Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/3993f350-b756-4916-8d84-484f025dffcc/0/323430343a383030303a653a3a2f34382d3438203d3e203137343531.roa
File:                     323430343a383030303a653a3a2f34382d3438203d3e203137343531.roa (raw, json)
Hash identifier:          Rd1UlrPcE/gKVV0G1RhTgXN54YQquf26HU4/vF6gYC8=
Subject key identifier:   57:0C:61:E3:29:0C:C3:14:40:FB:31:3C:D5:E0:28:D0:24:8B:00:56
Certificate issuer:       /CN=AC555447BA62C39107F16BF572F82A417F728DBF
Certificate serial:       0C3EE59ABD422E127D73C6F2041A35441A8F668B
Authority key identifier: AC:55:54:47:BA:62:C3:91:07:F1:6B:F5:72:F8:2A:41:7F:72:8D:BF
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AC555447BA62C39107F16BF572F82A417F728DBF.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/3993f350-b756-4916-8d84-484f025dffcc/0/323430343a383030303a653a3a2f34382d3438203d3e203137343531.roa
Signing time:             Thu 30 Sep 2021 00:01:13 +0000
ROA not before:           Wed 29 Sep 2021 23:56:13 +0000
ROA not after:            Fri 30 Sep 2022 00:01:13 +0000
asID:                     17451
IP address blocks:        2404:8000:e::/48 maxlen: 48

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0c:3e:e5:9a:bd:42:2e:12:7d:73:c6:f2:04:1a:35:44:1a:8f:66:8b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AC555447BA62C39107F16BF572F82A417F728DBF
        Validity
            Not Before: Sep 29 23:56:13 2021 GMT
            Not After : Sep 30 00:01:13 2022 GMT
        Subject: CN=3082010A0282010100FBD11131E512858A1B842DDAD553005493A07416BBB7B87D6E1C47AE32E37083F2EF994ABFD7AED0C6A6B11C479EB3B1B427E1433779EFB30D698C00678C12DD9583E8B85B7A47E2475915C8F57B2ECB7B5493C6FEBEA24030DF1B661BA8C56205561F51734196E9CB76534784AA45359DE9FA264A874A9C02C1ACCBF118B064250C1B0957905855FE79AF580AD75FCDD6F356658884B0373085E64E12ED3880AF8C3F667F1D3210E0EDF95ED1A9EA275B1FF9D02E03CB70E919A440ECC0A7D6D51E21F0A0D60C5D4D83B0043A1A4E5DE7E544A3CED8A97960070775BD6D338638EB977FD43B28A998E564447F1A78251C6742470987382EA76AB45310B646570203010001
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:fb:d1:11:31:e5:12:85:8a:1b:84:2d:da:d5:53:
                    00:54:93:a0:74:16:bb:b7:b8:7d:6e:1c:47:ae:32:
                    e3:70:83:f2:ef:99:4a:bf:d7:ae:d0:c6:a6:b1:1c:
                    47:9e:b3:b1:b4:27:e1:43:37:79:ef:b3:0d:69:8c:
                    00:67:8c:12:dd:95:83:e8:b8:5b:7a:47:e2:47:59:
                    15:c8:f5:7b:2e:cb:7b:54:93:c6:fe:be:a2:40:30:
                    df:1b:66:1b:a8:c5:62:05:56:1f:51:73:41:96:e9:
                    cb:76:53:47:84:aa:45:35:9d:e9:fa:26:4a:87:4a:
                    9c:02:c1:ac:cb:f1:18:b0:64:25:0c:1b:09:57:90:
                    58:55:fe:79:af:58:0a:d7:5f:cd:d6:f3:56:65:88:
                    84:b0:37:30:85:e6:4e:12:ed:38:80:af:8c:3f:66:
                    7f:1d:32:10:e0:ed:f9:5e:d1:a9:ea:27:5b:1f:f9:
                    d0:2e:03:cb:70:e9:19:a4:40:ec:c0:a7:d6:d5:1e:
                    21:f0:a0:d6:0c:5d:4d:83:b0:04:3a:1a:4e:5d:e7:
                    e5:44:a3:ce:d8:a9:79:60:07:07:75:bd:6d:33:86:
                    38:eb:97:7f:d4:3b:28:a9:98:e5:64:44:7f:1a:78:
                    25:1c:67:42:47:09:87:38:2e:a7:6a:b4:53:10:b6:
                    46:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                57:0C:61:E3:29:0C:C3:14:40:FB:31:3C:D5:E0:28:D0:24:8B:00:56
            X509v3 Authority Key Identifier:
                keyid:AC:55:54:47:BA:62:C3:91:07:F1:6B:F5:72:F8:2A:41:7F:72:8D:BF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/3993f350-b756-4916-8d84-484f025dffcc/0/AC555447BA62C39107F16BF572F82A417F728DBF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AC555447BA62C39107F16BF572F82A417F728DBF.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/3993f350-b756-4916-8d84-484f025dffcc/0/323430343a383030303a653a3a2f34382d3438203d3e203137343531.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2404:8000:e::/48

    Signature Algorithm: sha256WithRSAEncryption
         12:4d:93:5c:c6:5b:ec:01:04:10:09:17:0f:ee:bd:55:34:59:
         7a:33:1c:1f:74:c4:62:df:a0:bf:5a:37:2a:e2:01:61:e3:b1:
         0c:12:8f:25:b6:b7:a4:89:05:1c:3f:f4:d4:92:1d:cd:70:be:
         ad:68:e2:cd:f7:a3:d5:6f:5d:c9:fe:73:6c:73:12:4b:30:c5:
         16:1f:30:d7:8a:38:7e:27:63:de:e7:52:a6:11:48:14:85:6e:
         44:7e:17:a9:08:aa:8f:a5:8f:b0:6e:d6:e4:ea:c4:9d:11:bc:
         92:36:c2:22:ae:dc:a0:0f:8b:6f:c3:02:9e:48:d0:d6:f3:3e:
         c4:b9:f5:30:f7:4d:f7:5f:0c:89:55:7a:6f:df:8f:63:2d:fd:
         a5:10:4b:a7:7b:3e:07:3c:9d:30:f3:75:b6:25:83:90:de:93:
         ae:4b:14:4a:87:d1:99:cd:4c:73:06:3b:36:6e:35:85:46:ed:
         c8:46:31:1c:e1:dc:54:cb:13:97:9d:03:70:a3:7b:c0:14:7f:
         05:42:59:2f:3e:88:32:2a:be:1c:9c:3c:7c:83:41:f3:15:6f:
         c6:c0:de:e2:ce:9f:8c:80:65:df:24:9c:1a:eb:02:13:05:5b:
         68:da:57:81:dd:f2:a4:69:d1:22:ae:f9:da:90:66:8d:ad:4d:
         40:e4:4f:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----