Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/300f4f37-c7fb-47d0-8a85-ecfd12b915f5/0/323430323a626538303a633062613a3a2f34382d3438203d3e20313331373439.roa
File:                     323430323a626538303a633062613a3a2f34382d3438203d3e20313331373439.roa (raw, json)
Hash identifier:          DauNILQQ/iBOUxfJxxWVLeZwgdtOtkZxQCs62IIi2aw=
Subject key identifier:   86:15:6A:A0:4C:14:4D:0F:AC:D5:72:E6:D1:8A:2A:D6:9F:EE:A9:C5
Certificate issuer:       /CN=10FE35B040E8A3D05E5BE9BEE4F0A636952246FF
Certificate serial:       5706DA3A74AD6A28C92489C40AAD5284CD8FEDF8
Authority key identifier: 10:FE:35:B0:40:E8:A3:D0:5E:5B:E9:BE:E4:F0:A6:36:95:22:46:FF
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/10FE35B040E8A3D05E5BE9BEE4F0A636952246FF.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/300f4f37-c7fb-47d0-8a85-ecfd12b915f5/0/323430323a626538303a633062613a3a2f34382d3438203d3e20313331373439.roa
Signing time:             Sat 16 Oct 2021 08:00:02 +0000
ROA not before:           Sat 16 Oct 2021 07:55:02 +0000
ROA not after:            Sun 16 Oct 2022 08:00:02 +0000
asID:                     131749
IP address blocks:        2402:be80:c0ba::/48 maxlen: 48

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            57:06:da:3a:74:ad:6a:28:c9:24:89:c4:0a:ad:52:84:cd:8f:ed:f8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=10FE35B040E8A3D05E5BE9BEE4F0A636952246FF
        Validity
            Not Before: Oct 16 07:55:02 2021 GMT
            Not After : Oct 16 08:00:02 2022 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:7f:56:6f:78:5c:86:8d:b6:57:58:9d:87:dc:
                    66:bb:32:f4:e8:28:7f:0b:0d:1d:3b:d3:b7:1c:12:
                    b5:fd:8d:06:8d:82:65:69:37:64:a0:69:88:bb:49:
                    3e:bc:c0:9f:92:92:69:ce:6a:50:e1:c2:9b:27:c6:
                    e6:98:76:5e:b9:64:93:27:c6:61:98:2d:1d:7e:d1:
                    9e:8f:41:63:ca:b7:4d:0f:c5:f5:bb:b3:ce:47:a4:
                    77:a9:7b:50:b1:33:b0:4a:c4:a8:e9:9e:21:34:3b:
                    7a:2e:0c:ff:f7:54:7c:85:73:12:09:69:12:44:9c:
                    45:07:ab:9f:45:19:07:c0:a2:d7:3d:d6:70:b4:d1:
                    0f:32:63:d3:ba:2b:d6:41:ef:33:f3:d3:77:66:af:
                    39:4f:36:6e:1c:0c:a8:b9:5d:23:74:13:f8:f1:83:
                    ed:00:a5:85:1c:90:90:58:87:16:eb:a4:2e:1e:bf:
                    8c:cc:12:08:f3:8a:c1:57:31:72:3e:09:af:7d:48:
                    3e:14:b0:8b:d1:fc:44:b2:61:fb:9a:af:04:3c:80:
                    5c:fa:93:cd:b7:c6:7d:b0:74:90:b4:55:de:14:14:
                    9a:b2:a5:20:26:3a:f7:f0:49:90:ef:44:5c:0c:f0:
                    d7:c4:91:b2:75:28:ca:06:bb:ac:b3:9f:02:26:53:
                    33:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                86:15:6A:A0:4C:14:4D:0F:AC:D5:72:E6:D1:8A:2A:D6:9F:EE:A9:C5
            X509v3 Authority Key Identifier:
                keyid:10:FE:35:B0:40:E8:A3:D0:5E:5B:E9:BE:E4:F0:A6:36:95:22:46:FF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/300f4f37-c7fb-47d0-8a85-ecfd12b915f5/0/10FE35B040E8A3D05E5BE9BEE4F0A636952246FF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/10FE35B040E8A3D05E5BE9BEE4F0A636952246FF.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/300f4f37-c7fb-47d0-8a85-ecfd12b915f5/0/323430323a626538303a633062613a3a2f34382d3438203d3e20313331373439.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2402:be80:c0ba::/48

    Signature Algorithm: sha256WithRSAEncryption
         20:65:55:52:2b:7d:d4:0f:7e:54:51:cc:ae:17:55:6f:c7:7f:
         17:7f:eb:c8:83:2f:3d:d5:22:fc:7c:9b:8b:97:2c:e0:a6:ff:
         97:92:b0:b0:60:16:8c:1d:55:e2:91:ab:dd:47:d5:47:38:d9:
         6d:b2:2b:15:c0:69:b8:0a:00:0f:db:c3:04:e7:56:62:9b:bb:
         2c:e0:78:54:4b:77:ba:e3:a8:45:30:c9:5e:d0:31:98:cd:dd:
         dc:bc:b2:c7:a1:80:51:4f:ac:87:a0:be:68:81:48:24:13:cb:
         b1:56:c6:e4:15:62:dd:4f:a8:d0:bc:25:5c:8a:c3:55:8c:d5:
         4c:66:57:3f:de:12:21:59:d4:ce:e9:32:e4:10:dd:d2:cd:8b:
         34:19:04:b3:46:19:d7:93:85:fa:1d:13:23:ed:a6:b7:aa:29:
         26:c8:92:46:b5:c9:9a:0c:18:cd:c2:16:e6:08:d7:e7:44:fc:
         21:54:0c:94:ff:d6:4b:0c:9a:7f:29:54:c0:99:48:0b:50:3e:
         da:94:a0:06:82:c3:af:ca:31:94:3a:4a:b5:59:87:0e:9d:35:
         5f:14:1c:c6:e0:96:94:eb:cb:84:8a:ea:54:78:b0:38:b2:0f:
         ed:73:df:7e:67:d7:58:e1:9c:4b:52:00:b1:b4:d9:67:36:49:
         c2:72:8b:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----