Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/3993f350-b756-4916-8d84-484f025dffcc/0/323430343a383030303a62323a3a2f34382d3438203d3e203137343531.roa
File:                     323430343a383030303a62323a3a2f34382d3438203d3e203137343531.roa (raw, json)
Hash identifier:          3F3Hr17lNAG5vqm1O5OY+9q4Gw0ctVjI2lX1dzyB750=
Subject key identifier:   1D:37:C5:51:80:06:11:C2:18:A7:F7:11:EB:5A:7A:CB:8E:9E:32:B0
Certificate issuer:       /CN=AC555447BA62C39107F16BF572F82A417F728DBF
Certificate serial:       6DA9569A6D4C56BBC18FE61AA30CA235134F2BA0
Authority key identifier: AC:55:54:47:BA:62:C3:91:07:F1:6B:F5:72:F8:2A:41:7F:72:8D:BF
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AC555447BA62C39107F16BF572F82A417F728DBF.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/3993f350-b756-4916-8d84-484f025dffcc/0/323430343a383030303a62323a3a2f34382d3438203d3e203137343531.roa
Signing time:             Thu 30 Sep 2021 00:01:11 +0000
ROA not before:           Wed 29 Sep 2021 23:56:11 +0000
ROA not after:            Fri 30 Sep 2022 00:01:11 +0000
asID:                     17451
IP address blocks:        2404:8000:b2::/48 maxlen: 48

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6d:a9:56:9a:6d:4c:56:bb:c1:8f:e6:1a:a3:0c:a2:35:13:4f:2b:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AC555447BA62C39107F16BF572F82A417F728DBF
        Validity
            Not Before: Sep 29 23:56:11 2021 GMT
            Not After : Sep 30 00:01:11 2022 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:a3:8c:66:8e:cb:1a:45:34:22:9d:69:74:cd:
                    19:71:d7:ae:08:34:1d:36:e7:80:1f:85:47:9b:f1:
                    66:a5:93:ea:bc:87:5b:c2:23:b9:ea:65:7a:18:4b:
                    0a:ac:54:36:ff:3d:00:59:a2:99:45:7c:74:5e:2a:
                    0a:b1:f3:7d:92:7f:c9:37:b9:20:36:38:45:f1:98:
                    4c:2d:fe:b2:34:a3:12:bb:4c:f1:29:ba:c5:ec:1b:
                    af:bc:65:3c:35:8b:21:56:d4:11:80:39:7c:0a:b6:
                    17:66:c3:50:15:96:0e:d2:40:2f:20:6f:91:ac:0a:
                    f5:c6:39:d3:8c:1c:3c:e5:cf:de:73:27:fb:0b:2c:
                    da:c2:af:55:52:1a:88:52:18:61:f4:02:8d:1f:0d:
                    d0:59:53:72:24:fe:eb:28:a7:48:18:17:8f:7b:81:
                    95:fb:c1:9c:b1:60:80:97:84:0c:25:c8:7b:7e:c7:
                    7d:28:13:1c:e7:c9:69:b6:c7:be:f2:23:c7:f8:55:
                    f4:f2:de:58:ae:dd:e0:ed:31:a8:c7:d1:91:a7:0a:
                    7e:88:d9:fa:9c:8c:fe:ed:bc:03:9b:ed:b6:87:24:
                    b9:65:10:b8:16:d8:a7:60:10:e3:85:ce:25:c2:44:
                    9b:d2:84:51:6e:4b:c6:0b:8b:6d:74:23:0a:14:9a:
                    84:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1D:37:C5:51:80:06:11:C2:18:A7:F7:11:EB:5A:7A:CB:8E:9E:32:B0
            X509v3 Authority Key Identifier:
                keyid:AC:55:54:47:BA:62:C3:91:07:F1:6B:F5:72:F8:2A:41:7F:72:8D:BF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/3993f350-b756-4916-8d84-484f025dffcc/0/AC555447BA62C39107F16BF572F82A417F728DBF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AC555447BA62C39107F16BF572F82A417F728DBF.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/3993f350-b756-4916-8d84-484f025dffcc/0/323430343a383030303a62323a3a2f34382d3438203d3e203137343531.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2404:8000:b2::/48

    Signature Algorithm: sha256WithRSAEncryption
         20:e3:3f:34:ba:f3:a6:bd:1f:20:93:5a:1c:11:b1:21:ba:58:
         ef:4b:f0:b3:de:1d:b6:0d:ab:43:13:d7:1b:2a:3c:11:e9:32:
         73:8e:0c:a8:fd:35:35:5f:af:90:31:e7:4f:4b:17:71:66:a0:
         7c:2d:43:85:dd:3b:bf:a3:de:a0:30:42:cd:c0:ab:c5:ea:96:
         2f:eb:67:8d:52:d2:1e:52:f9:ab:b3:28:52:a2:cb:b7:2a:8b:
         d5:21:82:24:eb:fc:7e:01:1d:9b:d8:59:6d:b5:12:8d:06:b5:
         b3:31:11:88:8b:78:1d:7e:26:3c:d6:da:2f:20:d6:13:28:42:
         67:55:ff:15:ff:ba:63:61:90:df:a0:a8:e3:6b:ae:96:ab:b3:
         d8:e1:a3:b0:e7:cf:38:3d:ef:2b:73:64:d1:8d:e0:7b:45:96:
         5d:04:83:9c:45:0d:69:4c:a9:c0:5c:e9:22:fc:6e:2f:84:cc:
         c0:f3:3d:a0:7f:d0:00:64:d8:bd:ea:c5:17:d2:18:19:17:47:
         f9:41:81:06:80:a1:3e:85:12:b3:91:f2:db:7d:68:92:e6:fc:
         8e:e0:3e:bf:b0:01:09:be:08:1c:95:6f:c4:73:ed:9a:e5:a9:
         15:5c:56:6a:be:4d:0a:0e:2c:17:24:93:2d:38:8f:76:98:2f:
         11:98:63:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----