Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/4bdb1e0a-a4ec-49db-be89-8d7e7fc2c227/0/323430303a393830303a363031343a3a2f34382d3438203d3e20313339393934.roa
File:                     323430303a393830303a363031343a3a2f34382d3438203d3e20313339393934.roa (raw, json)
Hash identifier:          hy1xzxHe3why1/3KOAAZgw5EyjubXBd+FsHetuyUYEM=
Subject key identifier:   85:99:C9:2C:6D:04:CB:91:D0:A3:FC:1B:52:7E:7D:CA:81:05:52:71
Certificate issuer:       /CN=B493A5CEBF09E10BC35D9AC2211DAFD2095687DA
Certificate serial:       4368BDCCA40B0ADE1F1C0FBB33890CCF67107448
Authority key identifier: B4:93:A5:CE:BF:09:E1:0B:C3:5D:9A:C2:21:1D:AF:D2:09:56:87:DA
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B493A5CEBF09E10BC35D9AC2211DAFD2095687DA.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/4bdb1e0a-a4ec-49db-be89-8d7e7fc2c227/0/323430303a393830303a363031343a3a2f34382d3438203d3e20313339393934.roa
Signing time:             Sat 08 Jan 2022 17:42:17 +0000
ROA not before:           Sat 08 Jan 2022 17:37:17 +0000
ROA not after:            Sun 08 Jan 2023 17:42:17 +0000
asID:                     139994
IP address blocks:        2400:9800:6014::/48 maxlen: 48

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            43:68:bd:cc:a4:0b:0a:de:1f:1c:0f:bb:33:89:0c:cf:67:10:74:48
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B493A5CEBF09E10BC35D9AC2211DAFD2095687DA
        Validity
            Not Before: Jan  8 17:37:17 2022 GMT
            Not After : Jan  8 17:42:17 2023 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:74:87:0c:9f:a5:d5:32:bc:36:59:c0:39:a5:
                    7c:f0:42:fe:bf:34:56:2a:18:66:89:70:ca:c1:1f:
                    ec:e6:1e:a2:9c:37:dd:1e:0f:99:1f:f7:e8:7b:d6:
                    23:10:e7:fd:bf:bc:41:f3:90:f2:95:64:87:a6:76:
                    16:5b:fd:c7:a3:ae:24:96:84:2b:27:58:1b:0c:51:
                    76:af:70:ea:c3:4d:80:3d:73:0e:ea:29:24:83:c6:
                    bf:9f:b3:06:f9:0d:85:b8:e6:8d:96:ec:1c:d1:13:
                    35:aa:b5:c4:07:ae:ad:5a:c5:ec:d0:8f:2a:b2:07:
                    5c:20:ff:92:9d:a9:2d:a4:7f:66:21:f9:2a:31:7e:
                    00:84:37:2f:f1:84:a0:86:1e:d7:60:f5:56:16:a6:
                    19:32:f2:d5:f6:0c:bb:d9:a0:95:d7:a6:c4:aa:ae:
                    47:16:42:ef:52:f8:18:0f:ae:4d:f2:a9:96:50:7e:
                    d7:23:b8:7a:51:4a:50:0d:41:a0:f5:ff:69:bd:da:
                    01:43:0d:90:5e:e1:92:d7:1a:07:51:1a:fc:c1:4f:
                    78:de:2c:1d:88:04:18:09:50:43:c2:d6:90:65:a6:
                    aa:2e:d7:fa:b3:ba:5a:27:dc:01:21:a7:4b:fb:96:
                    fd:c3:32:50:ea:f9:16:a8:92:d2:e9:01:eb:fc:43:
                    97:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                85:99:C9:2C:6D:04:CB:91:D0:A3:FC:1B:52:7E:7D:CA:81:05:52:71
            X509v3 Authority Key Identifier:
                keyid:B4:93:A5:CE:BF:09:E1:0B:C3:5D:9A:C2:21:1D:AF:D2:09:56:87:DA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/4bdb1e0a-a4ec-49db-be89-8d7e7fc2c227/0/B493A5CEBF09E10BC35D9AC2211DAFD2095687DA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B493A5CEBF09E10BC35D9AC2211DAFD2095687DA.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/4bdb1e0a-a4ec-49db-be89-8d7e7fc2c227/0/323430303a393830303a363031343a3a2f34382d3438203d3e20313339393934.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2400:9800:6014::/48

    Signature Algorithm: sha256WithRSAEncryption
         a5:8d:a7:d1:a0:00:cd:99:25:40:82:33:5f:6e:a1:73:59:53:
         41:26:54:5f:f7:7d:e9:28:d6:39:72:52:38:7b:18:18:52:ab:
         62:6a:f9:22:18:80:01:f1:3b:60:bd:92:9f:7c:7e:85:6d:57:
         89:be:3b:d7:62:07:d2:74:81:6d:c5:ad:61:a3:1b:6f:14:61:
         5d:a9:54:52:e5:99:14:64:b8:b2:f1:95:d7:1b:da:f6:d2:e8:
         0c:dc:95:ad:ea:12:f4:fc:c6:93:c9:ae:6b:58:66:ab:db:76:
         23:6c:8f:87:c6:51:08:0a:59:cd:10:64:e7:b5:58:24:fb:f2:
         66:15:34:46:91:8f:44:a8:9d:0a:cb:e1:b8:a1:76:3f:3c:26:
         95:3f:d6:7f:09:04:79:69:52:1c:2e:47:a1:c7:89:88:f9:5e:
         91:60:61:20:63:c0:ff:cf:ce:d1:57:b9:0f:b9:76:64:2a:55:
         27:2a:b6:51:36:ad:92:f4:0e:3b:98:0f:0f:74:7d:90:85:af:
         e8:95:d1:a5:2d:b1:52:3a:b9:6e:36:81:26:a1:26:11:be:92:
         18:57:ea:af:64:06:47:8b:95:d4:93:5b:6a:7b:00:a8:d4:9c:
         62:21:9f:11:be:0e:df:0f:7e:30:ff:7e:38:a1:a2:d9:9c:b4:
         e0:af:15:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----