Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/3e8fdeb0-3513-4f3d-9259-82b9d19a3556/0/323430313a316663303a3a2f33322d3438203d3e203539313535.roa
File:                     323430313a316663303a3a2f33322d3438203d3e203539313535.roa (raw, json)
Hash identifier:          WsoOrM85LbkaGFzrdIGHPQvQD+MJzdETuR10I7AgTEU=
Subject key identifier:   56:EC:F0:59:3E:D9:B6:23:14:D4:DF:72:D6:B8:93:89:C6:6C:18:CF
Certificate issuer:       /CN=EFC476AB80A5D0AD9FCCAA1441C1F641838E2E02
Certificate serial:       6A9B637B258E30892392157E46650F851D7FD893
Authority key identifier: EF:C4:76:AB:80:A5:D0:AD:9F:CC:AA:14:41:C1:F6:41:83:8E:2E:02
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/EFC476AB80A5D0AD9FCCAA1441C1F641838E2E02.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/3e8fdeb0-3513-4f3d-9259-82b9d19a3556/0/323430313a316663303a3a2f33322d3438203d3e203539313535.roa
Signing time:             Sat 25 Sep 2021 22:00:46 +0000
ROA not before:           Sat 25 Sep 2021 21:55:46 +0000
ROA not after:            Sun 25 Sep 2022 22:00:46 +0000
asID:                     59155
IP address blocks:        2401:1fc0::/32 maxlen: 48

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6a:9b:63:7b:25:8e:30:89:23:92:15:7e:46:65:0f:85:1d:7f:d8:93
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EFC476AB80A5D0AD9FCCAA1441C1F641838E2E02
        Validity
            Not Before: Sep 25 21:55:46 2021 GMT
            Not After : Sep 25 22:00:46 2022 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:e8:35:39:d0:00:f2:bc:28:d3:86:a5:b3:5b:
                    7d:ae:5b:5f:95:bf:db:46:cd:71:eb:1a:32:63:94:
                    dc:64:1e:0d:ee:6f:31:77:7b:db:e6:e4:a9:22:ce:
                    05:41:78:8d:1e:b8:2b:75:2e:39:a0:d1:81:91:e3:
                    3d:79:e4:51:d6:bb:45:4a:cd:99:ea:b1:57:7c:60:
                    a6:d5:4b:9b:a8:cc:34:7a:82:31:06:31:e1:4c:87:
                    15:02:81:68:61:8e:0f:40:01:62:79:02:42:73:90:
                    87:ce:5b:1d:88:da:31:06:53:1a:26:70:df:ba:ef:
                    ca:b7:48:74:e6:94:d8:a7:6b:60:bf:e6:d1:5b:66:
                    32:13:b7:d2:92:41:b4:ea:74:d6:0c:2a:e5:fc:14:
                    d9:80:53:29:95:af:af:0e:7a:b6:d7:cf:b5:dd:3d:
                    ee:31:49:97:29:aa:92:b6:8c:c4:74:85:7c:12:71:
                    1c:ae:45:8c:62:62:bf:0a:c7:63:86:bd:73:dc:64:
                    87:87:e3:4c:10:11:f2:ca:c0:db:c3:58:d3:97:5f:
                    d7:f0:44:0e:4a:91:c6:ce:9e:98:32:1d:2f:f2:86:
                    c2:ee:4e:94:3b:32:97:31:fb:fb:e4:36:2a:a0:87:
                    1b:89:e8:10:14:e1:8f:e8:d3:8b:24:c1:cb:7c:0a:
                    21:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                56:EC:F0:59:3E:D9:B6:23:14:D4:DF:72:D6:B8:93:89:C6:6C:18:CF
            X509v3 Authority Key Identifier:
                keyid:EF:C4:76:AB:80:A5:D0:AD:9F:CC:AA:14:41:C1:F6:41:83:8E:2E:02

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/3e8fdeb0-3513-4f3d-9259-82b9d19a3556/0/EFC476AB80A5D0AD9FCCAA1441C1F641838E2E02.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/EFC476AB80A5D0AD9FCCAA1441C1F641838E2E02.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/3e8fdeb0-3513-4f3d-9259-82b9d19a3556/0/323430313a316663303a3a2f33322d3438203d3e203539313535.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2401:1fc0::/32

    Signature Algorithm: sha256WithRSAEncryption
         4a:ba:4f:43:d3:e4:5f:aa:30:e0:5f:5e:1f:2e:a2:4b:5d:28:
         61:7b:83:40:8c:41:bd:5a:7a:96:35:35:b8:40:fc:30:52:7c:
         27:31:b9:41:be:09:3f:c1:77:d4:04:dd:b8:c1:a3:05:9f:e4:
         b8:c2:e6:57:16:ae:a3:60:4b:55:f9:b2:16:37:17:86:45:d5:
         dd:ee:11:b9:e0:56:b3:e1:fc:e2:82:98:80:ba:c5:17:e1:ff:
         2d:41:c3:5b:7d:a3:79:d0:88:dd:56:d1:41:0f:26:61:23:db:
         10:f9:aa:fd:4f:be:11:ca:28:79:be:59:04:8b:f7:94:4e:65:
         d3:a8:2c:b9:5b:5d:11:8f:ea:fa:85:de:5e:2a:c3:70:43:c9:
         0f:f2:56:9a:f1:92:b1:9c:b4:4f:b3:8e:61:f9:fe:7c:d0:60:
         16:6a:ac:b4:79:61:92:7e:70:29:a6:ec:0e:5c:83:cf:fe:31:
         a8:ac:90:f8:17:ad:2a:7f:8a:ca:b9:85:d0:3d:f7:1a:4f:4f:
         4a:55:17:bd:36:e4:fe:c3:83:b1:21:f4:b9:35:eb:f1:ad:72:
         51:6d:87:19:81:a2:ec:5d:7e:00:86:68:98:0f:39:8b:04:d8:
         80:20:bf:b5:4b:fd:fe:c6:cc:91:91:09:2b:fb:5a:8f:77:10:
         19:65:06:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----