Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/3993f350-b756-4916-8d84-484f025dffcc/0/323430343a383030303a64363a3a2f34382d3438203d3e203137343531.roa
File:                     323430343a383030303a64363a3a2f34382d3438203d3e203137343531.roa (raw, json)
Hash identifier:          AIVbI7nEE2iHb9Ry/Kdjy601hr7N8ln2idT0KEPVDuY=
Subject key identifier:   9F:56:6B:76:40:D7:D4:A8:48:DB:66:8B:C9:4E:24:9F:22:17:D5:E4
Certificate issuer:       /CN=AC555447BA62C39107F16BF572F82A417F728DBF
Certificate serial:       4CDFFFF3BDA63FA4AC1A2BE9B6CC3BCBBD44D5A1
Authority key identifier: AC:55:54:47:BA:62:C3:91:07:F1:6B:F5:72:F8:2A:41:7F:72:8D:BF
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AC555447BA62C39107F16BF572F82A417F728DBF.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/3993f350-b756-4916-8d84-484f025dffcc/0/323430343a383030303a64363a3a2f34382d3438203d3e203137343531.roa
Signing time:             Thu 30 Sep 2021 00:00:51 +0000
ROA not before:           Wed 29 Sep 2021 23:55:51 +0000
ROA not after:            Fri 30 Sep 2022 00:00:51 +0000
asID:                     17451
IP address blocks:        2404:8000:d6::/48 maxlen: 48

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4c:df:ff:f3:bd:a6:3f:a4:ac:1a:2b:e9:b6:cc:3b:cb:bd:44:d5:a1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AC555447BA62C39107F16BF572F82A417F728DBF
        Validity
            Not Before: Sep 29 23:55:51 2021 GMT
            Not After : Sep 30 00:00:51 2022 GMT
        Subject: CN=3082010A0282010100C04F8194EE2E35786C505E8C8D89223A52DA22F2C112446E4F6C77D0617ED022E6FF68FF1DAD02960CD0C526EF67F925A156C070F0110E5744043290C03DC8E723C9AF22275C650160A70EC3E3E4EBDCF9856C4B8DCCCCBD391DC075F8882F60B6A9DE8171572460A4FC49167CE766CEDB474ABF401AA0FB3220F7265695C392D1A82CBDA1CF79B2D4C1CA962C3613A788C3700F9102391B831AE1FD70F622C3D3C64A8D7B3213D0D88894866C06A07C220598881953398C49181ABA9FD255B89EF9403F70C546148833220EC8AED8BBBB549218EE37D6359C8BA70A70B77D4FF0B451BF5A0DA4F7F6D02E2C2B18D47D54447BA7232D173FE4381CC893CA56310203010001
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:4f:81:94:ee:2e:35:78:6c:50:5e:8c:8d:89:
                    22:3a:52:da:22:f2:c1:12:44:6e:4f:6c:77:d0:61:
                    7e:d0:22:e6:ff:68:ff:1d:ad:02:96:0c:d0:c5:26:
                    ef:67:f9:25:a1:56:c0:70:f0:11:0e:57:44:04:32:
                    90:c0:3d:c8:e7:23:c9:af:22:27:5c:65:01:60:a7:
                    0e:c3:e3:e4:eb:dc:f9:85:6c:4b:8d:cc:cc:bd:39:
                    1d:c0:75:f8:88:2f:60:b6:a9:de:81:71:57:24:60:
                    a4:fc:49:16:7c:e7:66:ce:db:47:4a:bf:40:1a:a0:
                    fb:32:20:f7:26:56:95:c3:92:d1:a8:2c:bd:a1:cf:
                    79:b2:d4:c1:ca:96:2c:36:13:a7:88:c3:70:0f:91:
                    02:39:1b:83:1a:e1:fd:70:f6:22:c3:d3:c6:4a:8d:
                    7b:32:13:d0:d8:88:94:86:6c:06:a0:7c:22:05:98:
                    88:19:53:39:8c:49:18:1a:ba:9f:d2:55:b8:9e:f9:
                    40:3f:70:c5:46:14:88:33:22:0e:c8:ae:d8:bb:bb:
                    54:92:18:ee:37:d6:35:9c:8b:a7:0a:70:b7:7d:4f:
                    f0:b4:51:bf:5a:0d:a4:f7:f6:d0:2e:2c:2b:18:d4:
                    7d:54:44:7b:a7:23:2d:17:3f:e4:38:1c:c8:93:ca:
                    56:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9F:56:6B:76:40:D7:D4:A8:48:DB:66:8B:C9:4E:24:9F:22:17:D5:E4
            X509v3 Authority Key Identifier:
                keyid:AC:55:54:47:BA:62:C3:91:07:F1:6B:F5:72:F8:2A:41:7F:72:8D:BF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/3993f350-b756-4916-8d84-484f025dffcc/0/AC555447BA62C39107F16BF572F82A417F728DBF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AC555447BA62C39107F16BF572F82A417F728DBF.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/3993f350-b756-4916-8d84-484f025dffcc/0/323430343a383030303a64363a3a2f34382d3438203d3e203137343531.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2404:8000:d6::/48

    Signature Algorithm: sha256WithRSAEncryption
         84:89:3b:c9:9e:34:3c:88:b0:4b:b0:53:f2:4a:79:ec:91:ac:
         72:4c:4d:e0:0a:c4:80:5f:f3:50:4e:cd:10:35:09:39:7d:20:
         bc:46:b5:0b:c8:09:fb:22:d6:b1:77:5a:e9:ee:2d:a9:90:66:
         13:8e:8f:1e:10:38:fe:fe:2b:fa:19:36:dd:66:3a:30:7e:4c:
         50:d6:cd:9f:43:72:0e:c3:8e:c8:6f:63:92:e1:1e:ba:45:98:
         32:d8:50:68:53:c6:74:fa:0c:d4:f5:92:7c:18:5e:a9:1e:a2:
         97:ea:14:1f:7f:eb:82:0b:77:28:20:32:76:ae:1e:3b:0f:8e:
         50:5a:f0:8e:74:8f:82:85:de:78:7c:6d:7e:a5:85:65:41:3c:
         57:dc:5c:72:9b:12:9e:25:e1:31:ae:e0:8a:fa:02:c9:cf:c6:
         70:41:2c:06:9b:c8:29:12:9e:e0:c3:5d:15:93:10:e4:77:46:
         62:d0:e0:58:4d:a1:66:5d:26:b9:17:aa:92:ff:4c:20:dd:8e:
         37:e0:95:4d:60:7e:92:84:2b:69:25:95:1f:9c:63:f2:cd:89:
         c9:01:6a:a1:98:d5:bc:ef:5b:bf:c4:74:d4:58:ba:a8:01:c3:
         fd:f4:b5:e4:b6:1e:d9:e9:25:b6:1b:44:52:b1:56:e1:23:57:
         17:3a:cd:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----