Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/3993f350-b756-4916-8d84-484f025dffcc/0/323430343a383030303a313030313a3a2f34382d3438203d3e203137343531.roa
File:                     323430343a383030303a313030313a3a2f34382d3438203d3e203137343531.roa (raw, json)
Hash identifier:          +QzwHCEh/PBKQqBr4QN/BMKJSGYXScRK+Hgh4dBibSM=
Subject key identifier:   71:7A:FA:FF:C2:13:D9:4C:9C:12:8F:59:BD:55:B3:A4:B2:A2:B8:45
Certificate issuer:       /CN=AC555447BA62C39107F16BF572F82A417F728DBF
Certificate serial:       66760CFE39334C68198C3EB9316B9E378C35624A
Authority key identifier: AC:55:54:47:BA:62:C3:91:07:F1:6B:F5:72:F8:2A:41:7F:72:8D:BF
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AC555447BA62C39107F16BF572F82A417F728DBF.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/3993f350-b756-4916-8d84-484f025dffcc/0/323430343a383030303a313030313a3a2f34382d3438203d3e203137343531.roa
Signing time:             Thu 30 Sep 2021 00:00:24 +0000
ROA not before:           Wed 29 Sep 2021 23:55:24 +0000
ROA not after:            Fri 30 Sep 2022 00:00:24 +0000
asID:                     17451
IP address blocks:        2404:8000:1001::/48 maxlen: 48

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            66:76:0c:fe:39:33:4c:68:19:8c:3e:b9:31:6b:9e:37:8c:35:62:4a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AC555447BA62C39107F16BF572F82A417F728DBF
        Validity
            Not Before: Sep 29 23:55:24 2021 GMT
            Not After : Sep 30 00:00:24 2022 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:14:79:d4:51:53:22:a4:d3:8b:48:2a:0a:66:
                    a1:28:9b:40:65:08:60:ad:d2:3a:f2:ca:5e:bc:21:
                    63:b2:d5:b5:da:ce:91:e1:e6:f2:ce:b7:19:35:15:
                    db:69:a2:ff:dd:f5:26:90:f5:f2:f1:f0:76:23:69:
                    b1:5e:0e:ab:55:2a:b6:11:e3:9f:31:9e:d1:53:12:
                    66:6a:f4:32:85:02:bf:c4:26:7b:d3:1d:16:14:eb:
                    5b:6a:b6:37:82:0e:e2:fb:61:63:4a:22:7f:2a:de:
                    4b:52:6c:45:ae:46:2c:f7:63:c2:15:11:e1:6b:2b:
                    97:8b:05:bf:31:e9:34:af:56:09:08:a5:51:f7:77:
                    5d:6c:f1:d6:2a:14:b0:37:8d:63:16:43:cb:51:c0:
                    91:43:f6:78:1d:fa:89:76:14:9e:9f:0d:c1:63:3e:
                    1d:90:3a:69:a1:e4:f9:e6:7f:a1:98:52:83:f1:70:
                    ca:df:87:88:98:38:9f:e8:80:31:03:ab:d5:6b:31:
                    e8:e2:ad:34:7d:f0:17:59:60:d6:33:c2:32:e8:95:
                    71:27:fd:d7:43:bd:be:b5:d6:ec:df:de:46:ef:2d:
                    d5:e5:de:15:f0:c2:7a:7b:3c:e6:31:ea:4e:83:80:
                    99:d4:33:5a:e2:9f:4b:04:9e:d0:07:cd:8e:aa:78:
                    a8:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                71:7A:FA:FF:C2:13:D9:4C:9C:12:8F:59:BD:55:B3:A4:B2:A2:B8:45
            X509v3 Authority Key Identifier:
                keyid:AC:55:54:47:BA:62:C3:91:07:F1:6B:F5:72:F8:2A:41:7F:72:8D:BF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/3993f350-b756-4916-8d84-484f025dffcc/0/AC555447BA62C39107F16BF572F82A417F728DBF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AC555447BA62C39107F16BF572F82A417F728DBF.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/3993f350-b756-4916-8d84-484f025dffcc/0/323430343a383030303a313030313a3a2f34382d3438203d3e203137343531.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2404:8000:1001::/48

    Signature Algorithm: sha256WithRSAEncryption
         2b:71:4c:d8:ec:18:46:24:f0:dd:5c:4d:f1:69:16:e4:17:e9:
         86:05:a4:86:88:a1:e4:80:7e:0b:84:38:f2:c1:9a:79:5e:12:
         da:b7:fa:23:34:21:cb:15:d1:a4:b2:c2:5f:56:7a:63:80:aa:
         2f:24:71:ff:72:4d:38:1c:67:42:5f:44:09:1b:27:f3:91:33:
         da:35:87:d7:4b:8c:52:ad:c8:57:ae:84:01:76:f2:d7:40:10:
         6b:a1:86:d7:23:2e:ce:fa:2b:24:bf:a3:a6:5a:ae:e4:33:cf:
         4f:f9:49:b6:0b:63:5e:ca:3f:60:1a:0f:4d:ca:81:fa:c4:80:
         c4:6c:79:b3:d4:08:58:df:fb:c9:28:f9:6f:28:fe:ff:ae:a5:
         f5:dd:dd:ad:e1:24:8c:06:0d:36:af:67:76:b2:23:92:90:77:
         53:5e:57:1e:4a:af:6d:c9:d1:8b:1a:f7:90:7a:32:d4:6e:cd:
         60:7a:7a:1d:3d:40:c5:d2:b6:39:95:55:81:bd:6f:34:35:48:
         0e:15:d3:3c:2c:5e:93:66:66:12:58:4e:6c:e4:01:27:a7:af:
         f9:4c:39:f9:70:67:fe:04:95:3f:75:f2:f3:70:f8:52:f1:67:
         f5:6e:f6:8b:53:74:19:02:e1:70:60:2a:d5:a3:9f:e3:ee:69:
         37:88:20:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----