Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/3993f350-b756-4916-8d84-484f025dffcc/0/323430343a383030303a313031343a3a2f34382d3438203d3e203137343531.roa
File:                     323430343a383030303a313031343a3a2f34382d3438203d3e203137343531.roa (raw, json)
Hash identifier:          7lKFTnI6BqtfQkFWV0N4ANz36ZVZUhpWrpdgvKHpKY4=
Subject key identifier:   F6:8B:F1:3A:8C:F8:2D:48:1C:99:E6:76:00:BF:90:FB:5A:CE:BF:52
Certificate issuer:       /CN=AC555447BA62C39107F16BF572F82A417F728DBF
Certificate serial:       087085E65AA69BC3F52F16A5520E4A13263269D7
Authority key identifier: AC:55:54:47:BA:62:C3:91:07:F1:6B:F5:72:F8:2A:41:7F:72:8D:BF
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AC555447BA62C39107F16BF572F82A417F728DBF.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/3993f350-b756-4916-8d84-484f025dffcc/0/323430343a383030303a313031343a3a2f34382d3438203d3e203137343531.roa
Signing time:             Thu 30 Sep 2021 00:00:37 +0000
ROA not before:           Wed 29 Sep 2021 23:55:37 +0000
ROA not after:            Fri 30 Sep 2022 00:00:37 +0000
asID:                     17451
IP address blocks:        2404:8000:1014::/48 maxlen: 48

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            08:70:85:e6:5a:a6:9b:c3:f5:2f:16:a5:52:0e:4a:13:26:32:69:d7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AC555447BA62C39107F16BF572F82A417F728DBF
        Validity
            Not Before: Sep 29 23:55:37 2021 GMT
            Not After : Sep 30 00:00:37 2022 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:1a:59:a7:0d:4b:53:b3:62:10:da:47:cc:b6:
                    52:a6:fc:9e:01:65:6a:b9:46:9c:61:0b:71:91:69:
                    2d:5e:cd:2e:5c:ba:39:32:5b:a8:7a:a5:ca:2a:98:
                    9d:74:9c:b8:d7:5d:33:95:ed:c6:bb:af:1a:42:73:
                    36:67:12:78:7e:50:60:40:74:af:f6:11:84:0d:00:
                    26:c9:0e:15:1b:c4:1f:c5:59:ff:bb:b6:86:dd:c7:
                    d1:04:23:80:92:c6:b9:b3:20:87:30:5c:2f:0b:ed:
                    17:75:94:ab:88:03:c3:71:80:09:12:b3:56:d7:19:
                    37:99:30:6e:ba:00:7e:b8:10:17:1d:39:59:f5:a5:
                    f5:ac:ca:90:00:d7:04:81:43:de:9a:08:3e:1b:8b:
                    78:ff:17:6e:20:91:6f:23:95:59:86:a5:9c:73:33:
                    94:5e:05:f3:a7:2c:90:da:b6:c9:e3:a0:a4:5c:f5:
                    d1:1c:a1:0f:d1:4f:94:dc:d8:03:b9:6b:e0:31:f5:
                    09:84:e7:3e:9f:8d:93:37:ef:58:f0:00:45:91:25:
                    41:02:ad:f1:59:2e:35:57:a2:48:f8:63:26:f4:d5:
                    c1:0e:a4:cb:9e:44:2b:eb:5a:d6:99:a0:b3:73:3d:
                    bc:7b:2f:a4:bd:ff:80:2f:89:6e:a8:cf:04:a0:7c:
                    b8:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F6:8B:F1:3A:8C:F8:2D:48:1C:99:E6:76:00:BF:90:FB:5A:CE:BF:52
            X509v3 Authority Key Identifier:
                keyid:AC:55:54:47:BA:62:C3:91:07:F1:6B:F5:72:F8:2A:41:7F:72:8D:BF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/3993f350-b756-4916-8d84-484f025dffcc/0/AC555447BA62C39107F16BF572F82A417F728DBF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AC555447BA62C39107F16BF572F82A417F728DBF.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/3993f350-b756-4916-8d84-484f025dffcc/0/323430343a383030303a313031343a3a2f34382d3438203d3e203137343531.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2404:8000:1014::/48

    Signature Algorithm: sha256WithRSAEncryption
         4a:d7:1b:cb:ab:77:09:92:05:c1:cf:8d:80:f8:63:cc:1e:92:
         fc:52:eb:fe:37:5e:c7:f6:5c:74:58:04:c4:58:67:c1:86:ed:
         5a:b8:d9:0b:40:71:bf:23:c9:6f:5e:51:d6:11:93:bd:98:b4:
         cb:5d:8e:e3:ff:ab:4c:6a:ba:a6:7e:c6:a2:89:04:7a:df:51:
         20:c2:f2:70:5b:e7:e5:fe:5e:0c:76:3a:56:d4:6e:17:bf:7d:
         c7:03:07:27:14:55:f7:71:32:a9:61:db:4d:50:eb:de:73:6c:
         d8:3e:01:40:63:b8:44:a4:ea:f6:54:b1:09:83:f1:41:7e:7f:
         79:1a:8a:d9:17:ef:31:7b:d7:de:94:03:83:c7:e0:54:45:6a:
         41:1e:1c:08:38:8a:42:74:d0:b7:20:53:3a:1d:a6:4e:0f:e8:
         4f:4a:a6:14:a0:b5:a8:f6:f2:a8:8a:de:96:7e:74:9f:a9:07:
         86:05:d6:be:05:f5:e9:1e:af:8b:b4:1e:d4:19:ed:4e:c9:04:
         1e:31:09:9f:99:b3:f5:b2:59:43:7d:5d:cf:e2:45:ba:07:5b:
         d0:64:26:00:b7:06:a5:c3:da:7d:57:83:ff:f3:83:eb:b2:7f:
         d7:ea:7b:56:92:f6:ea:2d:ea:44:36:2f:3b:d2:db:04:d8:15:
         86:bb:76:48
-----BEGIN CERTIFICATE-----
MIIHLzCCBhegAwIBAgIUCHCF5lqmm8P1LxalUg5KEyYyadcwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQUM1NTU0NDdCQTYyQzM5MTA3RjE2QkY1NzJGODJBNDE3
RjcyOERCRjAeFw0yMTA5MjkyMzU1MzdaFw0yMjA5MzAwMDAwMzdaMIICLTGCAikw
ggIlBgNVBAMTggIcMzA4MjAxMEEwMjgyMDEwMTAwQTUxQTU5QTcwRDRCNTNCMzYy
MTBEQTQ3Q0NCNjUyQTZGQzlFMDE2NTZBQjk0NjlDNjEwQjcxOTE2OTJENUVDRDJF
NUNCQTM5MzI1QkE4N0FBNUNBMkE5ODlENzQ5Q0I4RDc1RDMzOTVFREM2QkJBRjFB
NDI3MzM2NjcxMjc4N0U1MDYwNDA3NEFGRjYxMTg0MEQwMDI2QzkwRTE1MUJDNDFG
QzU1OUZGQkJCNjg2RERDN0QxMDQyMzgwOTJDNkI5QjMyMDg3MzA1QzJGMEJFRDE3
NzU5NEFCODgwM0MzNzE4MDA5MTJCMzU2RDcxOTM3OTkzMDZFQkEwMDdFQjgxMDE3
MUQzOTU5RjVBNUY1QUNDQTkwMDBENzA0ODE0M0RFOUEwODNFMUI4Qjc4RkYxNzZF
MjA5MTZGMjM5NTU5ODZBNTlDNzMzMzk0NUUwNUYzQTcyQzkwREFCNkM5RTNBMEE0
NUNGNUQxMUNBMTBGRDE0Rjk0RENEODAzQjk2QkUwMzFGNTA5ODRFNzNFOUY4RDkz
MzdFRjU4RjAwMDQ1OTEyNTQxMDJBREYxNTkyRTM1NTdBMjQ4Rjg2MzI2RjRENUMx
MEVBNENCOUU0NDJCRUI1QUQ2OTlBMEIzNzMzREJDN0IyRkE0QkRGRjgwMkY4OTZF
QThDRjA0QTA3Q0I4NzEwMjAzMDEwMDAxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8A
MIIBCgKCAQEApRpZpw1LU7NiENpHzLZSpvyeAWVquUacYQtxkWktXs0uXLo5Mluo
eqXKKpiddJy4110zle3Gu68aQnM2ZxJ4flBgQHSv9hGEDQAmyQ4VG8QfxVn/u7aG
3cfRBCOAksa5syCHMFwvC+0XdZSriAPDcYAJErNW1xk3mTBuugB+uBAXHTlZ9aX1
rMqQANcEgUPemgg+G4t4/xduIJFvI5VZhqWcczOUXgXzpyyQ2rbJ46CkXPXRHKEP
0U+U3NgDuWvgMfUJhOc+n42TN+9Y8ABFkSVBAq3xWS41V6JI+GMm9NXBDqTLnkQr
61rWmaCzcz28ey+kvf+AL4luqM8EoHy4cQIDAQABo4ICPTCCAjkwHQYDVR0OBBYE
FPaL8TqM+C1IHJnmdgC/kPtazr9SMB8GA1UdIwQYMBaAFKxVVEe6YsORB/Fr9XL4
KkF/co2/MA4GA1UdDwEB/wQEAwIHgDCBhQYDVR0fBH4wfDB6oHigdoZ0cnN5bmM6
Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMzk5M2YzNTAtYjc1Ni00OTE2LThk
ODQtNDg0ZjAyNWRmZmNjLzAvQUM1NTU0NDdCQTYyQzM5MTA3RjE2QkY1NzJGODJB
NDE3RjcyOERCRi5jcmwwdAYIKwYBBQUHAQEEaDBmMGQGCCsGAQUFBzAChlhyc3lu
YzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9JRE5JQy1JRC8yL0FDNTU1NDQ3
QkE2MkMzOTEwN0YxNkJGNTcyRjgyQTQxN0Y3MjhEQkYuY2VyMIGqBggrBgEFBQcB
CwSBnTCBmjCBlwYIKwYBBQUHMAuGgYpyc3luYzovL3JlcG8tcnBraS5pZG5pYy5u
ZXQvcmVwby8zOTkzZjM1MC1iNzU2LTQ5MTYtOGQ4NC00ODRmMDI1ZGZmY2MvMC8z
MjM0MzAzNDNhMzgzMDMwMzAzYTMxMzAzMTM0M2EzYTJmMzQzODJkMzQzODIwM2Qz
ZTIwMzEzNzM0MzUzMS5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAiBggr
BgEFBQcBBwEB/wQTMBEwDwQCAAIwCQMHACQEgAAQFDANBgkqhkiG9w0BAQsFAAOC
AQEAStcby6t3CZIFwc+NgPhjzB6S/FLr/jdex/ZcdFgExFhnwYbtWrjZC0BxvyPJ
b15R1hGTvZi0y12O4/+rTGq6pn7GookEet9RIMLycFvn5f5eDHY6VtRuF799xwMH
JxRV93EyqWHbTVDr3nNs2D4BQGO4RKTq9lSxCYPxQX5/eRqK2RfvMXvX3pQDg8fg
VEVqQR4cCDiKQnTQtyBTOh2mTg/oT0qmFKC1qPbyqIreln50n6kHhgXWvgX16R6v
i7Qe1BntTskEHjEJn5mz9bJZQ31dz+JFugdb0GQmALcGpcPafVeD//OD67J/1+p7
VpL26i3qRDYvO9LbBNgVhrt2SA==
-----END CERTIFICATE-----