Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/2d3ec84e-60ef-44d4-9f43-85b6f96b26cf/0/323030313a6466313a323130303a3a2f34382d3438203d3e203539313535.roa
File:                     323030313a6466313a323130303a3a2f34382d3438203d3e203539313535.roa (raw, json)
Hash identifier:          Gi6Maonmus52Sj/WjFF3u7fAu0pKXRqy7cEua59imNc=
Subject key identifier:   63:94:FE:B4:DC:6A:A4:A2:81:F7:85:17:92:D7:31:43:F6:04:92:19
Certificate issuer:       /CN=114C9E7EA91F6387C2CBF1D16EA824580CD68587
Certificate serial:       13F87BAE49400219A9CB3CB0E22435B74CFF9ED9
Authority key identifier: 11:4C:9E:7E:A9:1F:63:87:C2:CB:F1:D1:6E:A8:24:58:0C:D6:85:87
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/114C9E7EA91F6387C2CBF1D16EA824580CD68587.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/2d3ec84e-60ef-44d4-9f43-85b6f96b26cf/0/323030313a6466313a323130303a3a2f34382d3438203d3e203539313535.roa
Signing time:             Sat 25 Sep 2021 22:03:06 +0000
ROA not before:           Sat 25 Sep 2021 21:58:06 +0000
ROA not after:            Sun 25 Sep 2022 22:03:06 +0000
asID:                     59155
IP address blocks:        2001:df1:2100::/48 maxlen: 48

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            13:f8:7b:ae:49:40:02:19:a9:cb:3c:b0:e2:24:35:b7:4c:ff:9e:d9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=114C9E7EA91F6387C2CBF1D16EA824580CD68587
        Validity
            Not Before: Sep 25 21:58:06 2021 GMT
            Not After : Sep 25 22:03:06 2022 GMT
        Subject: CN=3082010A0282010100CB1EE1F27D9F2EB7507506DA235ACCCB9E32C4CCC8DE227D7C087AF5530A4E17955209920CF8B8A20878CC548B2945C14B3BF48AAC9BB2CD9E24D1973F71F46A982B8021C939AD1EE7724DF3F8106673AF6B9EDC2F515659F4853EE7CA6FE60F209EAD44B44B2F5F49D260156DCCAE69AF77C431BE3865F54E63CBDB59D76D37FD5AA3776E48BD8BCA52A88257BBC00DB006A1D64CB726B6B42309760E441BD2B49F815A2B2C0A364314A0AEE87C2E4279AAA4767FEEA2104FBC4F50863DE97BC1D67DBCA44DB450D45E8AD33965D0A68B7E45606016B1C84DDE601DFD163C367ABC9A0940903FB26C975660EC5E09B72421DE800179411A9CA5D2F48522215F0203010001
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:1e:e1:f2:7d:9f:2e:b7:50:75:06:da:23:5a:
                    cc:cb:9e:32:c4:cc:c8:de:22:7d:7c:08:7a:f5:53:
                    0a:4e:17:95:52:09:92:0c:f8:b8:a2:08:78:cc:54:
                    8b:29:45:c1:4b:3b:f4:8a:ac:9b:b2:cd:9e:24:d1:
                    97:3f:71:f4:6a:98:2b:80:21:c9:39:ad:1e:e7:72:
                    4d:f3:f8:10:66:73:af:6b:9e:dc:2f:51:56:59:f4:
                    85:3e:e7:ca:6f:e6:0f:20:9e:ad:44:b4:4b:2f:5f:
                    49:d2:60:15:6d:cc:ae:69:af:77:c4:31:be:38:65:
                    f5:4e:63:cb:db:59:d7:6d:37:fd:5a:a3:77:6e:48:
                    bd:8b:ca:52:a8:82:57:bb:c0:0d:b0:06:a1:d6:4c:
                    b7:26:b6:b4:23:09:76:0e:44:1b:d2:b4:9f:81:5a:
                    2b:2c:0a:36:43:14:a0:ae:e8:7c:2e:42:79:aa:a4:
                    76:7f:ee:a2:10:4f:bc:4f:50:86:3d:e9:7b:c1:d6:
                    7d:bc:a4:4d:b4:50:d4:5e:8a:d3:39:65:d0:a6:8b:
                    7e:45:60:60:16:b1:c8:4d:de:60:1d:fd:16:3c:36:
                    7a:bc:9a:09:40:90:3f:b2:6c:97:56:60:ec:5e:09:
                    b7:24:21:de:80:01:79:41:1a:9c:a5:d2:f4:85:22:
                    21:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                63:94:FE:B4:DC:6A:A4:A2:81:F7:85:17:92:D7:31:43:F6:04:92:19
            X509v3 Authority Key Identifier:
                keyid:11:4C:9E:7E:A9:1F:63:87:C2:CB:F1:D1:6E:A8:24:58:0C:D6:85:87

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/2d3ec84e-60ef-44d4-9f43-85b6f96b26cf/0/114C9E7EA91F6387C2CBF1D16EA824580CD68587.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/114C9E7EA91F6387C2CBF1D16EA824580CD68587.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/2d3ec84e-60ef-44d4-9f43-85b6f96b26cf/0/323030313a6466313a323130303a3a2f34382d3438203d3e203539313535.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:df1:2100::/48

    Signature Algorithm: sha256WithRSAEncryption
         15:ad:bf:e1:3b:ae:04:be:84:a4:84:4e:4b:71:91:47:26:f4:
         24:62:29:4b:4a:d6:40:92:39:9e:79:b0:62:22:0e:1b:f3:5c:
         5c:64:b7:8c:5c:a4:14:34:7f:b3:19:8b:ed:8c:cc:65:31:5e:
         bd:bd:59:ce:0a:e9:12:97:15:00:d6:6c:4b:3d:ee:01:17:ef:
         de:ef:da:c7:53:95:2e:3c:c6:55:be:35:b2:8f:3d:82:e9:51:
         5d:07:22:e9:ec:2a:10:ca:9f:7d:72:43:af:92:83:e2:1c:38:
         b2:e5:d0:4b:b6:63:75:36:43:6b:6d:e3:ab:a8:09:26:92:32:
         a5:4b:53:22:7c:d2:93:68:d9:b2:7b:f1:a6:f7:ce:ae:9a:64:
         73:07:46:12:32:7d:a5:ae:f7:00:ab:aa:88:0b:ec:a0:18:d2:
         a2:a3:da:f3:c9:61:9d:a1:21:a9:ef:fb:87:24:04:32:1e:8a:
         be:27:5a:3f:d0:90:17:33:67:93:e5:45:df:ed:14:03:3d:88:
         5f:d4:59:6e:11:82:a6:28:57:fe:3d:71:a3:79:d1:4c:a7:a6:
         32:58:fd:4d:d4:26:1c:98:0c:c5:d3:da:a6:e8:15:0b:1c:ca:
         f1:a5:a9:8b:54:e2:37:9e:a4:5d:b9:ed:e4:5d:55:ec:0f:15:
         a5:1c:0a:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----