Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/3993f350-b756-4916-8d84-484f025dffcc/0/323430343a383030303a62663a3a2f34382d3438203d3e203137343531.roa
File:                     323430343a383030303a62663a3a2f34382d3438203d3e203137343531.roa (raw, json)
Hash identifier:          /ZkB8jcI9Fc1qxba6kOVOTbJxLWUs5mCKlqtIs39Crw=
Subject key identifier:   5F:46:EF:F3:8A:11:52:04:2E:84:E5:D8:D4:1D:19:AB:64:9A:2D:13
Certificate issuer:       /CN=AC555447BA62C39107F16BF572F82A417F728DBF
Certificate serial:       23030565BDD4AB0B19BE9D1B464248699844F7C2
Authority key identifier: AC:55:54:47:BA:62:C3:91:07:F1:6B:F5:72:F8:2A:41:7F:72:8D:BF
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AC555447BA62C39107F16BF572F82A417F728DBF.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/3993f350-b756-4916-8d84-484f025dffcc/0/323430343a383030303a62663a3a2f34382d3438203d3e203137343531.roa
Signing time:             Thu 30 Sep 2021 00:01:09 +0000
ROA not before:           Wed 29 Sep 2021 23:56:09 +0000
ROA not after:            Fri 30 Sep 2022 00:01:09 +0000
asID:                     17451
IP address blocks:        2404:8000:bf::/48 maxlen: 48

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            23:03:05:65:bd:d4:ab:0b:19:be:9d:1b:46:42:48:69:98:44:f7:c2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AC555447BA62C39107F16BF572F82A417F728DBF
        Validity
            Not Before: Sep 29 23:56:09 2021 GMT
            Not After : Sep 30 00:01:09 2022 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:4b:41:6c:a9:2f:61:0b:2a:23:99:47:a1:34:
                    4f:e0:3c:dd:49:6b:86:67:21:ba:a7:2b:1f:94:b9:
                    cf:f9:01:8e:75:8b:a6:37:6f:f9:a3:54:9e:b0:c3:
                    f9:1f:43:dd:f5:d4:8b:07:73:76:00:ec:8c:8a:ca:
                    2c:e2:e3:b6:34:bb:60:7b:5e:e1:69:e9:06:7b:a0:
                    67:ce:8b:c4:74:2c:56:2d:f9:f3:a3:1c:d7:cc:e2:
                    10:c9:16:13:27:f8:7d:7d:23:ea:17:bb:40:a4:b7:
                    40:46:6e:fa:56:b4:7c:94:e2:8b:a0:8e:2f:9e:20:
                    9d:1d:58:2c:e4:2d:51:a3:09:7b:a0:16:25:da:b7:
                    8a:b9:53:7b:c1:c4:ec:4b:b0:6f:58:22:ed:3e:35:
                    b6:5d:ad:ec:7a:f4:51:cc:ae:b3:e8:87:81:9a:e0:
                    7a:ad:72:e3:d3:70:1c:89:67:48:62:36:e9:8f:f9:
                    4a:6b:ac:55:8d:c6:09:c1:29:3b:fd:24:25:d4:53:
                    24:65:44:67:2c:8e:07:25:8c:19:2c:37:ba:ba:4f:
                    13:ef:df:56:04:af:99:87:15:f7:00:89:36:34:a8:
                    1e:68:b3:e2:16:32:8b:75:ff:bb:08:f6:6a:f4:69:
                    bb:db:cb:0a:bf:ec:94:54:c7:b8:b0:d5:a8:2b:a3:
                    4e:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5F:46:EF:F3:8A:11:52:04:2E:84:E5:D8:D4:1D:19:AB:64:9A:2D:13
            X509v3 Authority Key Identifier:
                keyid:AC:55:54:47:BA:62:C3:91:07:F1:6B:F5:72:F8:2A:41:7F:72:8D:BF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/3993f350-b756-4916-8d84-484f025dffcc/0/AC555447BA62C39107F16BF572F82A417F728DBF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AC555447BA62C39107F16BF572F82A417F728DBF.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/3993f350-b756-4916-8d84-484f025dffcc/0/323430343a383030303a62663a3a2f34382d3438203d3e203137343531.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2404:8000:bf::/48

    Signature Algorithm: sha256WithRSAEncryption
         89:3b:7a:50:ae:2d:af:8f:14:0e:fa:0d:9a:fb:85:57:cd:39:
         d0:b3:f9:9d:1d:ac:77:b8:07:d1:f8:3d:b2:93:47:64:de:41:
         df:45:3b:9e:61:05:e1:ab:ec:99:6b:8f:0d:b8:45:ea:0c:ca:
         95:07:c3:fa:f3:cc:2b:fc:4a:8a:a2:3f:09:23:0e:81:b3:7e:
         d7:11:b0:cb:80:c5:0f:8e:ba:5a:af:be:d9:e9:6f:3c:36:39:
         cb:92:b2:66:d4:31:16:eb:50:48:fd:66:66:cc:ca:61:61:16:
         ec:9c:3d:f3:53:24:fd:54:01:8d:05:f8:3d:2d:b2:5d:92:e4:
         5d:78:9f:9b:fb:a1:60:27:0c:d7:b4:dc:37:8a:ec:51:75:67:
         93:07:d4:e0:a9:be:d7:73:a7:fe:67:32:c0:00:ae:f4:5c:98:
         00:76:95:82:e0:34:67:50:17:5c:20:58:67:31:c5:80:21:39:
         56:7e:3d:d0:c1:20:f1:ab:a8:e6:5e:67:5a:09:47:d4:3b:c3:
         8c:a6:f3:14:47:3e:d5:73:b5:04:b8:0d:77:63:02:1f:e7:e9:
         f6:9f:87:a1:f1:b1:28:04:7a:51:ae:d1:70:57:b7:f8:35:f9:
         b0:6e:1b:06:7b:48:69:5b:8f:9d:85:62:0e:c7:5d:50:fc:a8:
         6f:71:d0:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----