Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/3993f350-b756-4916-8d84-484f025dffcc/0/323430343a383030303a313030333a3a2f34382d3438203d3e203137343531.roa
File:                     323430343a383030303a313030333a3a2f34382d3438203d3e203137343531.roa (raw, json)
Hash identifier:          P8eKm7cBGv3gUlOfeMdXsP1YAwC12RPg83yUvzVuAFI=
Subject key identifier:   7F:D5:86:25:4A:70:C9:87:D9:CA:CC:95:07:59:95:87:B9:56:D6:59
Certificate issuer:       /CN=AC555447BA62C39107F16BF572F82A417F728DBF
Certificate serial:       3FA26A918794AF92D045694D398D1ED3069DB18F
Authority key identifier: AC:55:54:47:BA:62:C3:91:07:F1:6B:F5:72:F8:2A:41:7F:72:8D:BF
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AC555447BA62C39107F16BF572F82A417F728DBF.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/3993f350-b756-4916-8d84-484f025dffcc/0/323430343a383030303a313030333a3a2f34382d3438203d3e203137343531.roa
Signing time:             Thu 30 Sep 2021 00:00:32 +0000
ROA not before:           Wed 29 Sep 2021 23:55:32 +0000
ROA not after:            Fri 30 Sep 2022 00:00:32 +0000
asID:                     17451
IP address blocks:        2404:8000:1003::/48 maxlen: 48

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3f:a2:6a:91:87:94:af:92:d0:45:69:4d:39:8d:1e:d3:06:9d:b1:8f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AC555447BA62C39107F16BF572F82A417F728DBF
        Validity
            Not Before: Sep 29 23:55:32 2021 GMT
            Not After : Sep 30 00:00:32 2022 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e2:e6:d9:58:d8:6e:ff:41:37:ff:16:a7:a1:02:
                    56:0f:37:61:cf:6b:a8:17:8a:72:e7:ba:db:2a:88:
                    0e:c4:54:6f:3b:9e:7d:a1:bb:cd:bb:8c:d3:d6:52:
                    85:92:de:0f:1a:47:e5:87:59:0c:84:f6:1a:75:23:
                    5a:3d:3f:c0:43:c2:14:47:d6:8c:a2:7c:7d:9f:b4:
                    1b:17:cb:ee:ba:d4:fa:f4:0f:8a:bf:15:f5:6f:49:
                    11:90:54:41:10:95:c2:6d:33:3e:c1:b9:45:08:69:
                    ef:6a:8d:09:4f:36:46:cb:30:cc:2e:d9:9c:f3:6d:
                    74:c5:b7:bd:7f:05:63:0f:59:4c:8d:fe:bb:20:1a:
                    92:7b:a7:51:8e:37:96:ca:da:3e:bc:55:d5:a0:48:
                    fa:3f:8a:f0:e1:07:07:84:92:a7:f1:f8:a7:f4:14:
                    26:7a:3f:76:a5:07:5b:4d:b7:5f:e6:fc:88:ce:d5:
                    29:65:6c:94:c0:53:94:19:9c:ac:36:ae:34:a4:d9:
                    28:74:f7:60:9a:bb:ac:80:90:a5:25:20:c3:be:d0:
                    c7:e3:81:20:65:1a:18:35:54:c6:fa:b2:05:64:4f:
                    09:b1:73:6e:9d:43:c6:ea:da:6b:ba:3b:ef:0c:44:
                    ab:11:ee:8f:ae:c2:4f:56:39:08:83:37:ef:bc:0d:
                    6e:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7F:D5:86:25:4A:70:C9:87:D9:CA:CC:95:07:59:95:87:B9:56:D6:59
            X509v3 Authority Key Identifier:
                keyid:AC:55:54:47:BA:62:C3:91:07:F1:6B:F5:72:F8:2A:41:7F:72:8D:BF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/3993f350-b756-4916-8d84-484f025dffcc/0/AC555447BA62C39107F16BF572F82A417F728DBF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AC555447BA62C39107F16BF572F82A417F728DBF.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/3993f350-b756-4916-8d84-484f025dffcc/0/323430343a383030303a313030333a3a2f34382d3438203d3e203137343531.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2404:8000:1003::/48

    Signature Algorithm: sha256WithRSAEncryption
         18:b4:16:19:c5:c1:a7:06:ef:a1:d4:da:5a:eb:28:75:98:a0:
         da:a4:1e:69:f2:b7:86:e8:a3:4c:aa:e5:6e:77:ce:46:83:f8:
         49:40:f4:75:91:76:dc:ee:64:35:ee:5b:4f:43:2d:0b:b9:49:
         c6:4c:76:67:2e:6d:55:cc:e7:f9:bb:af:ce:fd:f3:f0:f5:a7:
         77:88:ab:6c:91:b9:ea:89:a6:41:56:da:b7:c3:ad:83:66:58:
         f4:d3:06:23:e0:cf:9c:da:b9:ed:38:07:43:45:bb:81:40:cf:
         ba:ba:0b:7d:e2:44:01:84:8a:73:c9:30:9b:b7:17:31:ff:bd:
         84:0c:02:b9:c7:7d:7d:7b:f4:44:58:94:8e:6e:9b:a3:a5:2c:
         7e:80:89:63:44:26:f0:ef:7e:94:b4:26:fb:cd:10:71:71:06:
         b4:3a:88:7d:7f:19:f2:f8:3a:47:4e:57:68:80:89:bd:65:04:
         cf:10:13:0c:bc:de:1a:47:27:7a:b3:88:1c:0c:7e:7d:1a:3f:
         89:94:25:0f:b8:dc:6d:fd:02:3b:96:99:01:ff:e7:39:cf:0e:
         83:9d:c2:a7:5d:8a:f5:a0:f7:52:b5:a1:a6:85:06:5b:48:22:
         74:c4:cf:2b:f4:8a:04:90:4e:6d:24:85:2b:52:b2:aa:33:3d:
         49:bb:da:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----