Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/3993f350-b756-4916-8d84-484f025dffcc/0/323430343a383030303a626137313a3a2f34382d3438203d3e203137343531.roa
File:                     323430343a383030303a626137313a3a2f34382d3438203d3e203137343531.roa (raw, json)
Hash identifier:          in07f9dp016VKbG/c3fSHGkYt05UFyfk2oeoVSQQgQw=
Subject key identifier:   7E:B4:DB:0C:BC:FD:69:CB:24:8C:23:4A:16:11:D1:EF:8B:23:D2:38
Certificate issuer:       /CN=AC555447BA62C39107F16BF572F82A417F728DBF
Certificate serial:       5BAD24FCBEA810F64EF7589A05BE2E32444B9501
Authority key identifier: AC:55:54:47:BA:62:C3:91:07:F1:6B:F5:72:F8:2A:41:7F:72:8D:BF
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AC555447BA62C39107F16BF572F82A417F728DBF.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/3993f350-b756-4916-8d84-484f025dffcc/0/323430343a383030303a626137313a3a2f34382d3438203d3e203137343531.roa
Signing time:             Thu 30 Sep 2021 00:00:28 +0000
ROA not before:           Wed 29 Sep 2021 23:55:28 +0000
ROA not after:            Fri 30 Sep 2022 00:00:28 +0000
asID:                     17451
IP address blocks:        2404:8000:ba71::/48 maxlen: 48

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5b:ad:24:fc:be:a8:10:f6:4e:f7:58:9a:05:be:2e:32:44:4b:95:01
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AC555447BA62C39107F16BF572F82A417F728DBF
        Validity
            Not Before: Sep 29 23:55:28 2021 GMT
            Not After : Sep 30 00:00:28 2022 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:75:3d:6e:eb:bc:97:62:22:8f:eb:5c:74:f8:
                    be:f2:e7:ac:0e:73:8d:93:72:89:f8:90:f5:6b:2c:
                    17:4c:f3:13:9b:ef:af:21:9a:50:ac:8e:16:62:08:
                    84:b5:c8:ad:89:32:73:48:3c:48:24:58:27:59:12:
                    1d:64:e4:a2:ad:20:16:8b:88:86:c7:8e:a4:97:75:
                    79:82:fc:0d:87:d3:e4:90:33:22:2a:f7:14:34:89:
                    f8:72:9e:61:87:d8:60:29:22:b3:50:91:fe:b4:2c:
                    df:8a:91:b7:bb:2e:42:08:8f:57:4f:88:00:04:51:
                    98:97:02:12:38:81:fb:e3:a8:41:87:74:b4:a9:7b:
                    ab:cb:bd:d8:63:b8:42:bb:60:32:fd:9c:7d:32:94:
                    9c:cb:35:d2:0d:d6:bf:2e:a7:0e:32:e5:63:07:f6:
                    99:96:b5:86:0d:02:0b:c3:76:f4:28:bb:99:4c:3e:
                    bf:25:de:7b:05:0c:97:22:c0:44:3b:e4:41:cd:a5:
                    95:ef:6f:88:2f:51:76:d3:c0:bd:f4:97:28:a3:5e:
                    26:5f:7d:12:a2:6d:b6:ea:08:a2:99:eb:40:13:15:
                    4e:d5:d6:c6:f6:38:f1:d7:eb:b6:06:a7:d1:d8:4e:
                    82:66:c6:5c:97:8e:47:af:bc:70:9b:1c:69:7f:a2:
                    e1:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7E:B4:DB:0C:BC:FD:69:CB:24:8C:23:4A:16:11:D1:EF:8B:23:D2:38
            X509v3 Authority Key Identifier:
                keyid:AC:55:54:47:BA:62:C3:91:07:F1:6B:F5:72:F8:2A:41:7F:72:8D:BF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/3993f350-b756-4916-8d84-484f025dffcc/0/AC555447BA62C39107F16BF572F82A417F728DBF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AC555447BA62C39107F16BF572F82A417F728DBF.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/3993f350-b756-4916-8d84-484f025dffcc/0/323430343a383030303a626137313a3a2f34382d3438203d3e203137343531.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2404:8000:ba71::/48

    Signature Algorithm: sha256WithRSAEncryption
         90:b9:f9:cc:45:2b:dd:de:a4:78:8b:da:f5:90:c8:fc:2a:57:
         c2:27:00:cd:a8:3e:fc:d8:d4:6c:46:cc:c5:8f:29:6e:fe:1d:
         28:23:83:a8:cd:ab:2f:e5:6a:7f:d1:0c:6f:54:27:b6:ae:26:
         7b:ea:be:1d:8a:41:e6:f9:2e:ec:2c:a2:ed:4c:54:3a:eb:a3:
         3b:5c:cb:a9:6c:0e:1d:36:d6:f3:0c:01:3a:97:67:9e:ea:46:
         30:ba:cc:7d:56:99:44:c6:54:0f:44:7c:5d:cb:a4:69:1d:e3:
         db:50:15:00:1c:29:9f:38:23:03:3f:d7:fc:71:9d:2d:7c:3f:
         21:33:5a:bf:63:9a:e4:f7:4f:30:08:d8:89:d9:9d:87:ac:6a:
         d5:7b:39:ef:49:9c:e4:09:81:c9:3c:cc:3f:e5:30:05:22:f7:
         26:fe:9b:c4:a2:31:70:73:11:a2:c4:55:67:24:19:39:77:d8:
         19:b6:1b:ad:71:ba:16:50:38:0b:f5:e5:47:92:fd:0a:d3:c0:
         08:5f:d0:ff:ff:07:f6:a6:8a:b5:cd:35:45:f9:60:2d:a4:f2:
         37:81:47:19:cd:e0:a9:e5:59:30:e4:1f:e5:1b:ed:b0:33:d9:
         8e:4f:1a:29:ea:64:9a:a0:89:93:3e:52:24:ee:cf:12:50:b8:
         39:a5:11:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----