Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/4bdb1e0a-a4ec-49db-be89-8d7e7fc2c227/0/323430303a393830303a363031323a3a2f34382d3438203d3e20313339393934.roa
File:                     323430303a393830303a363031323a3a2f34382d3438203d3e20313339393934.roa (raw, json)
Hash identifier:          pWM2C5TVjkI3DDWxLaqpJMw3Egi2TFuq1ZXeLErLw7Y=
Subject key identifier:   44:6D:73:FB:98:EB:31:69:2A:6E:9C:9B:FC:79:28:B6:1E:3A:91:48
Certificate issuer:       /CN=B493A5CEBF09E10BC35D9AC2211DAFD2095687DA
Certificate serial:       1C4BD507357F9DA96C4E64FE88327A8808262545
Authority key identifier: B4:93:A5:CE:BF:09:E1:0B:C3:5D:9A:C2:21:1D:AF:D2:09:56:87:DA
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B493A5CEBF09E10BC35D9AC2211DAFD2095687DA.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/4bdb1e0a-a4ec-49db-be89-8d7e7fc2c227/0/323430303a393830303a363031323a3a2f34382d3438203d3e20313339393934.roa
Signing time:             Sat 08 Jan 2022 17:41:05 +0000
ROA not before:           Sat 08 Jan 2022 17:36:05 +0000
ROA not after:            Sun 08 Jan 2023 17:41:05 +0000
asID:                     139994
IP address blocks:        2400:9800:6012::/48 maxlen: 48

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1c:4b:d5:07:35:7f:9d:a9:6c:4e:64:fe:88:32:7a:88:08:26:25:45
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B493A5CEBF09E10BC35D9AC2211DAFD2095687DA
        Validity
            Not Before: Jan  8 17:36:05 2022 GMT
            Not After : Jan  8 17:41:05 2023 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:c7:5b:fb:92:3e:12:7a:ca:f3:5c:9a:53:a9:
                    e7:0b:38:de:14:92:d6:3e:7a:a0:fe:e0:e6:e4:61:
                    29:59:67:1d:7a:a3:a0:ec:85:be:16:f9:36:b5:14:
                    cf:17:6b:ab:4b:cb:b8:d3:81:ee:08:83:95:2f:de:
                    e6:f7:dc:31:42:07:cb:ba:39:07:23:a6:8e:66:30:
                    ef:03:3b:f7:b4:af:7e:8a:69:15:86:e3:15:9d:41:
                    f5:1e:af:35:7b:0f:de:32:96:0c:c9:00:5b:ac:78:
                    7f:fb:e7:f7:34:e6:64:41:e4:ee:98:e1:34:cf:fc:
                    84:15:89:f0:38:ba:7c:23:7d:b7:d8:79:f5:2b:68:
                    78:5e:69:f4:59:81:d8:c3:82:89:b8:f1:1c:ea:5b:
                    99:84:6a:ea:b5:af:fe:f5:09:00:9f:26:a4:80:28:
                    1c:c6:ad:ea:7b:da:0c:d8:9a:ff:3b:7e:97:3c:d8:
                    ab:65:ba:ca:c0:36:06:b6:cc:d1:d6:1a:83:86:63:
                    58:5c:81:1e:27:70:80:ea:4e:31:70:ad:2d:c9:b6:
                    79:d3:52:6b:b4:2f:97:c8:8f:3a:1b:1b:d4:91:79:
                    3b:89:15:c5:c2:fb:9a:fd:86:96:33:fd:98:83:43:
                    7b:2e:f4:b9:41:5a:0c:48:b0:70:69:e1:57:0f:ca:
                    2c:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                44:6D:73:FB:98:EB:31:69:2A:6E:9C:9B:FC:79:28:B6:1E:3A:91:48
            X509v3 Authority Key Identifier:
                keyid:B4:93:A5:CE:BF:09:E1:0B:C3:5D:9A:C2:21:1D:AF:D2:09:56:87:DA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/4bdb1e0a-a4ec-49db-be89-8d7e7fc2c227/0/B493A5CEBF09E10BC35D9AC2211DAFD2095687DA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B493A5CEBF09E10BC35D9AC2211DAFD2095687DA.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/4bdb1e0a-a4ec-49db-be89-8d7e7fc2c227/0/323430303a393830303a363031323a3a2f34382d3438203d3e20313339393934.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2400:9800:6012::/48

    Signature Algorithm: sha256WithRSAEncryption
         76:93:1d:1e:ca:ca:a7:83:7a:e9:17:bd:51:f4:63:0c:c1:7f:
         75:cb:df:b8:06:19:e9:74:f4:e3:ca:35:30:62:2e:3a:32:c5:
         03:c9:b3:8d:b8:48:8b:90:35:37:ab:19:3f:3f:8b:88:d7:1a:
         16:5e:64:3a:15:f4:07:e4:68:3a:ae:c7:0b:e6:b8:95:6f:71:
         e0:e6:4b:1d:05:5b:53:f5:0d:bb:7c:59:2e:80:33:cf:3f:06:
         f2:3f:c4:e8:ee:c4:36:88:47:df:e9:a1:53:55:07:42:91:da:
         27:b7:74:10:a5:dd:62:34:a3:c2:4e:1b:3c:83:c3:c3:58:39:
         e1:b9:72:6d:dd:46:eb:6a:0c:12:bd:20:e2:10:04:9a:4d:dd:
         25:85:7f:3d:28:a7:93:85:2c:34:ea:43:1e:75:34:c2:80:61:
         b1:f9:45:d1:79:86:1a:eb:4e:80:d9:dc:2d:4f:fd:41:31:ea:
         9e:b9:cc:c0:2e:68:de:c9:5f:a7:18:07:fd:66:82:c5:e0:be:
         5d:d0:cf:e8:5b:e4:84:46:cf:34:38:c0:cc:49:06:ba:ad:56:
         13:05:ff:04:4a:0f:61:f3:e2:ce:ee:62:37:b3:9d:5c:90:72:
         62:80:aa:19:ec:d4:eb:ed:20:fa:fd:ce:e0:19:ff:bf:77:7e:
         cf:e3:3b:58
-----BEGIN CERTIFICATE-----
MIIHMTCCBhmgAwIBAgIUHEvVBzV/nalsTmT+iDJ6iAgmJUUwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQjQ5M0E1Q0VCRjA5RTEwQkMzNUQ5QUMyMjExREFGRDIw
OTU2ODdEQTAeFw0yMjAxMDgxNzM2MDVaFw0yMzAxMDgxNzQxMDVaMIICLTGCAikw
ggIlBgNVBAMTggIcMzA4MjAxMEEwMjgyMDEwMTAwQ0FDNzVCRkI5MjNFMTI3QUNB
RjM1QzlBNTNBOUU3MEIzOERFMTQ5MkQ2M0U3QUEwRkVFMEU2RTQ2MTI5NTk2NzFE
N0FBM0EwRUM4NUJFMTZGOTM2QjUxNENGMTc2QkFCNEJDQkI4RDM4MUVFMDg4Mzk1
MkZERUU2RjdEQzMxNDIwN0NCQkEzOTA3MjNBNjhFNjYzMEVGMDMzQkY3QjRBRjdF
OEE2OTE1ODZFMzE1OUQ0MUY1MUVBRjM1N0IwRkRFMzI5NjBDQzkwMDVCQUM3ODdG
RkJFN0Y3MzRFNjY0NDFFNEVFOThFMTM0Q0ZGQzg0MTU4OUYwMzhCQTdDMjM3REI3
RDg3OUY1MkI2ODc4NUU2OUY0NTk4MUQ4QzM4Mjg5QjhGMTFDRUE1Qjk5ODQ2QUVB
QjVBRkZFRjUwOTAwOUYyNkE0ODAyODFDQzZBREVBN0JEQTBDRDg5QUZGM0I3RTk3
M0NEOEFCNjVCQUNBQzAzNjA2QjZDQ0QxRDYxQTgzODY2MzU4NUM4MTFFMjc3MDgw
RUE0RTMxNzBBRDJEQzlCNjc5RDM1MjZCQjQyRjk3Qzg4RjNBMUIxQkQ0OTE3OTNC
ODkxNUM1QzJGQjlBRkQ4Njk2MzNGRDk4ODM0MzdCMkVGNEI5NDE1QTBDNDhCMDcw
NjlFMTU3MEZDQTJDMTcwMjAzMDEwMDAxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8A
MIIBCgKCAQEAysdb+5I+EnrK81yaU6nnCzjeFJLWPnqg/uDm5GEpWWcdeqOg7IW+
Fvk2tRTPF2urS8u404HuCIOVL97m99wxQgfLujkHI6aOZjDvAzv3tK9+imkVhuMV
nUH1Hq81ew/eMpYMyQBbrHh/++f3NOZkQeTumOE0z/yEFYnwOLp8I3232Hn1K2h4
Xmn0WYHYw4KJuPEc6luZhGrqta/+9QkAnyakgCgcxq3qe9oM2Jr/O36XPNirZbrK
wDYGtszR1hqDhmNYXIEeJ3CA6k4xcK0tybZ501JrtC+XyI86GxvUkXk7iRXFwvua
/YaWM/2Yg0N7LvS5QVoMSLBwaeFXD8osFwIDAQABo4ICPzCCAjswHQYDVR0OBBYE
FERtc/uY6zFpKm6cm/x5KLYeOpFIMB8GA1UdIwQYMBaAFLSTpc6/CeELw12awiEd
r9IJVofaMA4GA1UdDwEB/wQEAwIHgDCBhQYDVR0fBH4wfDB6oHigdoZ0cnN5bmM6
Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNGJkYjFlMGEtYTRlYy00OWRiLWJl
ODktOGQ3ZTdmYzJjMjI3LzAvQjQ5M0E1Q0VCRjA5RTEwQkMzNUQ5QUMyMjExREFG
RDIwOTU2ODdEQS5jcmwwdAYIKwYBBQUHAQEEaDBmMGQGCCsGAQUFBzAChlhyc3lu
YzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9JRE5JQy1JRC8yL0I0OTNBNUNF
QkYwOUUxMEJDMzVEOUFDMjIxMURBRkQyMDk1Njg3REEuY2VyMIGsBggrBgEFBQcB
CwSBnzCBnDCBmQYIKwYBBQUHMAuGgYxyc3luYzovL3JlcG8tcnBraS5pZG5pYy5u
ZXQvcmVwby80YmRiMWUwYS1hNGVjLTQ5ZGItYmU4OS04ZDdlN2ZjMmMyMjcvMC8z
MjM0MzAzMDNhMzkzODMwMzAzYTM2MzAzMTMyM2EzYTJmMzQzODJkMzQzODIwM2Qz
ZTIwMzEzMzM5MzkzOTM0LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIG
CCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJACYAGASMA0GCSqGSIb3DQEBCwUA
A4IBAQB2kx0eysqng3rpF71R9GMMwX91y9+4BhnpdPTjyjUwYi46MsUDybONuEiL
kDU3qxk/P4uI1xoWXmQ6FfQH5Gg6rscL5riVb3Hg5ksdBVtT9Q27fFkugDPPPwby
P8To7sQ2iEff6aFTVQdCkdont3QQpd1iNKPCThs8g8PDWDnhuXJt3UbragwSvSDi
EASaTd0lhX89KKeThSw06kMedTTCgGGx+UXReYYa606A2dwtT/1BMeqeuczALmje
yV+nGAf9ZoLF4L5d0M/oW+SERs80OMDMSQa6rVYTBf8ESg9h8+LO7mI3s51ckHJi
gKoZ7NTr7SD6/c7gGf+/d37P4ztY
-----END CERTIFICATE-----