Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/3993f350-b756-4916-8d84-484f025dffcc/0/323430343a383030303a31323a3a2f34382d3438203d3e203137343531.roa
File:                     323430343a383030303a31323a3a2f34382d3438203d3e203137343531.roa (raw, json)
Hash identifier:          nQb2Wz88Cl5AW2xDLmm2TO/cpAe+rPJYIZXRbZ5KbPY=
Subject key identifier:   E7:4B:C6:04:23:AE:79:D1:5F:4A:87:17:88:75:0F:87:E7:EB:2C:F5
Certificate issuer:       /CN=AC555447BA62C39107F16BF572F82A417F728DBF
Certificate serial:       498AE3C1E8AD2F8C3E7F46D345440214C15E4F42
Authority key identifier: AC:55:54:47:BA:62:C3:91:07:F1:6B:F5:72:F8:2A:41:7F:72:8D:BF
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AC555447BA62C39107F16BF572F82A417F728DBF.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/3993f350-b756-4916-8d84-484f025dffcc/0/323430343a383030303a31323a3a2f34382d3438203d3e203137343531.roa
Signing time:             Thu 30 Sep 2021 00:00:52 +0000
ROA not before:           Wed 29 Sep 2021 23:55:52 +0000
ROA not after:            Fri 30 Sep 2022 00:00:52 +0000
asID:                     17451
IP address blocks:        2404:8000:12::/48 maxlen: 48

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            49:8a:e3:c1:e8:ad:2f:8c:3e:7f:46:d3:45:44:02:14:c1:5e:4f:42
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AC555447BA62C39107F16BF572F82A417F728DBF
        Validity
            Not Before: Sep 29 23:55:52 2021 GMT
            Not After : Sep 30 00:00:52 2022 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:64:93:13:e8:f0:11:22:12:b4:d0:b8:f5:56:
                    bc:fb:68:36:18:f3:0a:b6:a1:d6:cd:be:ac:77:bd:
                    df:c7:6e:c6:f5:80:9d:10:ce:3e:03:87:4f:c7:49:
                    2e:c7:ab:33:a3:f9:35:69:3b:88:02:7b:cd:a7:40:
                    03:6a:16:c4:92:37:8c:4b:c1:1f:8f:5a:0d:99:e1:
                    dd:f7:5a:2c:8a:76:72:97:e6:2e:f5:67:ee:55:c8:
                    b4:de:1f:7e:64:34:9d:07:8d:d6:06:3a:41:77:ae:
                    22:0e:cc:4d:e3:87:15:82:a5:19:37:f5:93:bc:cc:
                    2b:ba:8d:81:77:ee:51:59:94:9a:61:cb:11:36:c7:
                    8b:8c:7a:e3:8d:62:ff:53:d6:30:70:23:b1:a8:af:
                    92:97:b0:07:05:eb:0b:af:95:e2:b6:87:ba:24:71:
                    a2:7c:16:35:40:ba:d7:5f:70:6e:1e:16:7a:25:a8:
                    b3:cc:82:9c:36:56:3f:71:55:75:ad:4b:be:32:29:
                    fa:35:0f:68:af:48:a6:d7:fc:d9:d3:fe:aa:f2:95:
                    ab:78:cf:46:b1:96:76:d0:6b:27:cf:50:fa:a2:3b:
                    ea:4c:74:7f:b7:da:79:46:b3:58:d4:16:3d:19:27:
                    76:63:ab:d5:52:22:be:be:82:2c:2d:1a:58:e6:1b:
                    9d:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E7:4B:C6:04:23:AE:79:D1:5F:4A:87:17:88:75:0F:87:E7:EB:2C:F5
            X509v3 Authority Key Identifier:
                keyid:AC:55:54:47:BA:62:C3:91:07:F1:6B:F5:72:F8:2A:41:7F:72:8D:BF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/3993f350-b756-4916-8d84-484f025dffcc/0/AC555447BA62C39107F16BF572F82A417F728DBF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AC555447BA62C39107F16BF572F82A417F728DBF.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/3993f350-b756-4916-8d84-484f025dffcc/0/323430343a383030303a31323a3a2f34382d3438203d3e203137343531.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2404:8000:12::/48

    Signature Algorithm: sha256WithRSAEncryption
         88:40:11:04:55:c1:06:73:b2:85:76:1f:d6:f8:f2:d1:8e:ef:
         99:e7:ba:c0:56:c5:2d:88:42:78:c0:5f:95:58:a3:ee:1d:b6:
         c8:20:6c:a1:9d:71:e5:c4:0d:37:7c:68:60:b7:08:fd:10:4b:
         82:fe:8c:5b:42:ba:80:20:d7:5c:63:6e:3d:44:ce:27:e9:b7:
         ba:55:6b:cf:bd:22:1c:81:8a:91:f3:45:79:c4:48:e8:2a:80:
         d8:df:00:74:b5:ca:1d:42:7a:9e:ba:73:0a:e7:31:a8:b2:bd:
         77:21:4f:e3:f9:7e:f6:74:0f:7e:36:4c:07:ac:a3:c0:2c:e7:
         47:95:4d:fb:3a:ec:c6:76:46:7c:9f:c8:53:7b:59:77:b1:90:
         ab:f1:c5:ca:23:a7:b3:1b:2f:2c:ab:cd:42:14:09:86:40:83:
         e9:5f:79:ed:f0:35:5b:cf:cc:f9:11:d1:8a:cc:a5:60:68:bb:
         65:80:f1:62:f3:65:99:51:c7:1c:81:bf:f2:c4:f9:8b:9d:c2:
         fc:10:04:e8:c3:94:a2:00:2c:2e:ac:99:a9:0f:3e:0c:d7:99:
         40:31:57:cc:eb:28:3b:11:1d:d5:0b:60:bb:2c:28:58:8e:fd:
         3e:a4:0d:46:7b:62:04:57:f6:e6:d0:17:ba:b3:dd:3e:1f:94:
         50:8d:16:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----