Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/3993f350-b756-4916-8d84-484f025dffcc/0/323430343a383030303a32343a3a2f34382d3438203d3e203137343531.roa
File:                     323430343a383030303a32343a3a2f34382d3438203d3e203137343531.roa (raw, json)
Hash identifier:          NclRFkIv1+zx1S2VYvpVYv7B9nMxgzPD8ltaMRwsW90=
Subject key identifier:   56:E0:96:D2:65:16:B9:CF:A3:40:E1:14:05:2C:B4:8A:60:CC:0B:E1
Certificate issuer:       /CN=AC555447BA62C39107F16BF572F82A417F728DBF
Certificate serial:       3DC7AA3C89E6E67D52C26695EB7C295A2C92B842
Authority key identifier: AC:55:54:47:BA:62:C3:91:07:F1:6B:F5:72:F8:2A:41:7F:72:8D:BF
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AC555447BA62C39107F16BF572F82A417F728DBF.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/3993f350-b756-4916-8d84-484f025dffcc/0/323430343a383030303a32343a3a2f34382d3438203d3e203137343531.roa
Signing time:             Thu 30 Sep 2021 00:00:01 +0000
ROA not before:           Wed 29 Sep 2021 23:55:01 +0000
ROA not after:            Fri 30 Sep 2022 00:00:01 +0000
asID:                     17451
IP address blocks:        2404:8000:24::/48 maxlen: 48

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3d:c7:aa:3c:89:e6:e6:7d:52:c2:66:95:eb:7c:29:5a:2c:92:b8:42
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AC555447BA62C39107F16BF572F82A417F728DBF
        Validity
            Not Before: Sep 29 23:55:01 2021 GMT
            Not After : Sep 30 00:00:01 2022 GMT
        Subject: CN=3082010A0282010100B2802DF4A049365B9171630150AD6BD9293EAC126B8845C780EC005D6605E9A93BB2765E17C629AD338218D64628D77EB2EDE8607DB903E2077BC43A369115B66EEBAD3FBEDB2E453A0DE50766CD3AD3EB12A265DCB4460A9C4739ADC536890A15C9690C7DB8EB9A710787E6B60D1A76E70B8A2CFEB394D2D038240976F4B6F81C6C077E9B37E9308E8B91BC04A555B91547059F983E61BA069FF4A7FC302803E0EB08F431BD9DF06C2EDCF51F86A72CAF0BB164DB368C81A68B1F2AF441CE5A47447173947591669C2A5DE19F11E3266A54C01E1D4AE51C2DD9C0948961EAAFA498E9D86F17451D4D9A086C37DFD03C7632A0C11464B2A70B15A0E97C2E1D470203010001
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:80:2d:f4:a0:49:36:5b:91:71:63:01:50:ad:
                    6b:d9:29:3e:ac:12:6b:88:45:c7:80:ec:00:5d:66:
                    05:e9:a9:3b:b2:76:5e:17:c6:29:ad:33:82:18:d6:
                    46:28:d7:7e:b2:ed:e8:60:7d:b9:03:e2:07:7b:c4:
                    3a:36:91:15:b6:6e:eb:ad:3f:be:db:2e:45:3a:0d:
                    e5:07:66:cd:3a:d3:eb:12:a2:65:dc:b4:46:0a:9c:
                    47:39:ad:c5:36:89:0a:15:c9:69:0c:7d:b8:eb:9a:
                    71:07:87:e6:b6:0d:1a:76:e7:0b:8a:2c:fe:b3:94:
                    d2:d0:38:24:09:76:f4:b6:f8:1c:6c:07:7e:9b:37:
                    e9:30:8e:8b:91:bc:04:a5:55:b9:15:47:05:9f:98:
                    3e:61:ba:06:9f:f4:a7:fc:30:28:03:e0:eb:08:f4:
                    31:bd:9d:f0:6c:2e:dc:f5:1f:86:a7:2c:af:0b:b1:
                    64:db:36:8c:81:a6:8b:1f:2a:f4:41:ce:5a:47:44:
                    71:73:94:75:91:66:9c:2a:5d:e1:9f:11:e3:26:6a:
                    54:c0:1e:1d:4a:e5:1c:2d:d9:c0:94:89:61:ea:af:
                    a4:98:e9:d8:6f:17:45:1d:4d:9a:08:6c:37:df:d0:
                    3c:76:32:a0:c1:14:64:b2:a7:0b:15:a0:e9:7c:2e:
                    1d:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                56:E0:96:D2:65:16:B9:CF:A3:40:E1:14:05:2C:B4:8A:60:CC:0B:E1
            X509v3 Authority Key Identifier:
                keyid:AC:55:54:47:BA:62:C3:91:07:F1:6B:F5:72:F8:2A:41:7F:72:8D:BF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/3993f350-b756-4916-8d84-484f025dffcc/0/AC555447BA62C39107F16BF572F82A417F728DBF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AC555447BA62C39107F16BF572F82A417F728DBF.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/3993f350-b756-4916-8d84-484f025dffcc/0/323430343a383030303a32343a3a2f34382d3438203d3e203137343531.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2404:8000:24::/48

    Signature Algorithm: sha256WithRSAEncryption
         53:61:f1:a8:ba:b8:00:21:24:de:26:41:db:d5:40:d6:15:13:
         66:fb:4b:91:f1:dc:5b:9c:a8:26:90:f0:62:9a:36:9e:d1:ef:
         55:62:f4:db:61:62:56:9b:14:1c:82:09:00:1a:08:9c:bb:64:
         42:8d:3c:01:32:eb:ac:e3:88:cc:a9:7b:f6:c9:4b:b7:2a:6a:
         a2:c9:9d:78:a5:00:3b:25:39:64:cb:10:db:bf:b4:94:40:c7:
         d8:4a:d4:aa:66:cf:79:7a:1c:30:41:d2:70:72:9e:69:dc:f9:
         ad:53:3e:52:c2:ab:17:d1:33:65:40:36:71:77:36:a1:0b:77:
         8c:99:96:57:82:16:73:4e:3f:56:64:8f:93:df:9c:e8:29:cf:
         fe:5f:12:a9:ed:12:25:23:dc:56:58:c8:42:63:63:89:b6:df:
         9b:c6:30:f8:f9:cb:5f:f6:fc:68:e2:f6:66:ec:be:fa:b2:46:
         2c:ff:db:02:47:08:f3:18:83:36:da:54:b6:1b:4f:9f:f8:e3:
         56:b2:32:45:4b:f3:00:eb:fc:d0:c0:67:68:20:3b:d6:cc:6c:
         8c:18:26:1b:65:d6:be:83:5d:a1:d0:49:eb:45:db:77:11:3e:
         01:de:5b:3f:34:26:2d:10:c8:14:8d:fb:4b:21:f8:7f:82:91:
         71:2d:5c:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----