Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/3993f350-b756-4916-8d84-484f025dffcc/0/323430343a383030303a663a3a2f34382d3438203d3e203137343531.roa
File:                     323430343a383030303a663a3a2f34382d3438203d3e203137343531.roa (raw, json)
Hash identifier:          8OjdQkm/V36IV5FXwZdV53YX67e2luHw5jXAaRiDGiM=
Subject key identifier:   29:62:3B:97:81:BF:A8:E0:0F:DD:0F:69:1F:C6:5F:2D:D9:2C:3D:8B
Certificate issuer:       /CN=AC555447BA62C39107F16BF572F82A417F728DBF
Certificate serial:       2BD828BE3903431DC3ACC6CD5DCE336AEE6E355E
Authority key identifier: AC:55:54:47:BA:62:C3:91:07:F1:6B:F5:72:F8:2A:41:7F:72:8D:BF
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AC555447BA62C39107F16BF572F82A417F728DBF.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/3993f350-b756-4916-8d84-484f025dffcc/0/323430343a383030303a663a3a2f34382d3438203d3e203137343531.roa
Signing time:             Thu 30 Sep 2021 00:01:12 +0000
ROA not before:           Wed 29 Sep 2021 23:56:12 +0000
ROA not after:            Fri 30 Sep 2022 00:01:12 +0000
asID:                     17451
IP address blocks:        2404:8000:f::/48 maxlen: 48

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2b:d8:28:be:39:03:43:1d:c3:ac:c6:cd:5d:ce:33:6a:ee:6e:35:5e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AC555447BA62C39107F16BF572F82A417F728DBF
        Validity
            Not Before: Sep 29 23:56:12 2021 GMT
            Not After : Sep 30 00:01:12 2022 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:78:81:3c:ea:77:37:20:56:ea:78:37:d9:a4:
                    44:5f:45:92:a3:aa:c0:d7:d9:57:53:21:d4:66:10:
                    7b:f4:fe:2c:56:0a:ed:e4:c6:81:5b:61:51:b2:7f:
                    21:4d:5a:88:5c:23:a9:d7:fe:c5:03:43:41:a2:80:
                    6b:d9:29:30:af:4b:b4:ed:4f:3e:1e:26:57:27:1f:
                    7e:e1:22:3c:04:9b:c1:bc:07:6c:23:5b:83:3d:44:
                    dd:cb:95:34:b3:df:b3:15:d8:2e:36:4f:64:5f:0a:
                    b6:a8:6c:59:58:9e:c1:14:6c:10:af:60:be:8d:24:
                    17:61:e2:e7:99:22:fa:58:a2:cf:83:30:d3:6e:86:
                    60:9b:2b:31:47:04:90:e9:c1:ae:8b:dc:98:bb:d3:
                    96:0e:f4:ab:ab:20:c7:20:fe:d2:4c:7b:54:66:53:
                    a4:09:91:79:94:d8:16:ff:29:11:f7:d2:9d:fd:37:
                    ea:74:78:cc:1b:e2:d0:53:18:9b:20:f0:c2:17:54:
                    43:a6:b1:14:3b:0a:9c:d0:4c:a4:37:9c:59:f8:7c:
                    a6:3c:0f:fb:49:67:ab:78:38:8d:77:39:be:fd:f6:
                    0b:96:f9:14:bb:5d:6f:ba:c4:60:19:a1:fd:c4:e7:
                    b5:36:57:da:45:9c:98:90:95:89:c4:76:fb:4f:b1:
                    eb:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                29:62:3B:97:81:BF:A8:E0:0F:DD:0F:69:1F:C6:5F:2D:D9:2C:3D:8B
            X509v3 Authority Key Identifier:
                keyid:AC:55:54:47:BA:62:C3:91:07:F1:6B:F5:72:F8:2A:41:7F:72:8D:BF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/3993f350-b756-4916-8d84-484f025dffcc/0/AC555447BA62C39107F16BF572F82A417F728DBF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AC555447BA62C39107F16BF572F82A417F728DBF.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/3993f350-b756-4916-8d84-484f025dffcc/0/323430343a383030303a663a3a2f34382d3438203d3e203137343531.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2404:8000:f::/48

    Signature Algorithm: sha256WithRSAEncryption
         71:e2:d4:12:a2:b5:f0:b8:fd:8e:38:1a:86:f7:07:04:79:46:
         ce:00:50:bc:2c:30:c0:f6:ec:b8:f7:bd:6b:fc:16:2d:60:e3:
         ac:dd:96:ac:e0:9d:6d:27:5d:63:f2:9b:7c:07:c7:c1:97:66:
         a0:bf:f4:0e:3c:2d:59:18:44:f2:ab:00:1a:fb:d4:ae:2f:14:
         ec:a7:89:11:b1:ae:b1:d4:23:97:09:84:9c:11:f2:b4:0f:c5:
         2d:3d:43:3c:1e:c9:18:9a:3a:4c:73:6a:09:0c:1a:0b:9a:5f:
         bb:ab:db:2d:79:ef:60:e4:87:74:05:57:99:78:ea:98:91:73:
         a4:c4:d3:89:86:f6:d5:c8:5c:71:a8:3e:fd:64:6d:b9:5d:16:
         18:1c:61:b9:ef:2e:e6:33:aa:d7:ae:1a:35:05:43:10:59:81:
         c6:fd:08:18:40:35:8e:a5:80:f1:42:b9:7b:99:c0:82:a9:44:
         b6:4b:c0:b6:c7:46:75:b4:4b:d8:29:ec:31:dc:9d:24:15:21:
         a6:8c:ce:11:53:9c:86:de:47:40:e6:ea:b4:8e:09:3f:a4:96:
         86:b7:51:18:f7:33:01:0f:29:d5:69:fd:a5:17:84:cf:0d:2e:
         f6:9e:64:77:f1:26:cf:e9:70:dd:71:a3:85:2d:17:36:ab:53:
         fa:d4:1b:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----