Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/3993f350-b756-4916-8d84-484f025dffcc/0/3131322e37382e3135322e302f32342d3234203d3e203137343531.roa
File:                     3131322e37382e3135322e302f32342d3234203d3e203137343531.roa (raw, json)
Hash identifier:          7hJptEzhxHIzfqaYSwpsf8HrklEmrdUPpuvjY1JE5fY=
Subject key identifier:   A2:EA:D5:88:68:7F:7D:5A:CA:11:B0:20:88:00:DB:2D:B5:83:F9:6B
Certificate issuer:       /CN=AC555447BA62C39107F16BF572F82A417F728DBF
Certificate serial:       64FF24B583D5F24E4B8A2F4188BCE6EB189AD54E
Authority key identifier: AC:55:54:47:BA:62:C3:91:07:F1:6B:F5:72:F8:2A:41:7F:72:8D:BF
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AC555447BA62C39107F16BF572F82A417F728DBF.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/3993f350-b756-4916-8d84-484f025dffcc/0/3131322e37382e3135322e302f32342d3234203d3e203137343531.roa
Signing time:             Thu 30 Sep 2021 00:00:34 +0000
ROA not before:           Wed 29 Sep 2021 23:55:34 +0000
ROA not after:            Fri 30 Sep 2022 00:00:34 +0000
asID:                     17451
IP address blocks:        112.78.152.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            64:ff:24:b5:83:d5:f2:4e:4b:8a:2f:41:88:bc:e6:eb:18:9a:d5:4e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AC555447BA62C39107F16BF572F82A417F728DBF
        Validity
            Not Before: Sep 29 23:55:34 2021 GMT
            Not After : Sep 30 00:00:34 2022 GMT
        Subject: CN=3082010A0282010100C5D94DBF9BFC8B4B698DAA301829E9FA7F75BDE88ABA05CCFDD1F23AF8758260AEAAC5D2BB75225B8D1763FB563DD064490FFD43C115B5ECAF555E9C17129B3DEE5A871744C494A8FF8F3BE5E90FD0D44971E1A4C429EF95391D97513BBEFC87D4353735A0AA498CED0FA7DA7415889D2863CB2F951FF4B200D5EC7FCBBA83D5E3B1743953FE862E8FE1D1D9F0FF656A9EECF0F5E456B5113AA04DFCA21290DB58E7DEE212DF1DB25EC7C8F4BA539214140FF7FE35893F000125B1C1C080EF69A316D1DE908B01968EBD9FB4DD5AFF9675994A5AC6446E31F9671F6634D38654D3BA391838836E5C6847C26301F3C5FDF3174FC1BB7FEC19533316410D3DB57B0203010001
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:d9:4d:bf:9b:fc:8b:4b:69:8d:aa:30:18:29:
                    e9:fa:7f:75:bd:e8:8a:ba:05:cc:fd:d1:f2:3a:f8:
                    75:82:60:ae:aa:c5:d2:bb:75:22:5b:8d:17:63:fb:
                    56:3d:d0:64:49:0f:fd:43:c1:15:b5:ec:af:55:5e:
                    9c:17:12:9b:3d:ee:5a:87:17:44:c4:94:a8:ff:8f:
                    3b:e5:e9:0f:d0:d4:49:71:e1:a4:c4:29:ef:95:39:
                    1d:97:51:3b:be:fc:87:d4:35:37:35:a0:aa:49:8c:
                    ed:0f:a7:da:74:15:88:9d:28:63:cb:2f:95:1f:f4:
                    b2:00:d5:ec:7f:cb:ba:83:d5:e3:b1:74:39:53:fe:
                    86:2e:8f:e1:d1:d9:f0:ff:65:6a:9e:ec:f0:f5:e4:
                    56:b5:11:3a:a0:4d:fc:a2:12:90:db:58:e7:de:e2:
                    12:df:1d:b2:5e:c7:c8:f4:ba:53:92:14:14:0f:f7:
                    fe:35:89:3f:00:01:25:b1:c1:c0:80:ef:69:a3:16:
                    d1:de:90:8b:01:96:8e:bd:9f:b4:dd:5a:ff:96:75:
                    99:4a:5a:c6:44:6e:31:f9:67:1f:66:34:d3:86:54:
                    d3:ba:39:18:38:83:6e:5c:68:47:c2:63:01:f3:c5:
                    fd:f3:17:4f:c1:bb:7f:ec:19:53:33:16:41:0d:3d:
                    b5:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A2:EA:D5:88:68:7F:7D:5A:CA:11:B0:20:88:00:DB:2D:B5:83:F9:6B
            X509v3 Authority Key Identifier:
                keyid:AC:55:54:47:BA:62:C3:91:07:F1:6B:F5:72:F8:2A:41:7F:72:8D:BF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/3993f350-b756-4916-8d84-484f025dffcc/0/AC555447BA62C39107F16BF572F82A417F728DBF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AC555447BA62C39107F16BF572F82A417F728DBF.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/3993f350-b756-4916-8d84-484f025dffcc/0/3131322e37382e3135322e302f32342d3234203d3e203137343531.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  112.78.152.0/24

    Signature Algorithm: sha256WithRSAEncryption
         52:7a:2d:fa:ac:9d:e2:14:0e:94:70:ff:64:f4:8a:fb:5f:67:
         d7:f0:4b:58:12:df:6e:4f:8b:d4:0e:2e:5c:db:e2:2a:c4:09:
         66:ec:7b:f1:54:5e:89:0c:6d:17:9c:b4:de:fe:e4:85:63:86:
         36:30:32:20:ef:3d:98:e4:01:cf:e7:ff:41:06:5f:e6:26:5e:
         3c:e6:5e:44:13:05:5b:ab:da:e4:c6:c3:c5:d4:54:a1:38:dc:
         dd:f3:8d:65:68:93:ba:d0:a6:a1:a9:b0:65:59:15:04:91:0d:
         68:24:ce:f1:a8:e6:58:d6:d7:14:30:cc:90:f3:9f:d7:df:ec:
         50:28:2b:e7:6a:58:a8:17:15:6b:26:00:52:aa:c8:47:1e:c6:
         6f:bf:47:eb:55:bd:b5:bc:16:07:77:c8:98:c3:6d:9b:2d:38:
         12:f8:ae:63:1e:8a:98:12:d1:92:c8:c5:4d:67:d9:6e:b6:09:
         c1:12:ed:33:9d:fa:a1:95:92:3d:c9:59:6e:c0:9f:84:f9:a5:
         38:c7:01:c3:0f:ba:2a:ab:36:b0:88:a4:3d:25:53:de:50:61:
         a1:fb:02:22:f1:be:04:08:67:4c:a9:c4:b1:7d:dc:b7:0f:e0:
         90:4b:0c:8c:6b:ba:06:3d:52:e6:7d:01:dd:1b:48:79:98:68:
         a9:f4:74:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----