Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/4bdb1e0a-a4ec-49db-be89-8d7e7fc2c227/0/323430303a393830303a31323a3a2f34382d3438203d3e203234323033.roa
File:                     323430303a393830303a31323a3a2f34382d3438203d3e203234323033.roa (raw, json)
Hash identifier:          faJbFnNZBzxvBKxUGrpeHaa4gm6iKnhEGXeAVYlIDqw=
Subject key identifier:   93:A1:E4:97:02:C7:C2:97:71:B8:D8:10:82:88:4A:97:9F:AD:CF:80
Certificate issuer:       /CN=B493A5CEBF09E10BC35D9AC2211DAFD2095687DA
Certificate serial:       35645F77252D818619A59323CC59DB88704A79A5
Authority key identifier: B4:93:A5:CE:BF:09:E1:0B:C3:5D:9A:C2:21:1D:AF:D2:09:56:87:DA
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B493A5CEBF09E10BC35D9AC2211DAFD2095687DA.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/4bdb1e0a-a4ec-49db-be89-8d7e7fc2c227/0/323430303a393830303a31323a3a2f34382d3438203d3e203234323033.roa
Signing time:             Fri 14 Jan 2022 07:03:37 +0000
ROA not before:           Fri 14 Jan 2022 06:58:37 +0000
ROA not after:            Sat 14 Jan 2023 07:03:37 +0000
asID:                     24203
IP address blocks:        2400:9800:12::/48 maxlen: 48

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            35:64:5f:77:25:2d:81:86:19:a5:93:23:cc:59:db:88:70:4a:79:a5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B493A5CEBF09E10BC35D9AC2211DAFD2095687DA
        Validity
            Not Before: Jan 14 06:58:37 2022 GMT
            Not After : Jan 14 07:03:37 2023 GMT
        Subject: CN=3082010A02820101009A5A8EE81E6CA2FF73EB612FA5BC6EF5D2196EC5293457EA4CAC797DD78494B91E083519BFAF3FDA3F048771B5264B0B78A0955746584618CAC791C52D5DC3E577CA6215D132DFA1CDFEC94F13739A690239488BC83B57A26025F4EBF15C09A28E7A26F001816A15A462B29ECCB0FB833AB6058D2416C2CD5180C10239DF823BA575FC113C84715D9CCD021EAC524B20B497FC164701032BCECDBE4509B7B817746E3C861FDBFA008C6DAF32933EB5B49D997D1916A1D2AFEDE151D756CAE146F517C17E7235750AF554303AA2A2B99B4141678A8A336A28737389026F6722051F1E6BDD7E17038ED11BE16AD1D14E91554F67EB35C21E0C0CF4C5BF7CB8625B0203010001
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:5a:8e:e8:1e:6c:a2:ff:73:eb:61:2f:a5:bc:
                    6e:f5:d2:19:6e:c5:29:34:57:ea:4c:ac:79:7d:d7:
                    84:94:b9:1e:08:35:19:bf:af:3f:da:3f:04:87:71:
                    b5:26:4b:0b:78:a0:95:57:46:58:46:18:ca:c7:91:
                    c5:2d:5d:c3:e5:77:ca:62:15:d1:32:df:a1:cd:fe:
                    c9:4f:13:73:9a:69:02:39:48:8b:c8:3b:57:a2:60:
                    25:f4:eb:f1:5c:09:a2:8e:7a:26:f0:01:81:6a:15:
                    a4:62:b2:9e:cc:b0:fb:83:3a:b6:05:8d:24:16:c2:
                    cd:51:80:c1:02:39:df:82:3b:a5:75:fc:11:3c:84:
                    71:5d:9c:cd:02:1e:ac:52:4b:20:b4:97:fc:16:47:
                    01:03:2b:ce:cd:be:45:09:b7:b8:17:74:6e:3c:86:
                    1f:db:fa:00:8c:6d:af:32:93:3e:b5:b4:9d:99:7d:
                    19:16:a1:d2:af:ed:e1:51:d7:56:ca:e1:46:f5:17:
                    c1:7e:72:35:75:0a:f5:54:30:3a:a2:a2:b9:9b:41:
                    41:67:8a:8a:33:6a:28:73:73:89:02:6f:67:22:05:
                    1f:1e:6b:dd:7e:17:03:8e:d1:1b:e1:6a:d1:d1:4e:
                    91:55:4f:67:eb:35:c2:1e:0c:0c:f4:c5:bf:7c:b8:
                    62:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                93:A1:E4:97:02:C7:C2:97:71:B8:D8:10:82:88:4A:97:9F:AD:CF:80
            X509v3 Authority Key Identifier:
                keyid:B4:93:A5:CE:BF:09:E1:0B:C3:5D:9A:C2:21:1D:AF:D2:09:56:87:DA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/4bdb1e0a-a4ec-49db-be89-8d7e7fc2c227/0/B493A5CEBF09E10BC35D9AC2211DAFD2095687DA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B493A5CEBF09E10BC35D9AC2211DAFD2095687DA.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/4bdb1e0a-a4ec-49db-be89-8d7e7fc2c227/0/323430303a393830303a31323a3a2f34382d3438203d3e203234323033.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2400:9800:12::/48

    Signature Algorithm: sha256WithRSAEncryption
         7b:0f:e0:73:d1:69:8a:a2:0d:65:6a:fe:0a:2e:55:f5:8a:78:
         ec:59:95:50:9f:6a:ef:bd:7d:71:b3:eb:56:74:68:f4:b6:b4:
         fa:01:b8:4f:d7:1c:93:25:ca:a8:66:8a:7d:9f:bc:ef:d0:d7:
         06:9a:55:3a:c5:0b:24:f2:d8:13:1c:ea:71:a1:fe:7c:f1:7b:
         f0:a2:e1:89:ab:2a:b2:54:58:ab:f6:e3:1d:44:7b:90:00:6e:
         35:91:95:33:ec:86:57:46:d8:1d:e5:db:37:62:6d:3a:5a:d3:
         22:0b:7f:5c:11:96:a0:1d:9d:e6:77:ad:09:22:06:59:c4:4e:
         a2:2d:ff:65:76:d3:d3:d5:0c:fa:e4:ca:66:98:1c:0f:53:8d:
         62:44:b4:1a:5c:27:c3:81:a9:e8:65:53:39:ff:28:cb:1f:16:
         1f:4b:97:c9:46:f3:5c:75:91:d8:f6:a8:ad:3a:f9:e7:1a:6f:
         82:f3:40:53:13:0d:0f:71:96:2b:da:a4:0a:b1:73:e6:9d:ae:
         b2:9c:7d:83:7b:e3:9e:69:90:9f:06:69:07:ef:d1:2c:80:d0:
         72:fc:ac:c3:bb:e1:52:8a:2d:06:59:94:1d:01:ea:cd:45:b4:
         dc:c7:b0:f2:95:9a:a7:dc:d6:c1:85:ec:73:76:e3:1b:ca:78:
         04:8c:64:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----