Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/3993f350-b756-4916-8d84-484f025dffcc/0/323430343a383030303a313030353a3a2f34382d3438203d3e203137343531.roa
File:                     323430343a383030303a313030353a3a2f34382d3438203d3e203137343531.roa (raw, json)
Hash identifier:          EA80XmYcrgSRm4BBsShdOwNirf/LPphW/xnVPxznV14=
Subject key identifier:   AD:79:0A:4E:FC:64:0B:14:DC:3D:FA:E8:5F:80:F4:15:80:A1:25:7E
Certificate issuer:       /CN=AC555447BA62C39107F16BF572F82A417F728DBF
Certificate serial:       49A82AC8A6F503A77A81E03D1DABBB34CF217314
Authority key identifier: AC:55:54:47:BA:62:C3:91:07:F1:6B:F5:72:F8:2A:41:7F:72:8D:BF
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AC555447BA62C39107F16BF572F82A417F728DBF.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/3993f350-b756-4916-8d84-484f025dffcc/0/323430343a383030303a313030353a3a2f34382d3438203d3e203137343531.roa
Signing time:             Thu 30 Sep 2021 00:00:03 +0000
ROA not before:           Wed 29 Sep 2021 23:55:03 +0000
ROA not after:            Fri 30 Sep 2022 00:00:03 +0000
asID:                     17451
IP address blocks:        2404:8000:1005::/48 maxlen: 48

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            49:a8:2a:c8:a6:f5:03:a7:7a:81:e0:3d:1d:ab:bb:34:cf:21:73:14
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AC555447BA62C39107F16BF572F82A417F728DBF
        Validity
            Not Before: Sep 29 23:55:03 2021 GMT
            Not After : Sep 30 00:00:03 2022 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:ee:bf:c7:46:02:03:5a:93:86:af:d9:89:a0:
                    95:b0:15:b2:08:14:3e:48:b9:2d:7e:c3:81:1e:0f:
                    db:84:93:04:88:f3:5f:73:a2:2a:3d:87:a5:7a:82:
                    eb:66:05:a1:fc:e2:39:0f:42:64:25:b8:dc:6c:13:
                    53:cc:1a:77:c9:b2:03:77:b7:d7:67:07:f9:47:54:
                    39:a0:6f:8d:38:1e:02:32:e0:9e:72:cc:62:23:6a:
                    e7:f8:03:d3:25:05:57:9c:54:d1:39:dd:65:26:d1:
                    44:df:2f:c9:f9:2b:d8:68:63:9f:0f:60:af:8a:7b:
                    6c:ec:ab:83:b1:3f:be:91:84:0e:28:9b:56:9c:b0:
                    ba:ce:9f:42:26:9e:b8:42:cf:41:18:7f:26:fc:c8:
                    f2:a5:0b:5e:26:f9:5a:3b:ee:77:e6:a5:83:91:91:
                    bc:66:87:2c:54:4b:24:91:d1:0a:f0:f9:bd:c8:d9:
                    6a:77:bc:ea:c8:5f:24:a3:3c:fa:26:b6:2a:4f:70:
                    f6:45:04:6f:04:8e:90:b9:45:05:84:51:83:53:a0:
                    9c:35:73:10:b0:f6:bc:34:22:87:1c:3d:57:a3:e5:
                    c4:41:87:91:e7:cc:b7:ec:7c:42:82:ef:1f:6e:82:
                    97:71:32:63:4d:01:ae:32:d7:24:2c:e8:bf:81:14:
                    db:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AD:79:0A:4E:FC:64:0B:14:DC:3D:FA:E8:5F:80:F4:15:80:A1:25:7E
            X509v3 Authority Key Identifier:
                keyid:AC:55:54:47:BA:62:C3:91:07:F1:6B:F5:72:F8:2A:41:7F:72:8D:BF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/3993f350-b756-4916-8d84-484f025dffcc/0/AC555447BA62C39107F16BF572F82A417F728DBF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AC555447BA62C39107F16BF572F82A417F728DBF.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/3993f350-b756-4916-8d84-484f025dffcc/0/323430343a383030303a313030353a3a2f34382d3438203d3e203137343531.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2404:8000:1005::/48

    Signature Algorithm: sha256WithRSAEncryption
         75:50:27:0a:a4:db:e1:89:06:b2:b0:72:89:ce:f0:b1:1c:18:
         11:3d:24:7e:3a:e5:2b:89:ce:41:9f:46:b5:73:fd:d8:d7:99:
         90:98:93:49:b5:e9:5f:03:b8:16:3c:06:b6:07:23:be:40:fd:
         65:72:b2:d9:d0:fb:4f:1f:cd:04:a7:d1:08:6f:89:83:ca:2a:
         c9:f9:19:22:95:df:05:98:c4:0b:88:8c:83:84:da:25:63:c6:
         32:dd:f8:f6:00:e1:0d:3a:47:ae:26:cf:2b:da:e1:4d:60:70:
         e9:af:4b:8f:1a:57:a5:b3:07:56:55:03:76:3d:5a:7c:cc:1a:
         86:b0:e8:a1:bf:6c:41:1d:83:f2:8e:73:46:4a:d1:b3:2f:7d:
         f9:6a:21:77:47:61:f0:ca:7c:53:70:59:46:db:f2:93:70:9e:
         73:51:de:c0:20:f5:9e:21:9c:4b:5b:f8:e7:a9:64:fc:00:cf:
         f6:f9:0a:ce:9f:8c:07:b7:e4:39:bf:6a:fb:db:a4:a0:00:91:
         79:be:f6:a2:0c:09:74:75:40:b5:22:1c:28:6d:7b:45:fb:84:
         30:c0:14:bb:f7:15:05:df:6d:56:30:dd:a8:d6:a3:ef:71:d4:
         0c:b9:47:24:2b:0f:93:02:7d:ec:97:5b:a9:12:10:9b:6b:f5:
         ef:99:fb:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----