Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/3993f350-b756-4916-8d84-484f025dffcc/0/323430343a383030303a623462313a3a2f34382d3438203d3e203137343531.roa
File:                     323430343a383030303a623462313a3a2f34382d3438203d3e203137343531.roa (raw, json)
Hash identifier:          DMWKWsoEJKLWhR8QKF/vSevWth8O52GP58P9aPxl1rk=
Subject key identifier:   17:99:B8:00:F3:27:1D:AD:82:D8:80:31:23:29:47:25:8E:1B:78:77
Certificate issuer:       /CN=AC555447BA62C39107F16BF572F82A417F728DBF
Certificate serial:       0F649F7C5AB4CA745873175982330057AFEB8CF1
Authority key identifier: AC:55:54:47:BA:62:C3:91:07:F1:6B:F5:72:F8:2A:41:7F:72:8D:BF
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AC555447BA62C39107F16BF572F82A417F728DBF.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/3993f350-b756-4916-8d84-484f025dffcc/0/323430343a383030303a623462313a3a2f34382d3438203d3e203137343531.roa
Signing time:             Thu 30 Sep 2021 00:01:00 +0000
ROA not before:           Wed 29 Sep 2021 23:56:00 +0000
ROA not after:            Fri 30 Sep 2022 00:01:00 +0000
asID:                     17451
IP address blocks:        2404:8000:b4b1::/48 maxlen: 48

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0f:64:9f:7c:5a:b4:ca:74:58:73:17:59:82:33:00:57:af:eb:8c:f1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AC555447BA62C39107F16BF572F82A417F728DBF
        Validity
            Not Before: Sep 29 23:56:00 2021 GMT
            Not After : Sep 30 00:01:00 2022 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:14:c7:5b:c6:6a:8b:f1:4f:3f:46:64:86:d2:
                    f8:d6:b8:10:93:e6:d2:7f:4a:8d:0a:eb:d3:c7:7a:
                    66:ca:73:49:fc:cb:47:51:48:d0:7e:ec:01:57:d1:
                    a5:ff:2e:ee:e1:03:83:b3:d9:ee:3d:e8:05:7f:6d:
                    12:9a:e1:cd:00:a7:b3:6a:17:94:02:76:19:f7:84:
                    e6:20:b4:fa:51:96:93:d8:75:7f:f7:19:2a:5a:dd:
                    07:9b:f6:1b:87:a1:bd:bc:01:34:32:58:93:3b:cb:
                    56:18:2c:ed:fb:b1:3b:8c:6b:7e:13:6f:18:5e:a7:
                    1f:1c:30:6b:42:e4:38:25:5e:fd:46:84:3d:e7:e3:
                    15:67:29:2e:71:25:6d:7c:8e:a1:d0:9c:15:58:d2:
                    4a:18:82:36:98:b4:4d:68:35:8b:65:de:4b:5e:69:
                    34:f6:84:18:f0:3b:c5:64:89:68:7e:2e:5f:ab:ba:
                    4f:06:fb:45:dd:0e:2b:a0:bf:80:2d:66:bc:31:33:
                    3f:1c:25:fc:15:75:c1:62:6f:3a:f2:27:73:46:c6:
                    f3:3a:1c:d2:20:22:ee:29:82:7a:28:3b:13:bd:c7:
                    d7:17:2c:1b:55:e2:64:d8:5d:d7:29:1d:a0:06:0a:
                    7b:9d:43:70:64:2f:88:31:80:20:43:92:24:e8:0d:
                    f9:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                17:99:B8:00:F3:27:1D:AD:82:D8:80:31:23:29:47:25:8E:1B:78:77
            X509v3 Authority Key Identifier:
                keyid:AC:55:54:47:BA:62:C3:91:07:F1:6B:F5:72:F8:2A:41:7F:72:8D:BF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/3993f350-b756-4916-8d84-484f025dffcc/0/AC555447BA62C39107F16BF572F82A417F728DBF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AC555447BA62C39107F16BF572F82A417F728DBF.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/3993f350-b756-4916-8d84-484f025dffcc/0/323430343a383030303a623462313a3a2f34382d3438203d3e203137343531.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2404:8000:b4b1::/48

    Signature Algorithm: sha256WithRSAEncryption
         8f:e0:29:70:28:e5:68:11:9d:29:d2:33:8d:ce:74:f4:bd:76:
         db:85:52:2f:89:5c:5f:d9:ab:ad:e3:73:82:ed:0a:bf:05:a7:
         81:34:29:06:c8:77:e6:3a:2b:56:21:3f:53:d4:f0:36:ef:1e:
         ef:10:f7:7e:45:2f:eb:0f:51:2e:20:cd:c0:cd:4e:88:d6:d5:
         d2:11:9b:0c:20:88:ad:29:16:2b:a9:94:1d:18:23:73:d6:1a:
         47:6a:0b:c9:61:89:7f:4d:d5:df:92:20:cf:c4:fe:53:fd:84:
         c3:df:21:32:2b:ab:aa:46:92:cb:ad:75:d1:e2:5e:a4:92:54:
         63:e9:39:e2:e3:f1:ee:ef:a7:ec:98:fc:db:5d:c5:da:4c:74:
         9f:e7:72:f5:d8:f5:37:58:52:35:30:be:20:3a:40:55:64:86:
         51:27:e3:b0:04:49:9d:55:a9:0e:b4:f7:5d:08:07:13:a8:aa:
         32:1e:68:71:e2:ec:cc:6a:26:eb:3a:bc:5c:bd:fe:44:4a:91:
         7a:f1:dc:66:e2:1d:fe:3b:15:a5:1e:4c:58:eb:59:2e:a4:73:
         56:f9:7a:dc:49:eb:6b:cb:39:16:97:ac:c4:77:71:d1:d5:05:
         d8:d3:7e:19:12:e6:c9:6b:28:75:ab:b1:2d:e1:40:96:4f:c1:
         64:f4:f3:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----