Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/3993f350-b756-4916-8d84-484f025dffcc/0/323430343a383030303a313031393a3a2f34382d3438203d3e203137343531.roa
File:                     323430343a383030303a313031393a3a2f34382d3438203d3e203137343531.roa (raw, json)
Hash identifier:          w0Tp+21iH5AYCXEP1rP10sLsqCoOu0nW6MBFVUC7gbk=
Subject key identifier:   11:20:6E:20:CC:E6:3D:9A:F7:63:6C:02:F9:FC:5F:FB:06:9E:1E:19
Certificate issuer:       /CN=AC555447BA62C39107F16BF572F82A417F728DBF
Certificate serial:       637BE91DDFD77E6E7CAE25BA0DB6A3D9D6B32282
Authority key identifier: AC:55:54:47:BA:62:C3:91:07:F1:6B:F5:72:F8:2A:41:7F:72:8D:BF
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AC555447BA62C39107F16BF572F82A417F728DBF.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/3993f350-b756-4916-8d84-484f025dffcc/0/323430343a383030303a313031393a3a2f34382d3438203d3e203137343531.roa
Signing time:             Thu 30 Sep 2021 00:00:13 +0000
ROA not before:           Wed 29 Sep 2021 23:55:13 +0000
ROA not after:            Fri 30 Sep 2022 00:00:13 +0000
asID:                     17451
IP address blocks:        2404:8000:1019::/48 maxlen: 48

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            63:7b:e9:1d:df:d7:7e:6e:7c:ae:25:ba:0d:b6:a3:d9:d6:b3:22:82
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AC555447BA62C39107F16BF572F82A417F728DBF
        Validity
            Not Before: Sep 29 23:55:13 2021 GMT
            Not After : Sep 30 00:00:13 2022 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:4a:75:9a:7d:df:84:c6:44:47:d1:ca:60:25:
                    31:83:8a:ef:28:58:f2:1c:1c:43:f5:ef:e7:c8:ef:
                    23:2c:56:4f:63:4b:2d:a3:07:9f:99:cb:87:58:a8:
                    45:e3:ee:43:e8:1a:98:75:4a:53:09:9b:26:5f:2c:
                    43:4d:00:a7:5a:ea:f0:5e:20:36:c2:72:96:0e:a8:
                    83:ad:cb:eb:fb:57:77:b4:c2:0e:d4:f5:2f:16:eb:
                    f4:38:7f:ce:cf:08:d8:19:7f:79:58:c2:6f:40:34:
                    a8:5b:d1:5c:7b:92:74:b5:f9:38:55:76:c2:63:41:
                    ad:e8:3e:ef:8b:58:66:23:c9:e1:fd:2a:4d:a6:52:
                    36:c4:93:6d:20:29:e7:13:0c:8c:85:e0:dd:30:fd:
                    b7:af:db:ed:ea:01:c5:8b:aa:67:2e:05:80:da:5f:
                    90:80:a8:9c:29:1e:d2:c2:6b:99:ed:f7:84:31:5e:
                    cd:c2:8f:aa:12:2d:1a:2e:8e:73:b6:68:d8:ad:b1:
                    7b:c5:7b:3d:ca:9c:39:98:c4:e8:ad:2b:45:63:ad:
                    b6:b2:6c:fe:4a:03:e6:68:33:97:ff:56:57:2d:fa:
                    8a:04:a1:b1:25:d5:e5:db:26:ce:62:89:d5:44:6e:
                    a0:8d:59:76:e1:2e:39:88:9f:f7:9f:fc:4c:83:0a:
                    0c:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                11:20:6E:20:CC:E6:3D:9A:F7:63:6C:02:F9:FC:5F:FB:06:9E:1E:19
            X509v3 Authority Key Identifier:
                keyid:AC:55:54:47:BA:62:C3:91:07:F1:6B:F5:72:F8:2A:41:7F:72:8D:BF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/3993f350-b756-4916-8d84-484f025dffcc/0/AC555447BA62C39107F16BF572F82A417F728DBF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AC555447BA62C39107F16BF572F82A417F728DBF.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/3993f350-b756-4916-8d84-484f025dffcc/0/323430343a383030303a313031393a3a2f34382d3438203d3e203137343531.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2404:8000:1019::/48

    Signature Algorithm: sha256WithRSAEncryption
         1e:98:f9:58:a1:ed:8f:2b:37:71:0b:c1:d4:56:14:ef:b5:13:
         3a:dc:d2:4a:a0:56:ce:62:c6:07:25:69:3a:34:63:94:07:a9:
         dd:a8:60:68:fb:64:56:0d:be:fe:27:b5:6f:92:cb:4f:a6:3d:
         d7:d3:0a:fc:df:3d:40:fd:a9:54:b0:af:ae:c2:48:8f:4c:00:
         fb:57:cb:ab:fb:0c:50:2b:07:b2:91:39:c0:64:84:53:8a:f3:
         35:1e:c9:53:42:3d:d8:7d:87:57:40:5f:8a:a7:a7:93:f8:c4:
         44:b9:fd:dd:e1:15:0b:fc:20:16:b2:16:d1:b4:35:a3:7e:71:
         9e:8d:f3:3d:7b:1b:30:88:28:fe:bc:5d:83:c5:c6:48:c4:50:
         81:9a:9d:34:20:df:43:b8:4c:94:9f:00:8e:c5:b6:f5:9c:40:
         24:fc:ef:2f:d4:f5:7b:c2:a2:97:16:40:7c:3d:1b:a6:06:af:
         87:23:9c:a4:80:2c:b1:ad:f4:73:c0:77:17:02:ce:5e:63:8c:
         52:06:cc:7b:33:0b:2f:ac:ab:33:60:ef:de:d4:49:ce:85:6a:
         95:4f:d3:98:50:ec:57:c0:28:bb:00:fd:85:28:62:4c:e9:22:
         39:38:c0:46:5f:ca:1a:a8:50:ab:3f:46:18:45:da:b5:cf:7f:
         cb:9b:50:47
-----BEGIN CERTIFICATE-----
MIIHLzCCBhegAwIBAgIUY3vpHd/Xfm58riW6Dbaj2dazIoIwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQUM1NTU0NDdCQTYyQzM5MTA3RjE2QkY1NzJGODJBNDE3
RjcyOERCRjAeFw0yMTA5MjkyMzU1MTNaFw0yMjA5MzAwMDAwMTNaMIICLTGCAikw
ggIlBgNVBAMTggIcMzA4MjAxMEEwMjgyMDEwMTAwQUU0QTc1OUE3RERGODRDNjQ0
NDdEMUNBNjAyNTMxODM4QUVGMjg1OEYyMUMxQzQzRjVFRkU3QzhFRjIzMkM1NjRG
NjM0QjJEQTMwNzlGOTlDQjg3NThBODQ1RTNFRTQzRTgxQTk4NzU0QTUzMDk5QjI2
NUYyQzQzNEQwMEE3NUFFQUYwNUUyMDM2QzI3Mjk2MEVBODgzQURDQkVCRkI1Nzc3
QjRDMjBFRDRGNTJGMTZFQkY0Mzg3RkNFQ0YwOEQ4MTk3Rjc5NThDMjZGNDAzNEE4
NUJEMTVDN0I5Mjc0QjVGOTM4NTU3NkMyNjM0MUFERTgzRUVGOEI1ODY2MjNDOUUx
RkQyQTREQTY1MjM2QzQ5MzZEMjAyOUU3MTMwQzhDODVFMEREMzBGREI3QUZEQkVE
RUEwMUM1OEJBQTY3MkUwNTgwREE1RjkwODBBODlDMjkxRUQyQzI2Qjk5RURGNzg0
MzE1RUNEQzI4RkFBMTIyRDFBMkU4RTczQjY2OEQ4QURCMTdCQzU3QjNEQ0E5QzM5
OThDNEU4QUQyQjQ1NjNBREI2QjI2Q0ZFNEEwM0U2NjgzMzk3RkY1NjU3MkRGQThB
MDRBMUIxMjVENUU1REIyNkNFNjI4OUQ1NDQ2RUEwOEQ1OTc2RTEyRTM5ODg5RkY3
OUZGQzRDODMwQTBDNDcwMjAzMDEwMDAxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8A
MIIBCgKCAQEArkp1mn3fhMZER9HKYCUxg4rvKFjyHBxD9e/nyO8jLFZPY0stowef
mcuHWKhF4+5D6BqYdUpTCZsmXyxDTQCnWurwXiA2wnKWDqiDrcvr+1d3tMIO1PUv
Fuv0OH/OzwjYGX95WMJvQDSoW9Fce5J0tfk4VXbCY0Gt6D7vi1hmI8nh/SpNplI2
xJNtICnnEwyMheDdMP23r9vt6gHFi6pnLgWA2l+QgKicKR7SwmuZ7feEMV7Nwo+q
Ei0aLo5ztmjYrbF7xXs9ypw5mMTorStFY622smz+SgPmaDOX/1ZXLfqKBKGxJdXl
2ybOYonVRG6gjVl24S45iJ/3n/xMgwoMRwIDAQABo4ICPTCCAjkwHQYDVR0OBBYE
FBEgbiDM5j2a92NsAvn8X/sGnh4ZMB8GA1UdIwQYMBaAFKxVVEe6YsORB/Fr9XL4
KkF/co2/MA4GA1UdDwEB/wQEAwIHgDCBhQYDVR0fBH4wfDB6oHigdoZ0cnN5bmM6
Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMzk5M2YzNTAtYjc1Ni00OTE2LThk
ODQtNDg0ZjAyNWRmZmNjLzAvQUM1NTU0NDdCQTYyQzM5MTA3RjE2QkY1NzJGODJB
NDE3RjcyOERCRi5jcmwwdAYIKwYBBQUHAQEEaDBmMGQGCCsGAQUFBzAChlhyc3lu
YzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9JRE5JQy1JRC8yL0FDNTU1NDQ3
QkE2MkMzOTEwN0YxNkJGNTcyRjgyQTQxN0Y3MjhEQkYuY2VyMIGqBggrBgEFBQcB
CwSBnTCBmjCBlwYIKwYBBQUHMAuGgYpyc3luYzovL3JlcG8tcnBraS5pZG5pYy5u
ZXQvcmVwby8zOTkzZjM1MC1iNzU2LTQ5MTYtOGQ4NC00ODRmMDI1ZGZmY2MvMC8z
MjM0MzAzNDNhMzgzMDMwMzAzYTMxMzAzMTM5M2EzYTJmMzQzODJkMzQzODIwM2Qz
ZTIwMzEzNzM0MzUzMS5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAiBggr
BgEFBQcBBwEB/wQTMBEwDwQCAAIwCQMHACQEgAAQGTANBgkqhkiG9w0BAQsFAAOC
AQEAHpj5WKHtjys3cQvB1FYU77UTOtzSSqBWzmLGByVpOjRjlAep3ahgaPtkVg2+
/ie1b5LLT6Y919MK/N89QP2pVLCvrsJIj0wA+1fLq/sMUCsHspE5wGSEU4rzNR7J
U0I92H2HV0Bfiqenk/jERLn93eEVC/wgFrIW0bQ1o35xno3zPXsbMIgo/rxdg8XG
SMRQgZqdNCDfQ7hMlJ8AjsW29ZxAJPzvL9T1e8KilxZAfD0bpgavhyOcpIAssa30
c8B3FwLOXmOMUgbMezMLL6yrM2Dv3tRJzoVqlU/TmFDsV8AouwD9hShiTOkiOTjA
Rl/KGqhQqz9GGEXatc9/y5tQRw==
-----END CERTIFICATE-----