Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/3993f350-b756-4916-8d84-484f025dffcc/0/323430343a383030303a39663a3a2f34382d3438203d3e203137343531.roa
File:                     323430343a383030303a39663a3a2f34382d3438203d3e203137343531.roa (raw, json)
Hash identifier:          s/Sl+pJpMD8jqM1Orr4Q1i91e5fEIkwAgRhvKdH2llU=
Subject key identifier:   FA:6F:1A:4A:39:31:F3:01:FB:A6:85:B9:ED:DB:F9:E3:B3:0E:D2:25
Certificate issuer:       /CN=AC555447BA62C39107F16BF572F82A417F728DBF
Certificate serial:       1B178E90250CC824B34A167CD0693C73FA808DA7
Authority key identifier: AC:55:54:47:BA:62:C3:91:07:F1:6B:F5:72:F8:2A:41:7F:72:8D:BF
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AC555447BA62C39107F16BF572F82A417F728DBF.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/3993f350-b756-4916-8d84-484f025dffcc/0/323430343a383030303a39663a3a2f34382d3438203d3e203137343531.roa
Signing time:             Sat 02 Oct 2021 05:00:00 +0000
ROA not before:           Sat 02 Oct 2021 04:55:00 +0000
ROA not after:            Sun 02 Oct 2022 05:00:00 +0000
asID:                     17451
IP address blocks:        2404:8000:9f::/48 maxlen: 48

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1b:17:8e:90:25:0c:c8:24:b3:4a:16:7c:d0:69:3c:73:fa:80:8d:a7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AC555447BA62C39107F16BF572F82A417F728DBF
        Validity
            Not Before: Oct  2 04:55:00 2021 GMT
            Not After : Oct  2 05:00:00 2022 GMT
        Subject: CN=3082010A0282010100D1281DC81D5D0CBE611C7948F7C35183D40BD50590BE303D5AA4CC1EC084881D45FA094E19067CA285A431E400C9903925E627C73F99B2D626F86A86A0486EA69C1CC30564A3240E229676781550F407A9E1661CE4592D60327C4E493EB3A057B8AA2359CB29438C0B2918D41E447E385FA4AB644B018E68A2421CE4655714366D07C53D3D7191BA6B0863B71B19738DE20895C38DA8A91D82382899DA12CFC6980FEDA5D714E124C9875A16886E10A66076B99405057C8B0ECB55A4F3535178BAD5F10111D9F88479C17562A5F954948AA178BF050A770DC217B11D097E7E1256B1B69928488F8D57BC10F2304BC3765F5F2D1952EDEBB904D6CB7A5EDDF3E30203010001
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:28:1d:c8:1d:5d:0c:be:61:1c:79:48:f7:c3:
                    51:83:d4:0b:d5:05:90:be:30:3d:5a:a4:cc:1e:c0:
                    84:88:1d:45:fa:09:4e:19:06:7c:a2:85:a4:31:e4:
                    00:c9:90:39:25:e6:27:c7:3f:99:b2:d6:26:f8:6a:
                    86:a0:48:6e:a6:9c:1c:c3:05:64:a3:24:0e:22:96:
                    76:78:15:50:f4:07:a9:e1:66:1c:e4:59:2d:60:32:
                    7c:4e:49:3e:b3:a0:57:b8:aa:23:59:cb:29:43:8c:
                    0b:29:18:d4:1e:44:7e:38:5f:a4:ab:64:4b:01:8e:
                    68:a2:42:1c:e4:65:57:14:36:6d:07:c5:3d:3d:71:
                    91:ba:6b:08:63:b7:1b:19:73:8d:e2:08:95:c3:8d:
                    a8:a9:1d:82:38:28:99:da:12:cf:c6:98:0f:ed:a5:
                    d7:14:e1:24:c9:87:5a:16:88:6e:10:a6:60:76:b9:
                    94:05:05:7c:8b:0e:cb:55:a4:f3:53:51:78:ba:d5:
                    f1:01:11:d9:f8:84:79:c1:75:62:a5:f9:54:94:8a:
                    a1:78:bf:05:0a:77:0d:c2:17:b1:1d:09:7e:7e:12:
                    56:b1:b6:99:28:48:8f:8d:57:bc:10:f2:30:4b:c3:
                    76:5f:5f:2d:19:52:ed:eb:b9:04:d6:cb:7a:5e:dd:
                    f3:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FA:6F:1A:4A:39:31:F3:01:FB:A6:85:B9:ED:DB:F9:E3:B3:0E:D2:25
            X509v3 Authority Key Identifier:
                keyid:AC:55:54:47:BA:62:C3:91:07:F1:6B:F5:72:F8:2A:41:7F:72:8D:BF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/3993f350-b756-4916-8d84-484f025dffcc/0/AC555447BA62C39107F16BF572F82A417F728DBF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AC555447BA62C39107F16BF572F82A417F728DBF.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/3993f350-b756-4916-8d84-484f025dffcc/0/323430343a383030303a39663a3a2f34382d3438203d3e203137343531.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2404:8000:9f::/48

    Signature Algorithm: sha256WithRSAEncryption
         6d:7e:6f:4b:24:f8:a2:88:56:da:99:c9:59:e6:0b:7e:f0:2b:
         de:31:5b:3f:3e:b7:e2:e1:44:0a:b1:7e:40:3d:b0:4e:3a:f2:
         15:09:2c:d2:78:17:00:7e:a9:e2:c2:14:cc:d0:7d:1d:fa:cd:
         9c:b3:53:81:44:ec:3d:df:f4:ff:bd:eb:30:a5:f2:9d:7e:44:
         6f:a2:c0:c1:82:a7:7f:49:f1:12:2b:aa:c2:f5:58:c1:2a:6c:
         8e:c0:f6:0c:d7:26:e3:b4:4e:4a:d4:d0:0d:18:72:75:7a:a1:
         b6:a4:52:de:a2:fa:e0:d5:8b:5c:0a:24:9b:b3:da:67:1c:f8:
         d3:51:38:55:24:d3:76:37:d2:c6:d7:e1:c5:43:7a:69:f4:28:
         15:58:73:5c:03:dd:ee:51:57:0f:fa:8d:5f:e5:d5:bf:36:6d:
         a7:6a:4b:94:6a:ff:e0:f7:23:55:b7:b4:8c:7c:d8:c1:00:59:
         31:d8:c2:d9:a4:fb:e4:0e:66:ac:20:f5:cf:26:e2:8f:36:aa:
         3b:a1:6e:80:73:4b:64:ae:09:e1:51:97:c0:01:ec:5d:98:d2:
         0b:d3:89:6f:b5:a5:c5:0f:44:7d:fe:6c:31:99:4f:43:4e:0f:
         ee:2c:2c:0f:d4:95:cd:98:27:65:9b:7d:ce:49:77:d1:d8:e9:
         75:8b:db:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----