Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/3993f350-b756-4916-8d84-484f025dffcc/0/3131372e3130322e3130322e302f32342d3234203d3e203137343531.roa
File:                     3131372e3130322e3130322e302f32342d3234203d3e203137343531.roa (raw, json)
Hash identifier:          tLyfCKXENPFmjDyxhbkgvEezc1pQ+RqC/ywSM5DHoRc=
Subject key identifier:   86:3A:80:6A:12:DF:A8:D3:46:D2:44:38:05:B6:31:A1:4E:3B:3D:EF
Certificate issuer:       /CN=AC555447BA62C39107F16BF572F82A417F728DBF
Certificate serial:       549C43143BC21B7C420A44C24DD5EF08A342587E
Authority key identifier: AC:55:54:47:BA:62:C3:91:07:F1:6B:F5:72:F8:2A:41:7F:72:8D:BF
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AC555447BA62C39107F16BF572F82A417F728DBF.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/3993f350-b756-4916-8d84-484f025dffcc/0/3131372e3130322e3130322e302f32342d3234203d3e203137343531.roa
Signing time:             Thu 30 Sep 2021 00:00:45 +0000
ROA not before:           Wed 29 Sep 2021 23:55:45 +0000
ROA not after:            Fri 30 Sep 2022 00:00:45 +0000
asID:                     17451
IP address blocks:        117.102.102.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            54:9c:43:14:3b:c2:1b:7c:42:0a:44:c2:4d:d5:ef:08:a3:42:58:7e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AC555447BA62C39107F16BF572F82A417F728DBF
        Validity
            Not Before: Sep 29 23:55:45 2021 GMT
            Not After : Sep 30 00:00:45 2022 GMT
        Subject: CN=3082010A0282010100ED5BB35B3D3FB0E72B83F95ABEF87ADE7984287FD77C9A9A75774B8149B763A7E4D5A260A8214338C27E53D340A7E520E4D1FF8885D93B32061FE25029B8A2E1953E8A512296F38A690550635336BC34BC931864051FB518828C036DED3F5EA8BD73E350B3DE2D1C663AF3C58CDED9885B0010CA7D5FD4A878D79076EE8152F1B9C5313647C12E87783F2A167EE1CAE290FEE9AA4ECDA6E02EEDBAFE866040A68812C5C80E876C758408CC2F2D734AC54E4D4CD8D37591FF650AAD8F47F865A7E6DA260F05E2340F6632FEA8580E10497C98AC036C6935A94588528CFF5AF57C19D972C5DBECEEE766BC4D4F2811D4DAAD5858719833AC609077E89EF2A5D4BB0203010001
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ed:5b:b3:5b:3d:3f:b0:e7:2b:83:f9:5a:be:f8:
                    7a:de:79:84:28:7f:d7:7c:9a:9a:75:77:4b:81:49:
                    b7:63:a7:e4:d5:a2:60:a8:21:43:38:c2:7e:53:d3:
                    40:a7:e5:20:e4:d1:ff:88:85:d9:3b:32:06:1f:e2:
                    50:29:b8:a2:e1:95:3e:8a:51:22:96:f3:8a:69:05:
                    50:63:53:36:bc:34:bc:93:18:64:05:1f:b5:18:82:
                    8c:03:6d:ed:3f:5e:a8:bd:73:e3:50:b3:de:2d:1c:
                    66:3a:f3:c5:8c:de:d9:88:5b:00:10:ca:7d:5f:d4:
                    a8:78:d7:90:76:ee:81:52:f1:b9:c5:31:36:47:c1:
                    2e:87:78:3f:2a:16:7e:e1:ca:e2:90:fe:e9:aa:4e:
                    cd:a6:e0:2e:ed:ba:fe:86:60:40:a6:88:12:c5:c8:
                    0e:87:6c:75:84:08:cc:2f:2d:73:4a:c5:4e:4d:4c:
                    d8:d3:75:91:ff:65:0a:ad:8f:47:f8:65:a7:e6:da:
                    26:0f:05:e2:34:0f:66:32:fe:a8:58:0e:10:49:7c:
                    98:ac:03:6c:69:35:a9:45:88:52:8c:ff:5a:f5:7c:
                    19:d9:72:c5:db:ec:ee:e7:66:bc:4d:4f:28:11:d4:
                    da:ad:58:58:71:98:33:ac:60:90:77:e8:9e:f2:a5:
                    d4:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                86:3A:80:6A:12:DF:A8:D3:46:D2:44:38:05:B6:31:A1:4E:3B:3D:EF
            X509v3 Authority Key Identifier:
                keyid:AC:55:54:47:BA:62:C3:91:07:F1:6B:F5:72:F8:2A:41:7F:72:8D:BF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/3993f350-b756-4916-8d84-484f025dffcc/0/AC555447BA62C39107F16BF572F82A417F728DBF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AC555447BA62C39107F16BF572F82A417F728DBF.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/3993f350-b756-4916-8d84-484f025dffcc/0/3131372e3130322e3130322e302f32342d3234203d3e203137343531.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  117.102.102.0/24

    Signature Algorithm: sha256WithRSAEncryption
         3c:76:9b:b2:d2:20:57:7a:3f:a7:0a:f7:ab:94:4e:10:74:ef:
         72:e9:43:b4:06:6f:c5:2d:90:fc:85:b2:05:18:d1:6a:cb:0b:
         e8:ba:5b:5a:aa:b4:65:7b:ce:32:c5:d1:b6:9c:35:4c:c3:85:
         15:1a:09:25:e5:33:e9:ea:6a:11:58:5e:85:bc:11:b9:6a:62:
         9a:94:fb:b0:7b:b1:06:5b:8c:91:f2:1b:5e:75:7d:7f:37:2f:
         7b:53:26:51:e0:8a:24:9f:84:8d:1a:1d:36:92:56:3f:71:f3:
         5a:bd:da:d1:2e:d2:93:82:12:cd:32:02:55:27:5a:60:ff:59:
         21:da:04:f5:a5:b8:57:58:89:2b:84:87:c4:2e:3f:24:b1:8b:
         a8:b5:e0:5a:0e:f5:e1:3e:54:d3:51:82:db:26:f5:91:83:ae:
         79:1d:61:f8:22:ad:97:c2:05:c1:3d:2e:d0:25:bc:03:64:aa:
         ea:80:86:66:fb:1c:28:8d:14:95:ac:bc:9e:09:bf:2d:b4:06:
         61:55:8c:23:8f:28:25:a2:0b:8e:c1:55:e6:ee:3c:5d:f4:27:
         01:5d:41:a1:40:d3:ab:a7:8f:19:ba:ff:14:18:61:15:fe:41:
         d6:3f:5d:54:a9:72:86:89:50:a1:de:56:10:18:10:a4:b9:59:
         f1:ed:fa:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----