Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/3993f350-b756-4916-8d84-484f025dffcc/0/3131382e39392e38332e302f32342d3234203d3e203137343531.roa
File:                     3131382e39392e38332e302f32342d3234203d3e203137343531.roa (raw, json)
Hash identifier:          5t6On9kQ3Lw1GAhACXrhacHCGAokCwAKqycg4EmvfFw=
Subject key identifier:   C0:40:76:A3:70:03:19:37:42:51:96:D6:26:13:09:03:41:12:87:B6
Certificate issuer:       /CN=AC555447BA62C39107F16BF572F82A417F728DBF
Certificate serial:       21FDBBD3FE20836BEDB8EC79201576BAE0F4713C
Authority key identifier: AC:55:54:47:BA:62:C3:91:07:F1:6B:F5:72:F8:2A:41:7F:72:8D:BF
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AC555447BA62C39107F16BF572F82A417F728DBF.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/3993f350-b756-4916-8d84-484f025dffcc/0/3131382e39392e38332e302f32342d3234203d3e203137343531.roa
Signing time:             Thu 30 Sep 2021 00:00:35 +0000
ROA not before:           Wed 29 Sep 2021 23:55:35 +0000
ROA not after:            Fri 30 Sep 2022 00:00:35 +0000
asID:                     17451
IP address blocks:        118.99.83.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            21:fd:bb:d3:fe:20:83:6b:ed:b8:ec:79:20:15:76:ba:e0:f4:71:3c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AC555447BA62C39107F16BF572F82A417F728DBF
        Validity
            Not Before: Sep 29 23:55:35 2021 GMT
            Not After : Sep 30 00:00:35 2022 GMT
        Subject: CN=3082010A0282010100A095B958C5EDB32ED2204F0A8ECD5123A7FF02B655387462E8EF08B8F124D9B7343726E0E791C5B6E8D86523662EBE23DA0546C12D8AB51519B87148E9718435250E0481C18F81CB75D57351EB22A1C1A7F0C298BA54D3213A6E01D19AB97F61AFBCA00DAB8278F7B46D48C53B07FDA5E40CFAA37734F806A24668A0CF6B1C2688EF87E628B4A1036DE92A29D9AC06911DEFD75D1E845804E857338EBBFDCEC8DBD7F1AB106F87EC632C1905B8C62591B3772AE9E18B78B347345E0152B69AF54DF046AB1DB9E44C2D6E2ACBB7D34E532A3BAAEDE3CD67286363D753276E796C50D5689EED33AC8D0E2334C76CF476F77BF50225ADF1875578C96B70DF2DFD490203010001
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:95:b9:58:c5:ed:b3:2e:d2:20:4f:0a:8e:cd:
                    51:23:a7:ff:02:b6:55:38:74:62:e8:ef:08:b8:f1:
                    24:d9:b7:34:37:26:e0:e7:91:c5:b6:e8:d8:65:23:
                    66:2e:be:23:da:05:46:c1:2d:8a:b5:15:19:b8:71:
                    48:e9:71:84:35:25:0e:04:81:c1:8f:81:cb:75:d5:
                    73:51:eb:22:a1:c1:a7:f0:c2:98:ba:54:d3:21:3a:
                    6e:01:d1:9a:b9:7f:61:af:bc:a0:0d:ab:82:78:f7:
                    b4:6d:48:c5:3b:07:fd:a5:e4:0c:fa:a3:77:34:f8:
                    06:a2:46:68:a0:cf:6b:1c:26:88:ef:87:e6:28:b4:
                    a1:03:6d:e9:2a:29:d9:ac:06:91:1d:ef:d7:5d:1e:
                    84:58:04:e8:57:33:8e:bb:fd:ce:c8:db:d7:f1:ab:
                    10:6f:87:ec:63:2c:19:05:b8:c6:25:91:b3:77:2a:
                    e9:e1:8b:78:b3:47:34:5e:01:52:b6:9a:f5:4d:f0:
                    46:ab:1d:b9:e4:4c:2d:6e:2a:cb:b7:d3:4e:53:2a:
                    3b:aa:ed:e3:cd:67:28:63:63:d7:53:27:6e:79:6c:
                    50:d5:68:9e:ed:33:ac:8d:0e:23:34:c7:6c:f4:76:
                    f7:7b:f5:02:25:ad:f1:87:55:78:c9:6b:70:df:2d:
                    fd:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C0:40:76:A3:70:03:19:37:42:51:96:D6:26:13:09:03:41:12:87:B6
            X509v3 Authority Key Identifier:
                keyid:AC:55:54:47:BA:62:C3:91:07:F1:6B:F5:72:F8:2A:41:7F:72:8D:BF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/3993f350-b756-4916-8d84-484f025dffcc/0/AC555447BA62C39107F16BF572F82A417F728DBF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AC555447BA62C39107F16BF572F82A417F728DBF.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/3993f350-b756-4916-8d84-484f025dffcc/0/3131382e39392e38332e302f32342d3234203d3e203137343531.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  118.99.83.0/24

    Signature Algorithm: sha256WithRSAEncryption
         71:71:b3:97:76:6f:03:6c:21:ec:e2:e6:7b:6d:c1:c4:d1:b1:
         24:d1:58:74:f7:95:dd:f1:8b:95:05:1d:81:a9:1c:4d:87:61:
         cb:d9:19:87:2d:3c:78:5e:9f:48:61:f2:97:f4:c2:61:58:d4:
         95:6f:ec:bf:3d:4a:96:f0:8f:f4:26:6f:bb:c2:1e:85:09:9d:
         1b:b9:d6:b8:a4:41:fe:3e:ef:b7:f6:f8:8c:af:6e:bb:90:b3:
         08:10:3d:54:94:80:28:7e:7d:f0:76:d1:c7:21:c4:0a:15:f4:
         5c:af:c5:d7:55:35:6e:4e:20:31:92:0e:90:26:2a:1d:9e:d7:
         5d:01:e6:2b:34:f0:3b:47:d9:10:28:30:ca:0e:30:05:40:d1:
         25:ea:d2:e1:40:03:23:fb:cd:66:9a:dc:b2:0a:6f:bc:c7:52:
         82:ed:c1:92:7e:2b:ac:22:9a:95:13:5a:8e:9a:d6:b7:01:0c:
         1e:4b:87:94:8a:90:e0:ec:7c:23:64:92:b4:63:97:9c:22:09:
         f1:61:ef:29:fe:d8:ea:c6:c0:19:59:4b:41:8c:9e:bc:49:8c:
         18:35:42:81:cc:33:99:69:8a:20:98:9a:70:9d:21:84:fa:de:
         60:aa:39:1d:52:52:f6:04:3e:f6:b5:c0:63:f8:15:dc:2c:5f:
         1c:fe:4b:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----