Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/3993f350-b756-4916-8d84-484f025dffcc/0/323430343a383030303a61313a3a2f34382d3438203d3e203137343531.roa
File:                     323430343a383030303a61313a3a2f34382d3438203d3e203137343531.roa (raw, json)
Hash identifier:          RF1DSEuHE9QgeS0y9vfqbTofxeHcFpZYbjjyRe7JBp0=
Subject key identifier:   62:9E:86:7B:66:14:1C:F6:46:7B:C2:EB:8F:F0:0D:E7:06:EE:8C:1B
Certificate issuer:       /CN=AC555447BA62C39107F16BF572F82A417F728DBF
Certificate serial:       40B72909F664DB894242528F1E928DD15D02F264
Authority key identifier: AC:55:54:47:BA:62:C3:91:07:F1:6B:F5:72:F8:2A:41:7F:72:8D:BF
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AC555447BA62C39107F16BF572F82A417F728DBF.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/3993f350-b756-4916-8d84-484f025dffcc/0/323430343a383030303a61313a3a2f34382d3438203d3e203137343531.roa
Signing time:             Sat 02 Oct 2021 05:00:00 +0000
ROA not before:           Sat 02 Oct 2021 04:55:00 +0000
ROA not after:            Sun 02 Oct 2022 05:00:00 +0000
asID:                     17451
IP address blocks:        2404:8000:a1::/48 maxlen: 48

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            40:b7:29:09:f6:64:db:89:42:42:52:8f:1e:92:8d:d1:5d:02:f2:64
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AC555447BA62C39107F16BF572F82A417F728DBF
        Validity
            Not Before: Oct  2 04:55:00 2021 GMT
            Not After : Oct  2 05:00:00 2022 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:7a:7b:4c:ff:25:4b:32:66:de:03:74:35:1c:
                    63:fd:ab:3d:43:08:7b:cf:2e:8a:98:ad:c1:43:a9:
                    4f:5e:4e:ef:8a:b9:02:b1:99:cd:3a:49:1d:23:9d:
                    22:73:c6:5f:07:aa:77:d5:8f:ed:ed:f5:56:d5:b8:
                    ff:8f:a6:da:07:c7:dc:ae:39:11:03:c3:43:de:a7:
                    6a:a4:45:0e:64:4d:05:11:4d:92:64:f6:df:4f:94:
                    98:4a:d6:07:ba:9b:ce:0a:d0:19:23:3e:14:cc:ea:
                    be:ca:a8:b7:a8:7a:eb:68:f7:7f:47:30:a6:af:8d:
                    1f:ca:60:17:07:a7:66:d9:48:b5:5e:b9:3b:d4:f5:
                    d9:1b:c7:b0:a2:f9:f8:dc:29:2c:b5:2c:bb:92:10:
                    ab:31:be:a0:cc:05:68:19:99:c8:6c:0c:bb:7f:34:
                    56:52:f2:55:f7:e6:91:f3:e1:62:43:18:b8:13:be:
                    28:ad:04:a5:c4:dc:51:4d:fa:db:43:aa:11:36:22:
                    31:b0:d7:a9:d8:16:b2:22:03:b3:a4:60:bc:06:21:
                    67:b4:41:4d:60:d7:2d:e6:17:9e:13:58:89:f1:96:
                    1e:38:ab:e4:a0:6e:61:14:1c:65:5c:7c:6e:df:7b:
                    f1:91:15:e0:c1:3c:5d:89:ef:88:bd:21:40:1b:22:
                    89:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                62:9E:86:7B:66:14:1C:F6:46:7B:C2:EB:8F:F0:0D:E7:06:EE:8C:1B
            X509v3 Authority Key Identifier:
                keyid:AC:55:54:47:BA:62:C3:91:07:F1:6B:F5:72:F8:2A:41:7F:72:8D:BF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/3993f350-b756-4916-8d84-484f025dffcc/0/AC555447BA62C39107F16BF572F82A417F728DBF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AC555447BA62C39107F16BF572F82A417F728DBF.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/3993f350-b756-4916-8d84-484f025dffcc/0/323430343a383030303a61313a3a2f34382d3438203d3e203137343531.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2404:8000:a1::/48

    Signature Algorithm: sha256WithRSAEncryption
         97:5c:30:9a:06:43:29:ec:4c:ef:85:29:3d:29:4d:06:8b:bd:
         a5:be:dc:5c:4d:1b:27:dc:f4:7a:cc:4b:63:52:6e:2b:fe:52:
         75:49:79:11:2a:6d:91:eb:e9:9f:05:cf:f0:c3:a7:d0:5a:94:
         fe:9f:de:5b:61:2a:44:4e:44:9c:e7:d3:4a:1e:e9:70:92:3c:
         01:e1:2a:bc:bd:d4:8f:0e:d5:60:33:a3:29:65:11:76:0b:9a:
         27:31:6c:02:49:71:21:93:7a:22:35:cc:d1:f9:72:30:b6:0f:
         32:9a:19:bf:fe:6e:9a:f0:29:76:14:7c:0f:c8:75:8f:34:c8:
         ba:c6:ef:5e:88:c2:af:45:01:ec:67:03:51:5d:83:2e:0c:cb:
         cf:ff:48:65:99:59:9e:32:84:5a:fa:63:13:e9:37:4a:fe:2f:
         24:c0:46:99:ab:26:3a:51:46:e7:bb:31:cd:f4:ba:55:e1:79:
         79:5f:1d:90:3f:e3:41:e8:25:69:60:dd:59:bb:40:c3:66:5c:
         9e:3d:e1:bd:bc:b0:ec:fe:a6:a6:d0:51:10:fd:c7:bb:6e:d7:
         64:82:bb:5b:0b:da:a5:10:cc:2a:58:19:73:85:f5:12:61:cb:
         01:8b:6d:0c:3c:e7:8d:51:52:2c:34:42:00:c4:35:2f:74:72:
         d5:f0:0a:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----