Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/3993f350-b756-4916-8d84-484f025dffcc/0/323430343a383030303a3a2f34382d3438203d3e203137343531.roa
File:                     323430343a383030303a3a2f34382d3438203d3e203137343531.roa (raw, json)
Hash identifier:          FrBqV9E3PAcPlz23PoKUF3aahJqqdKodZJVSB0SoN3w=
Subject key identifier:   35:BF:44:42:4D:9D:2C:16:38:92:5D:51:B9:FC:0C:C6:D1:E2:FC:C5
Certificate issuer:       /CN=AC555447BA62C39107F16BF572F82A417F728DBF
Certificate serial:       1C2EBFA995FB6515FA8175C482665AFAFA870AC2
Authority key identifier: AC:55:54:47:BA:62:C3:91:07:F1:6B:F5:72:F8:2A:41:7F:72:8D:BF
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AC555447BA62C39107F16BF572F82A417F728DBF.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/3993f350-b756-4916-8d84-484f025dffcc/0/323430343a383030303a3a2f34382d3438203d3e203137343531.roa
Signing time:             Thu 30 Sep 2021 00:01:12 +0000
ROA not before:           Wed 29 Sep 2021 23:56:12 +0000
ROA not after:            Fri 30 Sep 2022 00:01:12 +0000
asID:                     17451
IP address blocks:        2404:8000::/48 maxlen: 48

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1c:2e:bf:a9:95:fb:65:15:fa:81:75:c4:82:66:5a:fa:fa:87:0a:c2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AC555447BA62C39107F16BF572F82A417F728DBF
        Validity
            Not Before: Sep 29 23:56:12 2021 GMT
            Not After : Sep 30 00:01:12 2022 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f5:f1:5d:e5:32:b2:37:06:d9:27:ab:73:72:0f:
                    d4:3c:4b:85:a2:10:11:61:6a:63:6b:20:77:cb:f8:
                    2b:41:4c:12:45:24:30:63:25:fd:3c:29:95:37:27:
                    e4:d6:60:f2:08:86:4e:7d:00:05:83:69:04:7f:77:
                    06:70:02:3b:b6:ec:ab:24:11:5f:7b:e1:2d:3f:bc:
                    f6:e4:c1:4b:32:4e:74:e4:f3:f0:a4:32:02:f6:ad:
                    a7:b0:61:46:e6:15:d2:6a:b2:56:df:f4:1b:43:19:
                    7d:44:84:4b:60:ff:ed:5b:6b:64:e3:4d:dd:84:27:
                    ea:aa:8c:41:fd:61:cb:bd:10:3d:b8:3e:98:44:23:
                    43:45:f8:96:17:97:1c:3b:81:e0:bb:cf:45:b7:d5:
                    eb:d3:38:71:52:1e:1b:34:38:98:4c:69:86:48:1e:
                    18:5f:4e:7b:c5:11:3a:8e:cf:7b:c2:e0:5a:ab:02:
                    fb:9b:ae:bc:b2:3b:5e:7b:3b:2b:1c:84:1f:03:c7:
                    22:2d:b8:cd:7a:7c:eb:8c:2a:88:fa:87:07:98:a5:
                    82:40:e7:3d:0b:17:76:35:01:3b:5e:a4:f8:06:40:
                    72:26:b5:40:89:04:b7:39:80:6a:a9:3e:bf:bd:f4:
                    a1:47:f2:c9:48:54:67:b2:78:e7:b3:94:73:7e:6b:
                    c3:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                35:BF:44:42:4D:9D:2C:16:38:92:5D:51:B9:FC:0C:C6:D1:E2:FC:C5
            X509v3 Authority Key Identifier:
                keyid:AC:55:54:47:BA:62:C3:91:07:F1:6B:F5:72:F8:2A:41:7F:72:8D:BF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/3993f350-b756-4916-8d84-484f025dffcc/0/AC555447BA62C39107F16BF572F82A417F728DBF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AC555447BA62C39107F16BF572F82A417F728DBF.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/3993f350-b756-4916-8d84-484f025dffcc/0/323430343a383030303a3a2f34382d3438203d3e203137343531.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2404:8000::/48

    Signature Algorithm: sha256WithRSAEncryption
         17:09:dc:66:2a:9c:e1:24:b3:e6:6b:44:1f:e7:34:13:df:75:
         ce:05:a4:c0:12:3e:e6:24:5a:8a:50:c5:b2:a8:59:e2:20:df:
         cd:26:ef:56:c9:b0:98:e3:ae:31:40:16:34:ac:ef:85:44:aa:
         e5:8a:ff:92:5a:aa:fc:55:2e:8d:8d:35:80:a2:54:b5:b5:c7:
         72:1e:12:24:53:d3:92:69:fb:b9:86:cf:92:7d:2b:9e:23:16:
         79:1a:7e:95:e8:c9:f9:d8:9c:fe:ae:27:ff:52:fc:fa:4b:26:
         b8:c5:9e:6c:73:b9:b2:88:f8:21:4b:72:b8:5f:85:7b:fa:70:
         3d:ed:53:f2:e2:8b:42:a5:05:05:30:45:35:d8:9b:33:6d:ef:
         16:fb:a3:35:2f:a1:8b:fc:de:04:56:67:3f:ee:f0:5e:c5:3f:
         36:c6:ba:9f:69:e3:ef:5d:d3:88:d4:e2:ce:23:7d:fc:71:50:
         ee:ca:aa:71:d7:21:dc:aa:26:dc:55:27:29:12:4a:61:79:4e:
         71:e1:29:27:7c:05:90:d7:ce:42:e4:62:2a:c0:4f:0c:15:e2:
         47:d0:7e:b9:5e:72:f4:2d:0d:df:c6:de:86:d6:3c:9f:e0:0e:
         0c:b8:98:2f:1d:9b:ec:b4:fc:85:77:46:ff:45:d0:8b:ea:8b:
         df:e7:11:75
-----BEGIN CERTIFICATE-----
MIIHJTCCBg2gAwIBAgIUHC6/qZX7ZRX6gXXEgmZa+vqHCsIwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQUM1NTU0NDdCQTYyQzM5MTA3RjE2QkY1NzJGODJBNDE3
RjcyOERCRjAeFw0yMTA5MjkyMzU2MTJaFw0yMjA5MzAwMDAxMTJaMIICLTGCAikw
ggIlBgNVBAMTggIcMzA4MjAxMEEwMjgyMDEwMTAwRjVGMTVERTUzMkIyMzcwNkQ5
MjdBQjczNzIwRkQ0M0M0Qjg1QTIxMDExNjE2QTYzNkIyMDc3Q0JGODJCNDE0QzEy
NDUyNDMwNjMyNUZEM0MyOTk1MzcyN0U0RDY2MEYyMDg4NjRFN0QwMDA1ODM2OTA0
N0Y3NzA2NzAwMjNCQjZFQ0FCMjQxMTVGN0JFMTJEM0ZCQ0Y2RTRDMTRCMzI0RTc0
RTRGM0YwQTQzMjAyRjZBREE3QjA2MTQ2RTYxNUQyNkFCMjU2REZGNDFCNDMxOTdE
NDQ4NDRCNjBGRkVENUI2QjY0RTM0REREODQyN0VBQUE4QzQxRkQ2MUNCQkQxMDNE
QjgzRTk4NDQyMzQzNDVGODk2MTc5NzFDM0I4MUUwQkJDRjQ1QjdENUVCRDMzODcx
NTIxRTFCMzQzODk4NEM2OTg2NDgxRTE4NUY0RTdCQzUxMTNBOEVDRjdCQzJFMDVB
QUIwMkZCOUJBRUJDQjIzQjVFN0IzQjJCMUM4NDFGMDNDNzIyMkRCOENEN0E3Q0VC
OEMyQTg4RkE4NzA3OThBNTgyNDBFNzNEMEIxNzc2MzUwMTNCNUVBNEY4MDY0MDcy
MjZCNTQwODkwNEI3Mzk4MDZBQTkzRUJGQkRGNEExNDdGMkM5NDg1NDY3QjI3OEU3
QjM5NDczN0U2QkMzNDMwMjAzMDEwMDAxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8A
MIIBCgKCAQEA9fFd5TKyNwbZJ6tzcg/UPEuFohARYWpjayB3y/grQUwSRSQwYyX9
PCmVNyfk1mDyCIZOfQAFg2kEf3cGcAI7tuyrJBFfe+EtP7z25MFLMk505PPwpDIC
9q2nsGFG5hXSarJW3/QbQxl9RIRLYP/tW2tk403dhCfqqoxB/WHLvRA9uD6YRCND
RfiWF5ccO4Hgu89Ft9Xr0zhxUh4bNDiYTGmGSB4YX057xRE6js97wuBaqwL7m668
sjteezsrHIQfA8ciLbjNenzrjCqI+ocHmKWCQOc9Cxd2NQE7XqT4BkByJrVAiQS3
OYBqqT6/vfShR/LJSFRnsnjns5RzfmvDQwIDAQABo4ICMzCCAi8wHQYDVR0OBBYE
FDW/REJNnSwWOJJdUbn8DMbR4vzFMB8GA1UdIwQYMBaAFKxVVEe6YsORB/Fr9XL4
KkF/co2/MA4GA1UdDwEB/wQEAwIHgDCBhQYDVR0fBH4wfDB6oHigdoZ0cnN5bmM6
Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMzk5M2YzNTAtYjc1Ni00OTE2LThk
ODQtNDg0ZjAyNWRmZmNjLzAvQUM1NTU0NDdCQTYyQzM5MTA3RjE2QkY1NzJGODJB
NDE3RjcyOERCRi5jcmwwdAYIKwYBBQUHAQEEaDBmMGQGCCsGAQUFBzAChlhyc3lu
YzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9JRE5JQy1JRC8yL0FDNTU1NDQ3
QkE2MkMzOTEwN0YxNkJGNTcyRjgyQTQxN0Y3MjhEQkYuY2VyMIGgBggrBgEFBQcB
CwSBkzCBkDCBjQYIKwYBBQUHMAuGgYByc3luYzovL3JlcG8tcnBraS5pZG5pYy5u
ZXQvcmVwby8zOTkzZjM1MC1iNzU2LTQ5MTYtOGQ4NC00ODRmMDI1ZGZmY2MvMC8z
MjM0MzAzNDNhMzgzMDMwMzAzYTNhMmYzNDM4MmQzNDM4MjAzZDNlMjAzMTM3MzQz
NTMxLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/
BBMwETAPBAIAAjAJAwcAJASAAAAAMA0GCSqGSIb3DQEBCwUAA4IBAQAXCdxmKpzh
JLPma0Qf5zQT33XOBaTAEj7mJFqKUMWyqFniIN/NJu9WybCY464xQBY0rO+FRKrl
iv+SWqr8VS6NjTWAolS1tcdyHhIkU9OSafu5hs+SfSueIxZ5Gn6V6Mn52Jz+rif/
Uvz6Sya4xZ5sc7myiPghS3K4X4V7+nA97VPy4otCpQUFMEU12Jszbe8W+6M1L6GL
/N4EVmc/7vBexT82xrqfaePvXdOI1OLOI338cVDuyqpx1yHcqibcVScpEkpheU5x
4SknfAWQ185C5GIqwE8MFeJH0H65XnL0LQ3fxt6G1jyf4A4MuJgvHZvstPyFd0b/
RdCL6ovf5xF1
-----END CERTIFICATE-----