Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/3993f350-b756-4916-8d84-484f025dffcc/0/323430343a383030303a38623a3a2f34382d3438203d3e203137343531.roa
File:                     323430343a383030303a38623a3a2f34382d3438203d3e203137343531.roa (raw, json)
Hash identifier:          PHMX2FGtMpZzIBunFiKY2RTTtGN7IvKpQ2He1oiLn7A=
Subject key identifier:   1C:3F:F6:81:8F:C3:11:D3:D4:13:8C:69:37:F7:8B:BE:D0:E0:3C:94
Certificate issuer:       /CN=AC555447BA62C39107F16BF572F82A417F728DBF
Certificate serial:       3D946BB331A8102F5B91CBDBF6FAAF0F5C3C3F65
Authority key identifier: AC:55:54:47:BA:62:C3:91:07:F1:6B:F5:72:F8:2A:41:7F:72:8D:BF
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AC555447BA62C39107F16BF572F82A417F728DBF.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/3993f350-b756-4916-8d84-484f025dffcc/0/323430343a383030303a38623a3a2f34382d3438203d3e203137343531.roa
Signing time:             Thu 30 Sep 2021 00:01:09 +0000
ROA not before:           Wed 29 Sep 2021 23:56:09 +0000
ROA not after:            Fri 30 Sep 2022 00:01:09 +0000
asID:                     17451
IP address blocks:        2404:8000:8b::/48 maxlen: 48

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3d:94:6b:b3:31:a8:10:2f:5b:91:cb:db:f6:fa:af:0f:5c:3c:3f:65
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AC555447BA62C39107F16BF572F82A417F728DBF
        Validity
            Not Before: Sep 29 23:56:09 2021 GMT
            Not After : Sep 30 00:01:09 2022 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:5b:13:c6:a6:da:b8:44:89:23:9f:6e:0b:9a:
                    ae:94:97:3e:c5:67:ca:91:19:65:7b:75:f4:66:ed:
                    b2:64:f0:38:54:6a:bd:f8:76:f2:c1:55:75:0f:21:
                    8c:c5:66:f8:2c:07:0f:91:b3:b8:6c:65:ca:89:cb:
                    84:59:85:0a:92:e6:53:4d:85:0e:e0:50:f1:26:cf:
                    51:02:b5:66:f9:05:16:75:db:f0:9d:dc:98:2a:d1:
                    31:51:38:a7:3c:e6:cf:2d:b0:3f:78:32:60:ea:7b:
                    f1:7d:6f:ce:4f:3b:47:12:46:bc:f0:2e:2b:ef:73:
                    3c:55:cd:5d:11:ec:62:66:df:86:ba:1a:01:d5:c6:
                    60:03:d1:37:40:81:23:05:85:30:4d:b8:53:5e:a7:
                    dc:89:f7:77:4f:16:3c:ce:8e:59:27:a3:08:18:56:
                    5d:9b:ce:73:2f:60:87:63:14:91:62:02:7b:a4:84:
                    88:be:8d:86:7f:2d:d8:b2:10:c4:00:c0:9b:7a:af:
                    9e:6b:0a:dd:e1:b6:53:32:1e:a5:51:39:d7:43:be:
                    02:e4:e5:b8:18:2b:24:04:3b:62:f9:5f:57:d7:be:
                    58:71:66:6d:6b:44:7d:c1:9b:43:82:5d:f2:5e:64:
                    7f:d6:c5:7d:9f:37:e0:08:f8:b6:ec:82:8c:3b:66:
                    d7:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1C:3F:F6:81:8F:C3:11:D3:D4:13:8C:69:37:F7:8B:BE:D0:E0:3C:94
            X509v3 Authority Key Identifier:
                keyid:AC:55:54:47:BA:62:C3:91:07:F1:6B:F5:72:F8:2A:41:7F:72:8D:BF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/3993f350-b756-4916-8d84-484f025dffcc/0/AC555447BA62C39107F16BF572F82A417F728DBF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AC555447BA62C39107F16BF572F82A417F728DBF.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/3993f350-b756-4916-8d84-484f025dffcc/0/323430343a383030303a38623a3a2f34382d3438203d3e203137343531.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2404:8000:8b::/48

    Signature Algorithm: sha256WithRSAEncryption
         2d:fc:dc:cf:dd:b6:dc:ce:0d:c6:fd:18:cd:7e:92:d8:f0:b7:
         98:7f:0f:17:97:e6:d4:6c:7f:ca:7c:6b:6d:ff:9c:db:ac:a5:
         71:03:01:06:db:9e:47:17:ff:58:aa:62:54:df:45:01:1b:d6:
         e6:05:46:b8:4c:1f:90:e4:47:82:fa:99:5a:47:07:7b:c4:81:
         e4:60:c5:d0:e7:09:85:23:6b:f2:1f:eb:9a:9d:8f:0d:b3:02:
         15:25:b4:e3:2d:8a:2a:03:1f:15:45:a2:66:34:2a:9b:01:b3:
         54:d0:02:1b:14:a4:6e:ab:22:9c:3c:2b:3f:87:d2:88:56:f7:
         47:23:fa:54:0f:7d:c1:a1:80:6d:5c:45:a3:d3:3e:ea:b4:2c:
         bf:29:98:84:9a:9b:76:87:86:5a:e8:11:43:f2:12:5b:e6:5b:
         d5:f9:2e:37:71:41:03:57:cc:3d:c6:23:6c:12:4e:28:9e:61:
         6e:5c:a9:b9:a7:fa:66:f6:a7:b7:a0:3d:0c:66:ec:0a:d9:e3:
         21:26:ad:60:af:40:17:04:17:4e:00:37:f6:2f:bb:2f:54:eb:
         6b:1c:73:97:e1:12:d5:6f:b6:ff:31:fd:c5:b3:fa:d2:74:cf:
         b9:eb:da:0d:81:b8:98:81:98:fb:c0:1b:98:e1:b6:1d:0f:57:
         3a:f6:cf:a4
-----BEGIN CERTIFICATE-----
MIIHKzCCBhOgAwIBAgIUPZRrszGoEC9bkcvb9vqvD1w8P2UwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQUM1NTU0NDdCQTYyQzM5MTA3RjE2QkY1NzJGODJBNDE3
RjcyOERCRjAeFw0yMTA5MjkyMzU2MDlaFw0yMjA5MzAwMDAxMDlaMIICLTGCAikw
ggIlBgNVBAMTggIcMzA4MjAxMEEwMjgyMDEwMTAwRDA1QjEzQzZBNkRBQjg0NDg5
MjM5RjZFMEI5QUFFOTQ5NzNFQzU2N0NBOTExOTY1N0I3NUY0NjZFREIyNjRGMDM4
NTQ2QUJERjg3NkYyQzE1NTc1MEYyMThDQzU2NkY4MkMwNzBGOTFCM0I4NkM2NUNB
ODlDQjg0NTk4NTBBOTJFNjUzNEQ4NTBFRTA1MEYxMjZDRjUxMDJCNTY2RjkwNTE2
NzVEQkYwOUREQzk4MkFEMTMxNTEzOEE3M0NFNkNGMkRCMDNGNzgzMjYwRUE3QkYx
N0Q2RkNFNEYzQjQ3MTI0NkJDRjAyRTJCRUY3MzNDNTVDRDVEMTFFQzYyNjZERjg2
QkExQTAxRDVDNjYwMDNEMTM3NDA4MTIzMDU4NTMwNERCODUzNUVBN0RDODlGNzc3
NEYxNjNDQ0U4RTU5MjdBMzA4MTg1NjVEOUJDRTczMkY2MDg3NjMxNDkxNjIwMjdC
QTQ4NDg4QkU4RDg2N0YyREQ4QjIxMEM0MDBDMDlCN0FBRjlFNkIwQURERTFCNjUz
MzIxRUE1NTEzOUQ3NDNCRTAyRTRFNUI4MTgyQjI0MDQzQjYyRjk1RjU3RDdCRTU4
NzE2NjZENkI0NDdEQzE5QjQzODI1REYyNUU2NDdGRDZDNTdEOUYzN0UwMDhGOEI2
RUM4MjhDM0I2NkQ3MzcwMjAzMDEwMDAxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8A
MIIBCgKCAQEA0FsTxqbauESJI59uC5qulJc+xWfKkRlle3X0Zu2yZPA4VGq9+Hby
wVV1DyGMxWb4LAcPkbO4bGXKicuEWYUKkuZTTYUO4FDxJs9RArVm+QUWddvwndyY
KtExUTinPObPLbA/eDJg6nvxfW/OTztHEka88C4r73M8Vc1dEexiZt+GuhoB1cZg
A9E3QIEjBYUwTbhTXqfcifd3TxY8zo5ZJ6MIGFZdm85zL2CHYxSRYgJ7pISIvo2G
fy3YshDEAMCbeq+eawrd4bZTMh6lUTnXQ74C5OW4GCskBDti+V9X175YcWZta0R9
wZtDgl3yXmR/1sV9nzfgCPi27IKMO2bXNwIDAQABo4ICOTCCAjUwHQYDVR0OBBYE
FBw/9oGPwxHT1BOMaTf3i77Q4DyUMB8GA1UdIwQYMBaAFKxVVEe6YsORB/Fr9XL4
KkF/co2/MA4GA1UdDwEB/wQEAwIHgDCBhQYDVR0fBH4wfDB6oHigdoZ0cnN5bmM6
Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMzk5M2YzNTAtYjc1Ni00OTE2LThk
ODQtNDg0ZjAyNWRmZmNjLzAvQUM1NTU0NDdCQTYyQzM5MTA3RjE2QkY1NzJGODJB
NDE3RjcyOERCRi5jcmwwdAYIKwYBBQUHAQEEaDBmMGQGCCsGAQUFBzAChlhyc3lu
YzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9JRE5JQy1JRC8yL0FDNTU1NDQ3
QkE2MkMzOTEwN0YxNkJGNTcyRjgyQTQxN0Y3MjhEQkYuY2VyMIGmBggrBgEFBQcB
CwSBmTCBljCBkwYIKwYBBQUHMAuGgYZyc3luYzovL3JlcG8tcnBraS5pZG5pYy5u
ZXQvcmVwby8zOTkzZjM1MC1iNzU2LTQ5MTYtOGQ4NC00ODRmMDI1ZGZmY2MvMC8z
MjM0MzAzNDNhMzgzMDMwMzAzYTM4NjIzYTNhMmYzNDM4MmQzNDM4MjAzZDNlMjAz
MTM3MzQzNTMxLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUF
BwEHAQH/BBMwETAPBAIAAjAJAwcAJASAAACLMA0GCSqGSIb3DQEBCwUAA4IBAQAt
/NzP3bbczg3G/RjNfpLY8LeYfw8Xl+bUbH/KfGtt/5zbrKVxAwEG255HF/9YqmJU
30UBG9bmBUa4TB+Q5EeC+plaRwd7xIHkYMXQ5wmFI2vyH+uanY8NswIVJbTjLYoq
Ax8VRaJmNCqbAbNU0AIbFKRuqyKcPCs/h9KIVvdHI/pUD33BoYBtXEWj0z7qtCy/
KZiEmpt2h4Za6BFD8hJb5lvV+S43cUEDV8w9xiNsEk4onmFuXKm5p/pm9qe3oD0M
ZuwK2eMhJq1gr0AXBBdOADf2L7svVOtrHHOX4RLVb7b/Mf3Fs/rSdM+569oNgbiY
gZj7wBuY4bYdD1c69s+k
-----END CERTIFICATE-----