Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/3993f350-b756-4916-8d84-484f025dffcc/0/3131372e3130322e37332e302f32342d3234203d3e203137343531.roa
File:                     3131372e3130322e37332e302f32342d3234203d3e203137343531.roa (raw, json)
Hash identifier:          h2dzvQ3xmx6PvKDEpmh+lmiM8rzkhqowN0gaNxo7Axo=
Subject key identifier:   02:A4:35:26:5E:C7:46:B7:5F:8F:9D:D9:0C:B9:48:B5:01:8A:2C:32
Certificate issuer:       /CN=AC555447BA62C39107F16BF572F82A417F728DBF
Certificate serial:       70370024E34B074FFE01740A7262E6FD4BD1D7F0
Authority key identifier: AC:55:54:47:BA:62:C3:91:07:F1:6B:F5:72:F8:2A:41:7F:72:8D:BF
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AC555447BA62C39107F16BF572F82A417F728DBF.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/3993f350-b756-4916-8d84-484f025dffcc/0/3131372e3130322e37332e302f32342d3234203d3e203137343531.roa
Signing time:             Thu 30 Sep 2021 00:00:14 +0000
ROA not before:           Wed 29 Sep 2021 23:55:14 +0000
ROA not after:            Fri 30 Sep 2022 00:00:14 +0000
asID:                     17451
IP address blocks:        117.102.73.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            70:37:00:24:e3:4b:07:4f:fe:01:74:0a:72:62:e6:fd:4b:d1:d7:f0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AC555447BA62C39107F16BF572F82A417F728DBF
        Validity
            Not Before: Sep 29 23:55:14 2021 GMT
            Not After : Sep 30 00:00:14 2022 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:ef:76:b0:95:da:27:d9:63:18:31:e9:6c:a9:
                    76:7e:06:45:d0:55:d4:72:22:43:cf:04:d8:81:52:
                    a8:18:36:25:d7:0c:76:3b:c8:c4:7b:5f:cf:41:45:
                    38:f7:cb:fb:78:a9:1d:95:ce:d1:d3:50:4f:db:35:
                    f9:7a:5f:d0:80:61:20:45:e8:dc:bf:d4:55:68:1a:
                    42:1d:01:cd:2a:2f:ed:a8:35:81:0d:4a:f7:9a:8f:
                    35:13:17:0b:be:63:19:3d:22:96:32:82:8e:ca:73:
                    13:5a:dc:b8:0d:20:93:da:af:b8:79:0f:b6:43:b2:
                    7b:26:db:92:a3:23:4b:71:bd:47:f3:80:07:7e:8d:
                    b8:73:6b:9c:eb:05:a3:08:75:5d:ea:65:f1:1b:85:
                    f5:9d:31:c8:f9:3d:bb:fe:7f:8a:d7:9d:3f:91:46:
                    48:ba:5c:3e:97:f5:db:03:3a:b8:28:65:74:0b:71:
                    5b:1d:c1:08:de:91:2a:28:f9:03:e1:15:a0:d9:5e:
                    bc:92:ca:dc:3e:cb:e0:2e:0b:41:50:d2:08:39:33:
                    b3:47:6d:4b:c6:da:eb:3c:f4:ea:08:4d:a2:33:e3:
                    dd:78:49:4d:2b:66:c0:a0:15:3e:08:a4:f0:09:a9:
                    c4:a7:3a:2f:90:bb:c2:4a:1e:2d:54:89:e4:13:5f:
                    c7:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                02:A4:35:26:5E:C7:46:B7:5F:8F:9D:D9:0C:B9:48:B5:01:8A:2C:32
            X509v3 Authority Key Identifier:
                keyid:AC:55:54:47:BA:62:C3:91:07:F1:6B:F5:72:F8:2A:41:7F:72:8D:BF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/3993f350-b756-4916-8d84-484f025dffcc/0/AC555447BA62C39107F16BF572F82A417F728DBF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AC555447BA62C39107F16BF572F82A417F728DBF.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/3993f350-b756-4916-8d84-484f025dffcc/0/3131372e3130322e37332e302f32342d3234203d3e203137343531.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  117.102.73.0/24

    Signature Algorithm: sha256WithRSAEncryption
         1a:19:5e:9b:8c:61:6d:f0:46:9f:1a:9f:6f:4b:9b:6d:59:35:
         0d:59:02:da:c8:89:ca:45:c6:d3:81:65:0b:e7:63:f9:c9:90:
         f6:15:10:27:68:0e:33:b4:00:e4:55:b0:e5:08:7a:d2:b2:50:
         df:ca:a3:c3:1c:2a:ee:30:03:74:d5:ce:4c:76:a5:f6:fc:30:
         4f:b5:28:8e:9d:d3:44:26:7a:64:a8:76:8f:9c:9d:d6:12:ee:
         48:11:06:23:af:93:5e:e4:09:28:ea:76:09:03:a5:3f:5f:cd:
         55:e9:45:09:ef:f4:c3:8a:6d:74:2b:65:a6:c6:1a:6c:93:51:
         c0:54:7f:cd:b0:d0:4d:6b:a8:88:73:50:07:b6:70:0d:a4:e6:
         28:83:d3:51:de:3f:4b:45:6c:7c:81:e8:be:e6:12:5c:0f:7e:
         0c:41:99:fe:5b:73:79:c4:a1:28:21:58:69:8b:ab:96:98:00:
         97:e1:a0:8b:25:04:ef:b4:12:88:00:b4:07:fe:2f:c8:33:ee:
         ba:e7:e8:8a:6a:f0:8b:dc:43:af:1a:81:90:98:84:1d:03:6e:
         32:0b:c9:f0:cf:8e:d5:26:40:d4:24:6e:0f:73:6f:55:56:20:
         0f:b7:df:00:42:db:42:6d:f4:cd:ab:5e:d5:3a:57:e0:e1:0a:
         3f:c1:c9:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----