Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/3993f350-b756-4916-8d84-484f025dffcc/0/323430343a383030303a313030653a3a2f34382d3438203d3e203137343531.roa
File:                     323430343a383030303a313030653a3a2f34382d3438203d3e203137343531.roa (raw, json)
Hash identifier:          N3/0ymLSK6ZdiYQl8Piu75eNgxz3S+9M7JCE2EvUJr0=
Subject key identifier:   4C:BC:C1:2E:7D:A8:EB:D3:57:D8:95:31:B2:3E:FD:8A:F9:57:86:F9
Certificate issuer:       /CN=AC555447BA62C39107F16BF572F82A417F728DBF
Certificate serial:       756D48201593A6F123BF022F995589087961743B
Authority key identifier: AC:55:54:47:BA:62:C3:91:07:F1:6B:F5:72:F8:2A:41:7F:72:8D:BF
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AC555447BA62C39107F16BF572F82A417F728DBF.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/3993f350-b756-4916-8d84-484f025dffcc/0/323430343a383030303a313030653a3a2f34382d3438203d3e203137343531.roa
Signing time:             Thu 30 Sep 2021 00:01:05 +0000
ROA not before:           Wed 29 Sep 2021 23:56:05 +0000
ROA not after:            Fri 30 Sep 2022 00:01:05 +0000
asID:                     17451
IP address blocks:        2404:8000:100e::/48 maxlen: 48

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            75:6d:48:20:15:93:a6:f1:23:bf:02:2f:99:55:89:08:79:61:74:3b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AC555447BA62C39107F16BF572F82A417F728DBF
        Validity
            Not Before: Sep 29 23:56:05 2021 GMT
            Not After : Sep 30 00:01:05 2022 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:ae:ff:c8:b8:f9:54:2a:57:d6:90:2a:49:0e:
                    f7:a9:e1:2a:dc:9e:3c:30:b5:6f:40:99:98:d4:11:
                    53:fe:53:09:61:48:52:6b:8f:c6:fa:6f:17:f7:72:
                    81:26:8e:9d:86:a5:76:77:9b:75:86:1c:33:c7:d3:
                    b6:32:bd:e7:32:48:9b:4c:53:15:ba:86:7b:e5:f0:
                    73:99:cd:1c:6d:e8:30:90:b3:f6:53:df:59:45:61:
                    7e:61:98:46:9f:66:5c:26:3e:15:5a:46:30:a8:44:
                    66:ea:ba:3e:45:8a:2f:20:c9:ce:3e:ad:c8:94:3c:
                    67:e1:fa:3c:5b:20:56:73:8a:46:7d:49:72:e8:85:
                    70:d6:33:7a:21:df:43:b2:37:ca:40:27:67:2f:7e:
                    6f:aa:7a:45:1d:a4:b9:45:71:2e:39:44:f1:15:18:
                    87:7c:44:76:b2:d6:c7:d6:a4:32:04:8b:a5:cb:9f:
                    cf:bb:7a:a9:6f:a6:5f:3e:aa:42:76:31:1e:05:3c:
                    95:4a:92:30:81:bd:f0:cc:7e:48:bb:7a:3e:32:e4:
                    d0:33:72:bf:5b:f5:a5:36:49:05:8f:5b:ee:82:8b:
                    44:89:c3:9f:7d:7a:57:6f:57:38:85:48:67:c9:ca:
                    25:a4:de:46:23:41:00:0f:b8:1d:5b:2a:13:47:35:
                    30:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4C:BC:C1:2E:7D:A8:EB:D3:57:D8:95:31:B2:3E:FD:8A:F9:57:86:F9
            X509v3 Authority Key Identifier:
                keyid:AC:55:54:47:BA:62:C3:91:07:F1:6B:F5:72:F8:2A:41:7F:72:8D:BF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/3993f350-b756-4916-8d84-484f025dffcc/0/AC555447BA62C39107F16BF572F82A417F728DBF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AC555447BA62C39107F16BF572F82A417F728DBF.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/3993f350-b756-4916-8d84-484f025dffcc/0/323430343a383030303a313030653a3a2f34382d3438203d3e203137343531.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2404:8000:100e::/48

    Signature Algorithm: sha256WithRSAEncryption
         5e:85:ac:19:da:bf:be:30:5f:f7:a4:20:9d:b7:50:20:e2:d5:
         0d:4d:14:ee:85:d1:41:d4:e2:03:8b:95:6d:c4:90:4d:4d:f0:
         b8:55:b1:79:1d:86:f9:a2:ae:c2:df:ed:49:1f:b8:27:62:d5:
         78:30:1e:31:3a:46:db:bb:b1:20:02:05:07:49:a9:a6:83:9e:
         20:d1:df:48:81:0a:6f:17:c9:7c:cb:22:71:fb:1c:ef:70:f6:
         fc:fc:53:5b:c1:18:97:86:87:cc:4f:ce:62:1d:96:35:fa:d2:
         de:73:ef:6e:c3:16:04:e5:9e:c8:d9:9c:83:79:ed:2c:8a:67:
         91:b2:e5:d7:d6:54:54:9b:c5:bd:1a:4e:94:d0:25:67:87:63:
         85:9e:79:d9:43:01:2c:dc:80:ec:f2:48:5c:46:43:20:2c:67:
         90:86:ca:ec:ae:1b:e1:fd:9f:ed:6f:fd:2f:6a:74:c2:94:7b:
         9f:29:40:cf:68:7f:d7:dc:af:a7:70:50:bc:15:ea:d4:97:ac:
         0e:be:19:e9:f9:9e:1f:75:7e:b1:c3:93:ac:58:2f:72:6e:3d:
         0d:80:f6:28:72:a7:86:62:ec:8b:be:86:79:0b:4b:0e:6f:dc:
         71:f4:03:87:39:2a:ab:4b:00:29:a8:05:eb:66:a7:91:7f:ac:
         99:22:02:33
-----BEGIN CERTIFICATE-----
MIIHLzCCBhegAwIBAgIUdW1IIBWTpvEjvwIvmVWJCHlhdDswDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQUM1NTU0NDdCQTYyQzM5MTA3RjE2QkY1NzJGODJBNDE3
RjcyOERCRjAeFw0yMTA5MjkyMzU2MDVaFw0yMjA5MzAwMDAxMDVaMIICLTGCAikw
ggIlBgNVBAMTggIcMzA4MjAxMEEwMjgyMDEwMTAwREVBRUZGQzhCOEY5NTQyQTU3
RDY5MDJBNDkwRUY3QTlFMTJBREM5RTNDMzBCNTZGNDA5OTk4RDQxMTUzRkU1MzA5
NjE0ODUyNkI4RkM2RkE2RjE3Rjc3MjgxMjY4RTlEODZBNTc2Nzc5Qjc1ODYxQzMz
QzdEM0I2MzJCREU3MzI0ODlCNEM1MzE1QkE4NjdCRTVGMDczOTlDRDFDNkRFODMw
OTBCM0Y2NTNERjU5NDU2MTdFNjE5ODQ2OUY2NjVDMjYzRTE1NUE0NjMwQTg0NDY2
RUFCQTNFNDU4QTJGMjBDOUNFM0VBREM4OTQzQzY3RTFGQTNDNUIyMDU2NzM4QTQ2
N0Q0OTcyRTg4NTcwRDYzMzdBMjFERjQzQjIzN0NBNDAyNzY3MkY3RTZGQUE3QTQ1
MURBNEI5NDU3MTJFMzk0NEYxMTUxODg3N0M0NDc2QjJENkM3RDZBNDMyMDQ4QkE1
Q0I5RkNGQkI3QUE5NkZBNjVGM0VBQTQyNzYzMTFFMDUzQzk1NEE5MjMwODFCREYw
Q0M3RTQ4QkI3QTNFMzJFNEQwMzM3MkJGNUJGNUE1MzY0OTA1OEY1QkVFODI4QjQ0
ODlDMzlGN0Q3QTU3NkY1NzM4ODU0ODY3QzlDQTI1QTRERTQ2MjM0MTAwMEZCODFE
NUIyQTEzNDczNTMwRjUwMjAzMDEwMDAxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8A
MIIBCgKCAQEA3q7/yLj5VCpX1pAqSQ73qeEq3J48MLVvQJmY1BFT/lMJYUhSa4/G
+m8X93KBJo6dhqV2d5t1hhwzx9O2Mr3nMkibTFMVuoZ75fBzmc0cbegwkLP2U99Z
RWF+YZhGn2ZcJj4VWkYwqERm6ro+RYovIMnOPq3IlDxn4fo8WyBWc4pGfUly6IVw
1jN6Id9DsjfKQCdnL35vqnpFHaS5RXEuOUTxFRiHfER2stbH1qQyBIuly5/Pu3qp
b6ZfPqpCdjEeBTyVSpIwgb3wzH5Iu3o+MuTQM3K/W/WlNkkFj1vugotEicOffXpX
b1c4hUhnycolpN5GI0EAD7gdWyoTRzUw9QIDAQABo4ICPTCCAjkwHQYDVR0OBBYE
FEy8wS59qOvTV9iVMbI+/Yr5V4b5MB8GA1UdIwQYMBaAFKxVVEe6YsORB/Fr9XL4
KkF/co2/MA4GA1UdDwEB/wQEAwIHgDCBhQYDVR0fBH4wfDB6oHigdoZ0cnN5bmM6
Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMzk5M2YzNTAtYjc1Ni00OTE2LThk
ODQtNDg0ZjAyNWRmZmNjLzAvQUM1NTU0NDdCQTYyQzM5MTA3RjE2QkY1NzJGODJB
NDE3RjcyOERCRi5jcmwwdAYIKwYBBQUHAQEEaDBmMGQGCCsGAQUFBzAChlhyc3lu
YzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9JRE5JQy1JRC8yL0FDNTU1NDQ3
QkE2MkMzOTEwN0YxNkJGNTcyRjgyQTQxN0Y3MjhEQkYuY2VyMIGqBggrBgEFBQcB
CwSBnTCBmjCBlwYIKwYBBQUHMAuGgYpyc3luYzovL3JlcG8tcnBraS5pZG5pYy5u
ZXQvcmVwby8zOTkzZjM1MC1iNzU2LTQ5MTYtOGQ4NC00ODRmMDI1ZGZmY2MvMC8z
MjM0MzAzNDNhMzgzMDMwMzAzYTMxMzAzMDY1M2EzYTJmMzQzODJkMzQzODIwM2Qz
ZTIwMzEzNzM0MzUzMS5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAiBggr
BgEFBQcBBwEB/wQTMBEwDwQCAAIwCQMHACQEgAAQDjANBgkqhkiG9w0BAQsFAAOC
AQEAXoWsGdq/vjBf96QgnbdQIOLVDU0U7oXRQdTiA4uVbcSQTU3wuFWxeR2G+aKu
wt/tSR+4J2LVeDAeMTpG27uxIAIFB0mppoOeINHfSIEKbxfJfMsicfsc73D2/PxT
W8EYl4aHzE/OYh2WNfrS3nPvbsMWBOWeyNmcg3ntLIpnkbLl19ZUVJvFvRpOlNAl
Z4djhZ552UMBLNyA7PJIXEZDICxnkIbK7K4b4f2f7W/9L2p0wpR7nylAz2h/19yv
p3BQvBXq1JesDr4Z6fmeH3V+scOTrFgvcm49DYD2KHKnhmLsi76GeQtLDm/ccfQD
hzkqq0sAKagF62ankX+smSICMw==
-----END CERTIFICATE-----