Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/3993f350-b756-4916-8d84-484f025dffcc/0/323430343a383030303a313030613a3a2f34382d3438203d3e203137343531.roa
File:                     323430343a383030303a313030613a3a2f34382d3438203d3e203137343531.roa (raw, json)
Hash identifier:          sRyHuBuBpzAGUztk4sKTkt0eGSfT6pnP5lAAqyR/8oA=
Subject key identifier:   4D:60:6E:0D:14:E8:FC:8C:A2:94:43:C3:D0:CE:02:23:6C:8D:F2:9A
Certificate issuer:       /CN=AC555447BA62C39107F16BF572F82A417F728DBF
Certificate serial:       2D1DF56527F9B33336F0649FD1A1B70AB87D119B
Authority key identifier: AC:55:54:47:BA:62:C3:91:07:F1:6B:F5:72:F8:2A:41:7F:72:8D:BF
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AC555447BA62C39107F16BF572F82A417F728DBF.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/3993f350-b756-4916-8d84-484f025dffcc/0/323430343a383030303a313030613a3a2f34382d3438203d3e203137343531.roa
Signing time:             Thu 30 Sep 2021 00:01:04 +0000
ROA not before:           Wed 29 Sep 2021 23:56:04 +0000
ROA not after:            Fri 30 Sep 2022 00:01:04 +0000
asID:                     17451
IP address blocks:        2404:8000:100a::/48 maxlen: 48

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2d:1d:f5:65:27:f9:b3:33:36:f0:64:9f:d1:a1:b7:0a:b8:7d:11:9b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AC555447BA62C39107F16BF572F82A417F728DBF
        Validity
            Not Before: Sep 29 23:56:04 2021 GMT
            Not After : Sep 30 00:01:04 2022 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:3b:6a:b2:28:43:11:53:ba:05:5e:3d:5c:65:
                    82:f1:fc:46:f7:26:7f:4c:db:ef:10:f5:3f:b8:58:
                    bd:08:64:9f:4f:48:a8:73:c3:e3:ac:8b:c1:c8:9b:
                    46:6f:c9:84:b4:51:0c:56:b7:55:f8:db:48:4a:4c:
                    b2:4b:2f:a1:d2:53:dd:71:5b:f7:93:72:33:d1:bb:
                    34:0c:05:18:01:2e:6c:7d:10:c0:6d:2f:0b:d4:9c:
                    4f:75:21:88:17:6b:d0:8c:f1:25:d0:28:dc:d0:4b:
                    4b:e9:f7:32:fa:f7:3e:60:e8:37:78:8e:d1:12:5b:
                    ca:60:f5:fc:39:f3:78:2c:a5:07:91:3a:7c:28:72:
                    3e:50:0c:81:70:d4:42:31:11:33:f2:10:eb:68:f8:
                    d2:a2:d4:26:01:be:ac:54:23:85:a4:57:a0:6c:2a:
                    6d:9d:ab:8d:47:a8:d7:9d:df:ce:31:d3:01:a5:ad:
                    b5:93:18:d2:39:de:40:24:0b:0e:c6:e3:eb:b2:89:
                    89:27:f5:9b:d9:4c:0a:61:97:af:26:e4:f2:e9:44:
                    6a:4f:23:1f:08:8d:b5:70:50:95:a5:6c:5d:f3:16:
                    3e:74:9e:af:b8:bc:03:2a:ff:a2:e7:c1:0b:f6:97:
                    cb:a4:0e:e7:14:9d:53:1e:4f:08:d8:ce:26:a0:ee:
                    74:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4D:60:6E:0D:14:E8:FC:8C:A2:94:43:C3:D0:CE:02:23:6C:8D:F2:9A
            X509v3 Authority Key Identifier:
                keyid:AC:55:54:47:BA:62:C3:91:07:F1:6B:F5:72:F8:2A:41:7F:72:8D:BF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/3993f350-b756-4916-8d84-484f025dffcc/0/AC555447BA62C39107F16BF572F82A417F728DBF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AC555447BA62C39107F16BF572F82A417F728DBF.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/3993f350-b756-4916-8d84-484f025dffcc/0/323430343a383030303a313030613a3a2f34382d3438203d3e203137343531.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2404:8000:100a::/48

    Signature Algorithm: sha256WithRSAEncryption
         70:74:c7:97:05:39:54:a5:35:44:99:d7:96:65:aa:c9:d8:17:
         2e:ac:03:db:5b:7c:0d:07:bc:17:17:d3:7b:fe:2c:fa:73:47:
         b1:20:0d:3e:0d:ca:18:bf:ab:a5:68:7b:ad:25:68:df:1e:6b:
         dc:da:7b:de:8b:3f:17:58:99:3f:43:76:05:b0:3b:ba:fc:1f:
         d0:6b:43:8f:0d:c5:bb:3d:0e:0b:16:cd:c6:e0:3b:15:98:b3:
         7d:d3:ab:16:7d:22:74:ff:35:ce:18:74:2d:45:e5:43:ef:39:
         06:41:8d:f3:4d:d4:75:aa:8d:65:9b:66:03:8a:e0:6a:a4:b7:
         ce:bc:3b:34:ba:f6:9e:39:c8:3f:4f:19:0a:3f:5f:a7:21:f6:
         8a:9e:5f:36:79:4b:87:91:78:d6:a3:b6:72:3e:76:7d:2e:53:
         d2:3e:5d:ec:8b:a6:fb:08:58:a3:56:db:f7:b8:44:61:30:7d:
         67:22:1b:ba:4a:91:8e:08:61:96:66:f2:7e:23:f6:f7:5b:58:
         f4:7c:69:3d:19:ca:9a:21:95:0c:48:66:f2:f4:cc:d5:fd:2b:
         74:98:89:30:c8:99:70:a4:6d:71:ad:10:74:26:16:a2:de:50:
         b7:8a:c9:b1:d7:45:b1:92:17:c6:db:8b:70:93:9e:11:24:52:
         74:90:5e:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----