Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/3993f350-b756-4916-8d84-484f025dffcc/0/3131382e39392e38392e302f32342d3234203d3e203137343531.roa
File:                     3131382e39392e38392e302f32342d3234203d3e203137343531.roa (raw, json)
Hash identifier:          6BmRAAw/ynsBGMPbsimo7BpLA/3xzqgeHydaUD5TAOw=
Subject key identifier:   1C:D1:CD:9B:0A:86:9C:3E:BD:12:3A:1B:29:D3:F1:9C:34:DC:94:B9
Certificate issuer:       /CN=AC555447BA62C39107F16BF572F82A417F728DBF
Certificate serial:       15588F86C9A82B0EAEB6C75725A3AD953A0E14D4
Authority key identifier: AC:55:54:47:BA:62:C3:91:07:F1:6B:F5:72:F8:2A:41:7F:72:8D:BF
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AC555447BA62C39107F16BF572F82A417F728DBF.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/3993f350-b756-4916-8d84-484f025dffcc/0/3131382e39392e38392e302f32342d3234203d3e203137343531.roa
Signing time:             Thu 30 Sep 2021 00:00:24 +0000
ROA not before:           Wed 29 Sep 2021 23:55:24 +0000
ROA not after:            Fri 30 Sep 2022 00:00:24 +0000
asID:                     17451
IP address blocks:        118.99.89.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            15:58:8f:86:c9:a8:2b:0e:ae:b6:c7:57:25:a3:ad:95:3a:0e:14:d4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AC555447BA62C39107F16BF572F82A417F728DBF
        Validity
            Not Before: Sep 29 23:55:24 2021 GMT
            Not After : Sep 30 00:00:24 2022 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:ae:f1:4e:05:62:80:4f:6a:4e:0f:77:4e:79:
                    a6:13:a9:68:cb:37:d6:b8:8b:d4:38:ef:36:48:84:
                    72:c5:e8:0d:cc:de:7f:ae:ee:68:0b:8a:43:d4:ec:
                    d7:4d:1c:39:dd:83:c5:be:61:4d:97:40:ae:ba:f0:
                    be:99:88:88:d4:2b:fa:b8:91:da:0e:4b:b5:71:57:
                    11:1a:62:cd:41:c2:d4:5e:d9:37:3c:48:2d:d1:22:
                    15:9b:c9:29:9c:ad:7a:8d:1b:45:b0:df:e9:bf:28:
                    d0:65:40:dd:95:ce:88:e1:b8:ef:4a:6c:a2:a3:cf:
                    a5:30:31:b7:f8:3b:21:e2:d4:e4:14:be:aa:6d:87:
                    97:f1:02:ee:f5:74:7e:85:09:e2:69:4d:11:7f:f9:
                    d9:73:cb:b7:87:2e:b0:bb:24:1c:ee:00:d3:49:c5:
                    12:ca:73:40:6b:9d:87:81:30:cb:02:39:5f:eb:52:
                    95:8e:7d:dc:c4:35:6e:1f:af:b1:bf:e8:1c:90:e3:
                    5d:32:85:1e:b7:34:28:07:5f:d8:8d:9d:bd:00:36:
                    d6:8b:ec:07:13:10:2a:d8:9e:c9:19:9e:80:94:96:
                    a1:e4:2f:b3:15:e8:07:c1:d4:4e:34:41:04:f6:88:
                    eb:26:63:6e:ae:72:e1:82:7e:e1:5c:be:ba:34:32:
                    8e:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1C:D1:CD:9B:0A:86:9C:3E:BD:12:3A:1B:29:D3:F1:9C:34:DC:94:B9
            X509v3 Authority Key Identifier:
                keyid:AC:55:54:47:BA:62:C3:91:07:F1:6B:F5:72:F8:2A:41:7F:72:8D:BF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/3993f350-b756-4916-8d84-484f025dffcc/0/AC555447BA62C39107F16BF572F82A417F728DBF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AC555447BA62C39107F16BF572F82A417F728DBF.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/3993f350-b756-4916-8d84-484f025dffcc/0/3131382e39392e38392e302f32342d3234203d3e203137343531.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  118.99.89.0/24

    Signature Algorithm: sha256WithRSAEncryption
         16:2b:d9:0f:65:57:5b:96:f8:7c:4e:6c:d2:a1:b9:d3:37:b1:
         3a:e4:96:96:c2:b6:35:f6:0d:6d:98:27:bf:c8:12:db:39:20:
         b0:40:bf:70:98:45:e6:55:6a:0b:63:6e:08:44:ae:a3:6b:a6:
         78:16:f8:17:c4:ed:0f:d0:ce:8b:a9:74:91:7a:24:e7:a0:ad:
         64:f2:45:54:80:53:fa:c2:57:e8:7b:bf:6d:3e:18:38:0b:42:
         84:bf:e3:e8:56:10:d9:9d:d5:9f:82:a9:6a:2f:fd:b7:68:57:
         30:8f:6b:23:0a:af:f2:07:0a:82:3e:fd:2b:84:8a:f0:a2:86:
         95:f4:59:82:b5:3d:f5:e4:93:c9:b4:68:9f:b6:27:75:1b:dd:
         de:6d:8d:d4:3d:b0:f2:db:5c:e8:cc:60:d0:57:ae:5d:d3:15:
         f3:42:95:d9:42:b5:da:49:9f:16:ce:ad:fa:53:e5:a3:97:67:
         f3:64:bc:a7:82:cb:c5:8e:d9:b9:47:7b:36:dd:75:06:f0:85:
         fb:b2:e6:ac:e4:b6:bf:dd:4d:2d:e0:5e:32:95:46:b3:7c:f1:
         b3:2d:83:cc:35:60:b7:dc:4d:d1:b8:fd:28:f6:6d:93:c0:e8:
         0f:90:15:0b:02:20:9c:5a:37:77:5a:30:9a:a2:6b:7e:94:77:
         ad:8e:e2:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----