Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/3993f350-b756-4916-8d84-484f025dffcc/0/3131372e3130322e38332e302f32342d3234203d3e203137343531.roa
File:                     3131372e3130322e38332e302f32342d3234203d3e203137343531.roa (raw, json)
Hash identifier:          Y0vK8LO76a5XHYQWznpXlztWHdTNMI+wwJ7Uh0lnUvk=
Subject key identifier:   75:09:82:88:C1:41:14:DE:55:E8:39:D6:A0:E9:27:5D:44:83:CB:31
Certificate issuer:       /CN=AC555447BA62C39107F16BF572F82A417F728DBF
Certificate serial:       158FD68FB553AF57DF34EA2685929BCAEB99C484
Authority key identifier: AC:55:54:47:BA:62:C3:91:07:F1:6B:F5:72:F8:2A:41:7F:72:8D:BF
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AC555447BA62C39107F16BF572F82A417F728DBF.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/3993f350-b756-4916-8d84-484f025dffcc/0/3131372e3130322e38332e302f32342d3234203d3e203137343531.roa
Signing time:             Thu 30 Sep 2021 00:01:17 +0000
ROA not before:           Wed 29 Sep 2021 23:56:17 +0000
ROA not after:            Fri 30 Sep 2022 00:01:17 +0000
asID:                     17451
IP address blocks:        117.102.83.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            15:8f:d6:8f:b5:53:af:57:df:34:ea:26:85:92:9b:ca:eb:99:c4:84
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AC555447BA62C39107F16BF572F82A417F728DBF
        Validity
            Not Before: Sep 29 23:56:17 2021 GMT
            Not After : Sep 30 00:01:17 2022 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e9:7c:8b:31:d6:f5:61:32:69:7a:6a:2d:6c:a2:
                    db:9d:1e:59:f5:77:0f:3d:82:c2:2a:ee:07:f1:5a:
                    39:3f:80:4d:9a:98:57:5d:75:e7:cb:20:f4:65:4d:
                    b4:0c:f6:c8:d1:da:dc:c1:a7:a0:3c:fe:be:c7:87:
                    c8:5a:ee:b9:a1:a3:52:e5:a2:42:a6:92:cf:10:07:
                    42:d7:94:ba:4d:60:59:63:f1:e9:47:61:cf:fe:52:
                    c4:37:5f:a2:36:23:a5:94:0e:e7:84:33:ed:c7:94:
                    e2:3e:4f:9b:47:97:1d:3b:ae:ff:95:a6:77:61:65:
                    97:e2:df:74:b4:b0:e9:54:5d:65:3d:f3:5d:b5:da:
                    06:7e:08:3d:b9:38:3d:9a:bf:c2:1f:50:38:ab:8e:
                    f8:78:a4:08:3d:5b:52:35:7f:53:e3:f9:04:1f:15:
                    39:59:9e:3a:8a:0b:5e:93:81:0e:fc:7b:d8:c9:16:
                    5e:3b:71:fe:9e:93:69:61:d2:c2:1e:c9:3d:34:fe:
                    9c:ab:68:22:28:99:d8:57:cf:46:fe:b4:f8:ad:ca:
                    e4:d2:d0:f8:ad:c3:84:fb:c7:e2:c5:68:47:a7:eb:
                    b9:92:9a:f5:15:56:26:eb:c6:88:8b:1b:cb:0d:a4:
                    48:eb:bf:2d:49:1b:48:ee:db:e8:6e:45:29:9f:00:
                    4d:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                75:09:82:88:C1:41:14:DE:55:E8:39:D6:A0:E9:27:5D:44:83:CB:31
            X509v3 Authority Key Identifier:
                keyid:AC:55:54:47:BA:62:C3:91:07:F1:6B:F5:72:F8:2A:41:7F:72:8D:BF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/3993f350-b756-4916-8d84-484f025dffcc/0/AC555447BA62C39107F16BF572F82A417F728DBF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AC555447BA62C39107F16BF572F82A417F728DBF.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/3993f350-b756-4916-8d84-484f025dffcc/0/3131372e3130322e38332e302f32342d3234203d3e203137343531.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  117.102.83.0/24

    Signature Algorithm: sha256WithRSAEncryption
         36:3c:80:a0:91:6e:c0:50:30:13:10:22:4f:66:cc:50:b3:0f:
         d1:2b:55:95:27:d9:ac:64:ea:af:fa:2c:de:30:6d:03:a6:a1:
         1b:38:d8:77:57:ee:04:57:42:05:0c:07:d9:8f:1a:bb:2c:15:
         ba:86:64:a6:96:0c:4e:1b:8b:e9:c1:48:7f:4a:52:44:a7:dc:
         1e:af:0d:d1:49:0c:b3:66:cd:56:8f:db:b4:57:14:63:b7:7d:
         49:f9:82:68:7d:03:36:74:aa:dc:52:e0:e8:b9:58:25:ac:eb:
         f6:1b:64:76:8d:f7:dc:4f:e1:2c:23:06:ce:1e:46:88:05:e9:
         6b:e3:ec:8f:2a:44:b2:77:0d:c2:d5:e6:ff:cf:e1:9e:df:72:
         f0:d6:f2:29:3e:11:e1:c1:f0:16:21:a0:76:73:15:0d:e4:05:
         a4:3b:c6:7f:6b:ca:29:28:0a:94:a7:2a:ec:76:49:d7:1b:aa:
         4c:b9:80:51:a4:16:6e:82:b0:19:10:6a:5f:11:a6:8f:54:de:
         ae:f3:22:88:dd:ad:8e:70:f3:16:80:6a:f2:40:30:e5:0e:ab:
         9f:fc:8a:7b:78:98:c1:7b:96:f0:08:28:13:2a:ca:47:83:86:
         4d:7f:c9:de:d1:75:f6:f9:c0:8a:90:80:cb:a7:81:ce:9b:4e:
         dd:f5:b4:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----