Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/3993f350-b756-4916-8d84-484f025dffcc/0/323430343a383030303a38303a3a2f34382d3438203d3e203137343531.roa
File:                     323430343a383030303a38303a3a2f34382d3438203d3e203137343531.roa (raw, json)
Hash identifier:          +B8IO+jl97sCLoWZMpr3q2bHSPBaEVofBuuOcMVRI4M=
Subject key identifier:   EA:4F:C4:0B:69:6B:D5:19:E7:76:A2:F0:DB:08:91:0E:C1:C7:5E:17
Certificate issuer:       /CN=AC555447BA62C39107F16BF572F82A417F728DBF
Certificate serial:       5E0F2F3E4078109EFF72CE40E78064EC83EF0CC0
Authority key identifier: AC:55:54:47:BA:62:C3:91:07:F1:6B:F5:72:F8:2A:41:7F:72:8D:BF
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AC555447BA62C39107F16BF572F82A417F728DBF.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/3993f350-b756-4916-8d84-484f025dffcc/0/323430343a383030303a38303a3a2f34382d3438203d3e203137343531.roa
Signing time:             Thu 30 Sep 2021 00:00:28 +0000
ROA not before:           Wed 29 Sep 2021 23:55:28 +0000
ROA not after:            Fri 30 Sep 2022 00:00:28 +0000
asID:                     17451
IP address blocks:        2404:8000:80::/48 maxlen: 48

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5e:0f:2f:3e:40:78:10:9e:ff:72:ce:40:e7:80:64:ec:83:ef:0c:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AC555447BA62C39107F16BF572F82A417F728DBF
        Validity
            Not Before: Sep 29 23:55:28 2021 GMT
            Not After : Sep 30 00:00:28 2022 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:b1:9d:64:fc:31:2f:62:9a:6d:24:65:6d:d5:
                    1c:d8:cd:a4:45:5f:07:b5:4b:49:fe:49:be:86:75:
                    24:8e:94:88:f7:77:96:33:e8:67:5a:69:e8:7c:0c:
                    e1:d2:72:94:9d:5a:29:90:d8:69:0c:30:e4:2d:fa:
                    4a:f6:7c:8d:13:44:c6:9c:35:9d:a6:b3:03:70:c5:
                    13:4c:75:e3:ba:f6:9e:88:f5:94:9e:60:ee:c1:b8:
                    f3:05:23:11:6d:01:da:d8:99:9e:72:d4:63:36:ff:
                    57:bb:75:d9:a0:13:e2:da:7b:e1:7f:a5:ec:e0:8c:
                    ce:a8:ef:7a:d5:be:8a:24:45:be:70:32:71:12:59:
                    c3:98:c8:4c:16:45:a7:02:75:43:81:e6:e4:4c:61:
                    f7:47:71:8b:ef:25:7e:af:19:b6:ce:3d:51:12:da:
                    a3:34:34:e6:5b:b2:4c:2f:65:70:81:64:a0:6b:18:
                    ac:9e:a1:b4:cc:8a:68:f5:6f:d9:0d:c5:4c:c2:70:
                    27:81:5b:a4:a5:1d:71:26:e9:f3:ac:c8:b5:9c:ff:
                    0f:90:5d:82:58:c7:fc:9d:5a:65:9d:b7:9d:30:54:
                    e4:d0:f7:47:cc:6b:cb:f2:71:9d:9d:bb:91:f4:97:
                    c0:8c:7a:60:c7:e6:d7:5d:af:b2:fb:a4:56:09:db:
                    8b:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EA:4F:C4:0B:69:6B:D5:19:E7:76:A2:F0:DB:08:91:0E:C1:C7:5E:17
            X509v3 Authority Key Identifier:
                keyid:AC:55:54:47:BA:62:C3:91:07:F1:6B:F5:72:F8:2A:41:7F:72:8D:BF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/3993f350-b756-4916-8d84-484f025dffcc/0/AC555447BA62C39107F16BF572F82A417F728DBF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AC555447BA62C39107F16BF572F82A417F728DBF.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/3993f350-b756-4916-8d84-484f025dffcc/0/323430343a383030303a38303a3a2f34382d3438203d3e203137343531.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2404:8000:80::/48

    Signature Algorithm: sha256WithRSAEncryption
         18:80:a2:ed:a5:ef:16:03:92:6b:24:4d:a5:21:0e:81:92:b1:
         e5:7c:cf:fa:07:18:75:72:4d:e2:af:c8:b1:0c:47:68:cc:69:
         f8:44:58:53:c9:7f:ae:df:7f:7f:41:9c:92:c6:44:87:9e:fe:
         7e:cc:54:f8:1b:14:03:ba:4c:ac:6d:ae:a3:00:7b:ab:fc:8b:
         77:af:1b:b9:1c:00:e2:5e:e7:77:40:63:28:95:3e:56:26:72:
         8a:19:60:1c:95:c1:48:8f:4a:04:94:6e:cc:be:49:99:4e:57:
         e7:4c:cc:c7:a3:02:90:ec:2f:2b:d7:f2:eb:19:92:4f:7c:6d:
         9a:d0:7b:73:9b:e2:79:2f:bf:0e:4a:36:a8:e7:d1:ff:0e:b2:
         c0:63:fd:13:09:f2:5c:de:d6:bb:01:29:99:1a:01:e4:65:a2:
         d4:e2:3f:dc:88:ca:70:bd:2e:01:49:ec:d8:60:c3:f9:b9:c9:
         86:95:07:06:14:3e:d8:ed:bf:a7:94:bf:2d:25:71:bc:2e:60:
         17:00:bd:bd:3e:16:b7:f0:3c:44:b5:c5:48:f4:14:44:36:2d:
         c3:cd:34:b6:0b:d5:d1:7e:c8:75:cb:5c:13:95:28:47:b4:ec:
         c5:c0:d3:c0:59:39:13:88:8c:52:50:58:36:0b:43:99:be:0a:
         01:1c:c8:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----