Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/3993f350-b756-4916-8d84-484f025dffcc/0/323430343a383030303a633a3a2f34382d3438203d3e203137343531.roa
File:                     323430343a383030303a633a3a2f34382d3438203d3e203137343531.roa (raw, json)
Hash identifier:          WsJFm13AZLaAHt0hl4jCgaiJqYoVGn64i3Kvr/fXVNg=
Subject key identifier:   28:3D:DE:52:7D:BD:12:A4:F2:77:37:E9:10:8E:6F:FA:57:B6:D0:DC
Certificate issuer:       /CN=AC555447BA62C39107F16BF572F82A417F728DBF
Certificate serial:       5A6F6684E9DF4ADB9FBCA42EC9320ED3AC90446F
Authority key identifier: AC:55:54:47:BA:62:C3:91:07:F1:6B:F5:72:F8:2A:41:7F:72:8D:BF
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AC555447BA62C39107F16BF572F82A417F728DBF.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/3993f350-b756-4916-8d84-484f025dffcc/0/323430343a383030303a633a3a2f34382d3438203d3e203137343531.roa
Signing time:             Thu 30 Sep 2021 00:00:37 +0000
ROA not before:           Wed 29 Sep 2021 23:55:37 +0000
ROA not after:            Fri 30 Sep 2022 00:00:37 +0000
asID:                     17451
IP address blocks:        2404:8000:c::/48 maxlen: 48

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5a:6f:66:84:e9:df:4a:db:9f:bc:a4:2e:c9:32:0e:d3:ac:90:44:6f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AC555447BA62C39107F16BF572F82A417F728DBF
        Validity
            Not Before: Sep 29 23:55:37 2021 GMT
            Not After : Sep 30 00:00:37 2022 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:90:d4:67:40:bb:dc:58:79:84:4d:4e:cd:a8:
                    51:83:fe:38:fa:13:53:1c:5c:6e:77:00:f5:34:d7:
                    b5:6b:48:77:06:2c:6a:b2:60:ef:fb:25:a6:7f:35:
                    bb:b5:fd:d4:0e:34:b5:44:c2:9d:5d:81:b6:00:b3:
                    b8:27:26:f4:01:31:57:9c:e3:82:97:f2:97:5c:a8:
                    a9:cd:c9:3f:e2:ac:3f:28:cb:9f:df:3b:87:47:53:
                    9d:1e:2d:04:ee:15:a5:a9:80:a7:ce:a1:0d:65:ff:
                    d1:e4:9f:b0:57:18:2a:88:36:6b:54:ae:de:64:fb:
                    50:59:d6:2a:c4:8d:89:2f:e0:e4:40:16:37:c1:cb:
                    ab:0c:a3:5d:b7:3f:bb:eb:e0:3b:6c:3b:42:4e:44:
                    88:c3:35:8c:b7:06:2d:d5:5d:4c:b0:e5:2b:91:6b:
                    5f:f0:aa:b7:e7:ad:2d:72:26:b3:73:13:ff:a1:38:
                    a0:66:ea:1d:1b:ca:9e:92:90:e6:d6:39:e8:a4:24:
                    19:09:42:a3:ae:eb:28:f9:c0:aa:2f:17:eb:be:b7:
                    f8:d7:d9:dc:76:69:bc:64:87:b0:69:fb:08:58:9c:
                    aa:fb:07:99:36:91:a1:bd:53:16:03:df:0d:c9:45:
                    95:25:2f:fb:94:0d:4c:48:cd:4f:58:79:80:b1:cd:
                    c7:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                28:3D:DE:52:7D:BD:12:A4:F2:77:37:E9:10:8E:6F:FA:57:B6:D0:DC
            X509v3 Authority Key Identifier:
                keyid:AC:55:54:47:BA:62:C3:91:07:F1:6B:F5:72:F8:2A:41:7F:72:8D:BF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/3993f350-b756-4916-8d84-484f025dffcc/0/AC555447BA62C39107F16BF572F82A417F728DBF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AC555447BA62C39107F16BF572F82A417F728DBF.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/3993f350-b756-4916-8d84-484f025dffcc/0/323430343a383030303a633a3a2f34382d3438203d3e203137343531.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2404:8000:c::/48

    Signature Algorithm: sha256WithRSAEncryption
         5f:d6:ea:cc:a6:3a:a8:2d:03:d3:33:5f:de:6f:70:57:74:f1:
         73:f8:f0:99:66:3c:0e:90:5e:b2:63:7d:da:7e:65:55:44:f4:
         fd:21:68:b5:84:3c:51:cb:50:d0:af:1c:b5:6b:b4:44:dd:de:
         15:34:d3:aa:df:e6:59:94:6c:01:04:41:c4:3e:b7:0e:fd:fe:
         be:bf:18:d1:cb:49:c9:e2:35:dc:f5:60:d8:7c:42:f2:a7:3c:
         9f:39:e3:cc:58:5c:59:b0:c0:cf:d7:99:b9:3f:4c:a2:ec:d5:
         ad:b7:6b:17:dd:b5:10:9f:5b:df:fa:a2:8d:de:42:9e:fc:e7:
         2e:bf:17:6e:d0:b9:23:1a:26:81:f9:7d:88:5d:44:48:82:bc:
         a9:2a:19:ed:d0:42:69:8c:37:dc:79:d2:02:a3:01:91:63:e1:
         d0:39:71:4b:29:f5:9f:95:49:5a:03:30:9e:57:d1:02:03:2d:
         e3:66:38:95:cf:2b:14:7e:c1:f9:20:fe:00:86:dc:c6:b0:49:
         51:7f:58:f5:d0:1d:ca:33:8c:5c:f6:21:5b:15:7f:39:b4:ca:
         2f:6d:df:d2:d7:45:45:c5:66:60:09:93:32:5f:d8:ff:02:db:
         fd:e3:64:0f:94:6b:ce:f5:e4:42:43:96:b6:db:eb:bd:91:95:
         68:93:56:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----