Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/3993f350-b756-4916-8d84-484f025dffcc/0/3230332e3134322e36342e302f32302d3230203d3e203137343531.roa
File:                     3230332e3134322e36342e302f32302d3230203d3e203137343531.roa (raw, json)
Hash identifier:          NB465KewVMP1wD2uWThmLOXOyHX+K6mRq5m6fS0Ks9g=
Subject key identifier:   1D:6A:A9:FC:00:82:31:9A:0C:A7:D5:3D:EC:DF:9C:9A:27:ED:8B:68
Certificate issuer:       /CN=AC555447BA62C39107F16BF572F82A417F728DBF
Certificate serial:       61B445883A9A97130303FC88D16B47B29C053543
Authority key identifier: AC:55:54:47:BA:62:C3:91:07:F1:6B:F5:72:F8:2A:41:7F:72:8D:BF
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AC555447BA62C39107F16BF572F82A417F728DBF.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/3993f350-b756-4916-8d84-484f025dffcc/0/3230332e3134322e36342e302f32302d3230203d3e203137343531.roa
Signing time:             Thu 30 Sep 2021 00:00:54 +0000
ROA not before:           Wed 29 Sep 2021 23:55:54 +0000
ROA not after:            Fri 30 Sep 2022 00:00:54 +0000
asID:                     17451
IP address blocks:        203.142.64.0/20 maxlen: 20

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            61:b4:45:88:3a:9a:97:13:03:03:fc:88:d1:6b:47:b2:9c:05:35:43
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AC555447BA62C39107F16BF572F82A417F728DBF
        Validity
            Not Before: Sep 29 23:55:54 2021 GMT
            Not After : Sep 30 00:00:54 2022 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:59:cd:dc:cc:63:81:d3:4a:83:17:ab:2f:87:
                    8e:f4:80:32:9d:fd:01:71:a0:cb:2a:ad:10:0f:c0:
                    67:4e:16:a2:d7:ec:3b:52:db:91:41:a4:e8:d9:e0:
                    48:84:b1:e7:38:bd:b3:2f:94:bf:82:81:d3:70:41:
                    15:e0:e1:82:ac:86:48:e7:0c:f7:de:c9:71:78:c8:
                    4a:c6:4f:da:ef:08:dd:c7:f2:45:46:a2:d3:49:3a:
                    e3:c7:bd:ed:31:b1:96:4a:80:9b:10:c6:10:16:91:
                    f3:77:84:de:3a:38:bf:2c:1e:63:7a:a4:a7:93:d5:
                    39:b6:2d:8e:d1:c0:9d:3f:17:95:b1:ea:f2:45:f3:
                    5d:35:bf:68:01:a4:d5:fa:dd:bb:ee:cc:ca:d9:86:
                    e3:1b:18:34:b2:ac:f4:72:63:98:7c:b6:d0:99:9a:
                    5f:c3:76:6f:ff:3a:71:9e:38:fa:1a:ed:34:eb:0d:
                    7f:ca:51:a9:9f:85:7a:86:c1:a4:b2:c9:b9:7e:e7:
                    f0:6d:8f:20:16:eb:96:3e:84:e1:de:5f:8b:de:be:
                    19:33:ed:1d:3d:46:59:5c:db:d6:d7:5d:fe:8c:db:
                    53:48:81:e3:05:a9:16:fe:0a:91:06:43:88:f3:f7:
                    18:34:56:ec:1d:3e:17:23:6f:ae:e2:fd:c9:90:d3:
                    1a:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1D:6A:A9:FC:00:82:31:9A:0C:A7:D5:3D:EC:DF:9C:9A:27:ED:8B:68
            X509v3 Authority Key Identifier:
                keyid:AC:55:54:47:BA:62:C3:91:07:F1:6B:F5:72:F8:2A:41:7F:72:8D:BF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/3993f350-b756-4916-8d84-484f025dffcc/0/AC555447BA62C39107F16BF572F82A417F728DBF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AC555447BA62C39107F16BF572F82A417F728DBF.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/3993f350-b756-4916-8d84-484f025dffcc/0/3230332e3134322e36342e302f32302d3230203d3e203137343531.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  203.142.64.0/20

    Signature Algorithm: sha256WithRSAEncryption
         92:ec:f1:2a:c0:d2:22:8f:32:f9:52:49:fe:fa:96:27:80:7b:
         1a:7f:1d:89:5b:4f:ff:f9:48:b5:69:e6:1d:34:ff:af:d4:0d:
         3e:6c:31:72:4c:7e:4f:1a:5b:cf:f2:4f:89:bf:a7:a3:70:77:
         a1:43:1c:62:1a:3b:7b:a7:e8:9a:ae:21:e7:48:c7:74:2c:9f:
         ca:5d:38:51:4c:14:0c:22:55:8e:52:02:47:68:6e:08:f0:d6:
         97:74:1c:97:69:aa:84:d0:a2:da:e9:db:af:65:89:c1:ac:43:
         9c:2c:e4:ef:c3:dc:44:4d:71:45:d8:2b:36:13:e0:03:02:71:
         1c:91:d5:56:ac:86:de:eb:2e:e0:e4:cc:94:2e:11:05:e4:f5:
         51:83:cd:67:a3:df:50:2d:7d:f2:1b:9c:d0:31:eb:e6:67:e7:
         d5:f4:bb:28:92:33:15:9b:4c:9b:4b:0f:74:82:16:1f:e9:ca:
         10:9e:b1:e9:d4:00:c3:1b:19:2d:6b:3a:af:ea:67:4b:85:9a:
         6e:19:69:2a:82:75:58:43:77:5f:9e:50:58:3c:e4:3d:01:7f:
         d6:8f:b8:59:55:1d:a1:41:9e:16:01:64:06:87:bf:d6:89:78:
         c5:a5:52:7b:5f:f6:e5:53:5e:0e:18:16:80:e9:0b:53:52:26:
         8a:02:11:e9
-----BEGIN CERTIFICATE-----
MIIHJDCCBgygAwIBAgIUYbRFiDqalxMDA/yI0WtHspwFNUMwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQUM1NTU0NDdCQTYyQzM5MTA3RjE2QkY1NzJGODJBNDE3
RjcyOERCRjAeFw0yMTA5MjkyMzU1NTRaFw0yMjA5MzAwMDAwNTRaMIICLTGCAikw
ggIlBgNVBAMTggIcMzA4MjAxMEEwMjgyMDEwMTAwQUY1OUNERENDQzYzODFEMzRB
ODMxN0FCMkY4NzhFRjQ4MDMyOURGRDAxNzFBMENCMkFBRDEwMEZDMDY3NEUxNkEy
RDdFQzNCNTJEQjkxNDFBNEU4RDlFMDQ4ODRCMUU3MzhCREIzMkY5NEJGODI4MUQz
NzA0MTE1RTBFMTgyQUM4NjQ4RTcwQ0Y3REVDOTcxNzhDODRBQzY0RkRBRUYwOERE
QzdGMjQ1NDZBMkQzNDkzQUUzQzdCREVEMzFCMTk2NEE4MDlCMTBDNjEwMTY5MUYz
Nzc4NERFM0EzOEJGMkMxRTYzN0FBNEE3OTNENTM5QjYyRDhFRDFDMDlEM0YxNzk1
QjFFQUYyNDVGMzVEMzVCRjY4MDFBNEQ1RkFEREJCRUVDQ0NBRDk4NkUzMUIxODM0
QjJBQ0Y0NzI2Mzk4N0NCNkQwOTk5QTVGQzM3NjZGRkYzQTcxOUUzOEZBMUFFRDM0
RUIwRDdGQ0E1MUE5OUY4NTdBODZDMUE0QjJDOUI5N0VFN0YwNkQ4RjIwMTZFQjk2
M0U4NEUxREU1RjhCREVCRTE5MzNFRDFEM0Q0NjU5NUNEQkQ2RDc1REZFOENEQjUz
NDg4MUUzMDVBOTE2RkUwQTkxMDY0Mzg4RjNGNzE4MzQ1NkVDMUQzRTE3MjM2RkFF
RTJGREM5OTBEMzFBQjcwMjAzMDEwMDAxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8A
MIIBCgKCAQEAr1nN3MxjgdNKgxerL4eO9IAynf0BcaDLKq0QD8BnThai1+w7UtuR
QaTo2eBIhLHnOL2zL5S/goHTcEEV4OGCrIZI5wz33slxeMhKxk/a7wjdx/JFRqLT
STrjx73tMbGWSoCbEMYQFpHzd4TeOji/LB5jeqSnk9U5ti2O0cCdPxeVseryRfNd
Nb9oAaTV+t277szK2YbjGxg0sqz0cmOYfLbQmZpfw3Zv/zpxnjj6Gu006w1/ylGp
n4V6hsGkssm5fufwbY8gFuuWPoTh3l+L3r4ZM+0dPUZZXNvW113+jNtTSIHjBakW
/gqRBkOI8/cYNFbsHT4XI2+u4v3JkNMatwIDAQABo4ICMjCCAi4wHQYDVR0OBBYE
FB1qqfwAgjGaDKfVPezfnJon7YtoMB8GA1UdIwQYMBaAFKxVVEe6YsORB/Fr9XL4
KkF/co2/MA4GA1UdDwEB/wQEAwIHgDCBhQYDVR0fBH4wfDB6oHigdoZ0cnN5bmM6
Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMzk5M2YzNTAtYjc1Ni00OTE2LThk
ODQtNDg0ZjAyNWRmZmNjLzAvQUM1NTU0NDdCQTYyQzM5MTA3RjE2QkY1NzJGODJB
NDE3RjcyOERCRi5jcmwwdAYIKwYBBQUHAQEEaDBmMGQGCCsGAQUFBzAChlhyc3lu
YzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9JRE5JQy1JRC8yL0FDNTU1NDQ3
QkE2MkMzOTEwN0YxNkJGNTcyRjgyQTQxN0Y3MjhEQkYuY2VyMIGiBggrBgEFBQcB
CwSBlTCBkjCBjwYIKwYBBQUHMAuGgYJyc3luYzovL3JlcG8tcnBraS5pZG5pYy5u
ZXQvcmVwby8zOTkzZjM1MC1iNzU2LTQ5MTYtOGQ4NC00ODRmMDI1ZGZmY2MvMC8z
MjMwMzMyZTMxMzQzMjJlMzYzNDJlMzAyZjMyMzAyZDMyMzAyMDNkM2UyMDMxMzcz
NDM1MzEucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcB
Af8EEDAOMAwEAgABMAYDBATLjkAwDQYJKoZIhvcNAQELBQADggEBAJLs8SrA0iKP
MvlSSf76lieAexp/HYlbT//5SLVp5h00/6/UDT5sMXJMfk8aW8/yT4m/p6Nwd6FD
HGIaO3un6JquIedIx3Qsn8pdOFFMFAwiVY5SAkdobgjw1pd0HJdpqoTQotrp269l
icGsQ5ws5O/D3ERNcUXYKzYT4AMCcRyR1Vasht7rLuDkzJQuEQXk9VGDzWej31At
ffIbnNAx6+Zn59X0uyiSMxWbTJtLD3SCFh/pyhCesenUAMMbGS1rOq/qZ0uFmm4Z
aSqCdVhDd1+eUFg85D0Bf9aPuFlVHaFBnhYBZAaHv9aJeMWlUntf9uVTXg4YFoDp
C1NSJooCEek=
-----END CERTIFICATE-----