Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/3993f350-b756-4916-8d84-484f025dffcc/0/323430343a383030303a313031303a3a2f34382d3438203d3e203137343531.roa
File:                     323430343a383030303a313031303a3a2f34382d3438203d3e203137343531.roa (raw, json)
Hash identifier:          LvlEMd3mP48TrHbypDYf9onQdwXyXFHH4mwLddK0zuM=
Subject key identifier:   CD:3F:40:19:7E:C5:28:CB:B1:B6:3B:43:11:18:C6:65:8B:2E:1B:8D
Certificate issuer:       /CN=AC555447BA62C39107F16BF572F82A417F728DBF
Certificate serial:       37EC70F57A644E2D41BC010A8827FD857C327943
Authority key identifier: AC:55:54:47:BA:62:C3:91:07:F1:6B:F5:72:F8:2A:41:7F:72:8D:BF
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AC555447BA62C39107F16BF572F82A417F728DBF.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/3993f350-b756-4916-8d84-484f025dffcc/0/323430343a383030303a313031303a3a2f34382d3438203d3e203137343531.roa
Signing time:             Thu 30 Sep 2021 00:01:05 +0000
ROA not before:           Wed 29 Sep 2021 23:56:05 +0000
ROA not after:            Fri 30 Sep 2022 00:01:05 +0000
asID:                     17451
IP address blocks:        2404:8000:1010::/48 maxlen: 48

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            37:ec:70:f5:7a:64:4e:2d:41:bc:01:0a:88:27:fd:85:7c:32:79:43
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AC555447BA62C39107F16BF572F82A417F728DBF
        Validity
            Not Before: Sep 29 23:56:05 2021 GMT
            Not After : Sep 30 00:01:05 2022 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:0d:ec:be:53:19:f8:87:39:fb:e4:6b:d2:d5:
                    8b:1a:ea:90:c3:d9:bd:28:cd:5e:4e:80:97:0d:dc:
                    af:c4:7b:4c:3c:cf:7d:27:80:d1:d0:94:1e:df:17:
                    1d:58:89:6b:81:b1:71:5c:be:56:d1:0c:08:24:61:
                    2b:13:88:ee:f0:bf:fc:6f:8c:56:27:ab:96:8e:51:
                    aa:72:75:04:1f:39:b2:06:13:da:e9:73:95:32:37:
                    ba:91:e8:b0:02:67:28:14:a2:f8:df:70:82:ec:a2:
                    01:06:ea:2a:4f:bb:44:28:cc:a7:d1:0c:ba:09:01:
                    46:ee:b1:78:52:58:a2:3d:5f:66:7b:e4:c5:12:ce:
                    e7:c2:2e:37:b0:68:d4:25:1c:4c:b8:27:c8:39:4b:
                    4b:ff:bb:e2:41:88:a9:39:15:e8:e0:99:69:0e:e7:
                    b4:07:a3:9c:d3:27:4f:11:a0:37:ca:e4:ea:6d:02:
                    ad:98:05:4d:89:f5:19:95:93:c7:22:67:6d:54:93:
                    eb:9a:86:9d:9b:4d:27:af:0d:6d:30:62:a1:4b:bc:
                    b2:c4:27:41:f0:2d:ab:73:ac:4d:b0:33:80:86:ad:
                    a8:21:55:98:1a:93:1e:b4:da:45:6f:70:e0:66:02:
                    0c:9b:d6:2a:1d:1a:87:87:b7:5a:5e:65:1b:dc:51:
                    27:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CD:3F:40:19:7E:C5:28:CB:B1:B6:3B:43:11:18:C6:65:8B:2E:1B:8D
            X509v3 Authority Key Identifier:
                keyid:AC:55:54:47:BA:62:C3:91:07:F1:6B:F5:72:F8:2A:41:7F:72:8D:BF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/3993f350-b756-4916-8d84-484f025dffcc/0/AC555447BA62C39107F16BF572F82A417F728DBF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AC555447BA62C39107F16BF572F82A417F728DBF.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/3993f350-b756-4916-8d84-484f025dffcc/0/323430343a383030303a313031303a3a2f34382d3438203d3e203137343531.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2404:8000:1010::/48

    Signature Algorithm: sha256WithRSAEncryption
         3a:0f:9c:1c:49:21:38:4a:c4:03:4d:11:9b:8f:49:c7:5e:36:
         97:ca:64:69:b7:ef:46:dd:c0:55:25:4d:42:88:77:6e:52:cb:
         b9:8a:78:31:9c:0b:b3:a5:68:03:83:b3:96:8e:fa:9c:82:6c:
         b9:53:63:0b:07:93:62:91:68:f7:2e:58:b7:aa:1c:91:83:9f:
         d0:dc:e7:4d:4e:5a:b1:3b:14:f1:e0:bb:98:e0:cd:8c:af:8e:
         67:88:28:52:0b:d2:f2:71:16:58:fb:c3:8c:09:03:6d:0f:89:
         0a:63:cc:1b:bb:c1:c2:8a:53:c4:67:db:72:1b:bc:a4:23:0d:
         10:f8:4b:e2:29:5d:d8:17:57:67:b3:de:8d:7d:60:fa:21:04:
         91:bc:5a:5e:d3:02:58:da:64:2f:bb:62:a3:76:9a:72:21:56:
         e0:0b:82:3d:45:dd:33:ce:21:12:d2:bc:41:62:f9:18:7a:a0:
         30:49:06:70:f3:c5:fd:0b:f1:e1:e5:47:1f:92:6e:e3:fd:3d:
         6b:f2:26:31:a8:cb:16:c0:72:64:8a:90:59:9f:79:f0:b6:2a:
         b1:7e:94:64:4c:25:8a:7a:ec:3c:2e:a0:88:5c:8b:6c:b1:26:
         ce:63:c0:26:7b:ed:15:39:f0:cb:c6:08:7f:95:0c:0c:6a:d3:
         f9:94:0c:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----