Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/8b548bad-7fed-41fd-b42e-780372c45255/0/323430363a393330303a3a2f33322d3332203d3e203338353036.roa
File:                     323430363a393330303a3a2f33322d3332203d3e203338353036.roa (raw, json)
Hash identifier:          GHsbOrTHVGepFLnTq8VVyo/3FmGNCVA143YXyJEMYO4=
Subject key identifier:   68:4D:9A:40:0F:F7:BA:EB:E5:45:D6:74:98:F4:25:BA:A0:F8:52:3C
Certificate issuer:       /CN=0FD044D61348C88DDCFFC4F3C33BFBC451BC17A2
Certificate serial:       2FA15F592FE0D960092323C23CFC624DDEB53F6C
Authority key identifier: 0F:D0:44:D6:13:48:C8:8D:DC:FF:C4:F3:C3:3B:FB:C4:51:BC:17:A2
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0FD044D61348C88DDCFFC4F3C33BFBC451BC17A2.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/8b548bad-7fed-41fd-b42e-780372c45255/0/323430363a393330303a3a2f33322d3332203d3e203338353036.roa
Signing time:             Sat 25 Sep 2021 22:00:30 +0000
ROA not before:           Sat 25 Sep 2021 21:55:30 +0000
ROA not after:            Sun 25 Sep 2022 22:00:30 +0000
asID:                     38506
IP address blocks:        2406:9300::/32 maxlen: 32

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2f:a1:5f:59:2f:e0:d9:60:09:23:23:c2:3c:fc:62:4d:de:b5:3f:6c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0FD044D61348C88DDCFFC4F3C33BFBC451BC17A2
        Validity
            Not Before: Sep 25 21:55:30 2021 GMT
            Not After : Sep 25 22:00:30 2022 GMT
        Subject: CN=3082010A0282010100D2C12882DC88F599F01259C46E03D71EE6F6A1791C8CD25072123232DC44AD13A163DFBACB3313CF88752DF84CC43B34EBF5B3C398D5D0252007A869D079D70571E49FB85FDA4655C2C9CC9BF1329C55517FDC215B90DC324670ADBAD51DD65EE645CF6F3AC64062C0ACC51A3598CA21EBF95EB217686331A97DF8758FC7187FBB0C77519D286272124DC2F2D6E298335B28E40123DE81C1D6CECECE5BE934153DB38E704D241AE0AFBDD96F312CBC6FCA2522C43A11A1AE8EEB6D2D1178FA09C5A6C6ABC76AC02761B120D9F2C0852FEE517EE1DD140D5C6585951337083347C0513BF4AFE36ED1B5D2D5B6CDE75DD36E89DE9A9304A616213D27F6830D3BC90203010001
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:c1:28:82:dc:88:f5:99:f0:12:59:c4:6e:03:
                    d7:1e:e6:f6:a1:79:1c:8c:d2:50:72:12:32:32:dc:
                    44:ad:13:a1:63:df:ba:cb:33:13:cf:88:75:2d:f8:
                    4c:c4:3b:34:eb:f5:b3:c3:98:d5:d0:25:20:07:a8:
                    69:d0:79:d7:05:71:e4:9f:b8:5f:da:46:55:c2:c9:
                    cc:9b:f1:32:9c:55:51:7f:dc:21:5b:90:dc:32:46:
                    70:ad:ba:d5:1d:d6:5e:e6:45:cf:6f:3a:c6:40:62:
                    c0:ac:c5:1a:35:98:ca:21:eb:f9:5e:b2:17:68:63:
                    31:a9:7d:f8:75:8f:c7:18:7f:bb:0c:77:51:9d:28:
                    62:72:12:4d:c2:f2:d6:e2:98:33:5b:28:e4:01:23:
                    de:81:c1:d6:ce:ce:ce:5b:e9:34:15:3d:b3:8e:70:
                    4d:24:1a:e0:af:bd:d9:6f:31:2c:bc:6f:ca:25:22:
                    c4:3a:11:a1:ae:8e:eb:6d:2d:11:78:fa:09:c5:a6:
                    c6:ab:c7:6a:c0:27:61:b1:20:d9:f2:c0:85:2f:ee:
                    51:7e:e1:dd:14:0d:5c:65:85:95:13:37:08:33:47:
                    c0:51:3b:f4:af:e3:6e:d1:b5:d2:d5:b6:cd:e7:5d:
                    d3:6e:89:de:9a:93:04:a6:16:21:3d:27:f6:83:0d:
                    3b:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                68:4D:9A:40:0F:F7:BA:EB:E5:45:D6:74:98:F4:25:BA:A0:F8:52:3C
            X509v3 Authority Key Identifier:
                keyid:0F:D0:44:D6:13:48:C8:8D:DC:FF:C4:F3:C3:3B:FB:C4:51:BC:17:A2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/8b548bad-7fed-41fd-b42e-780372c45255/0/0FD044D61348C88DDCFFC4F3C33BFBC451BC17A2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0FD044D61348C88DDCFFC4F3C33BFBC451BC17A2.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/8b548bad-7fed-41fd-b42e-780372c45255/0/323430363a393330303a3a2f33322d3332203d3e203338353036.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2406:9300::/32

    Signature Algorithm: sha256WithRSAEncryption
         39:57:1a:8b:d9:cc:96:eb:01:f2:f0:fe:fb:aa:27:12:85:f9:
         44:ff:fc:5f:b3:80:a0:5d:c1:c5:42:77:b0:59:b6:e6:1b:6c:
         26:7c:be:30:a5:11:ae:78:e2:87:8d:13:54:e7:9f:8f:5c:8a:
         d8:37:3e:20:31:b3:6a:98:d5:63:b1:7d:fa:54:0e:e0:42:fe:
         7e:c5:81:78:39:82:be:64:93:6d:b3:32:ce:d6:00:98:a7:10:
         82:79:fa:71:d1:e7:22:75:c6:da:b4:1a:9a:4a:14:1e:d9:15:
         fe:de:52:96:37:6b:44:26:57:0b:40:f1:7d:2a:a4:ea:83:90:
         14:0e:01:01:d5:d7:e1:09:08:5b:c2:af:7a:df:08:ab:53:ad:
         f8:10:31:35:d4:9c:4c:1f:4b:3e:ab:f9:28:44:8c:05:de:fa:
         19:ed:f5:4e:be:51:8a:fa:e6:14:60:a3:6d:86:23:3d:17:81:
         f6:91:93:31:36:0f:bf:8e:95:22:f9:ca:1f:0c:19:55:21:f8:
         50:fc:59:51:78:ef:6a:59:4c:4e:ad:a8:70:e2:38:75:ac:3f:
         15:8e:03:4b:cf:e7:11:2e:e2:e4:6c:38:0f:5b:1f:ac:9f:75:
         ef:04:a6:fd:61:2a:04:eb:28:14:df:4c:fd:87:ea:81:f5:cb:
         2d:4d:10:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----