Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/3993f350-b756-4916-8d84-484f025dffcc/0/323430343a383030303a313130303a3a2f34382d3438203d3e203137343531.roa
File:                     323430343a383030303a313130303a3a2f34382d3438203d3e203137343531.roa (raw, json)
Hash identifier:          UZ6A6rrjtqgJBYitRPJLk2oYPYSUlGwbQFOoAo3Shjk=
Subject key identifier:   02:44:99:C6:4E:45:A4:8B:7E:E8:73:43:8D:8E:73:A9:01:D3:3C:AC
Certificate issuer:       /CN=AC555447BA62C39107F16BF572F82A417F728DBF
Certificate serial:       2B1C3B946C5EE596A59378F9F626A9528937A489
Authority key identifier: AC:55:54:47:BA:62:C3:91:07:F1:6B:F5:72:F8:2A:41:7F:72:8D:BF
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AC555447BA62C39107F16BF572F82A417F728DBF.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/3993f350-b756-4916-8d84-484f025dffcc/0/323430343a383030303a313130303a3a2f34382d3438203d3e203137343531.roa
Signing time:             Fri 15 Oct 2021 03:00:01 +0000
ROA not before:           Fri 15 Oct 2021 02:55:01 +0000
ROA not after:            Sat 15 Oct 2022 03:00:01 +0000
asID:                     17451
IP address blocks:        2404:8000:1100::/48 maxlen: 48

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2b:1c:3b:94:6c:5e:e5:96:a5:93:78:f9:f6:26:a9:52:89:37:a4:89
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AC555447BA62C39107F16BF572F82A417F728DBF
        Validity
            Not Before: Oct 15 02:55:01 2021 GMT
            Not After : Oct 15 03:00:01 2022 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:f1:39:ac:2e:48:ee:83:31:19:5d:3d:fd:5e:
                    1c:5f:b0:d4:3c:1f:4d:01:23:f5:4c:64:ba:2c:97:
                    7f:39:18:69:1c:f0:c7:fc:a1:d0:6e:02:bf:87:d5:
                    b5:c3:50:53:67:96:d3:ce:d6:91:de:e3:f2:ab:7a:
                    af:eb:8e:81:c4:21:ec:e9:23:75:7d:bb:3a:9e:8e:
                    ce:67:fd:6f:f6:c6:93:ca:ac:63:b8:1d:22:25:7f:
                    2a:23:b5:10:59:b1:3f:84:80:94:87:4c:58:f9:4f:
                    87:07:28:fa:3a:2f:61:9c:b3:3f:1a:26:80:0d:3c:
                    f8:b0:f8:f0:47:65:bc:96:6c:9f:fd:75:db:d1:ef:
                    d1:c5:b1:32:f8:bc:4d:f4:c3:aa:e0:f8:32:b6:32:
                    8c:73:12:b7:e4:ee:50:33:51:8d:28:e5:bd:34:ae:
                    fb:7a:54:a0:50:25:f1:97:cb:b9:95:5e:20:20:a8:
                    39:7c:5f:b6:f0:b8:e1:d9:c6:01:48:e4:54:41:d7:
                    51:f7:a1:e0:96:b7:fe:51:1f:d6:4a:72:fc:50:61:
                    15:c8:46:de:25:36:e5:6f:d4:09:cc:d4:99:62:cf:
                    ef:dc:4d:bb:2d:e0:a9:5a:9b:23:1e:59:27:bf:62:
                    05:a4:ad:08:4a:16:f3:1d:90:65:58:ce:01:0f:25:
                    6c:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                02:44:99:C6:4E:45:A4:8B:7E:E8:73:43:8D:8E:73:A9:01:D3:3C:AC
            X509v3 Authority Key Identifier:
                keyid:AC:55:54:47:BA:62:C3:91:07:F1:6B:F5:72:F8:2A:41:7F:72:8D:BF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/3993f350-b756-4916-8d84-484f025dffcc/0/AC555447BA62C39107F16BF572F82A417F728DBF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AC555447BA62C39107F16BF572F82A417F728DBF.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/3993f350-b756-4916-8d84-484f025dffcc/0/323430343a383030303a313130303a3a2f34382d3438203d3e203137343531.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2404:8000:1100::/48

    Signature Algorithm: sha256WithRSAEncryption
         7e:cb:72:f8:ce:e7:af:93:a4:16:6a:ae:2b:00:21:7c:da:6f:
         ae:47:40:2e:cd:b2:dd:75:2f:60:23:0d:f3:f2:1f:c7:fa:42:
         d1:cd:f1:8a:b6:a3:de:88:ae:bc:0d:21:c8:41:9a:35:c8:62:
         7e:10:0e:a4:e8:c2:a1:ee:69:a0:a8:1d:1e:d3:e0:3e:29:7c:
         9d:cf:09:6e:41:0e:57:58:6b:2b:2a:8b:ef:61:ba:6b:18:e9:
         ed:47:a1:42:5d:c0:bd:39:e2:8b:e1:f6:db:3d:74:2d:52:d6:
         55:21:78:ca:8c:07:00:89:78:23:f6:36:10:dc:29:9f:ff:35:
         a0:a5:e4:05:cc:eb:5a:c7:60:c2:6c:eb:a8:9e:c3:66:34:40:
         42:bb:22:a7:c7:89:5b:dc:46:3a:c9:e4:77:6f:65:ce:11:7c:
         9a:36:2a:df:6c:5f:77:d7:0d:09:6f:63:82:ec:8d:64:7d:06:
         54:3e:58:08:fa:2c:fe:be:e0:99:d9:5d:21:36:c7:81:a5:77:
         ca:fd:3a:82:e1:a4:b1:ca:9e:60:0e:e7:76:85:53:b9:5f:3c:
         d6:7a:a0:ee:1c:ab:f1:41:12:7a:07:1c:20:c5:da:a2:cd:1c:
         ef:0b:da:9a:a7:5a:2b:b7:b6:5a:cd:da:c6:da:f7:68:11:a1:
         06:70:31:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----