Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/3993f350-b756-4916-8d84-484f025dffcc/0/323430343a383030303a643a3a2f34382d3438203d3e203137343531.roa
File:                     323430343a383030303a643a3a2f34382d3438203d3e203137343531.roa (raw, json)
Hash identifier:          8b48ae9C0kR2cEhu2r261YHWDLzHq/QK6jF9fM7wdOA=
Subject key identifier:   41:39:62:68:A6:73:16:DF:68:64:1B:EB:5B:C4:53:60:3E:BA:D5:B3
Certificate issuer:       /CN=AC555447BA62C39107F16BF572F82A417F728DBF
Certificate serial:       3EB9EC419040B3F4BF5C1E698D3577CEF9E095A5
Authority key identifier: AC:55:54:47:BA:62:C3:91:07:F1:6B:F5:72:F8:2A:41:7F:72:8D:BF
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AC555447BA62C39107F16BF572F82A417F728DBF.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/3993f350-b756-4916-8d84-484f025dffcc/0/323430343a383030303a643a3a2f34382d3438203d3e203137343531.roa
Signing time:             Thu 30 Sep 2021 00:00:05 +0000
ROA not before:           Wed 29 Sep 2021 23:55:05 +0000
ROA not after:            Fri 30 Sep 2022 00:00:05 +0000
asID:                     17451
IP address blocks:        2404:8000:d::/48 maxlen: 48

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3e:b9:ec:41:90:40:b3:f4:bf:5c:1e:69:8d:35:77:ce:f9:e0:95:a5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AC555447BA62C39107F16BF572F82A417F728DBF
        Validity
            Not Before: Sep 29 23:55:05 2021 GMT
            Not After : Sep 30 00:00:05 2022 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:2a:6d:47:f8:f3:bf:f7:df:32:ea:a2:58:a6:
                    16:48:43:78:43:bb:29:da:ae:f8:1d:d9:9d:73:60:
                    6e:ad:2f:19:30:29:1c:ac:84:4c:2f:83:98:9e:ed:
                    10:0e:32:9d:4d:00:58:e7:4a:f1:91:59:2d:fd:14:
                    2a:17:e4:dd:22:78:9a:37:e2:ff:6d:36:b3:b4:52:
                    d1:20:5b:e7:70:a8:9a:30:f0:e7:2a:1f:33:b5:79:
                    8d:e3:d6:4e:d7:d8:41:25:a2:d3:40:6a:ec:66:58:
                    11:63:36:8d:c6:55:7a:9d:ff:33:59:d4:5a:5a:b5:
                    9c:ec:a7:f3:88:c3:7b:1a:4d:7d:71:2d:d5:89:ce:
                    9d:57:99:34:87:61:9b:3f:40:36:c9:b5:50:68:b3:
                    2d:7e:46:f3:9c:f8:24:a6:f6:a7:bc:b6:f8:42:b8:
                    3e:a0:36:37:04:c7:2f:27:92:41:5d:35:b9:b1:02:
                    a3:18:55:b8:5d:70:50:5f:dc:d9:ae:0d:3c:ac:6d:
                    8c:c6:a3:58:20:be:98:f5:41:54:9f:14:6f:e0:cf:
                    92:c3:35:c9:fa:3a:c2:28:83:36:9b:53:47:5b:8b:
                    78:f3:02:fd:45:9f:35:47:70:e8:39:58:14:1d:aa:
                    55:c5:26:d9:49:b7:07:db:43:87:d8:5f:ff:b7:da:
                    eb:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                41:39:62:68:A6:73:16:DF:68:64:1B:EB:5B:C4:53:60:3E:BA:D5:B3
            X509v3 Authority Key Identifier:
                keyid:AC:55:54:47:BA:62:C3:91:07:F1:6B:F5:72:F8:2A:41:7F:72:8D:BF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/3993f350-b756-4916-8d84-484f025dffcc/0/AC555447BA62C39107F16BF572F82A417F728DBF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AC555447BA62C39107F16BF572F82A417F728DBF.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/3993f350-b756-4916-8d84-484f025dffcc/0/323430343a383030303a643a3a2f34382d3438203d3e203137343531.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2404:8000:d::/48

    Signature Algorithm: sha256WithRSAEncryption
         83:14:6f:6d:2b:40:8c:67:63:aa:6a:8c:b8:87:fb:b1:01:19:
         f5:fd:d2:9e:f2:8f:af:cd:6d:dc:ee:ff:e2:21:2f:f0:47:a5:
         d0:63:79:80:33:e4:44:76:3d:cb:b1:d2:4b:3f:e7:a6:4f:e6:
         10:8e:f1:25:77:91:18:03:0a:00:09:bf:60:23:98:9c:9e:13:
         6d:69:f1:3f:11:9c:b9:3b:ec:67:e9:ee:19:db:98:85:27:69:
         cc:27:3f:20:fd:a4:14:00:1a:47:c4:21:c7:77:2c:1e:d6:b4:
         8d:fe:07:61:d4:b3:79:31:81:02:e9:08:ff:77:34:c8:ec:2b:
         ab:8b:ab:cd:a9:7a:53:53:0e:27:b4:15:7b:ab:b9:9c:b0:ec:
         0d:f0:90:84:e9:94:5a:4a:a1:87:ae:31:4b:86:5c:fc:ba:b6:
         c4:f3:d3:bb:c1:48:6d:85:4f:40:cf:7c:47:a5:0b:9b:04:90:
         2f:2c:ab:14:2e:b7:a0:44:c8:fb:56:9f:7f:9e:dd:26:08:d1:
         9e:c5:60:e5:0e:43:48:d0:a7:ad:ce:46:91:81:97:60:b1:40:
         61:bd:16:7a:16:6d:df:c3:38:06:29:7a:c2:90:38:00:68:59:
         8b:61:26:d2:62:96:b4:ad:90:b0:67:23:b2:b6:b9:b1:27:20:
         9b:5d:7e:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----