Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/3993f350-b756-4916-8d84-484f025dffcc/0/3230322e3136392e33342e302f32342d3234203d3e203137343531.roa
File:                     3230322e3136392e33342e302f32342d3234203d3e203137343531.roa (raw, json)
Hash identifier:          x0MpaC3gXVhkM8JW/JRs5cCXWGT7sAwjztzvZaxm5Mg=
Subject key identifier:   7A:E1:BA:FB:60:F9:91:24:0E:49:B5:85:C0:2F:E5:5B:32:B8:FA:8B
Certificate issuer:       /CN=AC555447BA62C39107F16BF572F82A417F728DBF
Certificate serial:       36D8410FD31C8200A94FA327B7EACE41613D596A
Authority key identifier: AC:55:54:47:BA:62:C3:91:07:F1:6B:F5:72:F8:2A:41:7F:72:8D:BF
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AC555447BA62C39107F16BF572F82A417F728DBF.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/3993f350-b756-4916-8d84-484f025dffcc/0/3230322e3136392e33342e302f32342d3234203d3e203137343531.roa
Signing time:             Thu 30 Sep 2021 00:00:23 +0000
ROA not before:           Wed 29 Sep 2021 23:55:23 +0000
ROA not after:            Fri 30 Sep 2022 00:00:23 +0000
asID:                     17451
IP address blocks:        202.169.34.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            36:d8:41:0f:d3:1c:82:00:a9:4f:a3:27:b7:ea:ce:41:61:3d:59:6a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AC555447BA62C39107F16BF572F82A417F728DBF
        Validity
            Not Before: Sep 29 23:55:23 2021 GMT
            Not After : Sep 30 00:00:23 2022 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:27:1b:b6:bf:fc:02:a1:12:8d:b8:8a:6b:fe:
                    03:27:90:8d:44:b9:40:42:ef:f2:df:26:db:86:f7:
                    29:e6:ad:45:41:e7:94:88:96:7b:2b:d3:29:e3:bb:
                    4a:01:be:73:1e:b4:3b:68:49:5e:41:92:10:bf:5d:
                    d3:17:24:2e:c9:9e:55:b6:2d:95:cc:48:7e:a3:e9:
                    03:74:a8:a7:58:0a:05:a4:03:d9:24:56:61:f0:29:
                    ec:b7:ae:72:06:1e:c1:46:38:9d:c8:fd:b4:c4:50:
                    4f:39:c5:78:de:5a:e0:7a:60:cb:60:4b:83:e4:7b:
                    72:ed:b1:2f:06:72:a0:88:f4:89:3b:95:e4:19:d7:
                    9a:9a:69:18:4f:ee:d8:47:3e:74:76:42:91:2d:00:
                    02:a4:ab:56:2e:e6:b2:cf:87:93:6b:0a:e7:8d:20:
                    90:08:9c:9d:6e:d3:48:34:5d:17:c5:8d:7b:90:a6:
                    fc:c0:ab:7d:b1:b9:b9:10:47:92:51:fc:fd:68:15:
                    15:fe:37:34:af:41:fe:7c:db:0e:e2:0e:79:17:77:
                    22:1a:31:ae:0b:2f:75:ad:2d:03:10:e3:b7:92:bf:
                    54:cf:f9:d1:96:15:0a:fa:f4:fb:b7:30:0e:3b:2c:
                    d1:7d:41:cc:56:6c:06:81:99:31:d7:bd:55:d3:6d:
                    a2:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7A:E1:BA:FB:60:F9:91:24:0E:49:B5:85:C0:2F:E5:5B:32:B8:FA:8B
            X509v3 Authority Key Identifier:
                keyid:AC:55:54:47:BA:62:C3:91:07:F1:6B:F5:72:F8:2A:41:7F:72:8D:BF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/3993f350-b756-4916-8d84-484f025dffcc/0/AC555447BA62C39107F16BF572F82A417F728DBF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AC555447BA62C39107F16BF572F82A417F728DBF.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/3993f350-b756-4916-8d84-484f025dffcc/0/3230322e3136392e33342e302f32342d3234203d3e203137343531.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  202.169.34.0/24

    Signature Algorithm: sha256WithRSAEncryption
         08:d1:30:76:b5:aa:6d:b5:67:db:32:33:a4:95:e2:0b:03:18:
         ea:c8:e7:7c:ff:15:7f:27:84:23:df:c5:4e:64:e5:b8:13:ba:
         05:51:ea:77:76:66:9e:51:5b:b3:94:94:fd:c0:20:f0:7f:9d:
         2e:82:35:31:e7:87:ce:9f:83:ce:c7:3c:ec:98:7c:ac:cd:c3:
         3e:d3:04:25:65:ab:be:40:25:6d:e5:c6:91:c4:b2:1f:e9:4d:
         fc:e3:de:90:28:8b:da:3d:c7:87:4b:f4:64:34:82:a9:dd:9c:
         4a:f8:58:1d:ee:c5:b2:66:2b:18:4c:d1:61:f3:d7:da:b2:3b:
         48:3a:c4:c5:b9:98:db:81:b0:15:53:03:d1:27:4c:e0:06:fe:
         99:dc:d4:94:21:2b:dd:68:33:6d:79:d5:70:cb:5e:23:12:b0:
         19:7d:e3:e2:43:5d:77:5d:a5:43:ac:d3:e6:8f:93:63:c7:5c:
         21:77:20:8c:46:9e:2d:c1:14:f8:66:01:3b:4d:67:89:b5:02:
         36:ce:d3:6d:c1:40:31:7d:dc:af:5e:d0:1b:ce:92:0f:48:4a:
         da:0c:a7:39:43:75:b2:b1:90:13:e0:71:40:2f:cd:55:8a:9d:
         c4:dd:31:72:33:2a:f1:51:56:b0:39:81:4c:f0:dd:be:83:c1:
         07:26:c3:71
-----BEGIN CERTIFICATE-----
MIIHJDCCBgygAwIBAgIUNthBD9McggCpT6Mnt+rOQWE9WWowDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQUM1NTU0NDdCQTYyQzM5MTA3RjE2QkY1NzJGODJBNDE3
RjcyOERCRjAeFw0yMTA5MjkyMzU1MjNaFw0yMjA5MzAwMDAwMjNaMIICLTGCAikw
ggIlBgNVBAMTggIcMzA4MjAxMEEwMjgyMDEwMTAwREYyNzFCQjZCRkZDMDJBMTEy
OERCODhBNkJGRTAzMjc5MDhENDRCOTQwNDJFRkYyREYyNkRCODZGNzI5RTZBRDQ1
NDFFNzk0ODg5NjdCMkJEMzI5RTNCQjRBMDFCRTczMUVCNDNCNjg0OTVFNDE5MjEw
QkY1REQzMTcyNDJFQzk5RTU1QjYyRDk1Q0M0ODdFQTNFOTAzNzRBOEE3NTgwQTA1
QTQwM0Q5MjQ1NjYxRjAyOUVDQjdBRTcyMDYxRUMxNDYzODlEQzhGREI0QzQ1MDRG
MzlDNTc4REU1QUUwN0E2MENCNjA0QjgzRTQ3QjcyRURCMTJGMDY3MkEwODhGNDg5
M0I5NUU0MTlENzlBOUE2OTE4NEZFRUQ4NDczRTc0NzY0MjkxMkQwMDAyQTRBQjU2
MkVFNkIyQ0Y4NzkzNkIwQUU3OEQyMDkwMDg5QzlENkVEMzQ4MzQ1RDE3QzU4RDdC
OTBBNkZDQzBBQjdEQjFCOUI5MTA0NzkyNTFGQ0ZENjgxNTE1RkUzNzM0QUY0MUZF
N0NEQjBFRTIwRTc5MTc3NzIyMUEzMUFFMEIyRjc1QUQyRDAzMTBFM0I3OTJCRjU0
Q0ZGOUQxOTYxNTBBRkFGNEZCQjczMDBFM0IyQ0QxN0Q0MUNDNTY2QzA2ODE5OTMx
RDdCRDU1RDM2REEyMUYwMjAzMDEwMDAxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8A
MIIBCgKCAQEA3ycbtr/8AqESjbiKa/4DJ5CNRLlAQu/y3ybbhvcp5q1FQeeUiJZ7
K9Mp47tKAb5zHrQ7aEleQZIQv13TFyQuyZ5Vti2VzEh+o+kDdKinWAoFpAPZJFZh
8Cnst65yBh7BRjidyP20xFBPOcV43lrgemDLYEuD5Hty7bEvBnKgiPSJO5XkGdea
mmkYT+7YRz50dkKRLQACpKtWLuayz4eTawrnjSCQCJydbtNINF0XxY17kKb8wKt9
sbm5EEeSUfz9aBUV/jc0r0H+fNsO4g55F3ciGjGuCy91rS0DEOO3kr9Uz/nRlhUK
+vT7tzAOOyzRfUHMVmwGgZkx171V022iHwIDAQABo4ICMjCCAi4wHQYDVR0OBBYE
FHrhuvtg+ZEkDkm1hcAv5VsyuPqLMB8GA1UdIwQYMBaAFKxVVEe6YsORB/Fr9XL4
KkF/co2/MA4GA1UdDwEB/wQEAwIHgDCBhQYDVR0fBH4wfDB6oHigdoZ0cnN5bmM6
Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMzk5M2YzNTAtYjc1Ni00OTE2LThk
ODQtNDg0ZjAyNWRmZmNjLzAvQUM1NTU0NDdCQTYyQzM5MTA3RjE2QkY1NzJGODJB
NDE3RjcyOERCRi5jcmwwdAYIKwYBBQUHAQEEaDBmMGQGCCsGAQUFBzAChlhyc3lu
YzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9JRE5JQy1JRC8yL0FDNTU1NDQ3
QkE2MkMzOTEwN0YxNkJGNTcyRjgyQTQxN0Y3MjhEQkYuY2VyMIGiBggrBgEFBQcB
CwSBlTCBkjCBjwYIKwYBBQUHMAuGgYJyc3luYzovL3JlcG8tcnBraS5pZG5pYy5u
ZXQvcmVwby8zOTkzZjM1MC1iNzU2LTQ5MTYtOGQ4NC00ODRmMDI1ZGZmY2MvMC8z
MjMwMzIyZTMxMzYzOTJlMzMzNDJlMzAyZjMyMzQyZDMyMzQyMDNkM2UyMDMxMzcz
NDM1MzEucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcB
Af8EEDAOMAwEAgABMAYDBADKqSIwDQYJKoZIhvcNAQELBQADggEBAAjRMHa1qm21
Z9syM6SV4gsDGOrI53z/FX8nhCPfxU5k5bgTugVR6nd2Zp5RW7OUlP3AIPB/nS6C
NTHnh86fg87HPOyYfKzNwz7TBCVlq75AJW3lxpHEsh/pTfzj3pAoi9o9x4dL9GQ0
gqndnEr4WB3uxbJmKxhM0WHz19qyO0g6xMW5mNuBsBVTA9EnTOAG/pnc1JQhK91o
M2151XDLXiMSsBl94+JDXXddpUOs0+aPk2PHXCF3IIxGni3BFPhmATtNZ4m1AjbO
023BQDF93K9e0BvOkg9IStoMpzlDdbKxkBPgcUAvzVWKncTdMXIzKvFRVrA5gUzw
3b6DwQcmw3E=
-----END CERTIFICATE-----