Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/2d3ec84e-60ef-44d4-9f43-85b6f96b26cf/0/323030313a6466313a323130303a3a2f34382d3438203d3e20313431363731.roa
File:                     323030313a6466313a323130303a3a2f34382d3438203d3e20313431363731.roa (raw, json)
Hash identifier:          0uw/dBcqgIOP/DWh4cLVKL+ujN9+pG1YEqeqhYy5LDo=
Subject key identifier:   9B:E5:9C:40:AF:AB:17:3E:C8:4E:58:34:5E:E2:28:26:48:8F:DD:2A
Certificate issuer:       /CN=114C9E7EA91F6387C2CBF1D16EA824580CD68587
Certificate serial:       1A30A4FFBDCBF19DA10BB4FBEF5D69D2AB876E67
Authority key identifier: 11:4C:9E:7E:A9:1F:63:87:C2:CB:F1:D1:6E:A8:24:58:0C:D6:85:87
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/114C9E7EA91F6387C2CBF1D16EA824580CD68587.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/2d3ec84e-60ef-44d4-9f43-85b6f96b26cf/0/323030313a6466313a323130303a3a2f34382d3438203d3e20313431363731.roa
Signing time:             Mon 14 Feb 2022 06:00:58 +0000
ROA not before:           Mon 14 Feb 2022 05:55:58 +0000
ROA not after:            Tue 14 Feb 2023 06:00:58 +0000
asID:                     141671
IP address blocks:        2001:df1:2100::/48 maxlen: 48

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1a:30:a4:ff:bd:cb:f1:9d:a1:0b:b4:fb:ef:5d:69:d2:ab:87:6e:67
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=114C9E7EA91F6387C2CBF1D16EA824580CD68587
        Validity
            Not Before: Feb 14 05:55:58 2022 GMT
            Not After : Feb 14 06:00:58 2023 GMT
        Subject: CN=3082010A0282010100DE315386FAE5DDCAE802822DFCE446595B2D008D2F2FE8C413F01C6DE6A7445DA4C5DA38D347329188896DDCBA538D55DC7E1457D42BBDAA3EF409EBB4D347E4D8682EC14AB02FAED3EA837005E2F24E90E13B6380D1C235A848FEC4B125565A3A4F262BBE37B14DD0D2F9D0A25E649C18270A6B52A9833BAB7D96949FE30D3B68052B1FB77F9DAC17FB7966F246501D7AAA515901D4122FF8312CCF7A7D51F9D750E17EAD89E2A9A2F11B01A1FFB94FAB1A5D84E775EAEC402F155370B26AF07875A5D84241E577B033737878A971CE82C64630E25A59CB1A3D0C721AD49DC406C0A3ED2704A43376ABD6EFF9C5503C07A32B1F876A0FFA91530ED7FAAA32C70203010001
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:31:53:86:fa:e5:dd:ca:e8:02:82:2d:fc:e4:
                    46:59:5b:2d:00:8d:2f:2f:e8:c4:13:f0:1c:6d:e6:
                    a7:44:5d:a4:c5:da:38:d3:47:32:91:88:89:6d:dc:
                    ba:53:8d:55:dc:7e:14:57:d4:2b:bd:aa:3e:f4:09:
                    eb:b4:d3:47:e4:d8:68:2e:c1:4a:b0:2f:ae:d3:ea:
                    83:70:05:e2:f2:4e:90:e1:3b:63:80:d1:c2:35:a8:
                    48:fe:c4:b1:25:56:5a:3a:4f:26:2b:be:37:b1:4d:
                    d0:d2:f9:d0:a2:5e:64:9c:18:27:0a:6b:52:a9:83:
                    3b:ab:7d:96:94:9f:e3:0d:3b:68:05:2b:1f:b7:7f:
                    9d:ac:17:fb:79:66:f2:46:50:1d:7a:aa:51:59:01:
                    d4:12:2f:f8:31:2c:cf:7a:7d:51:f9:d7:50:e1:7e:
                    ad:89:e2:a9:a2:f1:1b:01:a1:ff:b9:4f:ab:1a:5d:
                    84:e7:75:ea:ec:40:2f:15:53:70:b2:6a:f0:78:75:
                    a5:d8:42:41:e5:77:b0:33:73:78:78:a9:71:ce:82:
                    c6:46:30:e2:5a:59:cb:1a:3d:0c:72:1a:d4:9d:c4:
                    06:c0:a3:ed:27:04:a4:33:76:ab:d6:ef:f9:c5:50:
                    3c:07:a3:2b:1f:87:6a:0f:fa:91:53:0e:d7:fa:aa:
                    32:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9B:E5:9C:40:AF:AB:17:3E:C8:4E:58:34:5E:E2:28:26:48:8F:DD:2A
            X509v3 Authority Key Identifier:
                keyid:11:4C:9E:7E:A9:1F:63:87:C2:CB:F1:D1:6E:A8:24:58:0C:D6:85:87

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/2d3ec84e-60ef-44d4-9f43-85b6f96b26cf/0/114C9E7EA91F6387C2CBF1D16EA824580CD68587.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/114C9E7EA91F6387C2CBF1D16EA824580CD68587.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/2d3ec84e-60ef-44d4-9f43-85b6f96b26cf/0/323030313a6466313a323130303a3a2f34382d3438203d3e20313431363731.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:df1:2100::/48

    Signature Algorithm: sha256WithRSAEncryption
         25:27:ec:90:5d:b5:08:b9:70:15:13:9a:44:a2:f2:33:07:1e:
         49:7f:1b:0f:2a:91:a4:89:75:87:c2:7e:05:46:28:fc:1a:e3:
         d9:f4:e8:30:ee:1e:dd:27:b4:77:47:96:1a:96:92:51:e2:c5:
         e7:97:61:f5:b4:35:43:75:52:18:33:2d:85:ae:4d:0c:3c:ae:
         8e:bf:2b:ed:2b:e4:57:39:ae:8d:28:05:f4:9e:31:b8:42:bb:
         20:10:fc:0e:dc:a2:d1:e4:2f:47:e8:02:89:4f:82:16:aa:cc:
         30:17:c8:eb:c2:dc:f1:2e:07:99:c4:25:d2:58:f9:73:24:48:
         1b:74:5e:1b:99:ed:84:83:52:a9:72:0b:96:77:ae:bd:c2:f7:
         73:ae:f4:83:cf:5a:c8:e4:b2:e1:6c:4a:8d:aa:53:ef:93:40:
         6c:8e:e3:2f:2b:6f:80:ac:b7:7f:af:c1:db:c4:78:ab:5c:8a:
         ca:bf:0c:31:a4:ff:51:72:1c:48:6e:d7:6c:6b:b4:f3:fd:cb:
         3d:dd:f2:cb:34:f0:ee:aa:1c:9b:dd:b4:b4:a5:0b:5a:d8:2c:
         c0:a8:cd:e6:30:eb:82:d3:34:f4:a7:28:04:ee:ae:87:5b:76:
         e4:92:6a:1b:65:00:e2:f3:16:09:3b:c1:68:c0:a9:75:68:b1:
         cb:26:34:4a
-----BEGIN CERTIFICATE-----
MIIHLzCCBhegAwIBAgIUGjCk/73L8Z2hC7T7711p0quHbmcwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMTE0QzlFN0VBOTFGNjM4N0MyQ0JGMUQxNkVBODI0NTgw
Q0Q2ODU4NzAeFw0yMjAyMTQwNTU1NThaFw0yMzAyMTQwNjAwNThaMIICLTGCAikw
ggIlBgNVBAMTggIcMzA4MjAxMEEwMjgyMDEwMTAwREUzMTUzODZGQUU1RERDQUU4
MDI4MjJERkNFNDQ2NTk1QjJEMDA4RDJGMkZFOEM0MTNGMDFDNkRFNkE3NDQ1REE0
QzVEQTM4RDM0NzMyOTE4ODg5NkREQ0JBNTM4RDU1REM3RTE0NTdENDJCQkRBQTNF
RjQwOUVCQjREMzQ3RTREODY4MkVDMTRBQjAyRkFFRDNFQTgzNzAwNUUyRjI0RTkw
RTEzQjYzODBEMUMyMzVBODQ4RkVDNEIxMjU1NjVBM0E0RjI2MkJCRTM3QjE0REQw
RDJGOUQwQTI1RTY0OUMxODI3MEE2QjUyQTk4MzNCQUI3RDk2OTQ5RkUzMEQzQjY4
MDUyQjFGQjc3RjlEQUMxN0ZCNzk2NkYyNDY1MDFEN0FBQTUxNTkwMUQ0MTIyRkY4
MzEyQ0NGN0E3RDUxRjlENzUwRTE3RUFEODlFMkE5QTJGMTFCMDFBMUZGQjk0RkFC
MUE1RDg0RTc3NUVBRUM0MDJGMTU1MzcwQjI2QUYwNzg3NUE1RDg0MjQxRTU3N0Iw
MzM3Mzc4NzhBOTcxQ0U4MkM2NDYzMEUyNUE1OUNCMUEzRDBDNzIxQUQ0OURDNDA2
QzBBM0VEMjcwNEE0MzM3NkFCRDZFRkY5QzU1MDNDMDdBMzJCMUY4NzZBMEZGQTkx
NTMwRUQ3RkFBQTMyQzcwMjAzMDEwMDAxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8A
MIIBCgKCAQEA3jFThvrl3croAoIt/ORGWVstAI0vL+jEE/AcbeanRF2kxdo400cy
kYiJbdy6U41V3H4UV9Qrvao+9AnrtNNH5NhoLsFKsC+u0+qDcAXi8k6Q4TtjgNHC
NahI/sSxJVZaOk8mK743sU3Q0vnQol5knBgnCmtSqYM7q32WlJ/jDTtoBSsft3+d
rBf7eWbyRlAdeqpRWQHUEi/4MSzPen1R+ddQ4X6tieKpovEbAaH/uU+rGl2E53Xq
7EAvFVNwsmrweHWl2EJB5XewM3N4eKlxzoLGRjDiWlnLGj0MchrUncQGwKPtJwSk
M3ar1u/5xVA8B6MrH4dqD/qRUw7X+qoyxwIDAQABo4ICPTCCAjkwHQYDVR0OBBYE
FJvlnECvqxc+yE5YNF7iKCZIj90qMB8GA1UdIwQYMBaAFBFMnn6pH2OHwsvx0W6o
JFgM1oWHMA4GA1UdDwEB/wQEAwIHgDCBhQYDVR0fBH4wfDB6oHigdoZ0cnN5bmM6
Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMmQzZWM4NGUtNjBlZi00NGQ0LTlm
NDMtODViNmY5NmIyNmNmLzAvMTE0QzlFN0VBOTFGNjM4N0MyQ0JGMUQxNkVBODI0
NTgwQ0Q2ODU4Ny5jcmwwdAYIKwYBBQUHAQEEaDBmMGQGCCsGAQUFBzAChlhyc3lu
YzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9JRE5JQy1JRC8yLzExNEM5RTdF
QTkxRjYzODdDMkNCRjFEMTZFQTgyNDU4MENENjg1ODcuY2VyMIGqBggrBgEFBQcB
CwSBnTCBmjCBlwYIKwYBBQUHMAuGgYpyc3luYzovL3JlcG8tcnBraS5pZG5pYy5u
ZXQvcmVwby8yZDNlYzg0ZS02MGVmLTQ0ZDQtOWY0My04NWI2Zjk2YjI2Y2YvMC8z
MjMwMzAzMTNhNjQ2NjMxM2EzMjMxMzAzMDNhM2EyZjM0MzgyZDM0MzgyMDNkM2Uy
MDMxMzQzMTM2MzczMS5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAiBggr
BgEFBQcBBwEB/wQTMBEwDwQCAAIwCQMHACABDfEhADANBgkqhkiG9w0BAQsFAAOC
AQEAJSfskF21CLlwFROaRKLyMwceSX8bDyqRpIl1h8J+BUYo/Brj2fToMO4e3Se0
d0eWGpaSUeLF55dh9bQ1Q3VSGDMtha5NDDyujr8r7SvkVzmujSgF9J4xuEK7IBD8
Dtyi0eQvR+gCiU+CFqrMMBfI68Lc8S4HmcQl0lj5cyRIG3ReG5nthINSqXILlneu
vcL3c670g89ayOSy4WxKjapT75NAbI7jLytvgKy3f6/B28R4q1yKyr8MMaT/UXIc
SG7XbGu08/3LPd3yyzTw7qocm920tKULWtgswKjN5jDrgtM09KcoBO6uh1t25JJq
G2UA4vMWCTvBaMCpdWixyyY0Sg==
-----END CERTIFICATE-----