Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/3993f350-b756-4916-8d84-484f025dffcc/0/323430343a383030303a61623a3a2f34382d3438203d3e203137343531.roa
File:                     323430343a383030303a61623a3a2f34382d3438203d3e203137343531.roa (raw, json)
Hash identifier:          cd8VfGVHcAXjoSY5oOQcAOhPmBh1hbQiXDioBYzZubM=
Subject key identifier:   A1:2C:45:D1:8E:6E:21:D8:6E:A7:A9:CE:EA:E2:49:18:C5:A5:1D:1E
Certificate issuer:       /CN=AC555447BA62C39107F16BF572F82A417F728DBF
Certificate serial:       356FD1EA90B0495D82F94C1434FCC3B67A8F5E1F
Authority key identifier: AC:55:54:47:BA:62:C3:91:07:F1:6B:F5:72:F8:2A:41:7F:72:8D:BF
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AC555447BA62C39107F16BF572F82A417F728DBF.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/3993f350-b756-4916-8d84-484f025dffcc/0/323430343a383030303a61623a3a2f34382d3438203d3e203137343531.roa
Signing time:             Thu 30 Sep 2021 00:01:09 +0000
ROA not before:           Wed 29 Sep 2021 23:56:09 +0000
ROA not after:            Fri 30 Sep 2022 00:01:09 +0000
asID:                     17451
IP address blocks:        2404:8000:ab::/48 maxlen: 48

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            35:6f:d1:ea:90:b0:49:5d:82:f9:4c:14:34:fc:c3:b6:7a:8f:5e:1f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AC555447BA62C39107F16BF572F82A417F728DBF
        Validity
            Not Before: Sep 29 23:56:09 2021 GMT
            Not After : Sep 30 00:01:09 2022 GMT
        Subject: CN=3082010A0282010100B23C80ABC2D004C8672941DEEF1571C256AD5602185CF1F0942E1FFFE0A717B3C003D3EC653FB3EA87DAF61C3710B2E110C54A1CD40E3F132FCCB8E35174BF66E6A3AACCBEC13A8598B483DC9602316613D74BE188AB83DD80C58E3C369AC1CF2443B240FA268DF5F479FF2D54101F34C3DF68FD3CC293AB95DB77C310875DE12AE01CD0C89CF472081EDCA26E165440DC7D01F433E5BABFEC8107BBDA16FC234A2B7F6919595C93E1005696B231D0C0577E4FBB03E55E78FA5135DAD8C5ADBABE16046D9E90BF1B6862FEEF9C2A2E3472683316A039A47CEC385ECC91B1D2BCFB7AD480AD6D59B841F9582097872BAD3BFB557FEA59372E1CDCE5FA3FDA1C870203010001
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:3c:80:ab:c2:d0:04:c8:67:29:41:de:ef:15:
                    71:c2:56:ad:56:02:18:5c:f1:f0:94:2e:1f:ff:e0:
                    a7:17:b3:c0:03:d3:ec:65:3f:b3:ea:87:da:f6:1c:
                    37:10:b2:e1:10:c5:4a:1c:d4:0e:3f:13:2f:cc:b8:
                    e3:51:74:bf:66:e6:a3:aa:cc:be:c1:3a:85:98:b4:
                    83:dc:96:02:31:66:13:d7:4b:e1:88:ab:83:dd:80:
                    c5:8e:3c:36:9a:c1:cf:24:43:b2:40:fa:26:8d:f5:
                    f4:79:ff:2d:54:10:1f:34:c3:df:68:fd:3c:c2:93:
                    ab:95:db:77:c3:10:87:5d:e1:2a:e0:1c:d0:c8:9c:
                    f4:72:08:1e:dc:a2:6e:16:54:40:dc:7d:01:f4:33:
                    e5:ba:bf:ec:81:07:bb:da:16:fc:23:4a:2b:7f:69:
                    19:59:5c:93:e1:00:56:96:b2:31:d0:c0:57:7e:4f:
                    bb:03:e5:5e:78:fa:51:35:da:d8:c5:ad:ba:be:16:
                    04:6d:9e:90:bf:1b:68:62:fe:ef:9c:2a:2e:34:72:
                    68:33:16:a0:39:a4:7c:ec:38:5e:cc:91:b1:d2:bc:
                    fb:7a:d4:80:ad:6d:59:b8:41:f9:58:20:97:87:2b:
                    ad:3b:fb:55:7f:ea:59:37:2e:1c:dc:e5:fa:3f:da:
                    1c:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A1:2C:45:D1:8E:6E:21:D8:6E:A7:A9:CE:EA:E2:49:18:C5:A5:1D:1E
            X509v3 Authority Key Identifier:
                keyid:AC:55:54:47:BA:62:C3:91:07:F1:6B:F5:72:F8:2A:41:7F:72:8D:BF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/3993f350-b756-4916-8d84-484f025dffcc/0/AC555447BA62C39107F16BF572F82A417F728DBF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AC555447BA62C39107F16BF572F82A417F728DBF.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/3993f350-b756-4916-8d84-484f025dffcc/0/323430343a383030303a61623a3a2f34382d3438203d3e203137343531.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2404:8000:ab::/48

    Signature Algorithm: sha256WithRSAEncryption
         37:b9:2d:bf:d3:19:2c:0c:46:5a:09:ab:82:bc:0a:86:28:89:
         93:dd:56:79:48:28:b9:3d:f9:9c:d1:2f:af:77:d5:c7:cc:11:
         81:dd:f9:91:36:13:e7:d2:ac:d8:8d:58:17:fd:f4:c1:7c:ba:
         06:c3:e5:93:46:2d:6e:03:b5:7b:ef:2e:3c:39:a5:8b:13:48:
         0d:8c:47:01:61:b6:26:9e:6b:35:05:23:56:a8:04:35:09:b9:
         3e:28:d3:8f:a5:ef:e1:ab:7f:c0:04:65:23:79:bd:23:f4:3b:
         32:47:53:40:4b:bd:0f:f3:e6:22:58:75:ce:fb:11:ee:99:2e:
         fd:25:c6:39:3a:d2:be:ca:d1:69:f1:14:a8:6d:3d:0a:d7:54:
         be:8b:11:0b:9d:76:ee:89:1a:c0:90:df:44:e9:8b:cb:d6:76:
         c1:70:83:b4:9c:f7:4f:ac:d2:a9:6d:8f:55:a7:4b:d5:79:47:
         90:02:c1:7b:60:bb:43:c8:02:e5:40:af:ee:44:1d:ad:23:4b:
         7f:5f:91:50:d4:d9:6e:67:1e:f7:02:18:98:27:c7:96:1d:c3:
         ee:26:2a:27:b7:df:3a:1d:db:31:ed:62:8b:17:eb:50:da:62:
         23:92:d7:3c:a1:72:85:5a:68:a1:12:a7:9a:72:65:e8:60:05:
         35:5a:02:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----