Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/3993f350-b756-4916-8d84-484f025dffcc/0/3131372e3130322e3131352e302f32342d3234203d3e203137343531.roa
File:                     3131372e3130322e3131352e302f32342d3234203d3e203137343531.roa (raw, json)
Hash identifier:          jDF+ojiEZaZTg0P6ETQjW92R4tXvzl6e61H/TEd4y9w=
Subject key identifier:   C7:47:4D:54:A8:B7:40:B6:E6:D6:F4:22:43:4B:F2:0A:FD:18:19:00
Certificate issuer:       /CN=AC555447BA62C39107F16BF572F82A417F728DBF
Certificate serial:       74D6658B323D0C65C4C159A0FB9682320CB8E9AA
Authority key identifier: AC:55:54:47:BA:62:C3:91:07:F1:6B:F5:72:F8:2A:41:7F:72:8D:BF
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AC555447BA62C39107F16BF572F82A417F728DBF.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/3993f350-b756-4916-8d84-484f025dffcc/0/3131372e3130322e3131352e302f32342d3234203d3e203137343531.roa
Signing time:             Thu 30 Sep 2021 00:00:45 +0000
ROA not before:           Wed 29 Sep 2021 23:55:45 +0000
ROA not after:            Fri 30 Sep 2022 00:00:45 +0000
asID:                     17451
IP address blocks:        117.102.115.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            74:d6:65:8b:32:3d:0c:65:c4:c1:59:a0:fb:96:82:32:0c:b8:e9:aa
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AC555447BA62C39107F16BF572F82A417F728DBF
        Validity
            Not Before: Sep 29 23:55:45 2021 GMT
            Not After : Sep 30 00:00:45 2022 GMT
        Subject: CN=3082010A0282010100E44AF7C4CA07A42135F285525D79846A16EA40E80F4F6CC432A88AADE6A205E1549001C9F9DC9B227E02EC14550EF11ED53AAE93C4C8A225941043102155217B6A6F67709FCCFD92BD73328003BDFF0FFB781F8EEFA0929F08735E410EA25B2121DBDF0DF3D5641752A6E1A7354ECEE9730495AA445F49FBECAAC1270BC59C314A395A4BE0A2B6A71C03274F79F05B46C929D43088FD0FAB39DC3353AD6D2F8B227B797B8C0CE66EBC2CA61FD01D1814447EA506C44EB92FCE37761A22A7DEE86F89C8540FC2E2A95B6B540F22D040DDC6605775BBD063D9F4903D8B9F84DA7629F8B1116120A2088C15BF773F73A5CA8725E056E9E74ABAF5EB123E569473450203010001
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e4:4a:f7:c4:ca:07:a4:21:35:f2:85:52:5d:79:
                    84:6a:16:ea:40:e8:0f:4f:6c:c4:32:a8:8a:ad:e6:
                    a2:05:e1:54:90:01:c9:f9:dc:9b:22:7e:02:ec:14:
                    55:0e:f1:1e:d5:3a:ae:93:c4:c8:a2:25:94:10:43:
                    10:21:55:21:7b:6a:6f:67:70:9f:cc:fd:92:bd:73:
                    32:80:03:bd:ff:0f:fb:78:1f:8e:ef:a0:92:9f:08:
                    73:5e:41:0e:a2:5b:21:21:db:df:0d:f3:d5:64:17:
                    52:a6:e1:a7:35:4e:ce:e9:73:04:95:aa:44:5f:49:
                    fb:ec:aa:c1:27:0b:c5:9c:31:4a:39:5a:4b:e0:a2:
                    b6:a7:1c:03:27:4f:79:f0:5b:46:c9:29:d4:30:88:
                    fd:0f:ab:39:dc:33:53:ad:6d:2f:8b:22:7b:79:7b:
                    8c:0c:e6:6e:bc:2c:a6:1f:d0:1d:18:14:44:7e:a5:
                    06:c4:4e:b9:2f:ce:37:76:1a:22:a7:de:e8:6f:89:
                    c8:54:0f:c2:e2:a9:5b:6b:54:0f:22:d0:40:dd:c6:
                    60:57:75:bb:d0:63:d9:f4:90:3d:8b:9f:84:da:76:
                    29:f8:b1:11:61:20:a2:08:8c:15:bf:77:3f:73:a5:
                    ca:87:25:e0:56:e9:e7:4a:ba:f5:eb:12:3e:56:94:
                    73:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C7:47:4D:54:A8:B7:40:B6:E6:D6:F4:22:43:4B:F2:0A:FD:18:19:00
            X509v3 Authority Key Identifier:
                keyid:AC:55:54:47:BA:62:C3:91:07:F1:6B:F5:72:F8:2A:41:7F:72:8D:BF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/3993f350-b756-4916-8d84-484f025dffcc/0/AC555447BA62C39107F16BF572F82A417F728DBF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AC555447BA62C39107F16BF572F82A417F728DBF.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/3993f350-b756-4916-8d84-484f025dffcc/0/3131372e3130322e3131352e302f32342d3234203d3e203137343531.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  117.102.115.0/24

    Signature Algorithm: sha256WithRSAEncryption
         76:00:c2:9f:81:99:dc:fd:22:33:db:8d:fc:7a:f0:2d:26:7b:
         ba:32:36:92:3a:56:2b:6b:92:4d:ac:e0:2f:1d:03:01:16:13:
         13:f8:d9:ac:f2:be:0c:22:ed:a0:53:54:e2:e4:f0:53:a9:d5:
         3e:6a:61:70:a8:42:06:1a:f5:07:7d:8f:da:0f:45:b3:46:04:
         5f:d6:1f:38:9f:3e:4e:b5:9f:b2:16:9d:f2:41:11:d2:b2:10:
         4d:48:84:df:1b:ee:0c:dc:55:6b:9f:80:36:60:d3:34:37:6e:
         6b:32:fe:c8:59:f3:8d:24:b4:58:b2:33:ee:f8:33:14:22:04:
         b5:41:43:76:3b:91:aa:ce:ba:c1:62:1b:dc:3b:f8:b4:8b:44:
         17:d6:4b:48:1d:d5:fa:06:f2:5e:7e:d2:b2:54:68:ad:c7:43:
         14:f7:b3:6f:2e:82:cc:21:ab:50:54:8c:8b:a3:02:3c:44:a0:
         95:cf:d3:42:12:e6:0d:e7:d7:8e:39:37:80:da:37:93:31:91:
         26:de:42:60:82:05:91:14:87:99:9e:a0:a2:07:3b:51:7b:ec:
         73:dd:30:3b:3a:6e:10:a1:dc:86:d0:6a:bd:6e:b2:9e:82:c2:
         3c:4f:05:95:78:24:63:fa:23:19:f8:de:58:64:10:ad:74:5d:
         b5:89:5a:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----