Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/3993f350-b756-4916-8d84-484f025dffcc/0/3131372e3130322e38342e302f32342d3234203d3e203137343531.roa
File:                     3131372e3130322e38342e302f32342d3234203d3e203137343531.roa (raw, json)
Hash identifier:          /O6rSrxNTV+7uVI5sGAEuOJFgHNSip/CRDI6X2yde/g=
Subject key identifier:   4E:CB:06:3D:B0:92:DB:20:C1:83:A1:B1:CA:1A:0B:9A:63:8D:F2:56
Certificate issuer:       /CN=AC555447BA62C39107F16BF572F82A417F728DBF
Certificate serial:       37D92194AB0B324A7E30127FE05C3805D8840162
Authority key identifier: AC:55:54:47:BA:62:C3:91:07:F1:6B:F5:72:F8:2A:41:7F:72:8D:BF
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AC555447BA62C39107F16BF572F82A417F728DBF.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/3993f350-b756-4916-8d84-484f025dffcc/0/3131372e3130322e38342e302f32342d3234203d3e203137343531.roa
Signing time:             Thu 30 Sep 2021 00:00:07 +0000
ROA not before:           Wed 29 Sep 2021 23:55:07 +0000
ROA not after:            Fri 30 Sep 2022 00:00:07 +0000
asID:                     17451
IP address blocks:        117.102.84.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            37:d9:21:94:ab:0b:32:4a:7e:30:12:7f:e0:5c:38:05:d8:84:01:62
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AC555447BA62C39107F16BF572F82A417F728DBF
        Validity
            Not Before: Sep 29 23:55:07 2021 GMT
            Not After : Sep 30 00:00:07 2022 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:bd:78:8f:c2:13:b9:08:e1:6e:f5:a1:58:5e:
                    a6:4c:2e:cd:8a:1b:06:82:1b:1b:b0:03:66:0c:ae:
                    d6:84:87:c5:3a:2a:56:0a:64:e9:96:b9:33:19:8f:
                    92:cf:62:25:fd:94:6f:0a:f8:34:be:c3:86:d3:ac:
                    bb:00:90:bd:a9:fe:38:20:eb:d2:6e:bc:16:26:9a:
                    4f:35:1b:c6:70:be:f7:91:f5:dd:da:1d:c4:b2:4b:
                    6b:13:37:08:19:0e:cd:48:22:03:ba:60:af:63:16:
                    3a:57:4d:8e:40:78:ed:4f:8a:23:e2:45:5c:8c:7d:
                    a8:92:f0:8f:c0:85:d4:bf:08:49:cb:06:51:7a:9c:
                    da:76:6d:7c:80:80:57:a6:45:b7:76:c1:ee:e3:76:
                    a5:74:85:55:70:82:92:5d:74:89:23:f6:93:a5:96:
                    ae:8c:6e:ad:69:af:2b:a7:06:61:7f:29:e3:82:8f:
                    2c:68:60:86:ec:c4:4c:10:67:9a:cd:cf:2a:18:d8:
                    18:a6:b1:79:d0:09:3a:e5:f3:6f:3c:f1:ac:74:d6:
                    fe:09:e7:f2:a7:00:79:57:1b:44:ee:f0:88:73:0f:
                    ff:fb:af:3d:86:ef:16:b3:0c:74:c6:65:c0:7f:75:
                    3d:7d:1a:4a:d5:6b:88:a4:60:d7:6e:58:97:c2:3d:
                    68:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4E:CB:06:3D:B0:92:DB:20:C1:83:A1:B1:CA:1A:0B:9A:63:8D:F2:56
            X509v3 Authority Key Identifier:
                keyid:AC:55:54:47:BA:62:C3:91:07:F1:6B:F5:72:F8:2A:41:7F:72:8D:BF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/3993f350-b756-4916-8d84-484f025dffcc/0/AC555447BA62C39107F16BF572F82A417F728DBF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AC555447BA62C39107F16BF572F82A417F728DBF.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/3993f350-b756-4916-8d84-484f025dffcc/0/3131372e3130322e38342e302f32342d3234203d3e203137343531.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  117.102.84.0/24

    Signature Algorithm: sha256WithRSAEncryption
         1a:b4:50:02:29:fe:b7:ba:7c:bb:68:83:35:96:d5:79:63:af:
         7b:95:b5:9d:ae:94:e1:2c:43:43:bb:f7:28:a4:27:eb:71:f4:
         19:8a:1c:10:c4:3d:81:7b:3e:b6:8a:11:12:ac:3d:22:ce:4d:
         3b:65:38:e5:74:9f:e6:58:6e:71:cf:a3:e2:07:53:31:05:1b:
         89:f3:31:53:21:f8:00:ee:9e:fc:5b:b3:f8:83:90:df:68:70:
         30:60:d6:c5:d9:81:27:6e:2b:f6:e5:ef:4a:cc:e6:8f:fe:ff:
         69:d7:59:a9:04:39:90:02:b4:3c:60:22:46:99:c2:69:9a:31:
         3e:1f:d0:ef:d6:94:c8:88:e7:dd:2c:84:c8:bf:fd:af:0d:a5:
         b9:00:6c:31:dd:f3:03:7f:87:1b:da:48:2d:81:73:ea:c4:34:
         10:bd:66:55:5b:2b:4a:c1:5d:56:a1:1a:2f:5d:a0:71:86:a6:
         42:7b:24:87:84:ca:80:4d:1b:d0:30:7a:15:38:a9:9a:e2:cc:
         84:e6:00:9f:82:8f:16:0f:0a:8a:8f:71:da:71:fe:d3:6d:cd:
         c9:5e:81:d2:72:b1:24:ac:4a:87:e0:14:13:8c:2e:dc:e6:df:
         e0:a5:61:c5:67:0a:c9:0f:8c:3d:d3:fb:6c:7b:38:96:2f:d2:
         f7:b0:10:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----