Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/3993f350-b756-4916-8d84-484f025dffcc/0/323430343a383030303a32353a3a2f34382d3438203d3e203137343531.roa
File:                     323430343a383030303a32353a3a2f34382d3438203d3e203137343531.roa (raw, json)
Hash identifier:          SALZuMTjH0d8Yv7WxkpzhJiyRNnEttsAhtz9ZnvLdL4=
Subject key identifier:   96:A8:46:96:88:0F:CF:4B:2E:2B:9A:FD:F2:7F:B8:F4:89:BB:91:38
Certificate issuer:       /CN=AC555447BA62C39107F16BF572F82A417F728DBF
Certificate serial:       4EAC0574EA7D9450220098D7CA030100733E1821
Authority key identifier: AC:55:54:47:BA:62:C3:91:07:F1:6B:F5:72:F8:2A:41:7F:72:8D:BF
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AC555447BA62C39107F16BF572F82A417F728DBF.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/3993f350-b756-4916-8d84-484f025dffcc/0/323430343a383030303a32353a3a2f34382d3438203d3e203137343531.roa
Signing time:             Thu 30 Sep 2021 00:00:27 +0000
ROA not before:           Wed 29 Sep 2021 23:55:27 +0000
ROA not after:            Fri 30 Sep 2022 00:00:27 +0000
asID:                     17451
IP address blocks:        2404:8000:25::/48 maxlen: 48

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4e:ac:05:74:ea:7d:94:50:22:00:98:d7:ca:03:01:00:73:3e:18:21
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AC555447BA62C39107F16BF572F82A417F728DBF
        Validity
            Not Before: Sep 29 23:55:27 2021 GMT
            Not After : Sep 30 00:00:27 2022 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:d2:0e:3c:02:8f:32:ce:31:36:b5:9f:7d:5e:
                    46:70:25:38:fb:c7:dc:41:49:39:3a:92:bd:dd:e9:
                    f0:2d:dc:ff:33:4e:f1:b0:1f:a0:a0:cc:98:60:df:
                    34:7c:b6:c6:7c:3d:a1:c6:d7:e6:51:18:77:ed:f0:
                    b5:00:fa:28:64:a4:34:15:23:6a:37:eb:4b:4c:58:
                    b9:aa:f9:d1:e2:8a:b9:6a:71:c4:8d:68:a3:48:95:
                    8a:aa:a8:32:ea:68:1d:0f:93:c0:1a:ab:c0:40:b5:
                    1d:b1:f7:07:86:5f:7e:23:2b:77:9e:21:55:a8:ee:
                    6a:e3:a9:87:e9:de:26:0b:2e:48:ed:11:fc:2d:95:
                    f5:9a:02:e1:60:cd:7b:bb:6d:49:59:d1:0d:fc:5a:
                    cc:35:80:ec:87:15:10:dc:62:65:22:e6:04:62:75:
                    b4:27:f2:0c:89:26:45:60:dc:fc:bc:60:af:2c:f0:
                    95:dc:db:9b:b3:fb:c5:93:fb:09:fc:af:ca:b6:c1:
                    88:b1:02:08:c0:b5:d9:0c:62:b1:30:21:3b:51:eb:
                    9b:7a:8e:65:f0:33:44:13:b8:24:bd:ec:0b:81:8c:
                    c0:41:af:4c:6b:b8:3b:79:74:df:15:42:e8:ea:10:
                    13:be:b4:a7:bd:7a:30:32:76:1d:5f:07:a4:05:66:
                    13:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                96:A8:46:96:88:0F:CF:4B:2E:2B:9A:FD:F2:7F:B8:F4:89:BB:91:38
            X509v3 Authority Key Identifier:
                keyid:AC:55:54:47:BA:62:C3:91:07:F1:6B:F5:72:F8:2A:41:7F:72:8D:BF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/3993f350-b756-4916-8d84-484f025dffcc/0/AC555447BA62C39107F16BF572F82A417F728DBF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AC555447BA62C39107F16BF572F82A417F728DBF.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/3993f350-b756-4916-8d84-484f025dffcc/0/323430343a383030303a32353a3a2f34382d3438203d3e203137343531.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2404:8000:25::/48

    Signature Algorithm: sha256WithRSAEncryption
         31:76:f0:c0:20:23:b6:2d:14:4d:07:84:66:66:a8:18:01:84:
         c4:8c:5b:7d:6a:0e:b9:30:ed:d3:ca:22:5f:da:8f:06:70:4b:
         d3:a1:81:97:17:e3:3a:73:ba:5a:f7:93:1a:e2:2e:ef:dd:7f:
         16:d1:f9:28:9e:62:4a:e3:e3:84:ad:e7:4d:fc:46:03:3d:1b:
         6b:a7:33:c2:e8:ed:b8:21:85:3e:d6:59:69:c0:94:70:af:ce:
         f6:fd:90:e3:10:f4:47:e8:93:d7:d8:98:11:28:f0:74:41:d2:
         b6:4f:76:5f:92:f9:59:f4:73:88:73:cf:c7:98:03:b3:0d:33:
         6d:83:6a:5d:e0:76:92:89:07:6f:bf:34:45:d7:b5:c6:c4:8f:
         e6:87:27:fd:30:2e:51:40:6a:bd:0b:14:2c:5f:a5:31:99:86:
         e0:c4:2d:6a:90:8d:04:3b:66:60:c8:1c:67:d4:2a:a9:be:aa:
         c4:ae:46:f9:32:3c:2d:2c:fe:c8:4c:0b:6b:34:d8:6a:ce:22:
         d5:e2:cc:28:91:0d:33:d9:5d:da:b7:58:44:f0:44:2f:b8:24:
         ee:42:d0:ab:71:33:f5:73:ad:86:98:65:40:0b:b3:97:0e:b2:
         23:33:3e:33:23:77:99:bb:4b:9e:dc:ab:e0:22:45:ef:69:1e:
         3a:c6:f7:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----