Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/4bdb1e0a-a4ec-49db-be89-8d7e7fc2c227/0/323430303a393830303a31303a3a2f34382d3438203d3e203234323033.roa
File:                     323430303a393830303a31303a3a2f34382d3438203d3e203234323033.roa (raw, json)
Hash identifier:          0e2iMu/gja2k+0lAzcyEYmD3S5Tt23YSX/9G2i1+1T0=
Subject key identifier:   1D:80:F4:45:D0:DF:E4:20:6B:28:4E:BB:75:C2:51:A1:61:43:92:21
Certificate issuer:       /CN=B493A5CEBF09E10BC35D9AC2211DAFD2095687DA
Certificate serial:       0112DFE463548715D20484C9C5C5ED74066A23D8
Authority key identifier: B4:93:A5:CE:BF:09:E1:0B:C3:5D:9A:C2:21:1D:AF:D2:09:56:87:DA
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B493A5CEBF09E10BC35D9AC2211DAFD2095687DA.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/4bdb1e0a-a4ec-49db-be89-8d7e7fc2c227/0/323430303a393830303a31303a3a2f34382d3438203d3e203234323033.roa
Signing time:             Fri 14 Jan 2022 07:03:23 +0000
ROA not before:           Fri 14 Jan 2022 06:58:23 +0000
ROA not after:            Sat 14 Jan 2023 07:03:23 +0000
asID:                     24203
IP address blocks:        2400:9800:10::/48 maxlen: 48

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:12:df:e4:63:54:87:15:d2:04:84:c9:c5:c5:ed:74:06:6a:23:d8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B493A5CEBF09E10BC35D9AC2211DAFD2095687DA
        Validity
            Not Before: Jan 14 06:58:23 2022 GMT
            Not After : Jan 14 07:03:23 2023 GMT
        Subject: CN=3082010A0282010100B105AEEC16FF20F58AD624449656870426D351FD8101F5937AB7AB15C2A3ED624A4D5C3007291842D77F7C5FBF83890B1125FEEAAC3A6A1B5EA4CE4838CD2EDCF6D5BEC162C2B073F50EB65AAB27217EFB26C9E36CCD157312EF92C7171954296A7DCB5E50E7300DFB7C8AFE3877ECB7AB00836E57F7AC707FBB4F2DE4808AFEF91160664C3EECBDCB40E7964989D2FE9E6CE00A873CE61D4E147F1157C88D351C234569EBF5B4C3D3A59AADAA57328667AD64A7B6931083EEE69B328924EB6494C89D79A08281323EFAC4E580BF0E57E02549F3E98A4BC48F8962B5497FEEFB8F96E7EE26C972626054E1C290D262A9D485A3D08B02E63161E9426A330B1D830203010001
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:05:ae:ec:16:ff:20:f5:8a:d6:24:44:96:56:
                    87:04:26:d3:51:fd:81:01:f5:93:7a:b7:ab:15:c2:
                    a3:ed:62:4a:4d:5c:30:07:29:18:42:d7:7f:7c:5f:
                    bf:83:89:0b:11:25:fe:ea:ac:3a:6a:1b:5e:a4:ce:
                    48:38:cd:2e:dc:f6:d5:be:c1:62:c2:b0:73:f5:0e:
                    b6:5a:ab:27:21:7e:fb:26:c9:e3:6c:cd:15:73:12:
                    ef:92:c7:17:19:54:29:6a:7d:cb:5e:50:e7:30:0d:
                    fb:7c:8a:fe:38:77:ec:b7:ab:00:83:6e:57:f7:ac:
                    70:7f:bb:4f:2d:e4:80:8a:fe:f9:11:60:66:4c:3e:
                    ec:bd:cb:40:e7:96:49:89:d2:fe:9e:6c:e0:0a:87:
                    3c:e6:1d:4e:14:7f:11:57:c8:8d:35:1c:23:45:69:
                    eb:f5:b4:c3:d3:a5:9a:ad:aa:57:32:86:67:ad:64:
                    a7:b6:93:10:83:ee:e6:9b:32:89:24:eb:64:94:c8:
                    9d:79:a0:82:81:32:3e:fa:c4:e5:80:bf:0e:57:e0:
                    25:49:f3:e9:8a:4b:c4:8f:89:62:b5:49:7f:ee:fb:
                    8f:96:e7:ee:26:c9:72:62:60:54:e1:c2:90:d2:62:
                    a9:d4:85:a3:d0:8b:02:e6:31:61:e9:42:6a:33:0b:
                    1d:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1D:80:F4:45:D0:DF:E4:20:6B:28:4E:BB:75:C2:51:A1:61:43:92:21
            X509v3 Authority Key Identifier:
                keyid:B4:93:A5:CE:BF:09:E1:0B:C3:5D:9A:C2:21:1D:AF:D2:09:56:87:DA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/4bdb1e0a-a4ec-49db-be89-8d7e7fc2c227/0/B493A5CEBF09E10BC35D9AC2211DAFD2095687DA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B493A5CEBF09E10BC35D9AC2211DAFD2095687DA.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/4bdb1e0a-a4ec-49db-be89-8d7e7fc2c227/0/323430303a393830303a31303a3a2f34382d3438203d3e203234323033.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2400:9800:10::/48

    Signature Algorithm: sha256WithRSAEncryption
         6d:75:1f:37:2b:e5:c4:4b:71:dd:62:db:99:0a:c5:11:1e:2e:
         4c:83:61:0c:59:b9:a1:05:f9:7a:60:a3:c6:81:23:c1:83:0b:
         bf:2b:5f:97:8b:08:05:54:04:b9:c0:bc:f5:ba:6c:b0:5e:e9:
         eb:71:8c:b1:10:28:5c:34:4c:28:8d:44:71:ea:ce:9a:83:4e:
         c1:a3:4e:7b:9e:96:13:3b:03:06:80:7e:85:ed:92:24:ee:bc:
         1d:29:77:7e:1a:d5:2d:93:3f:72:6f:21:83:65:cd:49:e1:a8:
         30:65:db:45:78:6d:66:8f:43:69:73:43:6c:9a:94:a9:0c:0c:
         dc:b2:44:1f:5d:33:7f:50:3f:48:5d:00:79:81:a5:77:66:0e:
         ff:75:02:1a:fe:b1:ef:13:96:41:60:07:0a:3e:b5:8d:db:70:
         f2:1e:d1:37:38:51:9f:96:f1:a6:d4:8e:61:0a:ef:e6:f8:8b:
         fc:26:cc:84:5c:17:17:dc:db:c8:d7:97:13:24:12:fd:bf:60:
         11:6b:02:e0:ea:59:6f:50:e9:2f:f7:9f:55:df:40:3c:b1:41:
         1b:7a:ad:a6:9c:ad:1d:0a:02:fa:ff:df:f8:08:a7:8a:5c:6f:
         bf:6e:d6:c1:be:a2:1c:a8:b9:52:32:de:8b:d2:a3:52:3c:39:
         7c:47:82:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----