Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/3993f350-b756-4916-8d84-484f025dffcc/0/323430343a383030303a38333a3a2f34382d3438203d3e203137343531.roa
File:                     323430343a383030303a38333a3a2f34382d3438203d3e203137343531.roa (raw, json)
Hash identifier:          IvZg/fYzwSYjZlAx5HM01jJNhOM+/yZ734QEp8zqSb4=
Subject key identifier:   4D:52:BD:99:85:1D:AF:5F:74:3C:15:5F:E5:F5:72:DC:B3:64:8D:1F
Certificate issuer:       /CN=AC555447BA62C39107F16BF572F82A417F728DBF
Certificate serial:       48456559B396E4F9E97C1DE1AE6F738CD41B4055
Authority key identifier: AC:55:54:47:BA:62:C3:91:07:F1:6B:F5:72:F8:2A:41:7F:72:8D:BF
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AC555447BA62C39107F16BF572F82A417F728DBF.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/3993f350-b756-4916-8d84-484f025dffcc/0/323430343a383030303a38333a3a2f34382d3438203d3e203137343531.roa
Signing time:             Thu 30 Sep 2021 00:00:40 +0000
ROA not before:           Wed 29 Sep 2021 23:55:40 +0000
ROA not after:            Fri 30 Sep 2022 00:00:40 +0000
asID:                     17451
IP address blocks:        2404:8000:83::/48 maxlen: 48

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            48:45:65:59:b3:96:e4:f9:e9:7c:1d:e1:ae:6f:73:8c:d4:1b:40:55
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AC555447BA62C39107F16BF572F82A417F728DBF
        Validity
            Not Before: Sep 29 23:55:40 2021 GMT
            Not After : Sep 30 00:00:40 2022 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:09:b2:1f:c0:af:d6:a1:fa:72:2e:09:e7:59:
                    9d:97:c1:8e:16:d6:9b:39:c8:e2:76:e7:04:34:7d:
                    dd:81:c5:7e:26:55:ba:79:e9:d0:19:35:54:92:80:
                    c5:0f:f9:35:66:5a:33:39:4f:bc:fd:7a:4d:d2:72:
                    8d:5f:1b:3c:f1:34:21:e3:9b:ac:48:8f:f9:0b:ad:
                    68:ed:e5:fd:81:b5:c9:c1:63:57:cf:78:55:dc:10:
                    96:18:20:39:5f:02:29:13:ad:55:6f:0b:cf:48:6c:
                    9b:41:ad:ea:1d:d9:33:42:df:6c:22:31:b2:e0:6e:
                    3a:89:f7:14:21:04:a3:8e:6b:c4:04:e6:fe:bb:85:
                    9a:56:39:c5:e4:ea:d4:66:5f:83:7b:68:cc:a2:10:
                    9e:8f:48:dd:c7:89:93:b6:c9:58:53:dc:33:72:1c:
                    c3:22:fa:66:ff:c8:e8:40:00:f6:6f:df:8e:66:d5:
                    46:50:82:5c:32:3b:22:93:3d:18:32:b5:29:d8:ae:
                    9f:4b:37:48:40:6a:cb:71:92:35:3b:1b:f2:a3:eb:
                    1b:45:6c:55:7b:50:36:a9:48:b9:7f:66:fe:53:90:
                    64:77:3e:e9:24:e0:98:04:58:20:5d:8c:58:c7:34:
                    4d:fd:f3:f8:98:c9:69:fb:8b:87:ea:0a:2a:d3:a1:
                    a0:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4D:52:BD:99:85:1D:AF:5F:74:3C:15:5F:E5:F5:72:DC:B3:64:8D:1F
            X509v3 Authority Key Identifier:
                keyid:AC:55:54:47:BA:62:C3:91:07:F1:6B:F5:72:F8:2A:41:7F:72:8D:BF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/3993f350-b756-4916-8d84-484f025dffcc/0/AC555447BA62C39107F16BF572F82A417F728DBF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AC555447BA62C39107F16BF572F82A417F728DBF.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/3993f350-b756-4916-8d84-484f025dffcc/0/323430343a383030303a38333a3a2f34382d3438203d3e203137343531.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2404:8000:83::/48

    Signature Algorithm: sha256WithRSAEncryption
         15:39:38:4b:41:c0:25:80:3c:23:c4:c6:01:98:6b:fb:5c:2d:
         0b:47:cd:d8:09:c6:72:f4:cb:f6:1b:e3:95:5d:97:b2:f1:14:
         2b:c7:b7:11:08:6f:ba:f3:72:80:c0:e6:9f:9a:c0:3e:fd:17:
         f9:71:d8:cc:88:c4:cf:84:df:75:1b:91:8e:8b:64:9f:4e:00:
         a7:da:7d:f2:44:02:4f:0c:3a:5c:5c:4f:5f:9e:f0:17:da:35:
         00:36:1f:ea:e4:b9:55:19:11:d0:c7:3e:65:18:4d:af:0a:0e:
         a5:22:7d:81:15:a0:13:58:55:73:6f:af:aa:92:ee:2d:0b:cc:
         e5:9d:db:fc:f6:d6:6a:5d:39:d6:bc:6a:cc:25:6c:c0:b2:7b:
         90:c8:c9:34:8f:76:6d:f5:ec:09:ac:68:3e:fb:91:8b:79:47:
         52:31:cd:2e:a0:80:27:b4:a3:c4:48:a6:60:50:be:dc:6d:f1:
         b0:21:ab:9e:43:0c:29:bc:73:b2:86:9c:8b:ff:ef:97:c6:75:
         09:9e:b4:75:54:ce:7c:8e:ff:90:e9:f4:97:1a:a7:ab:bf:30:
         00:d1:c9:2b:8c:5b:88:18:7d:97:4e:c0:85:9d:2e:fd:82:79:
         c6:1b:e4:15:87:3c:4c:a9:ce:64:45:fa:20:98:9e:b7:3e:42:
         48:f0:55:73
-----BEGIN CERTIFICATE-----
MIIHKzCCBhOgAwIBAgIUSEVlWbOW5PnpfB3hrm9zjNQbQFUwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQUM1NTU0NDdCQTYyQzM5MTA3RjE2QkY1NzJGODJBNDE3
RjcyOERCRjAeFw0yMTA5MjkyMzU1NDBaFw0yMjA5MzAwMDAwNDBaMIICLTGCAikw
ggIlBgNVBAMTggIcMzA4MjAxMEEwMjgyMDEwMTAwRDAwOUIyMUZDMEFGRDZBMUZB
NzIyRTA5RTc1OTlEOTdDMThFMTZENjlCMzlDOEUyNzZFNzA0MzQ3REREODFDNTdF
MjY1NUJBNzlFOUQwMTkzNTU0OTI4MEM1MEZGOTM1NjY1QTMzMzk0RkJDRkQ3QTRE
RDI3MjhENUYxQjNDRjEzNDIxRTM5QkFDNDg4RkY5MEJBRDY4RURFNUZEODFCNUM5
QzE2MzU3Q0Y3ODU1REMxMDk2MTgyMDM5NUYwMjI5MTNBRDU1NkYwQkNGNDg2QzlC
NDFBREVBMUREOTMzNDJERjZDMjIzMUIyRTA2RTNBODlGNzE0MjEwNEEzOEU2QkM0
MDRFNkZFQkI4NTlBNTYzOUM1RTRFQUQ0NjY1RjgzN0I2OENDQTIxMDlFOEY0OERE
Qzc4OTkzQjZDOTU4NTNEQzMzNzIxQ0MzMjJGQTY2RkZDOEU4NDAwMEY2NkZERjhF
NjZENTQ2NTA4MjVDMzIzQjIyOTMzRDE4MzJCNTI5RDhBRTlGNEIzNzQ4NDA2QUNC
NzE5MjM1M0IxQkYyQTNFQjFCNDU2QzU1N0I1MDM2QTk0OEI5N0Y2NkZFNTM5MDY0
NzczRUU5MjRFMDk4MDQ1ODIwNUQ4QzU4QzczNDRERkRGM0Y4OThDOTY5RkI4Qjg3
RUEwQTJBRDNBMUEwQTMwMjAzMDEwMDAxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8A
MIIBCgKCAQEA0AmyH8Cv1qH6ci4J51mdl8GOFtabOcjiducENH3dgcV+JlW6eenQ
GTVUkoDFD/k1ZlozOU+8/XpN0nKNXxs88TQh45usSI/5C61o7eX9gbXJwWNXz3hV
3BCWGCA5XwIpE61VbwvPSGybQa3qHdkzQt9sIjGy4G46ifcUIQSjjmvEBOb+u4Wa
VjnF5OrUZl+De2jMohCej0jdx4mTtslYU9wzchzDIvpm/8joQAD2b9+OZtVGUIJc
Mjsikz0YMrUp2K6fSzdIQGrLcZI1Oxvyo+sbRWxVe1A2qUi5f2b+U5Bkdz7pJOCY
BFggXYxYxzRN/fP4mMlp+4uH6goq06GgowIDAQABo4ICOTCCAjUwHQYDVR0OBBYE
FE1SvZmFHa9fdDwVX+X1ctyzZI0fMB8GA1UdIwQYMBaAFKxVVEe6YsORB/Fr9XL4
KkF/co2/MA4GA1UdDwEB/wQEAwIHgDCBhQYDVR0fBH4wfDB6oHigdoZ0cnN5bmM6
Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMzk5M2YzNTAtYjc1Ni00OTE2LThk
ODQtNDg0ZjAyNWRmZmNjLzAvQUM1NTU0NDdCQTYyQzM5MTA3RjE2QkY1NzJGODJB
NDE3RjcyOERCRi5jcmwwdAYIKwYBBQUHAQEEaDBmMGQGCCsGAQUFBzAChlhyc3lu
YzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9JRE5JQy1JRC8yL0FDNTU1NDQ3
QkE2MkMzOTEwN0YxNkJGNTcyRjgyQTQxN0Y3MjhEQkYuY2VyMIGmBggrBgEFBQcB
CwSBmTCBljCBkwYIKwYBBQUHMAuGgYZyc3luYzovL3JlcG8tcnBraS5pZG5pYy5u
ZXQvcmVwby8zOTkzZjM1MC1iNzU2LTQ5MTYtOGQ4NC00ODRmMDI1ZGZmY2MvMC8z
MjM0MzAzNDNhMzgzMDMwMzAzYTM4MzMzYTNhMmYzNDM4MmQzNDM4MjAzZDNlMjAz
MTM3MzQzNTMxLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUF
BwEHAQH/BBMwETAPBAIAAjAJAwcAJASAAACDMA0GCSqGSIb3DQEBCwUAA4IBAQAV
OThLQcAlgDwjxMYBmGv7XC0LR83YCcZy9Mv2G+OVXZey8RQrx7cRCG+683KAwOaf
msA+/Rf5cdjMiMTPhN91G5GOi2SfTgCn2n3yRAJPDDpcXE9fnvAX2jUANh/q5LlV
GRHQxz5lGE2vCg6lIn2BFaATWFVzb6+qku4tC8zlndv89tZqXTnWvGrMJWzAsnuQ
yMk0j3Zt9ewJrGg++5GLeUdSMc0uoIAntKPESKZgUL7cbfGwIaueQwwpvHOyhpyL
/++XxnUJnrR1VM58jv+Q6fSXGqervzAA0ckrjFuIGH2XTsCFnS79gnnGG+QVhzxM
qc5kRfogmJ63PkJI8FVz
-----END CERTIFICATE-----