Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/3993f350-b756-4916-8d84-484f025dffcc/0/323430343a383030303a61323a3a2f34382d3438203d3e203137343531.roa
File:                     323430343a383030303a61323a3a2f34382d3438203d3e203137343531.roa (raw, json)
Hash identifier:          UFzjGsQMSAd55LgpyLqo4wIb9YW8/GKGcpnXQU3MboY=
Subject key identifier:   EE:61:2F:7B:21:00:D7:01:A8:45:09:6F:5E:B1:C1:39:1F:B7:3D:BF
Certificate issuer:       /CN=AC555447BA62C39107F16BF572F82A417F728DBF
Certificate serial:       588EF01BB22AD637130C2F3CD7449C138B2D08FE
Authority key identifier: AC:55:54:47:BA:62:C3:91:07:F1:6B:F5:72:F8:2A:41:7F:72:8D:BF
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AC555447BA62C39107F16BF572F82A417F728DBF.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/3993f350-b756-4916-8d84-484f025dffcc/0/323430343a383030303a61323a3a2f34382d3438203d3e203137343531.roa
Signing time:             Thu 30 Sep 2021 00:00:46 +0000
ROA not before:           Wed 29 Sep 2021 23:55:46 +0000
ROA not after:            Fri 30 Sep 2022 00:00:46 +0000
asID:                     17451
IP address blocks:        2404:8000:a2::/48 maxlen: 48

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            58:8e:f0:1b:b2:2a:d6:37:13:0c:2f:3c:d7:44:9c:13:8b:2d:08:fe
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AC555447BA62C39107F16BF572F82A417F728DBF
        Validity
            Not Before: Sep 29 23:55:46 2021 GMT
            Not After : Sep 30 00:00:46 2022 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:36:d7:3e:bb:cd:aa:54:ba:5a:fb:aa:08:8a:
                    70:23:63:e4:d9:e0:a0:a4:02:4e:c2:9f:88:35:9d:
                    d1:80:b1:70:a6:8e:ef:45:98:29:ba:00:f8:08:66:
                    ab:c0:99:dd:5a:8f:e7:9e:e8:9c:b9:8a:9d:a9:19:
                    55:1f:69:9c:4c:ab:92:29:57:55:df:83:d6:72:c5:
                    ed:90:a5:1d:d0:86:b6:c0:51:3d:74:ba:41:bb:79:
                    1c:37:5b:ea:24:9f:49:2b:e7:6f:93:60:46:57:f4:
                    52:38:80:17:99:7b:65:e9:05:f7:e9:31:14:8e:d3:
                    54:c5:b9:6a:24:7e:f1:b8:ed:7b:70:82:85:bf:85:
                    59:f2:ac:6c:cc:b9:f8:9f:82:74:7c:77:ea:28:a2:
                    b1:5e:8f:50:e3:3e:44:9d:45:83:72:c5:ce:88:ac:
                    1d:98:e9:17:95:41:df:da:50:a7:f1:d4:e4:16:15:
                    c9:43:10:aa:60:28:63:08:77:91:66:51:37:b8:29:
                    aa:5e:75:df:cf:d0:64:3b:c4:c2:0a:b0:84:da:f8:
                    fa:1c:3d:3e:48:f2:8b:85:b3:fb:da:d0:fd:67:b1:
                    20:82:de:99:a7:24:56:a8:aa:0b:a1:c7:c5:59:1b:
                    c3:b9:7d:bb:e4:c1:2e:c0:92:cf:0f:fc:7d:b5:be:
                    73:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EE:61:2F:7B:21:00:D7:01:A8:45:09:6F:5E:B1:C1:39:1F:B7:3D:BF
            X509v3 Authority Key Identifier:
                keyid:AC:55:54:47:BA:62:C3:91:07:F1:6B:F5:72:F8:2A:41:7F:72:8D:BF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/3993f350-b756-4916-8d84-484f025dffcc/0/AC555447BA62C39107F16BF572F82A417F728DBF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AC555447BA62C39107F16BF572F82A417F728DBF.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/3993f350-b756-4916-8d84-484f025dffcc/0/323430343a383030303a61323a3a2f34382d3438203d3e203137343531.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2404:8000:a2::/48

    Signature Algorithm: sha256WithRSAEncryption
         81:78:ab:23:2f:3e:33:7f:ea:53:a6:31:a6:4e:61:ec:9c:10:
         9b:52:3f:d9:5f:46:42:47:8b:34:0d:6e:31:b7:f4:d2:fd:07:
         90:f7:55:af:fb:c3:3b:a9:12:4e:20:0d:47:14:d7:18:1c:28:
         7c:3c:32:83:e4:de:8b:90:9b:5d:a8:d5:63:38:9c:a8:ea:05:
         5e:04:4d:dc:ee:b0:76:06:79:53:25:f2:95:b2:08:fe:7c:d2:
         65:28:b6:ca:00:b1:f9:c7:6d:d2:04:06:5b:65:f5:13:45:b9:
         30:e2:30:bc:7f:62:5d:58:8b:9a:9b:ce:1d:c3:44:7d:9d:f8:
         c4:87:4e:b5:3b:9c:63:21:7f:7b:e8:5e:aa:39:4f:a9:1b:af:
         c3:6e:70:fe:5f:f0:a7:cd:88:c0:82:d2:35:ba:6a:72:a5:8d:
         e6:c5:3f:aa:40:6a:d7:c5:0a:d0:63:c9:e1:02:fb:d8:b5:33:
         64:1d:ae:3e:b2:01:94:b9:ef:86:e8:6a:4f:9f:ba:80:94:11:
         c1:2b:a6:b3:84:67:02:49:5e:49:60:5c:fd:be:f7:e0:42:cb:
         72:6f:c5:95:18:b2:de:8d:0b:59:d4:a6:ff:e3:74:8f:1e:26:
         7b:39:ed:92:51:3b:aa:23:5b:32:64:4e:80:27:62:67:e9:ea:
         4b:54:73:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----