Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/3993f350-b756-4916-8d84-484f025dffcc/0/323430343a383030303a31303a3a2f34382d3438203d3e203137343531.roa
File:                     323430343a383030303a31303a3a2f34382d3438203d3e203137343531.roa (raw, json)
Hash identifier:          Gpmkq81vMO52FCsilOMYv2isAILD3e3zHlJdtU/qaac=
Subject key identifier:   CB:CE:05:92:BE:05:FA:6D:16:76:4D:9C:4D:2B:B8:6A:31:63:55:A4
Certificate issuer:       /CN=AC555447BA62C39107F16BF572F82A417F728DBF
Certificate serial:       23461A19E0371EAB531120B9FBFF26211679D808
Authority key identifier: AC:55:54:47:BA:62:C3:91:07:F1:6B:F5:72:F8:2A:41:7F:72:8D:BF
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AC555447BA62C39107F16BF572F82A417F728DBF.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/3993f350-b756-4916-8d84-484f025dffcc/0/323430343a383030303a31303a3a2f34382d3438203d3e203137343531.roa
Signing time:             Thu 30 Sep 2021 00:00:20 +0000
ROA not before:           Wed 29 Sep 2021 23:55:20 +0000
ROA not after:            Fri 30 Sep 2022 00:00:20 +0000
asID:                     17451
IP address blocks:        2404:8000:10::/48 maxlen: 48

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            23:46:1a:19:e0:37:1e:ab:53:11:20:b9:fb:ff:26:21:16:79:d8:08
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AC555447BA62C39107F16BF572F82A417F728DBF
        Validity
            Not Before: Sep 29 23:55:20 2021 GMT
            Not After : Sep 30 00:00:20 2022 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:7d:eb:fa:bd:c7:e1:46:65:c2:7b:f7:5d:c1:
                    3b:d2:4f:fa:40:04:b1:c5:d6:08:e0:e8:3e:66:7b:
                    d7:2d:c3:ea:34:7c:9b:29:bb:3d:db:63:99:23:65:
                    bb:ef:14:4c:61:9b:6d:68:72:57:ac:8a:7a:27:86:
                    7a:a7:84:d9:de:82:23:8e:be:87:c7:b7:93:38:ef:
                    1a:a7:bb:d8:8b:66:a9:31:01:76:68:71:87:ca:d2:
                    e9:e7:af:06:36:11:d1:a6:6d:3d:ef:db:d4:d2:8f:
                    11:f5:f0:5c:21:9b:7d:67:28:83:91:c6:b7:33:1e:
                    0b:25:d1:d1:62:3b:fd:70:db:0f:50:92:ab:8d:dd:
                    bb:9c:ea:cd:25:24:e9:97:79:f0:1d:60:bc:94:8b:
                    8c:fe:6b:10:56:ae:ff:9b:44:26:47:5f:c9:49:35:
                    d3:96:f5:4a:bb:e5:40:3f:3b:38:0d:89:28:ea:c1:
                    a9:59:bd:51:63:b2:4f:2a:3d:c2:80:8e:50:6b:5d:
                    6f:01:25:3e:79:51:58:9e:ef:bb:ae:da:11:45:0b:
                    14:2a:20:4a:31:21:01:9d:cd:61:8b:50:e7:77:1d:
                    b5:ee:a2:c0:39:b2:1b:30:ce:3e:42:6b:84:20:e1:
                    c9:cb:71:8b:ad:77:e0:0b:8d:26:ed:f6:a8:04:db:
                    e8:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CB:CE:05:92:BE:05:FA:6D:16:76:4D:9C:4D:2B:B8:6A:31:63:55:A4
            X509v3 Authority Key Identifier:
                keyid:AC:55:54:47:BA:62:C3:91:07:F1:6B:F5:72:F8:2A:41:7F:72:8D:BF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/3993f350-b756-4916-8d84-484f025dffcc/0/AC555447BA62C39107F16BF572F82A417F728DBF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AC555447BA62C39107F16BF572F82A417F728DBF.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/3993f350-b756-4916-8d84-484f025dffcc/0/323430343a383030303a31303a3a2f34382d3438203d3e203137343531.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2404:8000:10::/48

    Signature Algorithm: sha256WithRSAEncryption
         9d:6a:be:bb:c1:8f:51:03:c4:0a:26:12:e4:9d:1e:6e:59:28:
         d0:b4:ea:b8:53:6a:4a:88:82:7c:f9:44:f1:ef:5a:ef:cc:08:
         27:26:0a:2b:61:1e:ce:83:49:d9:5b:51:3c:c3:7c:8f:91:89:
         9a:ad:ea:52:de:48:d9:9d:5f:1f:06:dc:37:a2:d4:c3:3e:6c:
         3b:6a:a3:9e:60:cd:c6:42:18:da:fd:12:3d:72:2f:ed:37:4f:
         cd:cc:2d:28:9f:2a:42:ea:06:18:9b:b3:e7:68:d3:ff:6a:66:
         2d:ba:d8:8d:da:88:89:5b:67:94:37:03:9f:dc:8f:22:78:2a:
         cf:45:73:34:33:02:b6:fd:15:ee:6e:a0:4e:b1:2f:51:7b:fe:
         6c:48:a2:a4:0c:fa:a8:85:44:53:25:2d:4c:bf:c3:18:f6:9e:
         7e:05:ab:c8:3c:b3:21:1d:6c:9b:6b:dc:51:c0:e7:cb:e9:82:
         8c:fa:74:69:b3:b3:37:62:e5:53:93:0d:9c:8e:a8:cf:56:66:
         45:cc:ef:5d:3f:34:d1:3f:e8:2c:1c:b7:82:24:7f:f9:90:f1:
         69:f8:eb:3d:95:72:65:34:55:c0:6a:cf:70:38:77:e2:1e:20:
         44:ff:58:ea:a3:35:62:4d:0f:bc:fc:56:68:12:5e:c1:51:d2:
         10:b4:77:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----