Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/3993f350-b756-4916-8d84-484f025dffcc/0/323430343a383030303a373a3a2f34382d3438203d3e203137343531.roa
File:                     323430343a383030303a373a3a2f34382d3438203d3e203137343531.roa (raw, json)
Hash identifier:          d2QK1RFbxE7FUiNXz6aHBsIyRBOTY1NbZlK2sDZPeFc=
Subject key identifier:   19:F3:7A:42:5C:63:75:31:5A:94:BE:C1:95:2B:E8:B3:E2:B1:44:3D
Certificate issuer:       /CN=AC555447BA62C39107F16BF572F82A417F728DBF
Certificate serial:       1CDB4BAE27FE4B0C36BC84DFB65816546D07F910
Authority key identifier: AC:55:54:47:BA:62:C3:91:07:F1:6B:F5:72:F8:2A:41:7F:72:8D:BF
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AC555447BA62C39107F16BF572F82A417F728DBF.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/3993f350-b756-4916-8d84-484f025dffcc/0/323430343a383030303a373a3a2f34382d3438203d3e203137343531.roa
Signing time:             Thu 30 Sep 2021 00:00:56 +0000
ROA not before:           Wed 29 Sep 2021 23:55:56 +0000
ROA not after:            Fri 30 Sep 2022 00:00:56 +0000
asID:                     17451
IP address blocks:        2404:8000:7::/48 maxlen: 48

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1c:db:4b:ae:27:fe:4b:0c:36:bc:84:df:b6:58:16:54:6d:07:f9:10
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AC555447BA62C39107F16BF572F82A417F728DBF
        Validity
            Not Before: Sep 29 23:55:56 2021 GMT
            Not After : Sep 30 00:00:56 2022 GMT
        Subject: CN=3082010A0282010100BFBE74252D77E236BBFD10C6FA52B9B811C3D30CEFBD66A09F6FC51B77323BB796F63E36D5187C69EB354A7E39F0209197114DA3BAC802382FB54CC209A3C7E2C6449BDA4E7A9D0317E797B43A826834D12BB34DD5B32F4B75876AE59618BD02129B344470E1D98EE01EC0FC3C8DA902214C4B7FE30369CC6A00E72A1E552ED07AB152035B1A1C17C48EDF6F5F60AD70333B0151D6EF33C5F1230DF4E70FBA0252795C914F10F353254F59A42AD9C294091383F9B66A5AEC2A9D7BEE25B4FFC45A456F7ED7D6DD86C21E41B76AB1001EBDC01F2A2A86508570985692F006E646AACADA382FEE5B507D5A67AF64552B73A527A4C6AE9CBEDDDA2B2775653777F90203010001
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:be:74:25:2d:77:e2:36:bb:fd:10:c6:fa:52:
                    b9:b8:11:c3:d3:0c:ef:bd:66:a0:9f:6f:c5:1b:77:
                    32:3b:b7:96:f6:3e:36:d5:18:7c:69:eb:35:4a:7e:
                    39:f0:20:91:97:11:4d:a3:ba:c8:02:38:2f:b5:4c:
                    c2:09:a3:c7:e2:c6:44:9b:da:4e:7a:9d:03:17:e7:
                    97:b4:3a:82:68:34:d1:2b:b3:4d:d5:b3:2f:4b:75:
                    87:6a:e5:96:18:bd:02:12:9b:34:44:70:e1:d9:8e:
                    e0:1e:c0:fc:3c:8d:a9:02:21:4c:4b:7f:e3:03:69:
                    cc:6a:00:e7:2a:1e:55:2e:d0:7a:b1:52:03:5b:1a:
                    1c:17:c4:8e:df:6f:5f:60:ad:70:33:3b:01:51:d6:
                    ef:33:c5:f1:23:0d:f4:e7:0f:ba:02:52:79:5c:91:
                    4f:10:f3:53:25:4f:59:a4:2a:d9:c2:94:09:13:83:
                    f9:b6:6a:5a:ec:2a:9d:7b:ee:25:b4:ff:c4:5a:45:
                    6f:7e:d7:d6:dd:86:c2:1e:41:b7:6a:b1:00:1e:bd:
                    c0:1f:2a:2a:86:50:85:70:98:56:92:f0:06:e6:46:
                    aa:ca:da:38:2f:ee:5b:50:7d:5a:67:af:64:55:2b:
                    73:a5:27:a4:c6:ae:9c:be:dd:da:2b:27:75:65:37:
                    77:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                19:F3:7A:42:5C:63:75:31:5A:94:BE:C1:95:2B:E8:B3:E2:B1:44:3D
            X509v3 Authority Key Identifier:
                keyid:AC:55:54:47:BA:62:C3:91:07:F1:6B:F5:72:F8:2A:41:7F:72:8D:BF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/3993f350-b756-4916-8d84-484f025dffcc/0/AC555447BA62C39107F16BF572F82A417F728DBF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AC555447BA62C39107F16BF572F82A417F728DBF.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/3993f350-b756-4916-8d84-484f025dffcc/0/323430343a383030303a373a3a2f34382d3438203d3e203137343531.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2404:8000:7::/48

    Signature Algorithm: sha256WithRSAEncryption
         16:b5:38:4a:da:18:d0:52:74:b0:2e:ea:90:88:42:fd:e2:f1:
         d1:b0:8b:89:9c:88:cb:43:51:6a:06:5b:ed:10:4a:38:35:2b:
         86:e8:1c:1a:c9:70:e8:ed:64:55:dc:fd:78:19:26:9e:46:43:
         df:64:40:10:c5:db:a5:f1:94:5e:35:cc:85:7a:05:c1:b2:f1:
         5f:bf:cd:67:0d:e1:30:63:82:3c:3d:e4:7a:72:9d:49:8c:a9:
         00:44:91:54:a5:86:9c:88:9a:d5:24:3d:47:78:39:5d:cb:0d:
         93:61:f5:7d:b9:c0:b9:ab:e3:96:bf:c8:1d:ee:5c:5e:6b:38:
         13:47:b2:db:cf:b1:58:bb:e8:26:99:02:08:95:eb:26:b8:59:
         21:5b:16:00:41:24:a6:b6:26:05:05:82:52:18:30:99:59:98:
         ed:16:d8:10:62:78:e0:f0:06:0b:77:05:50:ce:8d:11:04:9d:
         fa:5f:7d:8c:c3:be:e0:76:77:a1:ef:9c:d0:69:1b:cc:de:74:
         1c:c1:3a:58:e6:ca:a5:5c:7e:8c:a8:57:2d:cc:49:cc:93:c1:
         05:a1:28:51:54:aa:b8:76:42:b0:bd:6a:6c:f6:6c:9b:e1:5b:
         e8:9b:98:59:52:28:f0:e3:c8:fc:26:c2:4c:51:09:a9:c0:6c:
         b6:05:69:13
-----BEGIN CERTIFICATE-----
MIIHKTCCBhGgAwIBAgIUHNtLrif+Sww2vITftlgWVG0H+RAwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQUM1NTU0NDdCQTYyQzM5MTA3RjE2QkY1NzJGODJBNDE3
RjcyOERCRjAeFw0yMTA5MjkyMzU1NTZaFw0yMjA5MzAwMDAwNTZaMIICLTGCAikw
ggIlBgNVBAMTggIcMzA4MjAxMEEwMjgyMDEwMTAwQkZCRTc0MjUyRDc3RTIzNkJC
RkQxMEM2RkE1MkI5QjgxMUMzRDMwQ0VGQkQ2NkEwOUY2RkM1MUI3NzMyM0JCNzk2
RjYzRTM2RDUxODdDNjlFQjM1NEE3RTM5RjAyMDkxOTcxMTREQTNCQUM4MDIzODJG
QjU0Q0MyMDlBM0M3RTJDNjQ0OUJEQTRFN0E5RDAzMTdFNzk3QjQzQTgyNjgzNEQx
MkJCMzRERDVCMzJGNEI3NTg3NkFFNTk2MThCRDAyMTI5QjM0NDQ3MEUxRDk4RUUw
MUVDMEZDM0M4REE5MDIyMTRDNEI3RkUzMDM2OUNDNkEwMEU3MkExRTU1MkVEMDdB
QjE1MjAzNUIxQTFDMTdDNDhFREY2RjVGNjBBRDcwMzMzQjAxNTFENkVGMzNDNUYx
MjMwREY0RTcwRkJBMDI1Mjc5NUM5MTRGMTBGMzUzMjU0RjU5QTQyQUQ5QzI5NDA5
MTM4M0Y5QjY2QTVBRUMyQTlEN0JFRTI1QjRGRkM0NUE0NTZGN0VEN0Q2REQ4NkMy
MUU0MUI3NkFCMTAwMUVCREMwMUYyQTJBODY1MDg1NzA5ODU2OTJGMDA2RTY0NkFB
Q0FEQTM4MkZFRTVCNTA3RDVBNjdBRjY0NTUyQjczQTUyN0E0QzZBRTlDQkVERERB
MkIyNzc1NjUzNzc3RjkwMjAzMDEwMDAxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8A
MIIBCgKCAQEAv750JS134ja7/RDG+lK5uBHD0wzvvWagn2/FG3cyO7eW9j421Rh8
aes1Sn458CCRlxFNo7rIAjgvtUzCCaPH4sZEm9pOep0DF+eXtDqCaDTRK7NN1bMv
S3WHauWWGL0CEps0RHDh2Y7gHsD8PI2pAiFMS3/jA2nMagDnKh5VLtB6sVIDWxoc
F8SO329fYK1wMzsBUdbvM8XxIw305w+6AlJ5XJFPEPNTJU9ZpCrZwpQJE4P5tmpa
7Cqde+4ltP/EWkVvftfW3YbCHkG3arEAHr3AHyoqhlCFcJhWkvAG5kaqyto4L+5b
UH1aZ69kVStzpSekxq6cvt3aKyd1ZTd3+QIDAQABo4ICNzCCAjMwHQYDVR0OBBYE
FBnzekJcY3UxWpS+wZUr6LPisUQ9MB8GA1UdIwQYMBaAFKxVVEe6YsORB/Fr9XL4
KkF/co2/MA4GA1UdDwEB/wQEAwIHgDCBhQYDVR0fBH4wfDB6oHigdoZ0cnN5bmM6
Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMzk5M2YzNTAtYjc1Ni00OTE2LThk
ODQtNDg0ZjAyNWRmZmNjLzAvQUM1NTU0NDdCQTYyQzM5MTA3RjE2QkY1NzJGODJB
NDE3RjcyOERCRi5jcmwwdAYIKwYBBQUHAQEEaDBmMGQGCCsGAQUFBzAChlhyc3lu
YzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9JRE5JQy1JRC8yL0FDNTU1NDQ3
QkE2MkMzOTEwN0YxNkJGNTcyRjgyQTQxN0Y3MjhEQkYuY2VyMIGkBggrBgEFBQcB
CwSBlzCBlDCBkQYIKwYBBQUHMAuGgYRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5u
ZXQvcmVwby8zOTkzZjM1MC1iNzU2LTQ5MTYtOGQ4NC00ODRmMDI1ZGZmY2MvMC8z
MjM0MzAzNDNhMzgzMDMwMzAzYTM3M2EzYTJmMzQzODJkMzQzODIwM2QzZTIwMzEz
NzM0MzUzMS5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAiBggrBgEFBQcB
BwEB/wQTMBEwDwQCAAIwCQMHACQEgAAABzANBgkqhkiG9w0BAQsFAAOCAQEAFrU4
StoY0FJ0sC7qkIhC/eLx0bCLiZyIy0NRagZb7RBKODUrhugcGslw6O1kVdz9eBkm
nkZD32RAEMXbpfGUXjXMhXoFwbLxX7/NZw3hMGOCPD3kenKdSYypAESRVKWGnIia
1SQ9R3g5XcsNk2H1fbnAuavjlr/IHe5cXms4E0ey28+xWLvoJpkCCJXrJrhZIVsW
AEEkprYmBQWCUhgwmVmY7RbYEGJ44PAGC3cFUM6NEQSd+l99jMO+4HZ3oe+c0Gkb
zN50HME6WObKpVx+jKhXLcxJzJPBBaEoUVSquHZCsL1qbPZsm+Fb6JuYWVIo8OPI
/CbCTFEJqcBstgVpEw==
-----END CERTIFICATE-----