Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/4bdb1e0a-a4ec-49db-be89-8d7e7fc2c227/0/323430303a393830303a363032363a3a2f34382d3438203d3e20313339393934.roa
File:                     323430303a393830303a363032363a3a2f34382d3438203d3e20313339393934.roa (raw, json)
Hash identifier:          DzzFzhJK139dP06rwwOfotXneJGSluhYyBdE/LDUXE8=
Subject key identifier:   2C:F1:9B:6B:1E:F2:51:55:B8:A7:A9:2B:B3:5E:4E:92:06:60:8C:E1
Certificate issuer:       /CN=B493A5CEBF09E10BC35D9AC2211DAFD2095687DA
Certificate serial:       4077952C172E320954FDE38F5331003F94E9152A
Authority key identifier: B4:93:A5:CE:BF:09:E1:0B:C3:5D:9A:C2:21:1D:AF:D2:09:56:87:DA
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B493A5CEBF09E10BC35D9AC2211DAFD2095687DA.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/4bdb1e0a-a4ec-49db-be89-8d7e7fc2c227/0/323430303a393830303a363032363a3a2f34382d3438203d3e20313339393934.roa
Signing time:             Sat 08 Jan 2022 17:43:17 +0000
ROA not before:           Sat 08 Jan 2022 17:38:17 +0000
ROA not after:            Sun 08 Jan 2023 17:43:17 +0000
asID:                     139994
IP address blocks:        2400:9800:6026::/48 maxlen: 48

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            40:77:95:2c:17:2e:32:09:54:fd:e3:8f:53:31:00:3f:94:e9:15:2a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B493A5CEBF09E10BC35D9AC2211DAFD2095687DA
        Validity
            Not Before: Jan  8 17:38:17 2022 GMT
            Not After : Jan  8 17:43:17 2023 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:8e:8b:c6:b8:18:b0:a6:fd:bc:1a:5b:de:54:
                    53:00:6d:3c:6e:5b:d3:32:82:74:82:da:46:b0:a1:
                    74:b1:39:df:bc:82:78:4c:72:ce:fa:f6:e3:f9:57:
                    1c:de:b9:55:67:82:dd:01:fe:62:8a:62:9d:7f:ca:
                    01:18:db:25:25:60:8e:ce:75:85:f6:a5:51:04:45:
                    6f:08:f0:16:cd:71:38:e6:a9:db:65:3f:42:65:1f:
                    ca:1e:97:2e:e9:a9:8f:e5:f4:d1:0e:d9:39:be:a0:
                    73:de:6f:d3:00:bc:60:c3:d3:54:f7:be:cc:74:97:
                    0c:a9:bd:80:19:c0:c9:12:da:e2:8b:d8:de:c6:f1:
                    c6:20:f3:0f:39:d5:f6:0d:25:ea:b9:ab:11:89:7f:
                    a2:30:66:7f:01:bb:40:cc:95:e9:53:7d:d7:f4:e8:
                    76:6b:b1:02:e6:7d:22:fd:aa:cb:33:84:c5:03:33:
                    e1:0f:2e:45:67:27:5d:9a:5f:43:f1:f7:55:96:a0:
                    6a:92:1d:54:75:05:03:36:bb:8f:b3:dd:e8:03:0c:
                    17:1e:6d:2e:c1:3f:a7:34:a3:4b:05:7d:9e:c4:2e:
                    e0:c1:6a:4a:2f:1f:32:d0:00:88:a1:80:85:d5:f6:
                    0c:19:96:12:37:f0:54:89:c5:72:76:04:a9:e0:81:
                    b0:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2C:F1:9B:6B:1E:F2:51:55:B8:A7:A9:2B:B3:5E:4E:92:06:60:8C:E1
            X509v3 Authority Key Identifier:
                keyid:B4:93:A5:CE:BF:09:E1:0B:C3:5D:9A:C2:21:1D:AF:D2:09:56:87:DA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/4bdb1e0a-a4ec-49db-be89-8d7e7fc2c227/0/B493A5CEBF09E10BC35D9AC2211DAFD2095687DA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B493A5CEBF09E10BC35D9AC2211DAFD2095687DA.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/4bdb1e0a-a4ec-49db-be89-8d7e7fc2c227/0/323430303a393830303a363032363a3a2f34382d3438203d3e20313339393934.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2400:9800:6026::/48

    Signature Algorithm: sha256WithRSAEncryption
         56:04:21:6a:43:ce:93:2f:d6:92:85:62:b0:50:d5:89:75:a1:
         c8:5b:09:bb:48:fe:73:2b:49:2c:98:c8:dd:ee:ba:ea:dc:c9:
         39:17:b1:40:9b:ba:da:36:e8:4c:11:04:af:15:17:4f:14:cb:
         85:a6:40:40:fe:45:34:df:ea:e8:d8:8b:e1:cc:74:50:3f:18:
         2d:18:ec:db:04:42:cf:c9:82:e7:c6:31:14:f3:37:1a:61:87:
         e2:f3:e4:10:fe:e4:d3:49:c9:0d:72:b5:d7:f9:c5:92:23:ed:
         a6:a7:4e:bd:fe:c5:c7:a4:33:01:59:03:ef:7d:85:42:bb:a4:
         16:4e:c6:bc:d5:2f:69:14:62:be:87:31:04:45:12:78:7d:5d:
         f0:1b:d1:1f:a0:e7:3a:b5:ee:69:ae:72:bf:4c:fa:51:03:bd:
         8b:d7:da:eb:43:35:61:90:20:a2:72:0a:ee:e2:8e:ce:7a:35:
         fc:9d:42:dd:b1:5c:60:36:8e:9e:91:9d:72:40:8f:84:f4:08:
         2a:9e:c4:10:9e:cc:f7:07:9d:bd:75:05:b5:c7:3f:eb:18:ea:
         8e:a9:c4:00:67:d5:a1:9b:5f:52:af:af:e4:13:20:ff:4b:51:
         98:99:cc:8a:bc:c8:d1:2a:dc:64:b2:f0:55:f9:12:da:fd:e6:
         bc:08:f7:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----