Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/4bdb1e0a-a4ec-49db-be89-8d7e7fc2c227/0/323430303a393830303a363032373a3a2f34382d3438203d3e20313339393934.roa
File:                     323430303a393830303a363032373a3a2f34382d3438203d3e20313339393934.roa (raw, json)
Hash identifier:          4mBlPLB/bqYDsZc3REgbmX+CDKtqoKtjW7pCyOxvdys=
Subject key identifier:   1C:38:63:74:EB:1C:5A:6E:1A:50:9F:00:55:CA:68:21:1A:73:46:7B
Certificate issuer:       /CN=B493A5CEBF09E10BC35D9AC2211DAFD2095687DA
Certificate serial:       058D98E8E75D4A27A41C3A679770C50906BFF2DB
Authority key identifier: B4:93:A5:CE:BF:09:E1:0B:C3:5D:9A:C2:21:1D:AF:D2:09:56:87:DA
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B493A5CEBF09E10BC35D9AC2211DAFD2095687DA.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/4bdb1e0a-a4ec-49db-be89-8d7e7fc2c227/0/323430303a393830303a363032373a3a2f34382d3438203d3e20313339393934.roa
Signing time:             Sat 08 Jan 2022 17:43:47 +0000
ROA not before:           Sat 08 Jan 2022 17:38:47 +0000
ROA not after:            Sun 08 Jan 2023 17:43:47 +0000
asID:                     139994
IP address blocks:        2400:9800:6027::/48 maxlen: 48

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            05:8d:98:e8:e7:5d:4a:27:a4:1c:3a:67:97:70:c5:09:06:bf:f2:db
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B493A5CEBF09E10BC35D9AC2211DAFD2095687DA
        Validity
            Not Before: Jan  8 17:38:47 2022 GMT
            Not After : Jan  8 17:43:47 2023 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:4e:bf:78:75:2f:0f:98:a6:93:20:7e:b4:f9:
                    e4:a4:00:0e:b5:17:83:b3:43:0c:57:de:48:be:b5:
                    c6:f3:c1:fc:5a:ef:a2:cb:ea:9d:62:37:3e:5d:80:
                    58:2f:4c:63:c7:42:6a:66:1e:69:73:4f:c2:51:0d:
                    4d:f4:dc:ab:1b:56:45:0c:71:62:b5:26:a4:d5:6a:
                    1c:c2:eb:c9:5b:ad:81:5f:aa:6a:ed:d9:e0:81:11:
                    70:e6:29:68:f3:05:14:0d:91:17:5d:37:5c:0d:58:
                    96:d4:a1:c5:8d:43:dc:0c:09:ab:f9:5b:85:7a:ab:
                    b4:36:a5:17:28:f6:af:1b:7a:2a:00:db:7c:20:42:
                    85:47:b2:41:95:31:0a:08:71:28:02:89:d5:37:d3:
                    a6:cf:ee:6e:78:99:40:9b:83:0b:4a:90:57:c7:17:
                    3e:fd:bb:b8:c8:5d:b2:62:98:47:00:ea:91:5d:b5:
                    c9:46:91:19:33:8f:45:17:f3:3a:bb:88:ca:bb:0b:
                    54:0c:6c:73:63:a2:92:07:66:c5:9c:a0:10:63:43:
                    51:bc:e6:d0:9a:30:ff:6c:2e:3a:a9:1e:c7:e2:57:
                    31:ec:ad:8a:98:54:30:46:68:c0:f4:ab:cb:51:b9:
                    6d:14:08:a7:8e:0f:d2:90:e4:a8:f7:b5:7f:b0:e0:
                    2d:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1C:38:63:74:EB:1C:5A:6E:1A:50:9F:00:55:CA:68:21:1A:73:46:7B
            X509v3 Authority Key Identifier:
                keyid:B4:93:A5:CE:BF:09:E1:0B:C3:5D:9A:C2:21:1D:AF:D2:09:56:87:DA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/4bdb1e0a-a4ec-49db-be89-8d7e7fc2c227/0/B493A5CEBF09E10BC35D9AC2211DAFD2095687DA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B493A5CEBF09E10BC35D9AC2211DAFD2095687DA.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/4bdb1e0a-a4ec-49db-be89-8d7e7fc2c227/0/323430303a393830303a363032373a3a2f34382d3438203d3e20313339393934.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2400:9800:6027::/48

    Signature Algorithm: sha256WithRSAEncryption
         01:c8:fb:c8:99:7f:6b:b1:eb:c7:fb:1d:a6:16:14:d6:7c:72:
         d6:c6:a5:d4:62:66:6d:35:91:4d:e3:ac:f9:c2:de:f7:f3:b1:
         68:1a:23:8a:8d:c8:e7:0f:da:9a:52:06:e9:c2:d7:3b:3b:37:
         3f:bc:a7:f5:fa:cc:65:17:cd:90:c1:da:a5:fc:e0:3b:a2:bb:
         57:ff:92:09:f7:e5:54:63:79:fb:fc:be:7f:2e:6e:c7:bc:80:
         ac:66:81:e7:7c:e4:89:bf:7f:d1:34:1b:de:86:fb:65:0a:5a:
         68:b8:cf:d5:3a:79:98:b2:88:cd:9e:0c:2c:5b:e6:5f:a0:05:
         bf:fb:35:7f:2e:29:56:b9:51:6f:3d:8b:65:87:ea:30:00:f4:
         a9:1d:7e:9d:65:66:72:80:41:70:17:19:f7:98:e2:58:ee:93:
         af:de:4a:0d:49:92:80:0f:b1:14:6d:b3:e0:df:e5:a8:27:ee:
         9c:7b:98:55:51:33:7c:32:57:57:3f:58:33:d3:27:64:94:31:
         ab:de:d3:94:e0:fb:ef:7a:e7:5c:bc:53:d1:65:6e:51:23:03:
         60:62:62:9a:c0:04:9a:bf:04:71:7f:2f:57:7d:0d:68:bb:6a:
         f3:c3:1f:43:be:4b:76:1e:e7:2a:ff:1d:2b:8a:16:40:3d:3e:
         51:5d:47:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----