Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/3993f350-b756-4916-8d84-484f025dffcc/0/323430343a383030303a343a3a2f34382d3438203d3e203137343531.roa
File:                     323430343a383030303a343a3a2f34382d3438203d3e203137343531.roa (raw, json)
Hash identifier:          gm6sxtfuyhEchweK6jBmk4VmHkb65wwqDeEPexcKTs4=
Subject key identifier:   B7:91:4E:EA:47:31:F4:9E:92:8A:D4:6A:5A:A4:C0:69:9E:B1:68:AC
Certificate issuer:       /CN=AC555447BA62C39107F16BF572F82A417F728DBF
Certificate serial:       09EA0DC36264F4E17A078E2B8947E505B6034775
Authority key identifier: AC:55:54:47:BA:62:C3:91:07:F1:6B:F5:72:F8:2A:41:7F:72:8D:BF
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AC555447BA62C39107F16BF572F82A417F728DBF.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/3993f350-b756-4916-8d84-484f025dffcc/0/323430343a383030303a343a3a2f34382d3438203d3e203137343531.roa
Signing time:             Thu 30 Sep 2021 00:00:03 +0000
ROA not before:           Wed 29 Sep 2021 23:55:03 +0000
ROA not after:            Fri 30 Sep 2022 00:00:03 +0000
asID:                     17451
IP address blocks:        2404:8000:4::/48 maxlen: 48

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            09:ea:0d:c3:62:64:f4:e1:7a:07:8e:2b:89:47:e5:05:b6:03:47:75
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AC555447BA62C39107F16BF572F82A417F728DBF
        Validity
            Not Before: Sep 29 23:55:03 2021 GMT
            Not After : Sep 30 00:00:03 2022 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:09:aa:48:08:60:98:68:de:a9:c5:2f:a4:23:
                    7a:55:17:75:6e:db:a8:26:42:22:1d:67:20:3d:4c:
                    98:f9:df:b1:90:d3:67:07:78:89:6d:30:d4:3b:55:
                    c0:8b:40:23:24:ef:6d:f9:99:50:cd:70:dd:72:44:
                    f3:8b:4e:af:f9:1d:ef:ba:2c:31:c4:f9:b4:ec:e0:
                    3e:b6:78:e9:0f:5d:4f:97:da:b6:27:34:27:ef:c5:
                    7f:89:45:e9:2a:93:cb:42:c3:af:38:51:63:44:29:
                    7e:da:7c:c5:98:7c:42:03:a5:46:1f:78:24:cb:56:
                    4c:b0:e8:1d:0c:cf:5f:31:0b:55:40:c2:79:b6:d1:
                    69:81:70:05:1d:d8:c7:4b:24:04:8f:85:72:77:c0:
                    de:67:14:cf:c5:83:1e:c1:3e:8e:a3:b5:89:60:12:
                    f0:d7:0f:ba:9c:a7:6d:c2:26:b2:54:a9:90:06:03:
                    05:a6:4b:44:7d:b0:c2:b3:a6:85:48:4b:f8:41:94:
                    55:23:e8:47:84:79:08:b3:74:c3:3a:f2:06:1e:e4:
                    1c:69:a6:dc:ab:c3:5a:70:69:f3:35:77:88:06:28:
                    5b:2c:a8:73:9b:95:a2:96:ae:6a:b5:c9:7f:d1:0e:
                    3b:db:44:54:e3:de:2c:07:85:eb:55:84:12:81:03:
                    4c:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B7:91:4E:EA:47:31:F4:9E:92:8A:D4:6A:5A:A4:C0:69:9E:B1:68:AC
            X509v3 Authority Key Identifier:
                keyid:AC:55:54:47:BA:62:C3:91:07:F1:6B:F5:72:F8:2A:41:7F:72:8D:BF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/3993f350-b756-4916-8d84-484f025dffcc/0/AC555447BA62C39107F16BF572F82A417F728DBF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AC555447BA62C39107F16BF572F82A417F728DBF.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/3993f350-b756-4916-8d84-484f025dffcc/0/323430343a383030303a343a3a2f34382d3438203d3e203137343531.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2404:8000:4::/48

    Signature Algorithm: sha256WithRSAEncryption
         72:1f:4c:d9:b2:1b:2b:7b:88:f1:d4:43:8c:b1:22:d8:34:f4:
         d2:b4:65:0e:9f:3c:47:18:29:73:08:60:e2:ee:37:7a:8e:d7:
         9b:9a:f2:e6:43:43:4a:de:32:f9:08:b9:a1:3d:72:97:fc:e1:
         06:5b:1d:41:72:96:49:96:02:13:54:0c:fb:5b:d0:d3:e6:10:
         c8:f3:ba:46:09:7b:53:21:80:fc:b8:52:15:f4:9f:71:c7:6f:
         31:98:39:88:e7:7a:0b:22:43:28:55:47:8a:17:c0:88:17:93:
         c3:f4:30:c8:77:7c:09:2e:87:f6:ee:af:2d:e5:ed:e2:a3:88:
         e9:1d:5b:88:1c:d7:50:6a:d5:c8:b2:7c:ce:4d:e9:82:af:ec:
         ba:64:56:57:d7:45:4e:1d:65:61:ee:fd:06:71:3f:d7:fb:9c:
         37:1f:9d:9b:f9:86:b4:af:86:40:7f:be:d2:52:f2:70:17:37:
         ac:3b:35:ec:bd:c9:2d:9f:d5:8d:1a:c8:c2:60:c7:90:73:bc:
         60:1b:67:0f:c8:ed:d2:7a:52:8d:71:e8:ec:d7:14:c1:7b:8a:
         02:48:84:46:dd:a7:17:ce:5e:3c:f8:0d:29:c1:2c:fa:15:58:
         7d:8d:59:10:37:12:55:5c:6c:ee:0c:f6:5e:0f:98:61:d2:a2:
         b2:c8:71:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----