Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/3993f350-b756-4916-8d84-484f025dffcc/0/323430343a383030303a38633a3a2f34382d3438203d3e203137343531.roa
File:                     323430343a383030303a38633a3a2f34382d3438203d3e203137343531.roa (raw, json)
Hash identifier:          1R4izV3t/buzRtdmgXxI6xX4GFCwSpGiUAIlBlHbzw8=
Subject key identifier:   DE:B6:B0:C2:25:C2:7C:6C:D9:DB:1E:98:E9:B2:44:0D:7C:3B:89:6E
Certificate issuer:       /CN=AC555447BA62C39107F16BF572F82A417F728DBF
Certificate serial:       5B8AB8D8A13397B7509039EFD7955DFDABCF70FD
Authority key identifier: AC:55:54:47:BA:62:C3:91:07:F1:6B:F5:72:F8:2A:41:7F:72:8D:BF
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AC555447BA62C39107F16BF572F82A417F728DBF.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/3993f350-b756-4916-8d84-484f025dffcc/0/323430343a383030303a38633a3a2f34382d3438203d3e203137343531.roa
Signing time:             Thu 30 Sep 2021 00:01:19 +0000
ROA not before:           Wed 29 Sep 2021 23:56:19 +0000
ROA not after:            Fri 30 Sep 2022 00:01:19 +0000
asID:                     17451
IP address blocks:        2404:8000:8c::/48 maxlen: 48

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5b:8a:b8:d8:a1:33:97:b7:50:90:39:ef:d7:95:5d:fd:ab:cf:70:fd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AC555447BA62C39107F16BF572F82A417F728DBF
        Validity
            Not Before: Sep 29 23:56:19 2021 GMT
            Not After : Sep 30 00:01:19 2022 GMT
        Subject: CN=3082010A0282010100C340B85CC3971CB27891F3D74B5CE8BE9327B8015626D509F7690EAC139416BF16C01A9A945AADFAB00A3D483353AEBA3711DA68E440AA75CDA425293F03AE7726EA3076F0B0E421BD464636B25D108737591E5934871308F75DDCA7107F4AE32F31415C2ACB73ADC9CB75BA10660A47EE5BBEDA221FC4F9858AE3ED7F13601C2040B99257296069D8A44C34083866DCFB42D6C82934494D325248E21F8FACCB5BAFE8BD0B175248620D73B5CD5664DDBC59DC0C275EF53C4913541BC3448ACFCF9825E09F33F32F408F96EC1F5F15CF756ABE95D5DDE31DF25E92C536C343AC027E0F314C6144507E8F565CD5828E443CD03007BB558363043C9F37B2C294750203010001
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:40:b8:5c:c3:97:1c:b2:78:91:f3:d7:4b:5c:
                    e8:be:93:27:b8:01:56:26:d5:09:f7:69:0e:ac:13:
                    94:16:bf:16:c0:1a:9a:94:5a:ad:fa:b0:0a:3d:48:
                    33:53:ae:ba:37:11:da:68:e4:40:aa:75:cd:a4:25:
                    29:3f:03:ae:77:26:ea:30:76:f0:b0:e4:21:bd:46:
                    46:36:b2:5d:10:87:37:59:1e:59:34:87:13:08:f7:
                    5d:dc:a7:10:7f:4a:e3:2f:31:41:5c:2a:cb:73:ad:
                    c9:cb:75:ba:10:66:0a:47:ee:5b:be:da:22:1f:c4:
                    f9:85:8a:e3:ed:7f:13:60:1c:20:40:b9:92:57:29:
                    60:69:d8:a4:4c:34:08:38:66:dc:fb:42:d6:c8:29:
                    34:49:4d:32:52:48:e2:1f:8f:ac:cb:5b:af:e8:bd:
                    0b:17:52:48:62:0d:73:b5:cd:56:64:dd:bc:59:dc:
                    0c:27:5e:f5:3c:49:13:54:1b:c3:44:8a:cf:cf:98:
                    25:e0:9f:33:f3:2f:40:8f:96:ec:1f:5f:15:cf:75:
                    6a:be:95:d5:dd:e3:1d:f2:5e:92:c5:36:c3:43:ac:
                    02:7e:0f:31:4c:61:44:50:7e:8f:56:5c:d5:82:8e:
                    44:3c:d0:30:07:bb:55:83:63:04:3c:9f:37:b2:c2:
                    94:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DE:B6:B0:C2:25:C2:7C:6C:D9:DB:1E:98:E9:B2:44:0D:7C:3B:89:6E
            X509v3 Authority Key Identifier:
                keyid:AC:55:54:47:BA:62:C3:91:07:F1:6B:F5:72:F8:2A:41:7F:72:8D:BF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/3993f350-b756-4916-8d84-484f025dffcc/0/AC555447BA62C39107F16BF572F82A417F728DBF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AC555447BA62C39107F16BF572F82A417F728DBF.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/3993f350-b756-4916-8d84-484f025dffcc/0/323430343a383030303a38633a3a2f34382d3438203d3e203137343531.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2404:8000:8c::/48

    Signature Algorithm: sha256WithRSAEncryption
         34:7b:46:b6:1d:dd:a2:78:79:a3:69:61:bf:fc:df:20:5c:02:
         79:fe:a6:62:f6:46:83:c3:74:7a:13:fe:d0:23:26:1f:40:92:
         c0:62:d6:d0:5b:42:19:4f:9c:da:b8:6e:aa:60:0e:04:b4:0a:
         8e:29:2e:e0:53:7c:87:1e:12:98:ca:16:f6:07:fa:34:5a:81:
         b6:e1:06:28:5c:3c:df:5a:b5:8d:a1:28:a1:a2:f5:b2:1e:13:
         fa:ae:ab:43:7b:d3:ff:1d:aa:d7:55:31:89:b2:f5:92:b9:ad:
         53:af:14:e7:5e:e2:5a:ba:fe:19:8e:5c:cb:52:58:97:a5:1e:
         6d:48:37:1d:c1:58:ca:97:74:8a:0d:dc:0e:67:f9:6a:bc:af:
         04:27:21:ed:24:c6:65:8d:3b:03:45:c1:c1:8e:f3:48:35:f7:
         3c:d8:11:d0:c9:05:ec:b2:55:db:49:cf:97:a6:aa:11:4c:72:
         45:78:ff:a9:a1:54:ee:fc:97:3b:76:3c:9e:40:c8:67:0b:70:
         f6:7c:ca:85:52:87:a9:00:55:25:68:6a:5e:91:fe:87:76:e2:
         17:93:5e:79:f7:e6:51:bb:84:b2:5c:ec:f7:ce:6a:8a:13:cc:
         fb:a3:2b:41:4b:b4:72:e0:5d:ad:39:09:90:2e:4a:46:cb:90:
         86:c7:a0:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----