Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/3993f350-b756-4916-8d84-484f025dffcc/0/323430343a383030303a613a3a2f34382d3438203d3e203137343531.roa
File:                     323430343a383030303a613a3a2f34382d3438203d3e203137343531.roa (raw, json)
Hash identifier:          DU192FNJ0eeQ1SLNhdSK8DMLbQeVU8lToAJO7mP7PHc=
Subject key identifier:   EC:32:A9:48:D7:2B:18:8A:B3:65:94:D2:16:99:F5:3D:ED:2D:D7:C0
Certificate issuer:       /CN=AC555447BA62C39107F16BF572F82A417F728DBF
Certificate serial:       36AECA21B395C75308F9E2751860527FDE62D3F7
Authority key identifier: AC:55:54:47:BA:62:C3:91:07:F1:6B:F5:72:F8:2A:41:7F:72:8D:BF
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AC555447BA62C39107F16BF572F82A417F728DBF.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/3993f350-b756-4916-8d84-484f025dffcc/0/323430343a383030303a613a3a2f34382d3438203d3e203137343531.roa
Signing time:             Thu 30 Sep 2021 00:00:38 +0000
ROA not before:           Wed 29 Sep 2021 23:55:38 +0000
ROA not after:            Fri 30 Sep 2022 00:00:38 +0000
asID:                     17451
IP address blocks:        2404:8000:a::/48 maxlen: 48

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            36:ae:ca:21:b3:95:c7:53:08:f9:e2:75:18:60:52:7f:de:62:d3:f7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AC555447BA62C39107F16BF572F82A417F728DBF
        Validity
            Not Before: Sep 29 23:55:38 2021 GMT
            Not After : Sep 30 00:00:38 2022 GMT
        Subject: CN=3082010A0282010100C9D5929E9D122AF7470FB29EEECE9314286BF24D5CB27D253CD2C1AB14D3E0CEA468C699D09271C46AF612AFA6A768E44CA11D6A6E09055E62775668310EA2134DE131EB786499BDE072CCC1CA48081D0A1988246D126C7089E7F625386C188658689FA8E77CB600EA0A15556B263BF4AAD6EF6FA59A916EC7E69490BE02724706AC09EE56AC6CC8D55F4DC21031B1C74A2272479407BE59F1E6B3C34FA4C811123FA055210AEB0927854852F1815E46218745B2F9D41C2E299BAEF119E26C061EF46CE23D352CE3B49CA8F0F7190B6637EFB905F520D82EF2FDA43030CAD68E2E3DDE938639DB09782D34791A21D580481843575A0007D08B9463C95A90AB470203010001
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:d5:92:9e:9d:12:2a:f7:47:0f:b2:9e:ee:ce:
                    93:14:28:6b:f2:4d:5c:b2:7d:25:3c:d2:c1:ab:14:
                    d3:e0:ce:a4:68:c6:99:d0:92:71:c4:6a:f6:12:af:
                    a6:a7:68:e4:4c:a1:1d:6a:6e:09:05:5e:62:77:56:
                    68:31:0e:a2:13:4d:e1:31:eb:78:64:99:bd:e0:72:
                    cc:c1:ca:48:08:1d:0a:19:88:24:6d:12:6c:70:89:
                    e7:f6:25:38:6c:18:86:58:68:9f:a8:e7:7c:b6:00:
                    ea:0a:15:55:6b:26:3b:f4:aa:d6:ef:6f:a5:9a:91:
                    6e:c7:e6:94:90:be:02:72:47:06:ac:09:ee:56:ac:
                    6c:c8:d5:5f:4d:c2:10:31:b1:c7:4a:22:72:47:94:
                    07:be:59:f1:e6:b3:c3:4f:a4:c8:11:12:3f:a0:55:
                    21:0a:eb:09:27:85:48:52:f1:81:5e:46:21:87:45:
                    b2:f9:d4:1c:2e:29:9b:ae:f1:19:e2:6c:06:1e:f4:
                    6c:e2:3d:35:2c:e3:b4:9c:a8:f0:f7:19:0b:66:37:
                    ef:b9:05:f5:20:d8:2e:f2:fd:a4:30:30:ca:d6:8e:
                    2e:3d:de:93:86:39:db:09:78:2d:34:79:1a:21:d5:
                    80:48:18:43:57:5a:00:07:d0:8b:94:63:c9:5a:90:
                    ab:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EC:32:A9:48:D7:2B:18:8A:B3:65:94:D2:16:99:F5:3D:ED:2D:D7:C0
            X509v3 Authority Key Identifier:
                keyid:AC:55:54:47:BA:62:C3:91:07:F1:6B:F5:72:F8:2A:41:7F:72:8D:BF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/3993f350-b756-4916-8d84-484f025dffcc/0/AC555447BA62C39107F16BF572F82A417F728DBF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AC555447BA62C39107F16BF572F82A417F728DBF.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/3993f350-b756-4916-8d84-484f025dffcc/0/323430343a383030303a613a3a2f34382d3438203d3e203137343531.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2404:8000:a::/48

    Signature Algorithm: sha256WithRSAEncryption
         9a:e4:d4:99:a9:11:51:d7:31:7c:7f:44:09:ff:2c:03:55:13:
         b8:8c:da:a7:81:0d:c0:3b:71:77:50:ec:5d:85:aa:16:a2:18:
         95:c1:22:97:dc:ad:1f:14:21:af:44:ad:6f:f5:ae:10:f8:c5:
         ca:e3:5e:d2:0f:d4:f0:1f:90:15:47:34:13:35:f7:5a:aa:7b:
         93:f6:69:fa:83:2e:1e:9b:72:68:54:99:97:32:35:05:42:ce:
         f0:eb:1e:ca:98:13:0c:6a:f1:0e:2a:d0:15:b3:2f:97:01:b3:
         ea:b0:e4:62:80:fe:00:7a:59:a6:27:45:2e:67:87:e4:3d:ba:
         ce:46:6c:24:79:c5:4b:55:d6:d6:84:f8:1b:82:7d:aa:63:2c:
         da:56:bc:f1:04:f0:57:d4:f5:85:e7:a4:0e:99:98:d5:bb:64:
         86:fa:65:51:6c:75:b8:18:74:5d:22:bb:0c:6c:f7:20:85:b1:
         b0:86:cb:3f:9c:be:e7:c6:f5:80:ac:24:f6:b7:4c:e4:73:bb:
         1f:dd:ae:72:1b:10:62:e8:0c:48:db:1a:52:6b:ff:ec:96:36:
         be:68:77:53:cb:c1:1d:04:03:22:b6:a3:3d:34:2e:7e:7b:22:
         d5:07:ac:81:c8:37:0b:67:48:df:3a:2a:0b:15:51:44:22:2f:
         e9:a9:94:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----