Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/3993f350-b756-4916-8d84-484f025dffcc/0/323430343a383030303a313030393a3a2f34382d3438203d3e203137343531.roa
File:                     323430343a383030303a313030393a3a2f34382d3438203d3e203137343531.roa (raw, json)
Hash identifier:          kvJDfqbWGftn1QbKD0VSrMbFIdYSEmIHmtWkEateTAU=
Subject key identifier:   3D:25:6B:93:79:1C:7F:06:92:CE:A9:60:98:83:CE:73:B3:F2:4C:D9
Certificate issuer:       /CN=AC555447BA62C39107F16BF572F82A417F728DBF
Certificate serial:       5D759258D366FF5B0D392535722E5EFE5C5BAF9C
Authority key identifier: AC:55:54:47:BA:62:C3:91:07:F1:6B:F5:72:F8:2A:41:7F:72:8D:BF
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AC555447BA62C39107F16BF572F82A417F728DBF.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/3993f350-b756-4916-8d84-484f025dffcc/0/323430343a383030303a313030393a3a2f34382d3438203d3e203137343531.roa
Signing time:             Thu 30 Sep 2021 00:00:27 +0000
ROA not before:           Wed 29 Sep 2021 23:55:27 +0000
ROA not after:            Fri 30 Sep 2022 00:00:27 +0000
asID:                     17451
IP address blocks:        2404:8000:1009::/48 maxlen: 48

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5d:75:92:58:d3:66:ff:5b:0d:39:25:35:72:2e:5e:fe:5c:5b:af:9c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AC555447BA62C39107F16BF572F82A417F728DBF
        Validity
            Not Before: Sep 29 23:55:27 2021 GMT
            Not After : Sep 30 00:00:27 2022 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:b7:2d:83:b7:1f:ed:6a:cd:c7:d7:1e:81:f8:
                    66:f3:10:86:52:77:d5:6e:1a:40:95:fd:b8:67:41:
                    e2:e2:d7:a6:2e:82:57:1d:4b:99:73:5d:57:c6:26:
                    36:87:db:18:8e:c8:57:e4:76:9a:1b:26:bf:4c:53:
                    fe:07:76:40:e0:03:4e:49:64:26:ee:82:66:35:43:
                    41:88:8f:0b:62:49:16:4e:71:22:8e:c3:51:99:d7:
                    db:35:3c:7d:81:1b:14:21:85:52:3e:4f:d4:4c:e9:
                    a9:d9:cf:1f:2b:1b:fd:2b:e4:f4:27:0c:2b:03:5c:
                    7c:93:8e:da:76:ab:42:58:72:22:d7:5d:57:1a:a8:
                    9d:99:f1:9d:fe:ee:ea:2a:2e:5b:d2:cf:50:b6:63:
                    f3:a2:da:8d:3c:a5:60:1c:28:2b:a6:d9:ab:ae:4a:
                    96:05:50:e3:0a:67:34:9f:76:50:f9:00:40:32:4e:
                    50:87:f7:40:15:41:00:d1:11:94:3f:7d:53:3b:8d:
                    7c:e3:df:f6:3d:f5:6b:46:8e:98:52:15:3f:55:72:
                    d5:80:b3:e2:8b:04:d9:37:31:b9:4d:5d:18:06:64:
                    3f:35:d5:cc:32:6b:7c:17:6b:68:a0:cf:7c:b3:7c:
                    df:b2:b7:c5:66:35:88:25:ec:55:80:8b:f9:5f:1e:
                    ae:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3D:25:6B:93:79:1C:7F:06:92:CE:A9:60:98:83:CE:73:B3:F2:4C:D9
            X509v3 Authority Key Identifier:
                keyid:AC:55:54:47:BA:62:C3:91:07:F1:6B:F5:72:F8:2A:41:7F:72:8D:BF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/3993f350-b756-4916-8d84-484f025dffcc/0/AC555447BA62C39107F16BF572F82A417F728DBF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AC555447BA62C39107F16BF572F82A417F728DBF.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/3993f350-b756-4916-8d84-484f025dffcc/0/323430343a383030303a313030393a3a2f34382d3438203d3e203137343531.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2404:8000:1009::/48

    Signature Algorithm: sha256WithRSAEncryption
         28:86:65:ae:dd:71:a2:e3:41:b8:49:bb:ad:c9:f8:98:d5:1a:
         33:b4:1c:63:bd:09:d4:33:ca:87:7d:10:ec:bc:48:ce:5a:bf:
         46:bc:78:12:45:21:00:45:7a:55:5c:af:e2:96:06:5f:f1:db:
         f0:97:81:ab:60:3b:68:ac:89:73:ab:f7:0f:3d:c6:2e:a7:b2:
         11:3d:fa:cb:db:95:cf:ef:49:bf:d5:5b:26:91:ed:eb:f9:95:
         70:75:12:d0:20:c6:65:84:a2:e1:dd:31:ac:c6:08:f1:db:7a:
         d4:69:d0:5b:80:54:34:2f:5c:35:c8:76:b7:dd:6c:59:99:cf:
         02:4d:43:d8:3d:e5:46:32:79:ae:5a:01:51:e2:48:57:03:fc:
         79:91:6f:6c:08:aa:9a:65:b7:db:ce:f7:dc:a3:ae:dc:a0:77:
         3e:10:8c:78:13:70:8f:0f:00:ca:0f:ec:cb:bf:13:b4:f6:86:
         7d:1d:b3:86:ed:54:1c:16:d9:5f:1d:45:54:71:5f:ed:e8:b3:
         dd:6b:ea:40:78:7f:d2:af:e9:ac:b8:06:3a:06:18:34:5e:c8:
         1d:d6:c0:31:2f:3b:8c:c8:24:35:fd:cf:f6:0a:b8:09:73:48:
         3c:0a:c4:2a:3a:67:7d:81:26:37:a1:b5:ab:2b:3c:02:c1:5f:
         4d:90:6f:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----