Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/3993f350-b756-4916-8d84-484f025dffcc/0/323430343a383030303a353a3a2f34382d3438203d3e203137343531.roa
File:                     323430343a383030303a353a3a2f34382d3438203d3e203137343531.roa (raw, json)
Hash identifier:          bJwKRa9RXrzLSEaKwstwn6eRIwtfs+2qSiLwnz/4UIA=
Subject key identifier:   51:BC:0C:D8:68:B8:7C:57:AF:92:2F:F2:4A:92:70:55:AB:86:85:EF
Certificate issuer:       /CN=AC555447BA62C39107F16BF572F82A417F728DBF
Certificate serial:       59EF0D3BBB4958338A2333AA9B63107F968A4543
Authority key identifier: AC:55:54:47:BA:62:C3:91:07:F1:6B:F5:72:F8:2A:41:7F:72:8D:BF
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AC555447BA62C39107F16BF572F82A417F728DBF.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/3993f350-b756-4916-8d84-484f025dffcc/0/323430343a383030303a353a3a2f34382d3438203d3e203137343531.roa
Signing time:             Thu 30 Sep 2021 00:00:35 +0000
ROA not before:           Wed 29 Sep 2021 23:55:35 +0000
ROA not after:            Fri 30 Sep 2022 00:00:35 +0000
asID:                     17451
IP address blocks:        2404:8000:5::/48 maxlen: 48

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            59:ef:0d:3b:bb:49:58:33:8a:23:33:aa:9b:63:10:7f:96:8a:45:43
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AC555447BA62C39107F16BF572F82A417F728DBF
        Validity
            Not Before: Sep 29 23:55:35 2021 GMT
            Not After : Sep 30 00:00:35 2022 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:b0:90:b3:23:fa:88:09:9a:99:e5:4f:a5:5b:
                    78:eb:b4:3f:dd:f4:ad:4f:a8:ae:be:a0:d4:99:23:
                    10:7e:e7:ea:6e:68:bc:2f:07:02:1e:14:af:e9:6c:
                    07:2c:37:47:b2:41:ef:21:67:6e:85:47:05:8e:f8:
                    cf:9f:b2:19:63:43:26:97:88:b1:8a:67:c0:b1:33:
                    7d:84:73:19:ca:d5:92:da:b5:9f:94:5f:a2:53:05:
                    55:25:d4:0e:31:9b:df:85:fc:8c:b4:9c:c2:ae:e5:
                    61:37:b5:fa:94:28:ed:fe:3e:55:2e:97:ee:d4:a4:
                    15:fa:75:6b:d7:b0:57:72:18:77:37:68:80:b9:59:
                    06:be:70:81:7a:f6:54:51:97:ec:e9:c1:18:45:59:
                    91:99:67:a9:88:86:41:25:18:92:12:11:e7:1a:5a:
                    54:f9:36:f9:93:81:fb:8e:42:60:3c:97:1a:f9:6d:
                    7a:bc:04:ba:82:ab:d6:54:a2:03:27:7c:5c:dd:1e:
                    9e:1f:7e:a4:e2:3f:1a:3f:8a:ae:6e:52:1c:9f:99:
                    7d:2f:e0:b4:fd:72:9a:75:ca:e1:95:8a:ad:16:14:
                    47:4a:59:03:99:6b:fb:b4:59:0d:93:1f:43:3a:09:
                    63:dc:2c:13:5e:af:1b:40:f6:7a:e6:28:80:81:71:
                    d3:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                51:BC:0C:D8:68:B8:7C:57:AF:92:2F:F2:4A:92:70:55:AB:86:85:EF
            X509v3 Authority Key Identifier:
                keyid:AC:55:54:47:BA:62:C3:91:07:F1:6B:F5:72:F8:2A:41:7F:72:8D:BF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/3993f350-b756-4916-8d84-484f025dffcc/0/AC555447BA62C39107F16BF572F82A417F728DBF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AC555447BA62C39107F16BF572F82A417F728DBF.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/3993f350-b756-4916-8d84-484f025dffcc/0/323430343a383030303a353a3a2f34382d3438203d3e203137343531.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2404:8000:5::/48

    Signature Algorithm: sha256WithRSAEncryption
         3b:f6:ec:60:c3:15:18:d3:a4:da:df:a7:e6:2b:7e:76:0e:f4:
         47:5f:83:58:92:ae:52:90:e5:fc:f1:86:39:5e:a2:9d:51:c2:
         0b:40:a6:e6:c3:56:8c:f3:ab:19:6f:3d:c8:f8:0d:9c:f5:ca:
         e3:0e:11:9c:4c:23:ea:92:2f:7e:1f:b4:4f:a9:b2:7e:70:e5:
         2a:0b:c7:9d:97:6b:31:59:b0:da:f5:2c:c2:1a:f4:e5:68:27:
         1b:54:4a:73:88:9c:ec:f2:19:5f:9e:5b:4a:88:68:59:f3:58:
         a4:9d:29:e7:c4:23:f5:ba:61:c3:dc:ff:c9:e7:dc:fc:fa:4f:
         b4:66:cb:db:c8:06:28:2b:b5:ab:32:fb:ef:60:e8:31:d7:8d:
         8b:48:57:6b:df:77:be:52:a4:1b:c1:1f:02:f1:03:c9:ab:ae:
         44:ea:08:57:a0:ba:af:3b:4a:fe:11:5b:03:5a:e9:00:45:5a:
         36:04:62:27:1f:6a:18:86:68:86:8d:b2:33:b7:dd:36:16:c4:
         6a:c3:95:95:a4:4a:dc:a8:5e:65:b5:0f:9e:84:9c:50:85:24:
         6e:03:8e:62:73:0f:1a:00:db:8d:de:dc:b2:f4:94:fa:aa:59:
         f9:49:d8:b1:ce:54:6d:aa:80:1f:10:7a:45:aa:2f:26:88:bc:
         8a:c0:3b:ec
-----BEGIN CERTIFICATE-----
MIIHKTCCBhGgAwIBAgIUWe8NO7tJWDOKIzOqm2MQf5aKRUMwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQUM1NTU0NDdCQTYyQzM5MTA3RjE2QkY1NzJGODJBNDE3
RjcyOERCRjAeFw0yMTA5MjkyMzU1MzVaFw0yMjA5MzAwMDAwMzVaMIICLTGCAikw
ggIlBgNVBAMTggIcMzA4MjAxMEEwMjgyMDEwMTAwQUVCMDkwQjMyM0ZBODgwOTlB
OTlFNTRGQTU1Qjc4RUJCNDNGRERGNEFENEZBOEFFQkVBMEQ0OTkyMzEwN0VFN0VB
NkU2OEJDMkYwNzAyMUUxNEFGRTk2QzA3MkMzNzQ3QjI0MUVGMjE2NzZFODU0NzA1
OEVGOENGOUZCMjE5NjM0MzI2OTc4OEIxOEE2N0MwQjEzMzdEODQ3MzE5Q0FENTky
REFCNTlGOTQ1RkEyNTMwNTU1MjVENDBFMzE5QkRGODVGQzhDQjQ5Q0MyQUVFNTYx
MzdCNUZBOTQyOEVERkUzRTU1MkU5N0VFRDRBNDE1RkE3NTZCRDdCMDU3NzIxODc3
Mzc2ODgwQjk1OTA2QkU3MDgxN0FGNjU0NTE5N0VDRTlDMTE4NDU1OTkxOTk2N0E5
ODg4NjQxMjUxODkyMTIxMUU3MUE1QTU0RjkzNkY5OTM4MUZCOEU0MjYwM0M5NzFB
Rjk2RDdBQkMwNEJBODJBQkQ2NTRBMjAzMjc3QzVDREQxRTlFMUY3RUE0RTIzRjFB
M0Y4QUFFNkU1MjFDOUY5OTdEMkZFMEI0RkQ3MjlBNzVDQUUxOTU4QUFEMTYxNDQ3
NEE1OTAzOTk2QkZCQjQ1OTBEOTMxRjQzM0EwOTYzREMyQzEzNUVBRjFCNDBGNjdB
RTYyODgwODE3MUQzREQwMjAzMDEwMDAxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8A
MIIBCgKCAQEArrCQsyP6iAmameVPpVt467Q/3fStT6iuvqDUmSMQfufqbmi8LwcC
HhSv6WwHLDdHskHvIWduhUcFjvjPn7IZY0Mml4iximfAsTN9hHMZytWS2rWflF+i
UwVVJdQOMZvfhfyMtJzCruVhN7X6lCjt/j5VLpfu1KQV+nVr17BXchh3N2iAuVkG
vnCBevZUUZfs6cEYRVmRmWepiIZBJRiSEhHnGlpU+Tb5k4H7jkJgPJca+W16vAS6
gqvWVKIDJ3xc3R6eH36k4j8aP4qublIcn5l9L+C0/XKadcrhlYqtFhRHSlkDmWv7
tFkNkx9DOglj3CwTXq8bQPZ65iiAgXHT3QIDAQABo4ICNzCCAjMwHQYDVR0OBBYE
FFG8DNhouHxXr5Iv8kqScFWrhoXvMB8GA1UdIwQYMBaAFKxVVEe6YsORB/Fr9XL4
KkF/co2/MA4GA1UdDwEB/wQEAwIHgDCBhQYDVR0fBH4wfDB6oHigdoZ0cnN5bmM6
Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMzk5M2YzNTAtYjc1Ni00OTE2LThk
ODQtNDg0ZjAyNWRmZmNjLzAvQUM1NTU0NDdCQTYyQzM5MTA3RjE2QkY1NzJGODJB
NDE3RjcyOERCRi5jcmwwdAYIKwYBBQUHAQEEaDBmMGQGCCsGAQUFBzAChlhyc3lu
YzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9JRE5JQy1JRC8yL0FDNTU1NDQ3
QkE2MkMzOTEwN0YxNkJGNTcyRjgyQTQxN0Y3MjhEQkYuY2VyMIGkBggrBgEFBQcB
CwSBlzCBlDCBkQYIKwYBBQUHMAuGgYRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5u
ZXQvcmVwby8zOTkzZjM1MC1iNzU2LTQ5MTYtOGQ4NC00ODRmMDI1ZGZmY2MvMC8z
MjM0MzAzNDNhMzgzMDMwMzAzYTM1M2EzYTJmMzQzODJkMzQzODIwM2QzZTIwMzEz
NzM0MzUzMS5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAiBggrBgEFBQcB
BwEB/wQTMBEwDwQCAAIwCQMHACQEgAAABTANBgkqhkiG9w0BAQsFAAOCAQEAO/bs
YMMVGNOk2t+n5it+dg70R1+DWJKuUpDl/PGGOV6inVHCC0Cm5sNWjPOrGW89yPgN
nPXK4w4RnEwj6pIvfh+0T6myfnDlKgvHnZdrMVmw2vUswhr05WgnG1RKc4ic7PIZ
X55bSohoWfNYpJ0p58Qj9bphw9z/yefc/PpPtGbL28gGKCu1qzL772DoMdeNi0hX
a993vlKkG8EfAvEDyauuROoIV6C6rztK/hFbA1rpAEVaNgRiJx9qGIZoho2yM7fd
NhbEasOVlaRK3KheZbUPnoScUIUkbgOOYnMPGgDbjd7csvSU+qpZ+UnYsc5UbaqA
HxB6RaovJoi8isA77A==
-----END CERTIFICATE-----