Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/3993f350-b756-4916-8d84-484f025dffcc/0/323430343a383030303a313031313a3a2f34382d3438203d3e203137343531.roa
File:                     323430343a383030303a313031313a3a2f34382d3438203d3e203137343531.roa (raw, json)
Hash identifier:          nyARh1T6Tb1tu9bVZweKzoVxtyRnfwdeUgH45I8X7UA=
Subject key identifier:   D7:E3:A5:2F:B7:2A:27:5B:B2:9E:3B:A8:33:91:9A:35:24:0B:FE:20
Certificate issuer:       /CN=AC555447BA62C39107F16BF572F82A417F728DBF
Certificate serial:       5620655ED7262ABD676B9C821A76101E386423E1
Authority key identifier: AC:55:54:47:BA:62:C3:91:07:F1:6B:F5:72:F8:2A:41:7F:72:8D:BF
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AC555447BA62C39107F16BF572F82A417F728DBF.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/3993f350-b756-4916-8d84-484f025dffcc/0/323430343a383030303a313031313a3a2f34382d3438203d3e203137343531.roa
Signing time:             Thu 30 Sep 2021 00:01:05 +0000
ROA not before:           Wed 29 Sep 2021 23:56:05 +0000
ROA not after:            Fri 30 Sep 2022 00:01:05 +0000
asID:                     17451
IP address blocks:        2404:8000:1011::/48 maxlen: 48

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            56:20:65:5e:d7:26:2a:bd:67:6b:9c:82:1a:76:10:1e:38:64:23:e1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AC555447BA62C39107F16BF572F82A417F728DBF
        Validity
            Not Before: Sep 29 23:56:05 2021 GMT
            Not After : Sep 30 00:01:05 2022 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:87:60:54:0c:60:6a:59:c1:c4:94:65:50:1c:
                    cd:65:d1:ce:98:20:94:63:25:dc:28:bc:0c:68:d4:
                    60:47:43:65:97:af:d3:26:5a:97:a1:7a:57:28:04:
                    6f:fa:1b:26:bd:e8:28:fe:80:fc:6e:7b:68:f7:2e:
                    91:98:c0:89:36:60:5e:70:5d:59:ff:84:4d:fe:db:
                    3e:a1:b6:79:7f:1f:4b:32:33:23:9f:fa:5b:0e:6b:
                    cf:fb:78:44:00:eb:0f:72:1a:42:ef:99:ce:eb:17:
                    90:15:c7:eb:66:83:a5:75:39:24:a5:f1:70:7a:d9:
                    aa:b7:76:3f:f6:d2:99:ae:0c:fd:0a:ce:63:ea:5d:
                    7c:70:12:2e:63:85:d6:75:69:45:12:d7:8b:c5:db:
                    3b:08:18:41:b1:1e:21:3b:b6:a4:a4:70:b5:cf:06:
                    52:ea:24:83:a5:8f:f2:44:e3:ad:6e:eb:7b:6c:cb:
                    58:f8:1d:4a:dd:6b:08:9c:dc:02:e5:d3:c5:52:98:
                    44:ed:68:19:9c:92:a0:a1:fb:dc:a7:fc:47:06:7d:
                    70:aa:2e:ff:d3:f2:c0:0a:07:89:9a:8f:52:b3:a4:
                    50:01:b2:ac:6b:6a:e4:fa:da:fe:63:24:7c:d0:1b:
                    af:f0:36:ce:3d:96:40:27:99:be:7f:04:94:58:a0:
                    60:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D7:E3:A5:2F:B7:2A:27:5B:B2:9E:3B:A8:33:91:9A:35:24:0B:FE:20
            X509v3 Authority Key Identifier:
                keyid:AC:55:54:47:BA:62:C3:91:07:F1:6B:F5:72:F8:2A:41:7F:72:8D:BF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/3993f350-b756-4916-8d84-484f025dffcc/0/AC555447BA62C39107F16BF572F82A417F728DBF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AC555447BA62C39107F16BF572F82A417F728DBF.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/3993f350-b756-4916-8d84-484f025dffcc/0/323430343a383030303a313031313a3a2f34382d3438203d3e203137343531.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2404:8000:1011::/48

    Signature Algorithm: sha256WithRSAEncryption
         4c:ac:25:ef:9e:67:35:06:88:c4:d8:33:7c:c8:5a:23:ef:ea:
         c3:c6:fc:4e:fa:49:d1:a7:02:98:7a:9f:55:f1:1b:48:bc:5e:
         91:98:d6:95:32:7b:1b:f2:0a:6f:48:20:0b:3b:ef:72:15:c7:
         01:db:7f:bc:96:a5:9e:70:6e:09:fc:db:a9:1f:75:95:a1:48:
         c7:6e:17:b8:d6:18:98:5d:4f:23:b7:6e:ba:8b:c5:59:0a:a8:
         96:57:94:11:3c:e3:cd:da:70:05:a6:0b:27:28:05:60:ec:e7:
         e0:8a:a2:75:be:06:f3:d3:e5:04:f3:0e:14:5a:12:a2:9f:f0:
         82:d7:aa:f7:62:0d:82:fd:c4:54:50:67:23:8d:b9:c9:95:5f:
         63:ec:ba:87:d1:f9:21:7f:41:42:03:3d:54:21:71:bf:82:fa:
         e2:25:e2:f0:db:04:74:b1:03:2b:ac:68:d9:a9:9a:c8:44:03:
         c4:8b:24:05:3e:e0:03:12:82:08:8c:97:eb:4b:a3:f5:b3:1e:
         2a:f2:9a:01:29:f8:f8:73:f8:9e:3a:86:d3:78:a6:a1:4c:ee:
         22:be:16:e9:9a:df:e5:57:bd:dc:95:d6:fa:10:c7:80:f2:62:
         96:10:b7:d9:ea:33:a6:11:6a:13:9d:f0:be:ec:19:e2:76:ad:
         ad:55:d8:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----