Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/3993f350-b756-4916-8d84-484f025dffcc/0/3131372e3130322e38312e302f32342d3234203d3e203137343531.roa
File:                     3131372e3130322e38312e302f32342d3234203d3e203137343531.roa (raw, json)
Hash identifier:          MT7e4xYn2q7hFKnczy7IUb52fcFRI6+lG8jjdSrtCQE=
Subject key identifier:   21:91:94:B3:70:F4:66:81:62:2D:88:13:7C:B1:10:A5:39:C0:EA:71
Certificate issuer:       /CN=AC555447BA62C39107F16BF572F82A417F728DBF
Certificate serial:       401ECB367B9C82A148756B2CAA5A052B41DDE200
Authority key identifier: AC:55:54:47:BA:62:C3:91:07:F1:6B:F5:72:F8:2A:41:7F:72:8D:BF
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AC555447BA62C39107F16BF572F82A417F728DBF.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/3993f350-b756-4916-8d84-484f025dffcc/0/3131372e3130322e38312e302f32342d3234203d3e203137343531.roa
Signing time:             Thu 30 Sep 2021 00:00:46 +0000
ROA not before:           Wed 29 Sep 2021 23:55:46 +0000
ROA not after:            Fri 30 Sep 2022 00:00:46 +0000
asID:                     17451
IP address blocks:        117.102.81.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            40:1e:cb:36:7b:9c:82:a1:48:75:6b:2c:aa:5a:05:2b:41:dd:e2:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AC555447BA62C39107F16BF572F82A417F728DBF
        Validity
            Not Before: Sep 29 23:55:46 2021 GMT
            Not After : Sep 30 00:00:46 2022 GMT
        Subject: CN=3082010A0282010100F4ADC8EF57E22E1D237DB9C2B6318A6E21A1BE8860C2801196FA4C665D2CA251DFDC8BFF0E12E667399FA612070051F8BA4FCD0A8B4DE3DFEBAA631764F76DB4D21D3CD220D300A86E375CD8FC2EE1E5FD18D41F140641DA3C970D02F9BA52E9663F5DB5337E9A0EEC14939137209414D3D0C5204132B972BE112F85E28815C9F34ED7C3230FCA231B98D30E127EDFE31A58AB0DABFC97AE6DFB627A660F91CAEE0632B36C28AF2B7F0BF9CECA1A0958556E933B4AAF8387D0DA3C13EAF69BF588C187EF49969532083C936312E25193016A699800E3AB0069F34A8F37E14133CE03949BAE5CF10FE9A0485E1735F2301F1ACEF357E651E50E672196A61A7E490203010001
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f4:ad:c8:ef:57:e2:2e:1d:23:7d:b9:c2:b6:31:
                    8a:6e:21:a1:be:88:60:c2:80:11:96:fa:4c:66:5d:
                    2c:a2:51:df:dc:8b:ff:0e:12:e6:67:39:9f:a6:12:
                    07:00:51:f8:ba:4f:cd:0a:8b:4d:e3:df:eb:aa:63:
                    17:64:f7:6d:b4:d2:1d:3c:d2:20:d3:00:a8:6e:37:
                    5c:d8:fc:2e:e1:e5:fd:18:d4:1f:14:06:41:da:3c:
                    97:0d:02:f9:ba:52:e9:66:3f:5d:b5:33:7e:9a:0e:
                    ec:14:93:91:37:20:94:14:d3:d0:c5:20:41:32:b9:
                    72:be:11:2f:85:e2:88:15:c9:f3:4e:d7:c3:23:0f:
                    ca:23:1b:98:d3:0e:12:7e:df:e3:1a:58:ab:0d:ab:
                    fc:97:ae:6d:fb:62:7a:66:0f:91:ca:ee:06:32:b3:
                    6c:28:af:2b:7f:0b:f9:ce:ca:1a:09:58:55:6e:93:
                    3b:4a:af:83:87:d0:da:3c:13:ea:f6:9b:f5:88:c1:
                    87:ef:49:96:95:32:08:3c:93:63:12:e2:51:93:01:
                    6a:69:98:00:e3:ab:00:69:f3:4a:8f:37:e1:41:33:
                    ce:03:94:9b:ae:5c:f1:0f:e9:a0:48:5e:17:35:f2:
                    30:1f:1a:ce:f3:57:e6:51:e5:0e:67:21:96:a6:1a:
                    7e:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                21:91:94:B3:70:F4:66:81:62:2D:88:13:7C:B1:10:A5:39:C0:EA:71
            X509v3 Authority Key Identifier:
                keyid:AC:55:54:47:BA:62:C3:91:07:F1:6B:F5:72:F8:2A:41:7F:72:8D:BF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/3993f350-b756-4916-8d84-484f025dffcc/0/AC555447BA62C39107F16BF572F82A417F728DBF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AC555447BA62C39107F16BF572F82A417F728DBF.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/3993f350-b756-4916-8d84-484f025dffcc/0/3131372e3130322e38312e302f32342d3234203d3e203137343531.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  117.102.81.0/24

    Signature Algorithm: sha256WithRSAEncryption
         88:47:4c:a1:3e:4f:7c:7d:dd:b0:45:0c:2b:5e:1d:32:2b:ce:
         78:a3:01:ff:57:77:9f:d7:10:bf:3a:ca:f8:d4:0a:22:59:b7:
         54:3c:91:5b:67:32:20:03:b8:b4:fa:e2:d2:86:bc:8b:7c:bc:
         b2:15:3c:48:b1:c4:72:67:6c:3f:c6:12:52:ec:e9:73:4f:de:
         7d:2c:bd:ad:11:af:e8:bd:f2:b8:15:35:a1:1f:18:9b:08:1d:
         6a:22:ad:ab:3d:c5:6e:c1:31:14:7c:e3:55:4a:b3:0f:76:38:
         03:27:79:fb:8b:7a:ff:41:31:6a:7e:e5:93:77:e2:98:f0:3a:
         04:68:cc:8c:d1:70:19:4d:ff:8e:6d:89:bd:9c:2c:35:84:d3:
         7f:f2:a0:75:f0:66:3f:b4:53:b2:f6:6e:18:a7:af:18:0e:99:
         e1:35:91:a8:b1:dc:e3:78:81:ea:5f:70:31:26:82:3b:dc:71:
         b1:47:86:6f:8e:d0:b4:4b:42:97:c1:ba:f9:46:2d:3a:f4:39:
         ee:dd:b8:4f:19:1a:27:94:1e:47:cb:2c:ae:ca:3b:ee:9f:d0:
         38:5d:f6:f0:a9:98:a9:8e:9b:b5:f2:a3:d2:ac:c0:69:c7:1a:
         3e:d9:20:40:4b:30:ab:34:46:84:cd:46:5c:a9:0a:09:b7:58:
         27:48:f2:56
-----BEGIN CERTIFICATE-----
MIIHJDCCBgygAwIBAgIUQB7LNnucgqFIdWssqloFK0Hd4gAwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQUM1NTU0NDdCQTYyQzM5MTA3RjE2QkY1NzJGODJBNDE3
RjcyOERCRjAeFw0yMTA5MjkyMzU1NDZaFw0yMjA5MzAwMDAwNDZaMIICLTGCAikw
ggIlBgNVBAMTggIcMzA4MjAxMEEwMjgyMDEwMTAwRjRBREM4RUY1N0UyMkUxRDIz
N0RCOUMyQjYzMThBNkUyMUExQkU4ODYwQzI4MDExOTZGQTRDNjY1RDJDQTI1MURG
REM4QkZGMEUxMkU2NjczOTlGQTYxMjA3MDA1MUY4QkE0RkNEMEE4QjRERTNERkVC
QUE2MzE3NjRGNzZEQjREMjFEM0NEMjIwRDMwMEE4NkUzNzVDRDhGQzJFRTFFNUZE
MThENDFGMTQwNjQxREEzQzk3MEQwMkY5QkE1MkU5NjYzRjVEQjUzMzdFOUEwRUVD
MTQ5MzkxMzcyMDk0MTREM0QwQzUyMDQxMzJCOTcyQkUxMTJGODVFMjg4MTVDOUYz
NEVEN0MzMjMwRkNBMjMxQjk4RDMwRTEyN0VERkUzMUE1OEFCMERBQkZDOTdBRTZE
RkI2MjdBNjYwRjkxQ0FFRTA2MzJCMzZDMjhBRjJCN0YwQkY5Q0VDQTFBMDk1ODU1
NkU5MzNCNEFBRjgzODdEMERBM0MxM0VBRjY5QkY1ODhDMTg3RUY0OTk2OTUzMjA4
M0M5MzYzMTJFMjUxOTMwMTZBNjk5ODAwRTNBQjAwNjlGMzRBOEYzN0UxNDEzM0NF
MDM5NDlCQUU1Q0YxMEZFOUEwNDg1RTE3MzVGMjMwMUYxQUNFRjM1N0U2NTFFNTBF
NjcyMTk2QTYxQTdFNDkwMjAzMDEwMDAxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8A
MIIBCgKCAQEA9K3I71fiLh0jfbnCtjGKbiGhvohgwoARlvpMZl0solHf3Iv/DhLm
ZzmfphIHAFH4uk/NCotN49/rqmMXZPdttNIdPNIg0wCobjdc2Pwu4eX9GNQfFAZB
2jyXDQL5ulLpZj9dtTN+mg7sFJORNyCUFNPQxSBBMrlyvhEvheKIFcnzTtfDIw/K
IxuY0w4Sft/jGlirDav8l65t+2J6Zg+Ryu4GMrNsKK8rfwv5zsoaCVhVbpM7Sq+D
h9DaPBPq9pv1iMGH70mWlTIIPJNjEuJRkwFqaZgA46sAafNKjzfhQTPOA5Sbrlzx
D+mgSF4XNfIwHxrO81fmUeUOZyGWphp+SQIDAQABo4ICMjCCAi4wHQYDVR0OBBYE
FCGRlLNw9GaBYi2IE3yxEKU5wOpxMB8GA1UdIwQYMBaAFKxVVEe6YsORB/Fr9XL4
KkF/co2/MA4GA1UdDwEB/wQEAwIHgDCBhQYDVR0fBH4wfDB6oHigdoZ0cnN5bmM6
Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMzk5M2YzNTAtYjc1Ni00OTE2LThk
ODQtNDg0ZjAyNWRmZmNjLzAvQUM1NTU0NDdCQTYyQzM5MTA3RjE2QkY1NzJGODJB
NDE3RjcyOERCRi5jcmwwdAYIKwYBBQUHAQEEaDBmMGQGCCsGAQUFBzAChlhyc3lu
YzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9JRE5JQy1JRC8yL0FDNTU1NDQ3
QkE2MkMzOTEwN0YxNkJGNTcyRjgyQTQxN0Y3MjhEQkYuY2VyMIGiBggrBgEFBQcB
CwSBlTCBkjCBjwYIKwYBBQUHMAuGgYJyc3luYzovL3JlcG8tcnBraS5pZG5pYy5u
ZXQvcmVwby8zOTkzZjM1MC1iNzU2LTQ5MTYtOGQ4NC00ODRmMDI1ZGZmY2MvMC8z
MTMxMzcyZTMxMzAzMjJlMzgzMTJlMzAyZjMyMzQyZDMyMzQyMDNkM2UyMDMxMzcz
NDM1MzEucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcB
Af8EEDAOMAwEAgABMAYDBAB1ZlEwDQYJKoZIhvcNAQELBQADggEBAIhHTKE+T3x9
3bBFDCteHTIrznijAf9Xd5/XEL86yvjUCiJZt1Q8kVtnMiADuLT64tKGvIt8vLIV
PEixxHJnbD/GElLs6XNP3n0sva0Rr+i98rgVNaEfGJsIHWoiras9xW7BMRR841VK
sw92OAMnefuLev9BMWp+5ZN34pjwOgRozIzRcBlN/45tib2cLDWE03/yoHXwZj+0
U7L2bhinrxgOmeE1kaix3ON4gepfcDEmgjvccbFHhm+O0LRLQpfBuvlGLTr0Oe7d
uE8ZGieUHkfLLK7KO+6f0Dhd9vCpmKmOm7Xyo9KswGnHGj7ZIEBLMKs0RoTNRlyp
Cgm3WCdI8lY=
-----END CERTIFICATE-----