16:AA:A4:B4
Certificate issuer:       /CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Certificate serial:       12F585CB
Authority key identifier: 63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/yiR09JfXXepQNrWaRWpcrxaqpLQ.roa
Signing time:             Wed 16 Mar 2022 17:06:57 +0000
ROA not before:           Wed 16 Mar 2022 17:06:57 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     270014
IP address blocks:        2a0e:97c0:7ed::/48 maxlen: 48
                          2a0e:97c0:7ee::/48 maxlen: 48
                          2a0e:97c0:7ec::/48 maxlen: 48
                          2a0e:97c0:7ef::/48 maxlen: 48

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 318080459 (0x12f585cb)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
        Validity
            Not Before: Mar 16 17:06:57 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=ca2474f497d75dea5036b59a456a5caf16aaa4b4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:5a:f9:f8:0d:26:26:94:84:98:19:95:c8:41:
                    48:9e:1b:03:19:06:cc:88:85:d0:29:c1:71:b4:0d:
                    e3:b3:71:31:3e:51:ba:28:79:17:29:c8:b8:e0:c3:
                    55:01:5c:1c:5e:58:d7:9f:54:d4:cd:37:b2:bb:7f:
                    c5:bc:f0:49:2f:e4:66:47:2e:4c:21:e7:4b:39:f8:
                    be:c3:87:b9:ca:bb:9f:f9:8d:7d:49:d3:8f:17:24:
                    92:93:55:eb:c3:b6:ef:24:be:da:49:63:f7:59:ca:
                    ab:af:2f:d6:fa:29:e2:9d:14:84:fe:32:af:2f:bb:
                    eb:8b:1a:de:df:a7:fb:86:4c:b7:aa:d1:e0:b9:98:
                    43:ae:4a:08:ee:62:bd:25:b4:ba:c6:fb:1a:5c:14:
                    bf:87:b4:ea:42:a5:5e:fe:63:4c:f7:70:48:81:32:
                    65:4f:96:a0:5b:25:3c:50:9d:45:a2:c6:21:65:aa:
                    6b:48:69:00:e0:b5:d6:d9:a2:fa:80:3a:f0:6b:18:
                    3a:4c:bd:42:cc:ee:64:89:e1:20:47:34:df:04:8f:
                    d2:db:86:98:ab:6d:03:b3:8f:84:5c:ca:75:7b:9c:
                    14:fd:dc:2d:4e:be:3b:e3:fb:47:c8:1e:cd:ff:12:
                    c8:65:8a:22:5f:7b:93:96:44:e0:3e:b5:33:c4:9f:
                    e6:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CA:24:74:F4:97:D7:5D:EA:50:36:B5:9A:45:6A:5C:AF:16:AA:A4:B4
            X509v3 Authority Key Identifier:
                keyid:63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/yiR09JfXXepQNrWaRWpcrxaqpLQ.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a0e:97c0:7ec::/46

    Signature Algorithm: sha256WithRSAEncryption
         02:44:f8:28:ab:29:09:32:ad:90:f7:a7:76:d0:d8:a9:66:ba:
         55:ac:93:4d:40:d0:57:49:9b:e1:a3:4d:d8:bc:ef:f9:ba:8b:
         90:f4:7a:68:94:5a:ef:b1:01:4e:0a:dd:d2:5e:67:b4:95:3d:
         a4:bb:b0:ee:83:c7:43:ee:57:57:75:23:57:ca:43:68:5d:bb:
         2e:6a:b5:dd:56:cb:75:c7:f4:8a:61:61:60:84:06:5b:9f:25:
         de:6b:68:c9:74:d5:9f:ca:b3:b3:11:f4:67:15:69:5f:bf:5c:
         e6:f2:58:bd:54:15:5f:7d:f8:4d:e9:da:36:14:b8:3e:25:bd:
         52:de:6d:ad:da:2a:06:ca:ee:9a:d7:83:57:20:3e:5f:0d:fe:
         05:e7:2e:8c:3f:52:d5:a2:83:38:a4:13:08:f6:a5:0c:e7:50:
         23:0c:5b:53:53:1d:c7:52:ca:56:17:ad:2c:c1:e3:40:73:96:
         d6:81:c2:81:be:47:0c:b4:9e:41:d3:78:56:c9:f9:c6:f1:60:
         73:9d:ba:4b:3e:3b:93:ce:45:37:ee:2a:18:83:3e:37:79:53:
         2f:4c:8a:21:e8:63:8a:03:6d:39:2a:a4:f9:43:d3:83:ff:31:
         b5:7a:19:02:02:28:82:8d:3b:f3:80:63:81:3d:f9:11:ca:d1:
         af:aa:e9:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----