Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/4bdb1e0a-a4ec-49db-be89-8d7e7fc2c227/0/323430303a393830303a363031333a3a2f34382d3438203d3e20313339393934.roa
File:                     323430303a393830303a363031333a3a2f34382d3438203d3e20313339393934.roa (raw, json)
Hash identifier:          pQipQPhKA/K4BK5GOyZ67TpJWLdHPLkVRWGNs1jLhPc=
Subject key identifier:   A5:7C:51:4D:5B:FB:94:D3:BE:3D:88:90:DC:33:43:33:61:AA:DA:06
Certificate issuer:       /CN=B493A5CEBF09E10BC35D9AC2211DAFD2095687DA
Certificate serial:       1A4700091DF7ED732C97F33E88679A15211B1420
Authority key identifier: B4:93:A5:CE:BF:09:E1:0B:C3:5D:9A:C2:21:1D:AF:D2:09:56:87:DA
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B493A5CEBF09E10BC35D9AC2211DAFD2095687DA.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/4bdb1e0a-a4ec-49db-be89-8d7e7fc2c227/0/323430303a393830303a363031333a3a2f34382d3438203d3e20313339393934.roa
Signing time:             Sat 08 Jan 2022 17:41:32 +0000
ROA not before:           Sat 08 Jan 2022 17:36:32 +0000
ROA not after:            Sun 08 Jan 2023 17:41:32 +0000
asID:                     139994
IP address blocks:        2400:9800:6013::/48 maxlen: 48

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1a:47:00:09:1d:f7:ed:73:2c:97:f3:3e:88:67:9a:15:21:1b:14:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B493A5CEBF09E10BC35D9AC2211DAFD2095687DA
        Validity
            Not Before: Jan  8 17:36:32 2022 GMT
            Not After : Jan  8 17:41:32 2023 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:cf:6a:28:3e:b3:28:0c:56:52:48:d5:3c:94:
                    35:e5:af:a0:29:91:37:a1:bb:be:e3:09:a6:84:27:
                    48:43:71:31:fa:7c:77:53:aa:05:c4:3b:c0:ee:ef:
                    e7:d2:6f:cd:dc:5b:cc:b6:e8:e6:29:75:c6:52:22:
                    29:09:09:e0:87:9a:c8:30:ca:f5:d0:a3:ac:a9:ba:
                    c0:26:a5:2a:0a:6c:f3:31:75:64:3d:95:09:d3:7d:
                    e4:ff:c1:ec:9d:e3:56:b9:29:d6:e7:a0:e8:21:28:
                    04:89:2c:73:2e:38:ba:77:23:f0:8b:2e:0e:66:fb:
                    b3:53:d2:bb:30:60:5c:ca:e0:9a:ad:dd:3b:1d:eb:
                    ba:5b:2b:1f:47:ee:76:c4:b4:7d:8d:67:60:dd:47:
                    58:81:38:97:33:67:21:3b:b9:80:74:1d:63:56:3d:
                    bd:3b:9e:14:9e:4a:90:fd:18:7a:f4:eb:32:2e:4d:
                    cd:d6:ed:4a:c8:9b:4f:33:58:a6:b7:0e:87:f3:67:
                    f5:25:36:c0:1c:f6:fa:2a:97:f1:a8:a4:28:70:b1:
                    71:5c:26:2a:89:ba:c4:a9:2a:ac:42:41:6e:a5:3f:
                    ed:7c:c0:51:a9:30:97:3e:ae:27:7d:22:e4:db:e4:
                    2d:db:e1:06:26:9e:b1:e8:d2:2e:d7:ab:fa:d8:95:
                    8f:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A5:7C:51:4D:5B:FB:94:D3:BE:3D:88:90:DC:33:43:33:61:AA:DA:06
            X509v3 Authority Key Identifier:
                keyid:B4:93:A5:CE:BF:09:E1:0B:C3:5D:9A:C2:21:1D:AF:D2:09:56:87:DA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/4bdb1e0a-a4ec-49db-be89-8d7e7fc2c227/0/B493A5CEBF09E10BC35D9AC2211DAFD2095687DA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B493A5CEBF09E10BC35D9AC2211DAFD2095687DA.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/4bdb1e0a-a4ec-49db-be89-8d7e7fc2c227/0/323430303a393830303a363031333a3a2f34382d3438203d3e20313339393934.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2400:9800:6013::/48

    Signature Algorithm: sha256WithRSAEncryption
         18:bf:a1:85:48:22:7c:5a:6f:e2:7f:c9:d0:02:9c:93:ff:84:
         3f:aa:05:ff:b8:a5:ee:2d:52:ef:c4:54:e3:c4:69:66:59:19:
         06:d9:41:c4:d5:fb:a5:ae:ec:44:82:d3:c7:3c:d7:b8:46:69:
         20:10:1c:0d:b0:38:a6:90:28:27:09:c3:d6:c7:f0:27:36:4d:
         34:c9:74:f2:87:77:cb:75:14:45:2f:00:d1:e8:f3:49:87:1a:
         1b:e8:57:f3:98:ba:fd:32:81:8c:90:4e:50:03:de:3a:b7:fc:
         fa:f1:4f:11:b9:6f:70:1a:6d:91:1b:dd:27:c5:47:1e:af:83:
         2a:ec:e1:1a:ea:27:e8:88:e4:de:54:be:c8:00:5b:43:e9:01:
         b1:15:a1:09:db:3a:b7:07:d8:e0:7c:a0:5d:40:c1:d1:54:23:
         ab:df:38:32:c2:76:40:e9:96:7e:01:7e:29:1d:32:93:63:fb:
         8f:e6:bf:f9:a9:c1:4e:01:a3:bf:9a:0d:00:12:c6:2d:20:9c:
         c0:76:84:66:6f:47:d4:7a:9c:89:f6:01:53:86:6d:2a:36:d7:
         6a:b2:10:cc:66:40:5c:1d:75:3e:6b:bb:5c:10:2a:08:22:26:
         e7:8f:4f:68:c3:fe:4b:52:7e:c9:77:15:a0:60:74:10:98:ac:
         f0:d2:40:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----