Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/4bdb1e0a-a4ec-49db-be89-8d7e7fc2c227/0/323430303a393830303a363031353a3a2f34382d3438203d3e20313339393934.roa
File:                     323430303a393830303a363031353a3a2f34382d3438203d3e20313339393934.roa (raw, json)
Hash identifier:          FkK4YDoR5SYn70m1f5l6Cmo4yZrmydvA50RfUIkQwEM=
Subject key identifier:   90:8B:0C:D9:CC:57:E4:92:FF:8C:D9:16:66:16:82:50:55:B4:A2:C2
Certificate issuer:       /CN=B493A5CEBF09E10BC35D9AC2211DAFD2095687DA
Certificate serial:       4A502CC22BBB94D00F5F8A44C6F278E557C2C189
Authority key identifier: B4:93:A5:CE:BF:09:E1:0B:C3:5D:9A:C2:21:1D:AF:D2:09:56:87:DA
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B493A5CEBF09E10BC35D9AC2211DAFD2095687DA.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/4bdb1e0a-a4ec-49db-be89-8d7e7fc2c227/0/323430303a393830303a363031353a3a2f34382d3438203d3e20313339393934.roa
Signing time:             Sat 08 Jan 2022 17:42:46 +0000
ROA not before:           Sat 08 Jan 2022 17:37:46 +0000
ROA not after:            Sun 08 Jan 2023 17:42:46 +0000
asID:                     139994
IP address blocks:        2400:9800:6015::/48 maxlen: 48

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4a:50:2c:c2:2b:bb:94:d0:0f:5f:8a:44:c6:f2:78:e5:57:c2:c1:89
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B493A5CEBF09E10BC35D9AC2211DAFD2095687DA
        Validity
            Not Before: Jan  8 17:37:46 2022 GMT
            Not After : Jan  8 17:42:46 2023 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:94:e0:ee:9d:57:61:30:d6:fc:41:4f:f3:1a:
                    0e:49:e9:82:37:68:06:52:24:cb:cd:22:5f:fe:00:
                    37:42:7a:6a:09:29:bf:89:d0:f3:7b:eb:87:fc:44:
                    c0:ed:de:79:2e:c8:c1:bf:77:b0:3e:6a:60:30:dc:
                    c6:c9:a2:80:e6:cf:0e:24:fc:6a:c1:90:3a:29:35:
                    e3:0e:dd:11:06:26:3a:8f:5b:18:9e:fb:53:b5:9b:
                    1e:06:8c:19:a1:6b:4c:8b:78:10:77:75:df:42:a6:
                    a1:3e:14:9c:87:e9:22:85:5f:63:9e:d8:b6:e5:eb:
                    ab:e2:14:4f:dc:3c:4c:5e:89:4f:fc:58:2d:3e:57:
                    9a:b7:5a:2d:a3:84:c7:e0:61:8a:ce:06:f7:de:1a:
                    f4:3a:31:f4:56:22:74:01:22:74:eb:95:c5:44:1f:
                    91:3e:1b:8d:25:18:da:5f:fa:5e:af:69:55:08:bc:
                    22:c7:48:e8:38:da:0a:54:ee:27:18:eb:c1:c5:9c:
                    83:a5:39:55:3a:be:9d:e9:0b:6e:33:46:fc:d4:ac:
                    3e:6a:3b:48:da:bb:bc:a3:7e:4c:f4:15:e1:3c:48:
                    01:bd:a4:ea:f2:9b:64:29:78:b6:b8:73:19:86:0e:
                    fe:e9:bc:73:ae:e0:7b:81:e9:2f:6b:58:95:3b:bd:
                    77:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                90:8B:0C:D9:CC:57:E4:92:FF:8C:D9:16:66:16:82:50:55:B4:A2:C2
            X509v3 Authority Key Identifier:
                keyid:B4:93:A5:CE:BF:09:E1:0B:C3:5D:9A:C2:21:1D:AF:D2:09:56:87:DA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/4bdb1e0a-a4ec-49db-be89-8d7e7fc2c227/0/B493A5CEBF09E10BC35D9AC2211DAFD2095687DA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B493A5CEBF09E10BC35D9AC2211DAFD2095687DA.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/4bdb1e0a-a4ec-49db-be89-8d7e7fc2c227/0/323430303a393830303a363031353a3a2f34382d3438203d3e20313339393934.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2400:9800:6015::/48

    Signature Algorithm: sha256WithRSAEncryption
         33:95:a9:86:38:fd:29:d9:23:82:61:44:cc:68:e4:2c:39:4b:
         07:10:fe:a8:ff:ae:30:4a:95:68:a9:4f:cb:97:4d:6e:95:30:
         07:e3:c7:a3:9d:3e:48:ca:25:e2:51:fb:54:4c:f4:2f:3c:28:
         3c:07:4a:39:af:7d:a3:bf:ea:60:00:2b:52:4d:41:0a:5c:3d:
         ea:37:a9:29:cb:0f:86:09:25:3e:7c:e1:a7:f7:87:b0:2c:11:
         f5:4a:8e:3f:bd:12:5a:6d:bb:a1:4e:f7:2c:93:5c:52:60:89:
         cb:b3:6f:d2:08:22:6a:88:da:ec:d4:b8:51:96:9e:7c:3e:98:
         ed:4f:0c:f7:b7:2a:b8:19:0b:0d:cf:b5:14:0d:8b:b7:8e:a1:
         89:0c:44:d1:d5:85:95:62:3d:c4:25:88:fe:94:de:6f:38:52:
         79:35:49:4c:81:1c:91:a5:59:5a:2b:10:fd:11:61:21:fc:aa:
         25:7f:b3:70:4a:c6:89:88:27:06:da:8e:ba:b3:46:a8:84:bc:
         e0:5e:84:1e:0d:f1:31:2c:11:28:48:b9:9b:77:ec:cd:0b:68:
         03:b7:9b:6c:61:c6:45:03:64:95:86:a3:3f:6d:69:84:94:c5:
         bc:39:fd:91:c0:89:e6:12:0c:4e:bb:2c:19:09:f3:7b:dd:70:
         82:fc:4b:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----