Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/3993f350-b756-4916-8d84-484f025dffcc/0/323430343a383030303a32323a3a2f34382d3438203d3e203137343531.roa
File:                     323430343a383030303a32323a3a2f34382d3438203d3e203137343531.roa (raw, json)
Hash identifier:          aHkKZKJLpoZEor22HLpWWlnqU9E47YG5RxV+hsU9mlU=
Subject key identifier:   77:66:A8:03:39:31:A4:4F:F8:DF:B9:5F:74:F2:81:E3:04:48:F6:DD
Certificate issuer:       /CN=AC555447BA62C39107F16BF572F82A417F728DBF
Certificate serial:       17D74000AAFC989EFF9722607FD0E0FA83B02EAE
Authority key identifier: AC:55:54:47:BA:62:C3:91:07:F1:6B:F5:72:F8:2A:41:7F:72:8D:BF
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AC555447BA62C39107F16BF572F82A417F728DBF.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/3993f350-b756-4916-8d84-484f025dffcc/0/323430343a383030303a32323a3a2f34382d3438203d3e203137343531.roa
Signing time:             Thu 30 Sep 2021 00:00:37 +0000
ROA not before:           Wed 29 Sep 2021 23:55:37 +0000
ROA not after:            Fri 30 Sep 2022 00:00:37 +0000
asID:                     17451
IP address blocks:        2404:8000:22::/48 maxlen: 48

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            17:d7:40:00:aa:fc:98:9e:ff:97:22:60:7f:d0:e0:fa:83:b0:2e:ae
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AC555447BA62C39107F16BF572F82A417F728DBF
        Validity
            Not Before: Sep 29 23:55:37 2021 GMT
            Not After : Sep 30 00:00:37 2022 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:98:52:e7:7f:e1:2f:75:52:eb:7e:93:23:b0:
                    18:7c:45:62:83:cf:ae:8c:f9:bd:61:70:32:9f:0d:
                    fc:72:c5:24:86:37:06:c8:5f:9a:4c:14:82:77:90:
                    59:ec:44:ff:7b:2e:a6:a3:09:34:ce:83:b2:ee:ce:
                    a0:9d:28:86:6e:d4:28:10:31:a9:b0:53:7e:f6:51:
                    52:70:42:32:09:65:57:34:c8:95:1d:73:a7:6d:7a:
                    4a:8f:92:71:12:5d:a6:dc:ae:7b:6b:fc:47:94:aa:
                    85:57:95:72:0c:88:df:93:5d:9c:4e:dd:ee:21:9c:
                    2a:e2:4e:6e:cb:90:0c:4b:69:5b:0a:c9:fd:ce:7f:
                    64:b5:79:a4:e9:6c:b8:7f:cc:46:d6:fd:fd:f5:f3:
                    b1:11:92:ba:54:ae:da:7f:ac:05:24:4b:95:85:b7:
                    eb:ab:6b:01:23:96:ef:50:cb:37:94:81:0d:ac:a7:
                    93:42:cd:28:ab:57:d3:64:01:79:cf:7c:9a:ea:ec:
                    0e:95:b3:31:3d:3f:6e:a3:42:f1:bb:67:1f:c2:b0:
                    e2:b7:2d:43:f8:a8:05:48:95:7e:75:f5:10:36:0a:
                    d9:c1:e8:16:5d:69:60:19:35:5a:b9:72:26:be:a2:
                    bd:4c:63:74:46:73:e1:64:26:d5:c9:7e:83:56:5d:
                    31:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                77:66:A8:03:39:31:A4:4F:F8:DF:B9:5F:74:F2:81:E3:04:48:F6:DD
            X509v3 Authority Key Identifier:
                keyid:AC:55:54:47:BA:62:C3:91:07:F1:6B:F5:72:F8:2A:41:7F:72:8D:BF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/3993f350-b756-4916-8d84-484f025dffcc/0/AC555447BA62C39107F16BF572F82A417F728DBF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AC555447BA62C39107F16BF572F82A417F728DBF.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/3993f350-b756-4916-8d84-484f025dffcc/0/323430343a383030303a32323a3a2f34382d3438203d3e203137343531.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2404:8000:22::/48

    Signature Algorithm: sha256WithRSAEncryption
         43:f9:c0:27:f8:1e:bd:c9:c0:34:25:fe:41:56:8d:65:02:36:
         b8:79:d0:1b:fb:0f:d7:63:ad:be:50:7e:73:63:76:e7:50:59:
         db:15:ff:8e:3f:8b:da:db:83:dd:b4:5e:0c:4a:c5:6e:23:af:
         20:09:bc:83:28:fe:4b:66:0d:38:88:49:0d:2f:ed:0b:48:1f:
         e4:1c:00:d3:78:7b:98:2e:9e:c8:82:fb:c4:54:cb:73:7c:d0:
         d4:ae:a7:77:d9:bc:f6:53:73:bc:32:17:dc:d2:69:57:21:ec:
         d9:81:72:33:9d:ff:0d:28:0f:e3:df:28:41:52:01:49:f3:d0:
         d2:4a:24:3b:6b:90:5b:8f:3b:58:9e:ce:6f:e1:9d:39:00:5d:
         7b:dc:bc:6a:b1:42:ad:24:2c:f5:47:b9:a6:31:3a:36:ff:85:
         c6:26:c1:09:a1:4a:55:da:d9:84:c1:6a:f3:64:98:54:db:c5:
         e3:75:1d:d5:96:a8:08:00:79:a2:8b:c0:2e:5e:28:68:9b:7d:
         8d:b4:5a:63:4c:c0:f5:15:e1:7b:e5:1b:11:6e:84:37:a6:49:
         c2:33:99:05:b4:e6:67:7f:9d:58:ed:d0:54:7e:7f:2d:af:c2:
         f4:f9:2d:0a:b4:75:d7:cb:0f:75:36:59:15:57:a1:31:a1:fe:
         5b:44:e2:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----