Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/4bdb1e0a-a4ec-49db-be89-8d7e7fc2c227/0/323430303a393830303a31343a3a2f34382d3438203d3e203234323033.roa
File:                     323430303a393830303a31343a3a2f34382d3438203d3e203234323033.roa (raw, json)
Hash identifier:          g3vG4sgzmbpzrU7vb/jGa4uQeOD7BbUHgs4leT7t7Wg=
Subject key identifier:   77:B9:C5:FE:95:A5:EC:18:87:39:7D:2E:C8:C1:7A:72:54:DB:CA:26
Certificate issuer:       /CN=B493A5CEBF09E10BC35D9AC2211DAFD2095687DA
Certificate serial:       15B6A6C445337856EF0D5E531F5ED53061E1C203
Authority key identifier: B4:93:A5:CE:BF:09:E1:0B:C3:5D:9A:C2:21:1D:AF:D2:09:56:87:DA
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B493A5CEBF09E10BC35D9AC2211DAFD2095687DA.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/4bdb1e0a-a4ec-49db-be89-8d7e7fc2c227/0/323430303a393830303a31343a3a2f34382d3438203d3e203234323033.roa
Signing time:             Fri 14 Jan 2022 07:03:54 +0000
ROA not before:           Fri 14 Jan 2022 06:58:54 +0000
ROA not after:            Sat 14 Jan 2023 07:03:54 +0000
asID:                     24203
IP address blocks:        2400:9800:14::/48 maxlen: 48

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            15:b6:a6:c4:45:33:78:56:ef:0d:5e:53:1f:5e:d5:30:61:e1:c2:03
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B493A5CEBF09E10BC35D9AC2211DAFD2095687DA
        Validity
            Not Before: Jan 14 06:58:54 2022 GMT
            Not After : Jan 14 07:03:54 2023 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:f5:73:22:c5:38:d0:7b:84:bd:b3:51:7d:21:
                    42:a7:71:f0:d3:18:07:20:25:99:50:9d:64:ad:17:
                    91:43:17:60:1d:20:d8:a8:63:67:40:68:3f:39:e6:
                    5f:23:c0:5e:ce:99:fd:79:af:63:67:c4:60:96:43:
                    37:47:53:f2:04:37:22:c0:4d:c9:ef:52:24:51:cb:
                    80:bd:be:35:3e:ff:1c:d1:21:78:6a:e2:98:c9:9c:
                    63:bd:d5:d9:24:60:13:25:cc:5d:28:59:fd:55:9f:
                    b6:0a:d8:47:17:92:e8:a1:07:ad:17:e7:f1:f9:9c:
                    ae:b6:d6:fa:56:9c:db:4b:85:7b:04:5f:ae:36:07:
                    0a:f2:79:70:47:82:b1:7b:ec:9d:a9:34:bc:64:1b:
                    49:66:25:79:b9:f1:7e:ef:c7:97:f1:c0:68:95:4a:
                    ad:d2:c2:41:a6:53:82:bb:f4:c2:25:bc:1d:a8:b4:
                    22:1b:4f:6c:ab:ee:72:29:1c:24:3e:36:bb:8e:86:
                    04:cd:1d:a7:43:e4:b7:e2:ca:80:0f:0f:db:4a:06:
                    47:2b:2c:f8:3e:85:26:e4:9b:63:d7:83:e8:2c:24:
                    db:61:c0:31:20:4b:0e:94:62:47:b3:31:87:d6:78:
                    53:22:7b:2f:04:46:67:38:f9:6b:79:2d:3b:db:d6:
                    3d:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                77:B9:C5:FE:95:A5:EC:18:87:39:7D:2E:C8:C1:7A:72:54:DB:CA:26
            X509v3 Authority Key Identifier:
                keyid:B4:93:A5:CE:BF:09:E1:0B:C3:5D:9A:C2:21:1D:AF:D2:09:56:87:DA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/4bdb1e0a-a4ec-49db-be89-8d7e7fc2c227/0/B493A5CEBF09E10BC35D9AC2211DAFD2095687DA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B493A5CEBF09E10BC35D9AC2211DAFD2095687DA.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/4bdb1e0a-a4ec-49db-be89-8d7e7fc2c227/0/323430303a393830303a31343a3a2f34382d3438203d3e203234323033.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2400:9800:14::/48

    Signature Algorithm: sha256WithRSAEncryption
         0e:e4:56:1c:02:0e:c3:62:b4:1b:49:b0:c2:5c:2b:82:7a:6e:
         a2:d2:ff:00:1f:43:5e:8c:6f:44:d1:c9:99:55:81:e1:8c:5d:
         57:10:50:ca:cf:db:6c:52:84:09:b8:4b:4d:f4:30:be:7f:ef:
         e3:4e:1d:07:46:b3:36:9e:95:29:50:6b:9b:6b:c6:af:b7:c6:
         de:fc:2a:a9:54:33:d4:35:f4:29:67:03:b6:97:f0:f0:62:7e:
         fc:a9:fc:0c:6f:a5:e4:ed:88:43:0f:cc:1f:cf:12:ac:e8:72:
         be:45:da:72:82:7c:5d:3b:fb:13:47:89:e4:cf:78:4e:b7:42:
         c9:51:0a:48:f2:fd:2c:1c:89:71:92:cf:ef:35:36:c9:eb:26:
         a4:77:c8:0a:2c:cb:6e:3e:8e:13:3b:f8:21:97:73:db:a5:09:
         e7:ca:62:c4:51:24:c4:89:cc:ce:a2:50:c1:88:45:98:78:9f:
         5f:62:de:02:89:62:83:57:bd:06:5a:2e:2a:77:f0:63:bd:22:
         6e:03:43:c4:61:60:c1:3c:79:3b:ff:9a:cb:4a:4d:6d:e3:48:
         fc:ea:84:c8:79:22:a0:95:32:5b:8f:ac:23:77:e2:60:5f:60:
         88:b7:cf:b4:96:a2:9e:26:61:c0:97:15:c8:e0:82:7c:aa:28:
         5f:a5:74:ca
-----BEGIN CERTIFICATE-----
MIIHKzCCBhOgAwIBAgIUFbamxEUzeFbvDV5TH17VMGHhwgMwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQjQ5M0E1Q0VCRjA5RTEwQkMzNUQ5QUMyMjExREFGRDIw
OTU2ODdEQTAeFw0yMjAxMTQwNjU4NTRaFw0yMzAxMTQwNzAzNTRaMIICLTGCAikw
ggIlBgNVBAMTggIcMzA4MjAxMEEwMjgyMDEwMTAwRDFGNTczMjJDNTM4RDA3Qjg0
QkRCMzUxN0QyMTQyQTc3MUYwRDMxODA3MjAyNTk5NTA5RDY0QUQxNzkxNDMxNzYw
MUQyMEQ4QTg2MzY3NDA2ODNGMzlFNjVGMjNDMDVFQ0U5OUZENzlBRjYzNjdDNDYw
OTY0MzM3NDc1M0YyMDQzNzIyQzA0REM5RUY1MjI0NTFDQjgwQkRCRTM1M0VGRjFD
RDEyMTc4NkFFMjk4Qzk5QzYzQkRENUQ5MjQ2MDEzMjVDQzVEMjg1OUZENTU5RkI2
MEFEODQ3MTc5MkU4QTEwN0FEMTdFN0YxRjk5Q0FFQjZENkZBNTY5Q0RCNEI4NTdC
MDQ1RkFFMzYwNzBBRjI3OTcwNDc4MkIxN0JFQzlEQTkzNEJDNjQxQjQ5NjYyNTc5
QjlGMTdFRUZDNzk3RjFDMDY4OTU0QUFERDJDMjQxQTY1MzgyQkJGNEMyMjVCQzFE
QThCNDIyMUI0RjZDQUJFRTcyMjkxQzI0M0UzNkJCOEU4NjA0Q0QxREE3NDNFNEI3
RTJDQTgwMEYwRkRCNEEwNjQ3MkIyQ0Y4M0U4NTI2RTQ5QjYzRDc4M0U4MkMyNERC
NjFDMDMxMjA0QjBFOTQ2MjQ3QjMzMTg3RDY3ODUzMjI3QjJGMDQ0NjY3MzhGOTZC
NzkyRDNCREJENjNENTkwMjAzMDEwMDAxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8A
MIIBCgKCAQEA0fVzIsU40HuEvbNRfSFCp3Hw0xgHICWZUJ1krReRQxdgHSDYqGNn
QGg/OeZfI8Bezpn9ea9jZ8RglkM3R1PyBDciwE3J71IkUcuAvb41Pv8c0SF4auKY
yZxjvdXZJGATJcxdKFn9VZ+2CthHF5LooQetF+fx+Zyuttb6VpzbS4V7BF+uNgcK
8nlwR4Kxe+ydqTS8ZBtJZiV5ufF+78eX8cBolUqt0sJBplOCu/TCJbwdqLQiG09s
q+5yKRwkPja7joYEzR2nQ+S34sqADw/bSgZHKyz4PoUm5Jtj14PoLCTbYcAxIEsO
lGJHszGH1nhTInsvBEZnOPlreS0729Y9WQIDAQABo4ICOTCCAjUwHQYDVR0OBBYE
FHe5xf6VpewYhzl9LsjBenJU28omMB8GA1UdIwQYMBaAFLSTpc6/CeELw12awiEd
r9IJVofaMA4GA1UdDwEB/wQEAwIHgDCBhQYDVR0fBH4wfDB6oHigdoZ0cnN5bmM6
Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNGJkYjFlMGEtYTRlYy00OWRiLWJl
ODktOGQ3ZTdmYzJjMjI3LzAvQjQ5M0E1Q0VCRjA5RTEwQkMzNUQ5QUMyMjExREFG
RDIwOTU2ODdEQS5jcmwwdAYIKwYBBQUHAQEEaDBmMGQGCCsGAQUFBzAChlhyc3lu
YzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9JRE5JQy1JRC8yL0I0OTNBNUNF
QkYwOUUxMEJDMzVEOUFDMjIxMURBRkQyMDk1Njg3REEuY2VyMIGmBggrBgEFBQcB
CwSBmTCBljCBkwYIKwYBBQUHMAuGgYZyc3luYzovL3JlcG8tcnBraS5pZG5pYy5u
ZXQvcmVwby80YmRiMWUwYS1hNGVjLTQ5ZGItYmU4OS04ZDdlN2ZjMmMyMjcvMC8z
MjM0MzAzMDNhMzkzODMwMzAzYTMxMzQzYTNhMmYzNDM4MmQzNDM4MjAzZDNlMjAz
MjM0MzIzMDMzLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUF
BwEHAQH/BBMwETAPBAIAAjAJAwcAJACYAAAUMA0GCSqGSIb3DQEBCwUAA4IBAQAO
5FYcAg7DYrQbSbDCXCuCem6i0v8AH0NejG9E0cmZVYHhjF1XEFDKz9tsUoQJuEtN
9DC+f+/jTh0HRrM2npUpUGuba8avt8be/CqpVDPUNfQpZwO2l/DwYn78qfwMb6Xk
7YhDD8wfzxKs6HK+RdpygnxdO/sTR4nkz3hOt0LJUQpI8v0sHIlxks/vNTbJ6yak
d8gKLMtuPo4TO/ghl3PbpQnnymLEUSTEiczOolDBiEWYeJ9fYt4CiWKDV70GWi4q
d/BjvSJuA0PEYWDBPHk7/5rLSk1t40j86oTIeSKglTJbj6wjd+JgX2CIt8+0lqKe
JmHAlxXI4IJ8qihfpXTK
-----END CERTIFICATE-----