Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/3993f350-b756-4916-8d84-484f025dffcc/0/323430343a383030303a38323a3a2f34382d3438203d3e203137343531.roa
File:                     323430343a383030303a38323a3a2f34382d3438203d3e203137343531.roa (raw, json)
Hash identifier:          q1xktb8uDgPZ1EUxAVkRWYhJKSwZdevvPafTRo78rdQ=
Subject key identifier:   C5:E9:F4:1C:1F:FD:23:5B:F3:4D:45:5D:9A:DD:BE:A2:64:4D:14:99
Certificate issuer:       /CN=AC555447BA62C39107F16BF572F82A417F728DBF
Certificate serial:       4AC928D61CE0C6CB1038FE7DD589ABDEE1DB4D5B
Authority key identifier: AC:55:54:47:BA:62:C3:91:07:F1:6B:F5:72:F8:2A:41:7F:72:8D:BF
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AC555447BA62C39107F16BF572F82A417F728DBF.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/3993f350-b756-4916-8d84-484f025dffcc/0/323430343a383030303a38323a3a2f34382d3438203d3e203137343531.roa
Signing time:             Thu 30 Sep 2021 00:00:50 +0000
ROA not before:           Wed 29 Sep 2021 23:55:50 +0000
ROA not after:            Fri 30 Sep 2022 00:00:50 +0000
asID:                     17451
IP address blocks:        2404:8000:82::/48 maxlen: 48

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4a:c9:28:d6:1c:e0:c6:cb:10:38:fe:7d:d5:89:ab:de:e1:db:4d:5b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AC555447BA62C39107F16BF572F82A417F728DBF
        Validity
            Not Before: Sep 29 23:55:50 2021 GMT
            Not After : Sep 30 00:00:50 2022 GMT
        Subject: CN=3082010A0282010100B2CE1D1282ACF4B2B163D40635B0A5B8B7018E6CD392B5E9B17A3C46BF0BBACD4290A25F938741A290A383A018BF48329447E55B9AB97DC90983B1B814BC183C1D631D6D1DC337BF105AF2F8FEBA0EFD1CA9A7FCC8A943F41C5C0725C4E37A3F64A01F01E1AE10F0FC8C22CB2741E93D71133932F95634676C7FFE8A394B3E65AC94245CECE4FF753CA71DB703E3F41168CF2357A0749578922002B4BFD4D646AEB5DF9FEC8D6A361F0214B9D837FA98D5E8E17217292DC1B16269853D8BA87329B974972B28664100F7C9C892DDE88BF347FF964AEAAABF2BAF8E17D286E66D90006388E1F1DE31B96B13DFB8AA1E98FC834D40237AF59333097F8FE22D09690203010001
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:ce:1d:12:82:ac:f4:b2:b1:63:d4:06:35:b0:
                    a5:b8:b7:01:8e:6c:d3:92:b5:e9:b1:7a:3c:46:bf:
                    0b:ba:cd:42:90:a2:5f:93:87:41:a2:90:a3:83:a0:
                    18:bf:48:32:94:47:e5:5b:9a:b9:7d:c9:09:83:b1:
                    b8:14:bc:18:3c:1d:63:1d:6d:1d:c3:37:bf:10:5a:
                    f2:f8:fe:ba:0e:fd:1c:a9:a7:fc:c8:a9:43:f4:1c:
                    5c:07:25:c4:e3:7a:3f:64:a0:1f:01:e1:ae:10:f0:
                    fc:8c:22:cb:27:41:e9:3d:71:13:39:32:f9:56:34:
                    67:6c:7f:fe:8a:39:4b:3e:65:ac:94:24:5c:ec:e4:
                    ff:75:3c:a7:1d:b7:03:e3:f4:11:68:cf:23:57:a0:
                    74:95:78:92:20:02:b4:bf:d4:d6:46:ae:b5:df:9f:
                    ec:8d:6a:36:1f:02:14:b9:d8:37:fa:98:d5:e8:e1:
                    72:17:29:2d:c1:b1:62:69:85:3d:8b:a8:73:29:b9:
                    74:97:2b:28:66:41:00:f7:c9:c8:92:dd:e8:8b:f3:
                    47:ff:96:4a:ea:aa:bf:2b:af:8e:17:d2:86:e6:6d:
                    90:00:63:88:e1:f1:de:31:b9:6b:13:df:b8:aa:1e:
                    98:fc:83:4d:40:23:7a:f5:93:33:09:7f:8f:e2:2d:
                    09:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C5:E9:F4:1C:1F:FD:23:5B:F3:4D:45:5D:9A:DD:BE:A2:64:4D:14:99
            X509v3 Authority Key Identifier:
                keyid:AC:55:54:47:BA:62:C3:91:07:F1:6B:F5:72:F8:2A:41:7F:72:8D:BF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/3993f350-b756-4916-8d84-484f025dffcc/0/AC555447BA62C39107F16BF572F82A417F728DBF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AC555447BA62C39107F16BF572F82A417F728DBF.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/3993f350-b756-4916-8d84-484f025dffcc/0/323430343a383030303a38323a3a2f34382d3438203d3e203137343531.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2404:8000:82::/48

    Signature Algorithm: sha256WithRSAEncryption
         4f:8e:c0:67:96:45:2a:e4:ea:a3:f0:1a:d0:58:79:a4:03:b0:
         45:30:6f:3a:72:0c:fb:5d:87:96:7c:1c:64:db:8a:cc:a0:c8:
         8e:f5:ba:49:c3:0c:ba:89:a3:27:26:5d:3c:65:b3:2d:6e:40:
         a3:b6:d1:cd:d9:eb:33:cc:fe:78:40:54:5a:97:34:22:a8:95:
         27:e6:02:ae:a0:7a:19:0d:36:ad:82:95:d4:ec:05:1e:78:d8:
         2c:f6:45:ac:ee:94:b0:58:39:b6:60:a4:0e:f4:a0:52:71:ff:
         41:ee:2e:00:2b:0f:6e:76:74:7e:db:3b:8c:a5:f2:d6:54:67:
         d3:c2:ea:e8:e2:4d:75:89:bf:dc:d0:5b:b4:21:2c:f4:f2:cb:
         4e:ee:36:f2:45:0f:1a:6e:f5:cb:44:4e:3a:00:b1:a1:5e:c8:
         06:dd:78:1e:0e:ca:04:a3:50:4a:56:99:47:55:22:b0:2d:f2:
         14:92:7a:32:d1:03:c8:ec:95:c1:38:06:75:c7:30:76:80:a2:
         2f:26:31:57:cf:35:40:9d:a8:64:9b:82:90:29:0e:c9:46:7b:
         f7:9f:3a:dc:f0:31:53:76:cd:46:07:5c:18:0e:93:f9:48:00:
         76:55:61:3f:f3:35:36:13:05:70:ec:d0:9f:f9:c0:d3:c3:cf:
         a8:20:ea:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----