Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/3993f350-b756-4916-8d84-484f025dffcc/0/323430343a383030303a313030373a3a2f34382d3438203d3e203137343531.roa
File:                     323430343a383030303a313030373a3a2f34382d3438203d3e203137343531.roa (raw, json)
Hash identifier:          51fAHUn/OgqlJQtmW09d/jZ1M/xWxiXETuESIhD3tr8=
Subject key identifier:   B5:07:EC:9A:BC:A0:36:F6:10:C0:EF:B3:DB:3B:5E:29:20:42:0D:9F
Certificate issuer:       /CN=AC555447BA62C39107F16BF572F82A417F728DBF
Certificate serial:       5864F6BC044BFCC6EFDC8CA8FC7EEF421763CF51
Authority key identifier: AC:55:54:47:BA:62:C3:91:07:F1:6B:F5:72:F8:2A:41:7F:72:8D:BF
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AC555447BA62C39107F16BF572F82A417F728DBF.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/3993f350-b756-4916-8d84-484f025dffcc/0/323430343a383030303a313030373a3a2f34382d3438203d3e203137343531.roa
Signing time:             Thu 30 Sep 2021 00:00:07 +0000
ROA not before:           Wed 29 Sep 2021 23:55:07 +0000
ROA not after:            Fri 30 Sep 2022 00:00:07 +0000
asID:                     17451
IP address blocks:        2404:8000:1007::/48 maxlen: 48

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            58:64:f6:bc:04:4b:fc:c6:ef:dc:8c:a8:fc:7e:ef:42:17:63:cf:51
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AC555447BA62C39107F16BF572F82A417F728DBF
        Validity
            Not Before: Sep 29 23:55:07 2021 GMT
            Not After : Sep 30 00:00:07 2022 GMT
        Subject: CN=3082010A0282010100B1D6B056CFCEF92F0F590F6C67C9836872F47F277CE28E647B8CB0CC4005CFC6E05FE861254D39039017474308C622617BC40F9DD5A6A43BB83D47DD36E885839DE884AED660B92FA1522DF8E2202E2781E2B95DF5C168B1FEE077180EB82474ABB4DEB08C0309E839AB29B5386D618B6B93AE006348FA42B0EB700A11850816C02377AFCE31FF0F99F855AAED1BCF45B4DEB06A60E491FCACB10D2CCEA4994AA4B24A095D95B750320226E27C36CB17E3989D24E401407EAA3F5723429F979E53180D8A37FD4EF0416EF3DA5C8AF139E7F004A8057F70A1642C3ABF47CC07367933F1AE39346C255370F18ED04B779834880CA4537747685D643A60EA59ACC70203010001
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:d6:b0:56:cf:ce:f9:2f:0f:59:0f:6c:67:c9:
                    83:68:72:f4:7f:27:7c:e2:8e:64:7b:8c:b0:cc:40:
                    05:cf:c6:e0:5f:e8:61:25:4d:39:03:90:17:47:43:
                    08:c6:22:61:7b:c4:0f:9d:d5:a6:a4:3b:b8:3d:47:
                    dd:36:e8:85:83:9d:e8:84:ae:d6:60:b9:2f:a1:52:
                    2d:f8:e2:20:2e:27:81:e2:b9:5d:f5:c1:68:b1:fe:
                    e0:77:18:0e:b8:24:74:ab:b4:de:b0:8c:03:09:e8:
                    39:ab:29:b5:38:6d:61:8b:6b:93:ae:00:63:48:fa:
                    42:b0:eb:70:0a:11:85:08:16:c0:23:77:af:ce:31:
                    ff:0f:99:f8:55:aa:ed:1b:cf:45:b4:de:b0:6a:60:
                    e4:91:fc:ac:b1:0d:2c:ce:a4:99:4a:a4:b2:4a:09:
                    5d:95:b7:50:32:02:26:e2:7c:36:cb:17:e3:98:9d:
                    24:e4:01:40:7e:aa:3f:57:23:42:9f:97:9e:53:18:
                    0d:8a:37:fd:4e:f0:41:6e:f3:da:5c:8a:f1:39:e7:
                    f0:04:a8:05:7f:70:a1:64:2c:3a:bf:47:cc:07:36:
                    79:33:f1:ae:39:34:6c:25:53:70:f1:8e:d0:4b:77:
                    98:34:88:0c:a4:53:77:47:68:5d:64:3a:60:ea:59:
                    ac:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B5:07:EC:9A:BC:A0:36:F6:10:C0:EF:B3:DB:3B:5E:29:20:42:0D:9F
            X509v3 Authority Key Identifier:
                keyid:AC:55:54:47:BA:62:C3:91:07:F1:6B:F5:72:F8:2A:41:7F:72:8D:BF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/3993f350-b756-4916-8d84-484f025dffcc/0/AC555447BA62C39107F16BF572F82A417F728DBF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AC555447BA62C39107F16BF572F82A417F728DBF.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/3993f350-b756-4916-8d84-484f025dffcc/0/323430343a383030303a313030373a3a2f34382d3438203d3e203137343531.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2404:8000:1007::/48

    Signature Algorithm: sha256WithRSAEncryption
         96:06:17:71:20:78:4d:89:d0:a0:ec:42:fd:e1:30:03:0d:99:
         97:da:bb:93:a7:eb:4b:cb:4b:79:ca:1a:0f:17:a2:8f:b0:c2:
         26:a8:ee:77:48:b0:bd:4a:67:80:c0:75:8a:55:ee:53:41:9f:
         41:5a:b0:7e:56:9f:8d:c3:f5:ea:52:e7:11:f4:66:dc:4f:59:
         a8:97:9b:20:4e:eb:0f:8e:b2:2d:0b:0c:b2:9c:4d:9b:eb:5a:
         65:1d:4a:d6:b3:35:40:3e:ad:88:9d:12:fc:75:8f:98:14:c6:
         23:ba:23:e1:f4:16:4c:15:05:fe:ff:69:c5:ca:13:ad:cd:02:
         49:fd:f8:11:db:38:01:1d:8f:b0:b0:fb:ee:90:85:df:45:d1:
         3a:ce:22:d8:c6:0c:78:ba:9e:4b:7e:28:e6:ac:3a:be:b2:68:
         9b:dd:b7:1d:87:62:a7:13:92:f8:8c:8d:27:8f:66:db:e2:65:
         1d:04:db:f6:01:88:ee:bb:7a:e8:c5:fc:fe:b8:cc:e5:f2:07:
         bb:b9:6c:91:be:5b:f6:c3:af:80:82:2a:f1:53:21:ed:f8:1a:
         04:72:76:a7:4e:e6:89:76:c4:fe:be:b6:4d:ef:12:32:68:5c:
         27:15:64:f9:a3:8d:b2:98:8c:9d:33:77:cc:89:16:1b:8b:6e:
         9c:c9:4d:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----