Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/2d3ec84e-60ef-44d4-9f43-85b6f96b26cf/0/3130332e3232372e3134342e302f32322d3234203d3e203539313535.roa
File:                     3130332e3232372e3134342e302f32322d3234203d3e203539313535.roa (raw, json)
Hash identifier:          f7g4hpMvljrfA3+wCELZT0zABzfoICduD2tlucnFg8U=
Subject key identifier:   DC:E0:52:89:10:86:A4:23:4E:45:42:AD:8B:B5:B0:D4:27:1D:9C:DB
Certificate issuer:       /CN=114C9E7EA91F6387C2CBF1D16EA824580CD68587
Certificate serial:       288820070F413EFECC3E1E82391BFC5CAAD70065
Authority key identifier: 11:4C:9E:7E:A9:1F:63:87:C2:CB:F1:D1:6E:A8:24:58:0C:D6:85:87
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/114C9E7EA91F6387C2CBF1D16EA824580CD68587.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/2d3ec84e-60ef-44d4-9f43-85b6f96b26cf/0/3130332e3232372e3134342e302f32322d3234203d3e203539313535.roa
Signing time:             Sat 25 Sep 2021 22:03:06 +0000
ROA not before:           Sat 25 Sep 2021 21:58:06 +0000
ROA not after:            Sun 25 Sep 2022 22:03:06 +0000
asID:                     59155
IP address blocks:        103.227.144.0/22 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            28:88:20:07:0f:41:3e:fe:cc:3e:1e:82:39:1b:fc:5c:aa:d7:00:65
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=114C9E7EA91F6387C2CBF1D16EA824580CD68587
        Validity
            Not Before: Sep 25 21:58:06 2021 GMT
            Not After : Sep 25 22:03:06 2022 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:ba:9b:a3:f1:27:3d:c2:3d:b3:68:cf:9b:a0:
                    7d:36:42:c3:22:db:d3:98:73:32:b3:cf:5e:c6:58:
                    26:da:07:65:96:ee:a5:50:23:17:ac:2a:13:df:80:
                    ff:9e:d0:99:28:45:60:2f:1f:a4:00:cb:20:76:e5:
                    d2:4a:61:bf:24:9b:48:fc:ac:83:ff:a3:a3:a5:0e:
                    1e:1f:94:04:fe:da:00:6a:ac:ed:2c:b1:ec:7b:c4:
                    03:47:00:0f:f6:e0:82:35:b7:d3:60:cf:95:5c:52:
                    32:e1:0b:aa:17:65:8d:43:8c:e1:34:63:89:20:9b:
                    8f:47:ca:99:8b:47:b2:2a:98:ff:d7:34:b7:eb:95:
                    73:e1:e5:48:7b:f2:d5:39:c3:d2:ca:ba:15:91:ca:
                    dc:6b:ae:bf:18:6e:3c:bc:c2:9f:a5:78:7b:bd:d9:
                    04:83:12:81:00:98:ac:59:42:75:4d:98:3a:5b:cd:
                    e8:f1:3c:79:42:df:0e:19:3b:7d:2d:6a:08:aa:d5:
                    fa:26:24:03:3c:af:14:91:fa:ab:e8:9d:1c:43:76:
                    fc:cd:af:d2:9a:75:8e:a2:72:b9:9a:89:56:b5:89:
                    40:a9:9a:69:9b:2c:71:49:75:2a:ee:fc:2f:78:74:
                    5c:11:25:2b:8e:ab:a7:e4:d2:e9:16:83:5e:60:99:
                    1e:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DC:E0:52:89:10:86:A4:23:4E:45:42:AD:8B:B5:B0:D4:27:1D:9C:DB
            X509v3 Authority Key Identifier:
                keyid:11:4C:9E:7E:A9:1F:63:87:C2:CB:F1:D1:6E:A8:24:58:0C:D6:85:87

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/2d3ec84e-60ef-44d4-9f43-85b6f96b26cf/0/114C9E7EA91F6387C2CBF1D16EA824580CD68587.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/114C9E7EA91F6387C2CBF1D16EA824580CD68587.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/2d3ec84e-60ef-44d4-9f43-85b6f96b26cf/0/3130332e3232372e3134342e302f32322d3234203d3e203539313535.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.227.144.0/22

    Signature Algorithm: sha256WithRSAEncryption
         5e:f8:95:f9:31:9e:b1:32:e7:0f:d8:34:34:7f:ed:11:1a:21:
         b1:de:a0:cc:d2:5a:a7:8e:5e:a9:3e:16:18:17:79:b8:32:b9:
         a8:d9:d4:94:a9:63:c4:7f:36:93:33:80:71:f7:6a:f0:60:90:
         27:19:aa:57:76:d3:15:bf:ea:6f:82:7d:0f:40:88:c2:53:60:
         e4:60:b7:cd:a5:00:58:79:20:77:36:ce:01:73:3a:69:cf:67:
         a9:03:4d:0e:8d:c4:1d:2f:62:bd:01:e4:4d:ca:2d:f3:b0:29:
         97:2d:ab:db:75:aa:2a:c6:48:f6:95:71:83:92:c6:57:47:7a:
         86:e6:7f:2c:14:a7:22:ed:d7:75:41:c6:6e:06:87:05:87:fe:
         0a:66:ab:17:37:dc:ce:a9:a0:f4:ea:4a:b5:db:cd:6d:b5:38:
         20:c4:4c:ee:b8:77:ac:5a:36:c7:ed:9c:d6:f6:23:a0:b5:b2:
         19:10:f5:1a:50:f2:44:35:0d:ed:c7:aa:83:55:9e:7c:c0:ae:
         88:68:6e:f9:98:fb:c9:c3:ad:ab:8c:ea:20:98:d7:10:37:2e:
         4f:1e:62:d8:9f:88:97:1b:9a:7a:5a:2c:3b:d7:a9:bd:b5:6c:
         f4:36:e9:1a:c4:04:ba:bd:a4:41:c5:0e:c6:35:38:f5:09:58:
         d5:ab:5b:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----