Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/3993f350-b756-4916-8d84-484f025dffcc/0/323430343a383030303a313030623a3a2f34382d3438203d3e203137343531.roa
File:                     323430343a383030303a313030623a3a2f34382d3438203d3e203137343531.roa (raw, json)
Hash identifier:          UMgbe8Yo94eBt3CMiv4XbELUTMwM42ksZTsSaF3iVco=
Subject key identifier:   A0:81:DE:9C:73:F5:A5:30:72:D3:40:2A:96:D9:AE:5C:70:47:E4:5C
Certificate issuer:       /CN=AC555447BA62C39107F16BF572F82A417F728DBF
Certificate serial:       2CBC9CD1E0662CA139CA8A927CC50A2A587A1ECD
Authority key identifier: AC:55:54:47:BA:62:C3:91:07:F1:6B:F5:72:F8:2A:41:7F:72:8D:BF
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AC555447BA62C39107F16BF572F82A417F728DBF.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/3993f350-b756-4916-8d84-484f025dffcc/0/323430343a383030303a313030623a3a2f34382d3438203d3e203137343531.roa
Signing time:             Thu 30 Sep 2021 00:00:09 +0000
ROA not before:           Wed 29 Sep 2021 23:55:09 +0000
ROA not after:            Fri 30 Sep 2022 00:00:09 +0000
asID:                     17451
IP address blocks:        2404:8000:100b::/48 maxlen: 48

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2c:bc:9c:d1:e0:66:2c:a1:39:ca:8a:92:7c:c5:0a:2a:58:7a:1e:cd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AC555447BA62C39107F16BF572F82A417F728DBF
        Validity
            Not Before: Sep 29 23:55:09 2021 GMT
            Not After : Sep 30 00:00:09 2022 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:7d:5b:1d:e6:2d:52:63:01:4d:81:dd:70:9f:
                    9d:02:e3:19:2d:f9:ea:67:51:0c:0f:70:30:8d:10:
                    c7:b0:da:2c:91:16:6b:96:7b:03:05:c2:ef:a0:97:
                    47:84:90:9e:f9:ff:43:86:da:de:5e:c1:29:72:2a:
                    8a:26:8a:25:7f:df:37:08:fb:0e:ef:e1:a7:ef:cf:
                    bd:d6:49:b5:f9:83:74:1a:c2:99:82:6d:da:37:c7:
                    8a:7b:bf:9d:9b:51:c6:15:64:05:f4:f4:6f:30:de:
                    ce:81:8f:63:79:a2:96:d2:76:af:65:ec:76:6c:f0:
                    7d:67:3c:58:d6:7a:2b:3a:b6:5a:36:63:df:56:2f:
                    82:b4:3e:ef:ca:b9:8b:d9:e9:03:9e:ff:5d:66:ab:
                    20:50:73:82:fe:4f:e2:7f:26:85:33:44:b7:c7:07:
                    3d:73:c3:82:8f:84:ce:05:ee:fa:f7:60:33:93:9d:
                    10:6f:68:eb:d7:04:93:31:91:93:7e:77:59:59:c5:
                    61:73:65:e3:49:7f:16:3b:17:1c:f7:d5:19:68:a0:
                    54:ae:91:03:cf:9b:b5:58:13:82:67:c1:8a:c9:bb:
                    0b:12:64:6d:e4:b1:38:13:11:d7:b4:66:ba:e6:c8:
                    9b:22:4d:a4:ae:9f:00:79:2c:8c:15:90:56:6c:07:
                    3f:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A0:81:DE:9C:73:F5:A5:30:72:D3:40:2A:96:D9:AE:5C:70:47:E4:5C
            X509v3 Authority Key Identifier:
                keyid:AC:55:54:47:BA:62:C3:91:07:F1:6B:F5:72:F8:2A:41:7F:72:8D:BF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/3993f350-b756-4916-8d84-484f025dffcc/0/AC555447BA62C39107F16BF572F82A417F728DBF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AC555447BA62C39107F16BF572F82A417F728DBF.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/3993f350-b756-4916-8d84-484f025dffcc/0/323430343a383030303a313030623a3a2f34382d3438203d3e203137343531.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2404:8000:100b::/48

    Signature Algorithm: sha256WithRSAEncryption
         3c:fe:3f:9a:16:98:94:de:89:e9:0a:24:7a:2a:d2:91:58:d7:
         2b:77:5f:41:84:fd:53:4b:44:1c:36:a4:4b:f9:dc:96:25:21:
         06:ae:52:3c:73:56:87:99:78:b7:27:e9:7e:e4:59:89:6e:d9:
         e4:2b:e8:fc:9f:8d:dc:4f:de:b0:a1:1c:ae:6c:e7:d9:11:b5:
         18:38:36:b0:14:4d:df:b1:7d:a1:d4:c7:25:fb:27:1c:e2:c6:
         6c:c4:34:d3:a0:d0:7d:90:f9:cf:e6:38:c8:1c:d3:01:8e:5d:
         bc:c6:b7:84:c5:e1:1d:1f:79:45:f3:8a:15:cf:f3:15:6c:bb:
         68:fd:91:bb:e3:68:e3:5e:a6:46:95:bb:46:5e:56:7a:61:62:
         9a:6f:47:55:29:de:0e:ab:95:52:8a:7d:53:27:ec:18:02:e1:
         38:19:ab:fe:05:0f:c9:40:6e:e7:cd:35:61:74:cb:29:8e:09:
         62:61:a2:4a:11:3d:e5:2c:9f:46:cc:46:d3:35:6b:4b:be:3f:
         3a:bd:1d:d7:06:dc:a3:76:0d:b6:5c:76:10:f4:3f:51:c4:9f:
         ec:49:fa:62:35:77:49:66:5a:6c:a6:61:6a:e8:84:b3:b7:88:
         b1:9b:eb:dc:6b:f2:8d:84:b0:98:81:de:47:1d:ad:4b:96:50:
         e4:c0:fa:06
-----BEGIN CERTIFICATE-----
MIIHLzCCBhegAwIBAgIULLyc0eBmLKE5yoqSfMUKKlh6Hs0wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQUM1NTU0NDdCQTYyQzM5MTA3RjE2QkY1NzJGODJBNDE3
RjcyOERCRjAeFw0yMTA5MjkyMzU1MDlaFw0yMjA5MzAwMDAwMDlaMIICLTGCAikw
ggIlBgNVBAMTggIcMzA4MjAxMEEwMjgyMDEwMTAwQ0E3RDVCMURFNjJENTI2MzAx
NEQ4MURENzA5RjlEMDJFMzE5MkRGOUVBNjc1MTBDMEY3MDMwOEQxMEM3QjBEQTJD
OTExNjZCOTY3QjAzMDVDMkVGQTA5NzQ3ODQ5MDlFRjlGRjQzODZEQURFNUVDMTI5
NzIyQThBMjY4QTI1N0ZERjM3MDhGQjBFRUZFMUE3RUZDRkJERDY0OUI1Rjk4Mzc0
MUFDMjk5ODI2RERBMzdDNzhBN0JCRjlEOUI1MUM2MTU2NDA1RjRGNDZGMzBERUNF
ODE4RjYzNzlBMjk2RDI3NkFGNjVFQzc2NkNGMDdENjczQzU4RDY3QTJCM0FCNjVB
MzY2M0RGNTYyRjgyQjQzRUVGQ0FCOThCRDlFOTAzOUVGRjVENjZBQjIwNTA3Mzgy
RkU0RkUyN0YyNjg1MzM0NEI3QzcwNzNENzNDMzgyOEY4NENFMDVFRUZBRjc2MDMz
OTM5RDEwNkY2OEVCRDcwNDkzMzE5MTkzN0U3NzU5NTlDNTYxNzM2NUUzNDk3RjE2
M0IxNzFDRjdENTE5NjhBMDU0QUU5MTAzQ0Y5QkI1NTgxMzgyNjdDMThBQzlCQjBC
MTI2NDZERTRCMTM4MTMxMUQ3QjQ2NkJBRTZDODlCMjI0REE0QUU5RjAwNzkyQzhD
MTU5MDU2NkMwNzNGMDMwMjAzMDEwMDAxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8A
MIIBCgKCAQEAyn1bHeYtUmMBTYHdcJ+dAuMZLfnqZ1EMD3AwjRDHsNoskRZrlnsD
BcLvoJdHhJCe+f9DhtreXsEpciqKJoolf983CPsO7+Gn78+91km1+YN0GsKZgm3a
N8eKe7+dm1HGFWQF9PRvMN7OgY9jeaKW0navZex2bPB9ZzxY1norOrZaNmPfVi+C
tD7vyrmL2ekDnv9dZqsgUHOC/k/ifyaFM0S3xwc9c8OCj4TOBe7692Azk50Qb2jr
1wSTMZGTfndZWcVhc2XjSX8WOxcc99UZaKBUrpEDz5u1WBOCZ8GKybsLEmRt5LE4
ExHXtGa65sibIk2krp8AeSyMFZBWbAc/AwIDAQABo4ICPTCCAjkwHQYDVR0OBBYE
FKCB3pxz9aUwctNAKpbZrlxwR+RcMB8GA1UdIwQYMBaAFKxVVEe6YsORB/Fr9XL4
KkF/co2/MA4GA1UdDwEB/wQEAwIHgDCBhQYDVR0fBH4wfDB6oHigdoZ0cnN5bmM6
Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMzk5M2YzNTAtYjc1Ni00OTE2LThk
ODQtNDg0ZjAyNWRmZmNjLzAvQUM1NTU0NDdCQTYyQzM5MTA3RjE2QkY1NzJGODJB
NDE3RjcyOERCRi5jcmwwdAYIKwYBBQUHAQEEaDBmMGQGCCsGAQUFBzAChlhyc3lu
YzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9JRE5JQy1JRC8yL0FDNTU1NDQ3
QkE2MkMzOTEwN0YxNkJGNTcyRjgyQTQxN0Y3MjhEQkYuY2VyMIGqBggrBgEFBQcB
CwSBnTCBmjCBlwYIKwYBBQUHMAuGgYpyc3luYzovL3JlcG8tcnBraS5pZG5pYy5u
ZXQvcmVwby8zOTkzZjM1MC1iNzU2LTQ5MTYtOGQ4NC00ODRmMDI1ZGZmY2MvMC8z
MjM0MzAzNDNhMzgzMDMwMzAzYTMxMzAzMDYyM2EzYTJmMzQzODJkMzQzODIwM2Qz
ZTIwMzEzNzM0MzUzMS5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAiBggr
BgEFBQcBBwEB/wQTMBEwDwQCAAIwCQMHACQEgAAQCzANBgkqhkiG9w0BAQsFAAOC
AQEAPP4/mhaYlN6J6QokeirSkVjXK3dfQYT9U0tEHDakS/ncliUhBq5SPHNWh5l4
tyfpfuRZiW7Z5Cvo/J+N3E/esKEcrmzn2RG1GDg2sBRN37F9odTHJfsnHOLGbMQ0
06DQfZD5z+Y4yBzTAY5dvMa3hMXhHR95RfOKFc/zFWy7aP2Ru+No416mRpW7Rl5W
emFimm9HVSneDquVUop9UyfsGALhOBmr/gUPyUBu5801YXTLKY4JYmGiShE95Syf
RsxG0zVrS74/Or0d1wbco3YNtlx2EPQ/UcSf7En6YjV3SWZabKZhauiEs7eIsZvr
3GvyjYSwmIHeRx2tS5ZQ5MD6Bg==
-----END CERTIFICATE-----