Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/3993f350-b756-4916-8d84-484f025dffcc/0/323430343a383030303a37323a3a2f34382d3438203d3e203137343531.roa
File:                     323430343a383030303a37323a3a2f34382d3438203d3e203137343531.roa (raw, json)
Hash identifier:          SEFK66be1quZyRUdLuAOIkw13uhsx1vdQWSlR1XKSKs=
Subject key identifier:   18:AA:67:61:2E:83:93:F3:1A:30:C7:E7:8C:0B:AD:86:D4:16:06:01
Certificate issuer:       /CN=AC555447BA62C39107F16BF572F82A417F728DBF
Certificate serial:       3B3240E57ECC136F40707C16428770BB287453EF
Authority key identifier: AC:55:54:47:BA:62:C3:91:07:F1:6B:F5:72:F8:2A:41:7F:72:8D:BF
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AC555447BA62C39107F16BF572F82A417F728DBF.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/3993f350-b756-4916-8d84-484f025dffcc/0/323430343a383030303a37323a3a2f34382d3438203d3e203137343531.roa
Signing time:             Thu 30 Sep 2021 00:01:17 +0000
ROA not before:           Wed 29 Sep 2021 23:56:17 +0000
ROA not after:            Fri 30 Sep 2022 00:01:17 +0000
asID:                     17451
IP address blocks:        2404:8000:72::/48 maxlen: 48

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3b:32:40:e5:7e:cc:13:6f:40:70:7c:16:42:87:70:bb:28:74:53:ef
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AC555447BA62C39107F16BF572F82A417F728DBF
        Validity
            Not Before: Sep 29 23:56:17 2021 GMT
            Not After : Sep 30 00:01:17 2022 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:c5:b9:d3:44:7a:9d:6e:6f:a3:68:b9:0d:67:
                    c0:05:8e:ee:6a:e5:e5:a1:ae:a9:75:ae:24:9e:2b:
                    34:81:25:87:30:4e:a6:4f:04:2b:64:4c:1c:05:1c:
                    32:33:b7:2b:d1:d5:e4:cf:92:f1:fd:de:21:77:a6:
                    91:eb:70:df:b7:cf:05:ff:47:b6:6b:d7:68:08:02:
                    82:23:df:9f:f7:2c:c5:23:1b:9e:cb:51:28:7f:a0:
                    1c:b8:35:07:28:88:56:e8:13:9c:73:4b:da:b9:30:
                    1c:10:76:ac:d9:27:82:b9:cf:b1:be:b5:de:7b:10:
                    53:ef:12:86:b0:ed:b6:7e:0a:76:5f:0c:57:d6:18:
                    35:10:22:23:4d:7b:c4:37:49:26:d3:15:2c:bb:cf:
                    3a:bc:c7:96:6e:91:2a:25:22:72:4c:95:8e:7f:25:
                    fa:f2:3b:20:85:c0:35:b1:83:78:ba:88:62:6a:d7:
                    9b:b9:15:56:ce:c6:22:57:90:01:60:40:5a:42:ab:
                    3b:ae:ea:0c:5f:3d:ed:79:ca:dc:e4:a7:55:f1:05:
                    b1:92:b6:6e:c5:ed:2f:09:78:bb:6c:6b:b7:64:7b:
                    38:d1:75:c9:32:5a:6b:c0:6f:d4:2d:da:73:1d:30:
                    fa:1d:e9:bc:49:a7:9c:1e:92:f0:4e:43:42:b9:5f:
                    ae:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                18:AA:67:61:2E:83:93:F3:1A:30:C7:E7:8C:0B:AD:86:D4:16:06:01
            X509v3 Authority Key Identifier:
                keyid:AC:55:54:47:BA:62:C3:91:07:F1:6B:F5:72:F8:2A:41:7F:72:8D:BF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/3993f350-b756-4916-8d84-484f025dffcc/0/AC555447BA62C39107F16BF572F82A417F728DBF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AC555447BA62C39107F16BF572F82A417F728DBF.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/3993f350-b756-4916-8d84-484f025dffcc/0/323430343a383030303a37323a3a2f34382d3438203d3e203137343531.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2404:8000:72::/48

    Signature Algorithm: sha256WithRSAEncryption
         ab:27:cc:07:93:16:bd:5e:6b:8c:20:82:f2:bc:52:a8:b5:88:
         0c:2b:cd:5a:6f:d8:43:87:ff:2d:2d:ed:eb:87:46:cc:f5:8b:
         a3:d0:cb:d2:07:bc:59:a1:b1:9b:ae:96:17:03:2d:5b:f7:2a:
         0d:8a:9a:71:75:fb:dc:65:4e:a0:78:a1:97:43:d9:79:9b:b8:
         4e:57:e6:a4:0c:4a:6e:1c:22:7e:d8:7e:da:1f:31:98:01:04:
         ea:a5:12:e4:6f:4d:e2:4e:c2:91:e9:6a:c2:f8:d5:9b:42:c1:
         ad:db:e4:2e:85:6c:dc:ec:94:09:f9:3c:ac:4b:5e:a5:cb:70:
         9e:a8:b1:41:58:38:24:e1:4f:63:54:0e:75:a3:15:f7:09:60:
         0a:9e:9b:ed:fb:96:87:7a:7e:a5:72:61:59:0d:37:29:c2:54:
         d2:43:62:42:16:e0:fa:6b:80:cd:6a:31:ae:82:b8:db:1c:1a:
         7f:3f:d6:5e:3b:9c:ce:c5:6b:93:ce:84:1e:b5:e0:22:a1:a3:
         f4:b0:a6:ba:8d:e3:df:44:56:b8:ba:b1:88:fe:c6:e6:e5:c8:
         78:57:86:6e:9c:18:80:24:85:16:be:ec:3b:5b:be:ba:7f:b6:
         32:fa:8a:cc:bb:a6:d4:d2:e1:61:ac:85:11:b0:2e:42:28:94:
         ba:66:c0:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----