Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/3993f350-b756-4916-8d84-484f025dffcc/0/323430343a383030303a31343a3a2f34382d3438203d3e203137343531.roa
File:                     323430343a383030303a31343a3a2f34382d3438203d3e203137343531.roa (raw, json)
Hash identifier:          GKWvh7/rfDuZQZ5CJOp053edaBpY2v4eZB2OdEWejxw=
Subject key identifier:   C5:E4:34:AB:DE:F3:BE:0F:9F:4C:0D:B7:69:65:63:8B:5A:A1:27:B7
Certificate issuer:       /CN=AC555447BA62C39107F16BF572F82A417F728DBF
Certificate serial:       5F521AD846EF23007CEF168669D9366A666A7910
Authority key identifier: AC:55:54:47:BA:62:C3:91:07:F1:6B:F5:72:F8:2A:41:7F:72:8D:BF
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AC555447BA62C39107F16BF572F82A417F728DBF.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/3993f350-b756-4916-8d84-484f025dffcc/0/323430343a383030303a31343a3a2f34382d3438203d3e203137343531.roa
Signing time:             Thu 30 Sep 2021 00:00:49 +0000
ROA not before:           Wed 29 Sep 2021 23:55:49 +0000
ROA not after:            Fri 30 Sep 2022 00:00:49 +0000
asID:                     17451
IP address blocks:        2404:8000:14::/48 maxlen: 48

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5f:52:1a:d8:46:ef:23:00:7c:ef:16:86:69:d9:36:6a:66:6a:79:10
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AC555447BA62C39107F16BF572F82A417F728DBF
        Validity
            Not Before: Sep 29 23:55:49 2021 GMT
            Not After : Sep 30 00:00:49 2022 GMT
        Subject: CN=3082010A0282010100BFD57BD328FCA883CDE59B6903BB7507D70CE6BD7D9A98C195840ED3432513CD92391936B400E75DC37A2691C24E153E0E21EDEBBA7C4235D6BBE166F0BE62D8094AFCBE1ADD9113EB41898F3FAF37147BC9D483F114C82A644740534AB533F27962180770661E2E8FEF764D8F5350705F4C4E6676E23232A571D97AE528580A296B31A6773C4E2EBEA2B0EA381FE33E656B6C550B027D5944B4D86627C81BCE81E50FFC160FA824E40E561187631A6A75D9754A6B1B2BE4EEF750C6E7D73B646B4935F9A3233480368E5F65BBE4F094C3353712C8EE04200F0C385E84A98388CDDC198228693C196C3485F86DEE30344471EC6BD596D46FFCE1F60515322D9B0203010001
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:d5:7b:d3:28:fc:a8:83:cd:e5:9b:69:03:bb:
                    75:07:d7:0c:e6:bd:7d:9a:98:c1:95:84:0e:d3:43:
                    25:13:cd:92:39:19:36:b4:00:e7:5d:c3:7a:26:91:
                    c2:4e:15:3e:0e:21:ed:eb:ba:7c:42:35:d6:bb:e1:
                    66:f0:be:62:d8:09:4a:fc:be:1a:dd:91:13:eb:41:
                    89:8f:3f:af:37:14:7b:c9:d4:83:f1:14:c8:2a:64:
                    47:40:53:4a:b5:33:f2:79:62:18:07:70:66:1e:2e:
                    8f:ef:76:4d:8f:53:50:70:5f:4c:4e:66:76:e2:32:
                    32:a5:71:d9:7a:e5:28:58:0a:29:6b:31:a6:77:3c:
                    4e:2e:be:a2:b0:ea:38:1f:e3:3e:65:6b:6c:55:0b:
                    02:7d:59:44:b4:d8:66:27:c8:1b:ce:81:e5:0f:fc:
                    16:0f:a8:24:e4:0e:56:11:87:63:1a:6a:75:d9:75:
                    4a:6b:1b:2b:e4:ee:f7:50:c6:e7:d7:3b:64:6b:49:
                    35:f9:a3:23:34:80:36:8e:5f:65:bb:e4:f0:94:c3:
                    35:37:12:c8:ee:04:20:0f:0c:38:5e:84:a9:83:88:
                    cd:dc:19:82:28:69:3c:19:6c:34:85:f8:6d:ee:30:
                    34:44:71:ec:6b:d5:96:d4:6f:fc:e1:f6:05:15:32:
                    2d:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C5:E4:34:AB:DE:F3:BE:0F:9F:4C:0D:B7:69:65:63:8B:5A:A1:27:B7
            X509v3 Authority Key Identifier:
                keyid:AC:55:54:47:BA:62:C3:91:07:F1:6B:F5:72:F8:2A:41:7F:72:8D:BF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/3993f350-b756-4916-8d84-484f025dffcc/0/AC555447BA62C39107F16BF572F82A417F728DBF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AC555447BA62C39107F16BF572F82A417F728DBF.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/3993f350-b756-4916-8d84-484f025dffcc/0/323430343a383030303a31343a3a2f34382d3438203d3e203137343531.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2404:8000:14::/48

    Signature Algorithm: sha256WithRSAEncryption
         48:bf:5f:38:41:b0:cb:da:ee:e4:34:51:f6:8c:89:e3:53:71:
         a3:09:65:07:73:e3:5c:37:de:85:84:cb:c8:40:08:c6:e6:a1:
         07:9a:a1:90:13:ca:33:1f:94:6f:c7:a5:e0:87:e8:85:ed:de:
         12:b8:65:5c:98:ec:e2:b7:11:78:4d:5f:62:3c:1c:8b:d6:11:
         8a:16:2c:4c:79:0c:e8:79:d3:c1:e9:7c:5c:fe:40:ae:13:36:
         3f:f4:83:df:12:43:66:b9:a2:7e:42:81:6d:7b:03:10:97:d4:
         4e:ab:90:60:03:48:28:cf:9e:25:f1:d5:f4:18:0a:56:5a:02:
         c0:b4:9c:b3:09:6b:3f:0f:5b:97:75:e6:69:34:54:b3:16:ec:
         ed:15:f6:70:5e:aa:65:e8:ed:cd:49:39:cd:64:6a:b4:77:54:
         44:19:bb:4f:23:2f:94:59:e2:88:fb:e3:f0:cd:91:f9:07:84:
         92:81:72:7c:b4:fa:5a:a9:e9:5a:d7:17:ec:9e:d9:f4:d7:4e:
         c0:06:ef:a2:33:90:a5:ed:25:7b:26:6b:a4:7e:7d:4c:7e:55:
         8d:6a:ea:81:3e:ff:d2:f8:7a:81:ad:3e:e3:62:d7:53:89:86:
         9f:34:83:69:3f:e1:d0:4d:06:13:a6:a6:f5:27:87:91:ad:c5:
         3a:8e:31:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----