Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/3993f350-b756-4916-8d84-484f025dffcc/0/323430343a383030303a65313a3a2f34382d3438203d3e203137343531.roa
File:                     323430343a383030303a65313a3a2f34382d3438203d3e203137343531.roa (raw, json)
Hash identifier:          OWaGLrDQqP3PhUgd/ILTFeDY65G1zo7NlwaxM4XmF+A=
Subject key identifier:   F0:86:71:7D:99:30:04:43:0A:78:C6:F7:20:BB:2C:C2:EC:98:5B:78
Certificate issuer:       /CN=AC555447BA62C39107F16BF572F82A417F728DBF
Certificate serial:       6A33EE20D063F7443F21C5BC8071087F44EE7665
Authority key identifier: AC:55:54:47:BA:62:C3:91:07:F1:6B:F5:72:F8:2A:41:7F:72:8D:BF
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AC555447BA62C39107F16BF572F82A417F728DBF.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/3993f350-b756-4916-8d84-484f025dffcc/0/323430343a383030303a65313a3a2f34382d3438203d3e203137343531.roa
Signing time:             Thu 30 Sep 2021 00:00:09 +0000
ROA not before:           Wed 29 Sep 2021 23:55:09 +0000
ROA not after:            Fri 30 Sep 2022 00:00:09 +0000
asID:                     17451
IP address blocks:        2404:8000:e1::/48 maxlen: 48

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6a:33:ee:20:d0:63:f7:44:3f:21:c5:bc:80:71:08:7f:44:ee:76:65
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AC555447BA62C39107F16BF572F82A417F728DBF
        Validity
            Not Before: Sep 29 23:55:09 2021 GMT
            Not After : Sep 30 00:00:09 2022 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:a8:a6:70:51:9a:db:41:d7:bc:2e:db:0e:fc:
                    00:5c:25:0e:be:71:e2:0a:3d:09:d4:0a:e0:20:ec:
                    37:d7:b4:cd:74:f2:34:ac:92:32:35:57:b1:0c:73:
                    e8:64:47:58:6f:8c:a3:61:47:47:bc:b0:63:93:61:
                    68:22:fb:a1:cd:eb:bc:84:53:ed:c4:60:a8:8e:9f:
                    f2:ea:c6:9c:27:9a:d9:b3:c3:ff:13:cb:65:8d:57:
                    81:7b:91:b2:93:d1:52:ee:f3:8d:99:21:9d:73:86:
                    e6:d6:77:30:1b:aa:5d:8f:5a:08:51:68:69:89:3f:
                    5b:ba:06:c8:74:b3:70:8a:f0:1a:c0:a6:b4:77:ee:
                    83:0b:59:69:ba:6a:a6:71:10:74:be:5d:a4:72:68:
                    a8:d1:7e:e7:a6:d4:fe:fe:ab:65:cb:3f:93:e2:b8:
                    1d:49:87:a5:0d:2b:c0:f6:fc:69:1a:27:99:0d:c1:
                    89:4a:08:61:9b:5c:23:66:53:0e:6b:8b:a6:6f:70:
                    3b:d7:f5:da:56:22:bb:a3:c4:54:80:40:b7:63:7f:
                    95:82:7a:f7:be:42:f0:e3:b8:70:a6:a4:6b:f5:9e:
                    84:eb:c1:1a:44:96:e5:88:2e:60:c9:02:da:50:cf:
                    8f:c6:4f:b6:12:48:27:53:98:cc:5c:c1:59:73:7c:
                    d5:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F0:86:71:7D:99:30:04:43:0A:78:C6:F7:20:BB:2C:C2:EC:98:5B:78
            X509v3 Authority Key Identifier:
                keyid:AC:55:54:47:BA:62:C3:91:07:F1:6B:F5:72:F8:2A:41:7F:72:8D:BF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/3993f350-b756-4916-8d84-484f025dffcc/0/AC555447BA62C39107F16BF572F82A417F728DBF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AC555447BA62C39107F16BF572F82A417F728DBF.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/3993f350-b756-4916-8d84-484f025dffcc/0/323430343a383030303a65313a3a2f34382d3438203d3e203137343531.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2404:8000:e1::/48

    Signature Algorithm: sha256WithRSAEncryption
         43:3f:18:1e:e1:63:d6:07:b3:94:4e:84:ea:84:05:70:a0:9d:
         a5:8d:a7:a0:a1:1b:03:89:ca:8b:e9:52:fa:df:88:85:cc:46:
         4f:ef:32:3a:d7:7c:ec:67:89:39:61:45:2b:77:ff:1f:45:34:
         5b:47:ea:ca:38:5b:35:77:80:31:6b:1a:a4:18:79:02:4d:d7:
         68:42:e9:b6:b6:72:11:82:b8:94:e5:07:8b:3e:45:8f:9f:08:
         4f:b5:29:6a:08:11:76:8e:90:10:08:66:61:bf:e1:28:48:d5:
         d4:21:9e:59:24:66:50:e7:fd:ab:d4:ff:5b:de:53:b8:8b:1a:
         e9:a1:8c:d6:1d:41:5a:9f:ba:6d:af:79:fa:31:b0:c4:df:b7:
         0b:df:2a:87:03:73:37:1c:f9:44:d3:fc:8c:9b:e7:41:9f:19:
         b5:3f:50:95:0c:99:c4:f9:fd:99:b0:d9:20:23:0a:64:41:06:
         b9:62:df:75:e4:42:6c:17:e4:4a:aa:d2:78:df:92:a7:aa:3d:
         82:b9:0a:90:42:f0:e5:ff:69:b5:eb:48:8d:b8:f9:16:58:74:
         9a:04:bd:02:2f:46:3e:31:13:63:c6:16:63:2e:da:f7:d8:ef:
         81:75:45:d8:fd:df:92:79:d2:f0:16:dc:10:d7:b2:92:1b:f4:
         88:38:c9:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----