Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/3993f350-b756-4916-8d84-484f025dffcc/0/323430343a383030303a363a3a2f34382d3438203d3e203137343531.roa
File:                     323430343a383030303a363a3a2f34382d3438203d3e203137343531.roa (raw, json)
Hash identifier:          mj4yo5CuSIdJQYg4oLjNg8LPMtJ8aM1PS84RJwHvAfE=
Subject key identifier:   87:A9:44:AE:AF:8A:EC:7A:66:32:AC:E1:DB:2F:BD:56:DC:6A:0F:3C
Certificate issuer:       /CN=AC555447BA62C39107F16BF572F82A417F728DBF
Certificate serial:       775D9A232BEB1FBAE14C69714A92EE9E834F8089
Authority key identifier: AC:55:54:47:BA:62:C3:91:07:F1:6B:F5:72:F8:2A:41:7F:72:8D:BF
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AC555447BA62C39107F16BF572F82A417F728DBF.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/3993f350-b756-4916-8d84-484f025dffcc/0/323430343a383030303a363a3a2f34382d3438203d3e203137343531.roa
Signing time:             Thu 30 Sep 2021 00:00:49 +0000
ROA not before:           Wed 29 Sep 2021 23:55:49 +0000
ROA not after:            Fri 30 Sep 2022 00:00:49 +0000
asID:                     17451
IP address blocks:        2404:8000:6::/48 maxlen: 48

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            77:5d:9a:23:2b:eb:1f:ba:e1:4c:69:71:4a:92:ee:9e:83:4f:80:89
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AC555447BA62C39107F16BF572F82A417F728DBF
        Validity
            Not Before: Sep 29 23:55:49 2021 GMT
            Not After : Sep 30 00:00:49 2022 GMT
        Subject: CN=3082010A0282010100C03ACD41632250A47EC1EDCA41CD6F8C1C7501BE0BBE900B93BA778E39B221B87F964E71BDD214F85BC8AC2C859A4121AC56CC3A8640A1BDB3F32DBD2D174E0C659702E64D0BF275F5BCD0D1763E54FBE49F14D3525CEB1587EC19E30D0F053C8E14F3334951BB431E634D499C0FB465F96D55259AD6FCED5C006547220A1C7C80C0602BA1B616B79D9EAB495A97F630F29FC911EA2D96C35A389E2B1A8364E73E1EA9AB036D696BB2925C4A39631A79E9BC6DE785663FCD77EC9B52E21C6C8D5D86E8C0CACF6335AD2ACFB80BB952101E423CD2354B8883F4D92F73C42FB03ABA9B59819AB4E560BD8644B6E9195A8AB4E84CAEB972FD4FEF0653A5BD57D5E50203010001
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:3a:cd:41:63:22:50:a4:7e:c1:ed:ca:41:cd:
                    6f:8c:1c:75:01:be:0b:be:90:0b:93:ba:77:8e:39:
                    b2:21:b8:7f:96:4e:71:bd:d2:14:f8:5b:c8:ac:2c:
                    85:9a:41:21:ac:56:cc:3a:86:40:a1:bd:b3:f3:2d:
                    bd:2d:17:4e:0c:65:97:02:e6:4d:0b:f2:75:f5:bc:
                    d0:d1:76:3e:54:fb:e4:9f:14:d3:52:5c:eb:15:87:
                    ec:19:e3:0d:0f:05:3c:8e:14:f3:33:49:51:bb:43:
                    1e:63:4d:49:9c:0f:b4:65:f9:6d:55:25:9a:d6:fc:
                    ed:5c:00:65:47:22:0a:1c:7c:80:c0:60:2b:a1:b6:
                    16:b7:9d:9e:ab:49:5a:97:f6:30:f2:9f:c9:11:ea:
                    2d:96:c3:5a:38:9e:2b:1a:83:64:e7:3e:1e:a9:ab:
                    03:6d:69:6b:b2:92:5c:4a:39:63:1a:79:e9:bc:6d:
                    e7:85:66:3f:cd:77:ec:9b:52:e2:1c:6c:8d:5d:86:
                    e8:c0:ca:cf:63:35:ad:2a:cf:b8:0b:b9:52:10:1e:
                    42:3c:d2:35:4b:88:83:f4:d9:2f:73:c4:2f:b0:3a:
                    ba:9b:59:81:9a:b4:e5:60:bd:86:44:b6:e9:19:5a:
                    8a:b4:e8:4c:ae:b9:72:fd:4f:ef:06:53:a5:bd:57:
                    d5:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                87:A9:44:AE:AF:8A:EC:7A:66:32:AC:E1:DB:2F:BD:56:DC:6A:0F:3C
            X509v3 Authority Key Identifier:
                keyid:AC:55:54:47:BA:62:C3:91:07:F1:6B:F5:72:F8:2A:41:7F:72:8D:BF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/3993f350-b756-4916-8d84-484f025dffcc/0/AC555447BA62C39107F16BF572F82A417F728DBF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AC555447BA62C39107F16BF572F82A417F728DBF.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/3993f350-b756-4916-8d84-484f025dffcc/0/323430343a383030303a363a3a2f34382d3438203d3e203137343531.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2404:8000:6::/48

    Signature Algorithm: sha256WithRSAEncryption
         1c:ed:11:b7:ff:e8:57:e8:de:25:31:a5:30:97:9f:75:cc:d1:
         e8:e4:51:e9:8f:42:b4:b1:d8:eb:88:db:ad:e2:43:3c:68:55:
         55:34:dd:22:45:f6:97:d3:dd:a0:43:74:5f:0d:98:ef:8e:82:
         e0:2d:46:0e:0b:35:8f:0d:3e:ee:fb:1d:c4:35:1c:27:93:a3:
         6b:ae:0a:e4:e0:63:50:c9:30:97:45:c2:df:f5:47:0f:5e:67:
         d0:40:25:0e:a7:d5:1b:d2:41:fb:50:3a:a3:0c:b9:67:53:5b:
         f4:be:82:43:da:fe:96:a8:37:6d:a0:f3:01:1d:9f:12:6a:c2:
         83:d8:9b:65:83:1f:6d:2e:b7:bb:fe:50:12:44:c6:39:fb:0e:
         d4:b5:c8:26:5e:62:45:c0:48:e5:21:03:f9:1f:38:a0:05:42:
         26:d7:74:23:89:13:30:bd:8b:4c:83:21:a4:e6:d3:c7:f5:f1:
         56:43:c0:a7:84:2a:09:4c:03:43:c7:5a:1b:cb:9d:43:a0:c2:
         38:5f:18:3a:8e:eb:70:59:cc:8f:86:0e:27:a8:42:89:75:b7:
         6c:3b:11:52:75:b6:57:fe:6d:ca:54:52:94:c5:b8:d9:15:48:
         5e:cd:e7:4b:06:f3:95:b0:b9:48:8c:0c:83:3d:0a:ac:30:b5:
         88:3f:d9:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----