Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/3993f350-b756-4916-8d84-484f025dffcc/0/323430343a383030303a61643a3a2f34382d3438203d3e203137343531.roa
File:                     323430343a383030303a61643a3a2f34382d3438203d3e203137343531.roa (raw, json)
Hash identifier:          ZElbp68MWkr2r6h18yCO2VsLtnWiQz76BS0Nqc588t8=
Subject key identifier:   2F:02:1B:DE:9E:08:CE:F3:1E:57:66:BA:14:E7:6D:16:2D:F0:1F:5F
Certificate issuer:       /CN=AC555447BA62C39107F16BF572F82A417F728DBF
Certificate serial:       6EA997F055581250BBB12B363A164DB19D1337B4
Authority key identifier: AC:55:54:47:BA:62:C3:91:07:F1:6B:F5:72:F8:2A:41:7F:72:8D:BF
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AC555447BA62C39107F16BF572F82A417F728DBF.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/3993f350-b756-4916-8d84-484f025dffcc/0/323430343a383030303a61643a3a2f34382d3438203d3e203137343531.roa
Signing time:             Thu 30 Sep 2021 00:00:32 +0000
ROA not before:           Wed 29 Sep 2021 23:55:32 +0000
ROA not after:            Fri 30 Sep 2022 00:00:32 +0000
asID:                     17451
IP address blocks:        2404:8000:ad::/48 maxlen: 48

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6e:a9:97:f0:55:58:12:50:bb:b1:2b:36:3a:16:4d:b1:9d:13:37:b4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AC555447BA62C39107F16BF572F82A417F728DBF
        Validity
            Not Before: Sep 29 23:55:32 2021 GMT
            Not After : Sep 30 00:00:32 2022 GMT
        Subject: CN=3082010A0282010100C170A156C649C576159ADD1B0B39E988AB3D706CB61EBA49F7DB4FA6DAB19E3446750440FBF272E97712DEAE9A645466C0B5E6C18FBECDBFC37DE7109EAA9285B6ED5C46938AC0E182ABB9A45238356BFE9522EF4B815AAF8939117BC5579336F5EB76DF1C15507386488FD7100DC78C30B0E395F9468436C1180C9290303FAA7230A630E7B5BF593CAD0A161827E48DAE537B1AA6FA659BF1455019797EED114EFC1E871AB02D58AA6A4E4075099FAC262551FAE1542D662AC4864C5742D9ACEC0514D60B8853E780915F9DD15363AC134C55671C14A5A5A0B355B12923152E26A9F6326E0B863C4CB2C924D4D4C266F6CB9BF77F227EB7E02CE671CAA1453F0203010001
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:70:a1:56:c6:49:c5:76:15:9a:dd:1b:0b:39:
                    e9:88:ab:3d:70:6c:b6:1e:ba:49:f7:db:4f:a6:da:
                    b1:9e:34:46:75:04:40:fb:f2:72:e9:77:12:de:ae:
                    9a:64:54:66:c0:b5:e6:c1:8f:be:cd:bf:c3:7d:e7:
                    10:9e:aa:92:85:b6:ed:5c:46:93:8a:c0:e1:82:ab:
                    b9:a4:52:38:35:6b:fe:95:22:ef:4b:81:5a:af:89:
                    39:11:7b:c5:57:93:36:f5:eb:76:df:1c:15:50:73:
                    86:48:8f:d7:10:0d:c7:8c:30:b0:e3:95:f9:46:84:
                    36:c1:18:0c:92:90:30:3f:aa:72:30:a6:30:e7:b5:
                    bf:59:3c:ad:0a:16:18:27:e4:8d:ae:53:7b:1a:a6:
                    fa:65:9b:f1:45:50:19:79:7e:ed:11:4e:fc:1e:87:
                    1a:b0:2d:58:aa:6a:4e:40:75:09:9f:ac:26:25:51:
                    fa:e1:54:2d:66:2a:c4:86:4c:57:42:d9:ac:ec:05:
                    14:d6:0b:88:53:e7:80:91:5f:9d:d1:53:63:ac:13:
                    4c:55:67:1c:14:a5:a5:a0:b3:55:b1:29:23:15:2e:
                    26:a9:f6:32:6e:0b:86:3c:4c:b2:c9:24:d4:d4:c2:
                    66:f6:cb:9b:f7:7f:22:7e:b7:e0:2c:e6:71:ca:a1:
                    45:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2F:02:1B:DE:9E:08:CE:F3:1E:57:66:BA:14:E7:6D:16:2D:F0:1F:5F
            X509v3 Authority Key Identifier:
                keyid:AC:55:54:47:BA:62:C3:91:07:F1:6B:F5:72:F8:2A:41:7F:72:8D:BF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/3993f350-b756-4916-8d84-484f025dffcc/0/AC555447BA62C39107F16BF572F82A417F728DBF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AC555447BA62C39107F16BF572F82A417F728DBF.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/3993f350-b756-4916-8d84-484f025dffcc/0/323430343a383030303a61643a3a2f34382d3438203d3e203137343531.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2404:8000:ad::/48

    Signature Algorithm: sha256WithRSAEncryption
         6f:f6:cd:91:ca:bd:b2:cb:f1:cf:75:1e:33:ab:55:fc:9e:42:
         45:fd:f4:6a:30:fb:0c:19:c5:58:91:86:a2:b4:36:b1:0b:f8:
         b6:97:5f:59:33:3f:00:cf:f9:3a:a2:e8:37:56:cc:22:4b:e0:
         0f:98:99:df:92:cb:e7:14:ca:1a:96:6e:1c:10:3a:2b:74:43:
         5f:96:6d:8d:44:bd:14:2b:ec:b4:87:78:32:fc:28:82:d1:47:
         e9:dc:7a:71:3c:ac:9d:fd:b4:a0:a1:18:0c:e4:56:66:27:9d:
         db:80:26:9c:d6:ca:04:29:f7:87:e5:d3:cd:fd:5f:ee:33:a2:
         98:80:bd:87:35:9d:12:11:e8:2e:ac:f4:c2:89:fa:08:c8:67:
         b4:9a:3a:6f:64:ff:eb:84:d6:af:ee:1a:c8:99:c6:17:57:b5:
         b8:88:b0:42:61:ce:51:22:a0:35:fb:3e:01:68:82:77:77:a9:
         05:ec:9c:56:ac:d3:ed:54:5b:ae:3c:24:2e:83:86:36:36:29:
         48:b9:ca:46:90:0a:fd:15:14:02:0a:84:46:fb:03:1f:46:54:
         3f:2b:39:ba:80:b9:36:4b:fa:21:96:f2:88:f7:9e:ca:3b:af:
         b0:da:f9:26:63:34:2e:de:44:94:f3:56:6c:ef:b8:28:5f:d9:
         05:f2:e6:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----