Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/3993f350-b756-4916-8d84-484f025dffcc/0/323430343a383030303a38313a3a2f34382d3438203d3e203137343531.roa
File:                     323430343a383030303a38313a3a2f34382d3438203d3e203137343531.roa (raw, json)
Hash identifier:          lOkDc/vXC9UPBLAVIKSEeUDy0IIFVaDe4/iBdnW7SOM=
Subject key identifier:   BE:BA:72:52:CA:F8:E4:D7:D3:DE:96:97:FE:31:95:94:E7:7E:F8:DC
Certificate issuer:       /CN=AC555447BA62C39107F16BF572F82A417F728DBF
Certificate serial:       6BBD898200DAA40893A1025C4C4B94D1FC01401C
Authority key identifier: AC:55:54:47:BA:62:C3:91:07:F1:6B:F5:72:F8:2A:41:7F:72:8D:BF
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AC555447BA62C39107F16BF572F82A417F728DBF.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/3993f350-b756-4916-8d84-484f025dffcc/0/323430343a383030303a38313a3a2f34382d3438203d3e203137343531.roa
Signing time:             Thu 30 Sep 2021 00:00:14 +0000
ROA not before:           Wed 29 Sep 2021 23:55:14 +0000
ROA not after:            Fri 30 Sep 2022 00:00:14 +0000
asID:                     17451
IP address blocks:        2404:8000:81::/48 maxlen: 48

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6b:bd:89:82:00:da:a4:08:93:a1:02:5c:4c:4b:94:d1:fc:01:40:1c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AC555447BA62C39107F16BF572F82A417F728DBF
        Validity
            Not Before: Sep 29 23:55:14 2021 GMT
            Not After : Sep 30 00:00:14 2022 GMT
        Subject: CN=3082010A0282010100E85AA4EAFC6AC10449D635C696B93933CC2471419145486D5D8E1619564F7A1BA25F6E7E080E9A809126E5EEB44CCCEA3D15E1F0DD0EC8F7CD86616399CD20F70A73E19255564E3CFC6F14A9625C6E396B6BFBA78454F0B53D40DCB6A7067BBCC41B2212B8520D25B7529918A0C3EAD22897FE4F6F7659F5AEEE0E66FB78F0E9FD9F9750AB20B18A66466FBB0D556C9B7A097F208CF9F6CAE700B0870528D0E0DB381913AAF83F65B47ADAF91C7A97085BB0C5C13B411BA391E026CA78465A3AB46641AEC909235158DB52BA0D105A900454F7C6654676F2EF3BB5715347B7EF13DB8705F36965EF5D3FE7342933EA22571C0751326D4C2087A5ADDEDB3D16BB0203010001
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e8:5a:a4:ea:fc:6a:c1:04:49:d6:35:c6:96:b9:
                    39:33:cc:24:71:41:91:45:48:6d:5d:8e:16:19:56:
                    4f:7a:1b:a2:5f:6e:7e:08:0e:9a:80:91:26:e5:ee:
                    b4:4c:cc:ea:3d:15:e1:f0:dd:0e:c8:f7:cd:86:61:
                    63:99:cd:20:f7:0a:73:e1:92:55:56:4e:3c:fc:6f:
                    14:a9:62:5c:6e:39:6b:6b:fb:a7:84:54:f0:b5:3d:
                    40:dc:b6:a7:06:7b:bc:c4:1b:22:12:b8:52:0d:25:
                    b7:52:99:18:a0:c3:ea:d2:28:97:fe:4f:6f:76:59:
                    f5:ae:ee:0e:66:fb:78:f0:e9:fd:9f:97:50:ab:20:
                    b1:8a:66:46:6f:bb:0d:55:6c:9b:7a:09:7f:20:8c:
                    f9:f6:ca:e7:00:b0:87:05:28:d0:e0:db:38:19:13:
                    aa:f8:3f:65:b4:7a:da:f9:1c:7a:97:08:5b:b0:c5:
                    c1:3b:41:1b:a3:91:e0:26:ca:78:46:5a:3a:b4:66:
                    41:ae:c9:09:23:51:58:db:52:ba:0d:10:5a:90:04:
                    54:f7:c6:65:46:76:f2:ef:3b:b5:71:53:47:b7:ef:
                    13:db:87:05:f3:69:65:ef:5d:3f:e7:34:29:33:ea:
                    22:57:1c:07:51:32:6d:4c:20:87:a5:ad:de:db:3d:
                    16:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BE:BA:72:52:CA:F8:E4:D7:D3:DE:96:97:FE:31:95:94:E7:7E:F8:DC
            X509v3 Authority Key Identifier:
                keyid:AC:55:54:47:BA:62:C3:91:07:F1:6B:F5:72:F8:2A:41:7F:72:8D:BF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/3993f350-b756-4916-8d84-484f025dffcc/0/AC555447BA62C39107F16BF572F82A417F728DBF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AC555447BA62C39107F16BF572F82A417F728DBF.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/3993f350-b756-4916-8d84-484f025dffcc/0/323430343a383030303a38313a3a2f34382d3438203d3e203137343531.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2404:8000:81::/48

    Signature Algorithm: sha256WithRSAEncryption
         4b:30:55:de:8c:d3:d7:0c:51:5e:18:b9:57:fc:f4:56:d2:bf:
         33:2d:51:e4:51:8c:cf:93:da:9b:d7:e2:f2:73:bc:dc:63:77:
         a9:62:bc:87:b8:95:b3:ea:ba:1e:b1:0f:3f:ad:09:61:4f:63:
         dc:ef:7e:2f:56:63:48:95:34:eb:b2:0e:af:a4:8f:aa:09:9c:
         4c:e0:ff:4e:5e:4a:5e:5f:d3:64:00:f1:55:78:04:ca:ab:e4:
         4c:78:71:ce:20:a1:df:22:66:50:7b:22:3a:7c:fa:5a:0b:f2:
         06:0a:d5:65:81:ce:4d:3c:fb:92:ea:ac:a6:f8:d0:35:34:29:
         42:9b:b6:e5:66:67:0f:51:16:7b:87:dd:7d:17:d2:83:bb:b7:
         5a:b4:f3:f8:73:fe:40:26:cf:82:3a:85:e9:08:cf:1c:9c:16:
         13:cc:86:ab:48:34:f0:14:e5:65:c2:89:d4:78:c8:55:8c:f1:
         5f:0a:93:66:c8:59:2e:4c:9a:8c:69:eb:e7:58:34:98:c7:9c:
         7b:ab:4a:9e:a9:ae:14:99:7a:de:39:24:c4:84:dc:72:b5:15:
         e1:9d:7b:50:94:1a:0b:ef:48:d5:92:91:8d:e0:09:55:33:00:
         63:04:b8:1c:74:02:d4:4f:75:55:40:b4:fd:27:1d:1c:ba:c5:
         08:2d:fb:33
-----BEGIN CERTIFICATE-----
MIIHKzCCBhOgAwIBAgIUa72JggDapAiToQJcTEuU0fwBQBwwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQUM1NTU0NDdCQTYyQzM5MTA3RjE2QkY1NzJGODJBNDE3
RjcyOERCRjAeFw0yMTA5MjkyMzU1MTRaFw0yMjA5MzAwMDAwMTRaMIICLTGCAikw
ggIlBgNVBAMTggIcMzA4MjAxMEEwMjgyMDEwMTAwRTg1QUE0RUFGQzZBQzEwNDQ5
RDYzNUM2OTZCOTM5MzNDQzI0NzE0MTkxNDU0ODZENUQ4RTE2MTk1NjRGN0ExQkEy
NUY2RTdFMDgwRTlBODA5MTI2RTVFRUI0NENDQ0VBM0QxNUUxRjBERDBFQzhGN0NE
ODY2MTYzOTlDRDIwRjcwQTczRTE5MjU1NTY0RTNDRkM2RjE0QTk2MjVDNkUzOTZC
NkJGQkE3ODQ1NEYwQjUzRDQwRENCNkE3MDY3QkJDQzQxQjIyMTJCODUyMEQyNUI3
NTI5OTE4QTBDM0VBRDIyODk3RkU0RjZGNzY1OUY1QUVFRTBFNjZGQjc4RjBFOUZE
OUY5NzUwQUIyMEIxOEE2NjQ2NkZCQjBENTU2QzlCN0EwOTdGMjA4Q0Y5RjZDQUU3
MDBCMDg3MDUyOEQwRTBEQjM4MTkxM0FBRjgzRjY1QjQ3QURBRjkxQzdBOTcwODVC
QjBDNUMxM0I0MTFCQTM5MUUwMjZDQTc4NDY1QTNBQjQ2NjQxQUVDOTA5MjM1MTU4
REI1MkJBMEQxMDVBOTAwNDU0RjdDNjY1NDY3NkYyRUYzQkI1NzE1MzQ3QjdFRjEz
REI4NzA1RjM2OTY1RUY1RDNGRTczNDI5MzNFQTIyNTcxQzA3NTEzMjZENEMyMDg3
QTVBRERFREIzRDE2QkIwMjAzMDEwMDAxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8A
MIIBCgKCAQEA6Fqk6vxqwQRJ1jXGlrk5M8wkcUGRRUhtXY4WGVZPehuiX25+CA6a
gJEm5e60TMzqPRXh8N0OyPfNhmFjmc0g9wpz4ZJVVk48/G8UqWJcbjlra/unhFTw
tT1A3LanBnu8xBsiErhSDSW3UpkYoMPq0iiX/k9vdln1ru4OZvt48On9n5dQqyCx
imZGb7sNVWybegl/IIz59srnALCHBSjQ4Ns4GROq+D9ltHra+Rx6lwhbsMXBO0Eb
o5HgJsp4Rlo6tGZBrskJI1FY21K6DRBakARU98ZlRnby7zu1cVNHt+8T24cF82ll
710/5zQpM+oiVxwHUTJtTCCHpa3e2z0WuwIDAQABo4ICOTCCAjUwHQYDVR0OBBYE
FL66clLK+OTX096Wl/4xlZTnfvjcMB8GA1UdIwQYMBaAFKxVVEe6YsORB/Fr9XL4
KkF/co2/MA4GA1UdDwEB/wQEAwIHgDCBhQYDVR0fBH4wfDB6oHigdoZ0cnN5bmM6
Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMzk5M2YzNTAtYjc1Ni00OTE2LThk
ODQtNDg0ZjAyNWRmZmNjLzAvQUM1NTU0NDdCQTYyQzM5MTA3RjE2QkY1NzJGODJB
NDE3RjcyOERCRi5jcmwwdAYIKwYBBQUHAQEEaDBmMGQGCCsGAQUFBzAChlhyc3lu
YzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9JRE5JQy1JRC8yL0FDNTU1NDQ3
QkE2MkMzOTEwN0YxNkJGNTcyRjgyQTQxN0Y3MjhEQkYuY2VyMIGmBggrBgEFBQcB
CwSBmTCBljCBkwYIKwYBBQUHMAuGgYZyc3luYzovL3JlcG8tcnBraS5pZG5pYy5u
ZXQvcmVwby8zOTkzZjM1MC1iNzU2LTQ5MTYtOGQ4NC00ODRmMDI1ZGZmY2MvMC8z
MjM0MzAzNDNhMzgzMDMwMzAzYTM4MzEzYTNhMmYzNDM4MmQzNDM4MjAzZDNlMjAz
MTM3MzQzNTMxLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUF
BwEHAQH/BBMwETAPBAIAAjAJAwcAJASAAACBMA0GCSqGSIb3DQEBCwUAA4IBAQBL
MFXejNPXDFFeGLlX/PRW0r8zLVHkUYzPk9qb1+Lyc7zcY3epYryHuJWz6roesQ8/
rQlhT2Pc734vVmNIlTTrsg6vpI+qCZxM4P9OXkpeX9NkAPFVeATKq+RMeHHOIKHf
ImZQeyI6fPpaC/IGCtVlgc5NPPuS6qym+NA1NClCm7blZmcPURZ7h919F9KDu7da
tPP4c/5AJs+COoXpCM8cnBYTzIarSDTwFOVlwonUeMhVjPFfCpNmyFkuTJqMaevn
WDSYx5x7q0qeqa4UmXreOSTEhNxytRXhnXtQlBoL70jVkpGN4AlVMwBjBLgcdALU
T3VVQLT9Jx0cusUILfsz
-----END CERTIFICATE-----