Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c4/3ee7e0-9f8a-478c-99e6-698f483719ce/1/45BCID16rY2Bcc-8etVLpeGjZ-I.roa
File:                     45BCID16rY2Bcc-8etVLpeGjZ-I.roa (raw, json)
Hash identifier:          Bgz5KRyR8n4rWN1Zh5hc4afHX2xa6bVZAoeWSioLyCc=
Subject key identifier:   E3:90:42:20:3D:7A:AD:8D:81:71:CF:BC:7A:D5:4B:A5:E1:A3:67:E2
Certificate issuer:       /CN=2e0b6ff7b65894332cbb41d3aeb735301f48b298
Certificate serial:       015CCE53
Authority key identifier: 2E:0B:6F:F7:B6:58:94:33:2C:BB:41:D3:AE:B7:35:30:1F:48:B2:98
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Lgtv97ZYlDMsu0HTrrc1MB9Ispg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c4/3ee7e0-9f8a-478c-99e6-698f483719ce/1/45BCID16rY2Bcc-8etVLpeGjZ-I.roa
Signing time:             Tue 15 Feb 2022 07:51:23 +0000
ROA not before:           Tue 15 Feb 2022 07:51:23 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     212238
IP address blocks:        2a10:7ac0::/29 maxlen: 29

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 22859347 (0x15cce53)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2e0b6ff7b65894332cbb41d3aeb735301f48b298
        Validity
            Not Before: Feb 15 07:51:23 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=e39042203d7aad8d8171cfbc7ad54ba5e1a367e2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:eb:a2:ce:d0:39:56:f2:31:8a:7f:07:b0:3c:
                    ae:29:8a:24:6a:63:0b:b2:f0:de:4a:0a:e5:42:75:
                    fc:78:8d:66:fa:7d:ce:f3:88:93:b8:1c:d8:e4:93:
                    67:27:35:ad:14:c6:a0:71:10:3c:bc:32:ee:ff:b6:
                    47:20:a7:21:10:65:f8:5d:7d:53:70:01:b0:c7:4a:
                    20:4f:c7:ec:e4:6b:94:25:91:53:c6:18:a8:1d:a1:
                    7f:6d:70:10:5e:db:eb:35:77:bd:67:f3:2b:5d:05:
                    db:dd:df:6e:1a:b3:f7:b8:d0:8e:12:16:84:df:f9:
                    be:19:83:96:0c:1e:f6:c7:c4:36:e8:e6:34:9b:d1:
                    7b:f9:7d:5f:75:8d:7e:46:2d:ae:42:e6:95:24:8c:
                    2e:f3:a1:b2:41:ab:e5:55:43:d0:de:87:11:8c:28:
                    5e:b9:8f:94:eb:04:3b:17:65:06:dd:9e:e8:5d:cb:
                    eb:c5:ad:b0:2d:e3:6f:ee:64:2e:c1:cd:48:9b:0d:
                    16:e2:d2:a8:cd:92:39:08:5c:38:d6:c5:ed:e8:95:
                    4e:6b:7b:4f:3e:e0:ae:fc:02:5c:94:61:7b:90:95:
                    d8:05:c3:16:53:d8:63:a6:39:d4:3f:7f:30:b3:fb:
                    66:5e:30:84:7a:c4:90:d1:fb:aa:bb:af:a2:62:21:
                    2c:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E3:90:42:20:3D:7A:AD:8D:81:71:CF:BC:7A:D5:4B:A5:E1:A3:67:E2
            X509v3 Authority Key Identifier:
                keyid:2E:0B:6F:F7:B6:58:94:33:2C:BB:41:D3:AE:B7:35:30:1F:48:B2:98

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Lgtv97ZYlDMsu0HTrrc1MB9Ispg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/3ee7e0-9f8a-478c-99e6-698f483719ce/1/45BCID16rY2Bcc-8etVLpeGjZ-I.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/3ee7e0-9f8a-478c-99e6-698f483719ce/1/Lgtv97ZYlDMsu0HTrrc1MB9Ispg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a10:7ac0::/29

    Signature Algorithm: sha256WithRSAEncryption
         5e:d6:73:5a:0f:22:4a:ad:71:9c:fe:5a:58:f4:f3:ea:4b:f8:
         22:bc:17:e3:16:dc:eb:51:e6:1d:61:65:f9:33:4c:e7:9a:7f:
         00:9d:95:da:25:8a:65:60:57:8d:6b:e8:3d:71:69:77:47:4c:
         e5:a5:20:0c:2b:ce:d2:2c:7e:81:89:32:32:18:63:b1:3f:e1:
         82:e4:1f:50:dd:b5:a8:27:0d:d2:1a:fb:21:9f:f1:08:45:8c:
         e6:0b:71:f9:e6:ee:34:3f:b9:b1:4c:a4:41:03:40:7f:a5:6b:
         73:eb:25:7d:45:a9:37:b4:eb:4e:45:3a:62:83:25:e5:9a:e3:
         48:3f:ea:98:44:38:53:44:3d:b5:55:57:81:a6:0e:67:29:9a:
         00:89:97:46:da:4d:08:8f:e7:91:2d:59:cb:23:53:3a:09:50:
         6d:5b:2b:ba:07:91:15:85:35:04:07:23:ec:8a:71:46:5f:76:
         af:52:ae:cc:d0:6b:46:9c:64:f6:0a:87:da:0c:c0:11:fe:51:
         bc:60:7f:42:40:17:a1:28:e9:f7:26:9b:29:96:fe:ac:16:b6:
         68:d1:b9:60:d3:0b:f6:62:c4:ec:08:b1:92:ed:64:7b:f0:ff:
         b8:4c:7e:77:b1:98:5e:51:1d:e8:7a:d2:a0:25:4b:87:3c:bf:
         bb:a2:9b:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----