Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/4bdb1e0a-a4ec-49db-be89-8d7e7fc2c227/0/323430303a393830303a31353a3a2f34382d3438203d3e203234323033.roa
File:                     323430303a393830303a31353a3a2f34382d3438203d3e203234323033.roa (raw, json)
Hash identifier:          qjJO/Itg29UBqmvvhzfzcLgL6ElxWbHbPbAa4xfKdO8=
Subject key identifier:   B1:AF:32:C7:48:23:52:13:4C:9C:EA:9E:B3:02:21:4E:25:70:9D:96
Certificate issuer:       /CN=B493A5CEBF09E10BC35D9AC2211DAFD2095687DA
Certificate serial:       7D8D09907EFFA2815E9481DABB7C0B6BB4D30FED
Authority key identifier: B4:93:A5:CE:BF:09:E1:0B:C3:5D:9A:C2:21:1D:AF:D2:09:56:87:DA
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B493A5CEBF09E10BC35D9AC2211DAFD2095687DA.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/4bdb1e0a-a4ec-49db-be89-8d7e7fc2c227/0/323430303a393830303a31353a3a2f34382d3438203d3e203234323033.roa
Signing time:             Fri 14 Jan 2022 07:04:07 +0000
ROA not before:           Fri 14 Jan 2022 06:59:07 +0000
ROA not after:            Sat 14 Jan 2023 07:04:07 +0000
asID:                     24203
IP address blocks:        2400:9800:15::/48 maxlen: 48

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7d:8d:09:90:7e:ff:a2:81:5e:94:81:da:bb:7c:0b:6b:b4:d3:0f:ed
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B493A5CEBF09E10BC35D9AC2211DAFD2095687DA
        Validity
            Not Before: Jan 14 06:59:07 2022 GMT
            Not After : Jan 14 07:04:07 2023 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:3e:a4:6f:ef:24:09:d1:76:e2:24:a3:84:c6:
                    5f:61:ed:79:5f:87:1f:ff:1a:71:68:16:d4:10:87:
                    3c:9e:1a:e7:77:53:d0:39:27:d9:31:0e:b4:9e:da:
                    d9:43:b8:0f:a2:07:e6:e3:58:e3:58:b3:34:84:e8:
                    15:2d:e0:d6:34:1f:a6:22:d1:09:0d:5c:0a:95:6e:
                    2e:f3:dd:36:d9:94:2a:44:df:58:5a:48:82:77:7c:
                    9f:fd:bd:8d:70:cb:5b:45:4c:81:63:7c:95:50:d5:
                    40:7c:21:14:78:83:bf:3a:57:26:6c:8c:3a:47:ba:
                    b6:06:68:85:5b:f1:54:01:80:16:3c:2b:64:b6:7b:
                    e3:69:d3:97:42:1f:29:92:b0:81:0f:73:bf:0c:5f:
                    2b:12:8a:f1:c4:cb:55:ec:82:bb:e9:f5:a9:f6:56:
                    47:14:08:8c:a4:e7:23:bb:c3:5d:18:ee:40:ef:18:
                    3a:e4:5f:57:65:a1:94:69:8e:3b:7e:b7:2f:e9:fa:
                    d9:9a:31:e8:f8:49:20:77:00:97:1e:53:00:be:f5:
                    61:bf:fe:bb:66:ba:d0:c3:34:9b:f3:82:e2:f6:60:
                    3a:6f:69:9b:3b:87:33:8b:b1:6e:ec:fb:22:56:d6:
                    62:0d:e9:5e:f9:f9:ad:1b:97:0b:9b:ba:62:32:07:
                    5c:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B1:AF:32:C7:48:23:52:13:4C:9C:EA:9E:B3:02:21:4E:25:70:9D:96
            X509v3 Authority Key Identifier:
                keyid:B4:93:A5:CE:BF:09:E1:0B:C3:5D:9A:C2:21:1D:AF:D2:09:56:87:DA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/4bdb1e0a-a4ec-49db-be89-8d7e7fc2c227/0/B493A5CEBF09E10BC35D9AC2211DAFD2095687DA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B493A5CEBF09E10BC35D9AC2211DAFD2095687DA.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/4bdb1e0a-a4ec-49db-be89-8d7e7fc2c227/0/323430303a393830303a31353a3a2f34382d3438203d3e203234323033.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2400:9800:15::/48

    Signature Algorithm: sha256WithRSAEncryption
         33:5e:9f:39:68:fe:f2:cc:94:88:41:cb:f4:66:d9:b1:98:24:
         7d:33:0c:8d:b0:a1:ff:1a:b9:d0:39:a8:29:9f:14:14:10:03:
         e2:fe:f1:28:ee:80:e0:d3:d9:24:87:00:68:7c:4f:fc:a6:68:
         3f:a3:a7:45:62:c1:dd:0a:6b:06:2e:d2:ed:6c:bc:7c:76:95:
         4e:20:83:2c:f9:ee:11:f0:71:e8:7a:31:e4:ba:ec:c3:10:26:
         25:e8:de:d4:32:b9:4e:78:d9:00:26:19:ea:b1:37:7f:c4:5d:
         49:1b:4e:71:92:ca:8d:ae:76:58:35:29:e9:26:d4:8e:8f:b4:
         20:cc:60:8b:d3:3a:10:17:43:ef:82:dc:d4:45:e2:3a:7b:61:
         3b:db:40:96:ab:86:25:4e:bf:2d:14:4b:1f:73:e5:9b:58:0c:
         16:22:fe:22:c4:60:d0:6a:03:a7:e1:8d:7b:98:91:ff:fb:90:
         f1:ba:12:9a:e3:7c:8b:5e:5a:97:20:2d:b7:ed:84:70:2a:27:
         ce:a5:cc:12:5e:9b:e1:13:cd:a5:9b:8e:8d:26:34:b3:98:97:
         81:f4:6f:2b:8a:1d:7e:c8:c3:5a:f7:90:eb:a6:8e:6b:4e:e5:
         27:23:b1:57:7e:85:53:ba:4b:3e:3f:3e:b2:0f:dc:b0:ce:d5:
         8f:19:38:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----