Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/3993f350-b756-4916-8d84-484f025dffcc/0/323430343a383030303a63303a3a2f34382d3438203d3e203137343531.roa
File:                     323430343a383030303a63303a3a2f34382d3438203d3e203137343531.roa (raw, json)
Hash identifier:          aLFNlkqDEjDxKt9TOtXAlKgVLzdM0TxlPW7QFbSoFRQ=
Subject key identifier:   0F:C3:95:46:A8:43:AD:62:18:CB:FE:DF:30:92:7D:37:F0:15:ED:D0
Certificate issuer:       /CN=AC555447BA62C39107F16BF572F82A417F728DBF
Certificate serial:       58F395B043CD235E1EE7B204DD258456DB48F787
Authority key identifier: AC:55:54:47:BA:62:C3:91:07:F1:6B:F5:72:F8:2A:41:7F:72:8D:BF
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AC555447BA62C39107F16BF572F82A417F728DBF.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/3993f350-b756-4916-8d84-484f025dffcc/0/323430343a383030303a63303a3a2f34382d3438203d3e203137343531.roa
Signing time:             Thu 30 Sep 2021 00:00:34 +0000
ROA not before:           Wed 29 Sep 2021 23:55:34 +0000
ROA not after:            Fri 30 Sep 2022 00:00:34 +0000
asID:                     17451
IP address blocks:        2404:8000:c0::/48 maxlen: 48

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            58:f3:95:b0:43:cd:23:5e:1e:e7:b2:04:dd:25:84:56:db:48:f7:87
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AC555447BA62C39107F16BF572F82A417F728DBF
        Validity
            Not Before: Sep 29 23:55:34 2021 GMT
            Not After : Sep 30 00:00:34 2022 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:2d:db:a6:18:40:c4:6c:e4:33:ce:cc:c2:96:
                    00:d0:01:6c:33:c4:72:10:b9:dd:64:97:9b:39:bc:
                    8c:a3:4e:dc:b7:37:7e:d9:d7:ab:c8:b1:6a:03:d4:
                    23:77:fb:7c:7a:39:88:5a:8b:c7:2f:4c:b7:b2:0e:
                    e1:9d:8e:b6:43:7f:84:24:a6:00:83:bb:08:79:be:
                    b2:48:47:a5:6f:05:e7:b4:dd:20:54:28:29:fc:9f:
                    e4:32:82:d7:f0:85:67:cd:85:fc:88:6b:57:02:5a:
                    cb:ba:19:0b:73:cd:6c:81:09:1d:76:e7:02:58:02:
                    fb:62:3c:c3:0a:4f:cd:01:d8:bb:bb:91:67:ba:89:
                    2a:68:55:64:50:c5:18:74:2a:f8:71:38:b1:f8:f5:
                    f4:6b:22:9d:df:5d:87:a7:cb:ce:44:27:a2:51:34:
                    a0:eb:27:2a:c4:7b:5c:fe:7a:00:e3:a7:bd:00:df:
                    5c:50:27:8f:de:93:db:ae:88:7f:bd:3c:74:43:1b:
                    1f:fe:3e:42:c1:da:e4:b8:c1:7d:bc:50:f0:82:6a:
                    ef:f2:3b:0a:92:16:94:3b:b6:e4:28:c0:09:39:2d:
                    47:34:1e:c4:1a:e2:f0:70:44:e0:71:0f:d0:c8:d7:
                    de:72:3c:b2:f6:05:f3:0e:26:91:b4:b5:66:7d:71:
                    df:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0F:C3:95:46:A8:43:AD:62:18:CB:FE:DF:30:92:7D:37:F0:15:ED:D0
            X509v3 Authority Key Identifier:
                keyid:AC:55:54:47:BA:62:C3:91:07:F1:6B:F5:72:F8:2A:41:7F:72:8D:BF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/3993f350-b756-4916-8d84-484f025dffcc/0/AC555447BA62C39107F16BF572F82A417F728DBF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AC555447BA62C39107F16BF572F82A417F728DBF.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/3993f350-b756-4916-8d84-484f025dffcc/0/323430343a383030303a63303a3a2f34382d3438203d3e203137343531.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2404:8000:c0::/48

    Signature Algorithm: sha256WithRSAEncryption
         0f:96:da:52:a9:0e:c9:fe:b0:88:7d:ac:61:07:2c:47:93:02:
         77:49:3b:20:f3:bd:26:4c:46:0b:ff:1a:87:57:29:07:a1:31:
         f9:a1:f3:dd:77:0b:df:cc:08:27:19:f4:bc:f4:1a:aa:25:7d:
         ef:3d:00:7f:a4:6c:1f:e2:9b:4a:76:70:8c:26:3d:4c:c0:58:
         92:49:00:fa:5e:45:77:9b:33:1d:cb:90:6a:3c:85:b3:c6:8c:
         39:66:32:17:50:bd:49:3e:f7:56:b2:f8:e7:29:37:2d:31:41:
         bb:dd:3c:75:ad:bd:5b:74:c8:f9:1d:30:78:ca:d8:e2:31:46:
         c6:6c:fa:a2:f1:45:d4:bf:0d:7f:fb:a2:08:06:0f:41:6e:23:
         be:d5:52:59:b3:d7:d4:e6:e6:a3:a7:eb:96:69:67:c6:90:5a:
         e3:9d:09:92:96:c8:a3:2c:06:2b:21:d5:e4:7b:d2:13:a1:bd:
         86:87:8e:8a:6b:d0:e3:87:a8:7b:f3:73:24:9d:73:d5:25:b9:
         b1:14:1f:c7:37:cc:d7:ad:d2:66:5c:ee:ce:bf:ab:4f:25:b6:
         a5:23:e0:f0:c3:fa:31:06:b6:fe:43:10:be:3d:26:1c:50:aa:
         df:6d:e6:26:c5:86:97:b6:3e:41:4c:21:4b:bb:a9:05:00:36:
         81:1e:bf:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----