Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/3993f350-b756-4916-8d84-484f025dffcc/0/3138322e3235332e3130322e302f32342d3234203d3e203137343531.roa
File:                     3138322e3235332e3130322e302f32342d3234203d3e203137343531.roa (raw, json)
Hash identifier:          i7Mws2h/3OTupW+6ohW3U1FoDbQvAA0KDPRTblydFAc=
Subject key identifier:   4A:53:B5:9D:C5:48:D9:54:AE:E4:51:84:A9:30:C8:77:BF:51:E5:8B
Certificate issuer:       /CN=AC555447BA62C39107F16BF572F82A417F728DBF
Certificate serial:       53B9FC26BD42F420A9942687A6A4B5287691FAD9
Authority key identifier: AC:55:54:47:BA:62:C3:91:07:F1:6B:F5:72:F8:2A:41:7F:72:8D:BF
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AC555447BA62C39107F16BF572F82A417F728DBF.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/3993f350-b756-4916-8d84-484f025dffcc/0/3138322e3235332e3130322e302f32342d3234203d3e203137343531.roa
Signing time:             Thu 30 Sep 2021 00:01:00 +0000
ROA not before:           Wed 29 Sep 2021 23:56:00 +0000
ROA not after:            Fri 30 Sep 2022 00:01:00 +0000
asID:                     17451
IP address blocks:        182.253.102.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            53:b9:fc:26:bd:42:f4:20:a9:94:26:87:a6:a4:b5:28:76:91:fa:d9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AC555447BA62C39107F16BF572F82A417F728DBF
        Validity
            Not Before: Sep 29 23:56:00 2021 GMT
            Not After : Sep 30 00:01:00 2022 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:f8:95:61:ee:c2:15:23:a2:32:34:32:a5:cf:
                    c3:21:b0:9d:6c:c1:ef:de:41:66:e8:a9:73:2e:3f:
                    60:c5:4d:4a:30:c6:17:31:19:e7:53:32:ec:74:1b:
                    0f:c7:02:bf:c4:5b:a3:eb:1c:50:c9:ab:a0:20:42:
                    0d:12:08:8f:70:78:bf:18:81:96:c2:ab:14:0a:07:
                    ba:73:46:bd:28:dc:07:e6:b2:a2:f5:89:ac:5e:1e:
                    4b:b0:3a:a9:90:ab:93:9e:26:5c:2f:d0:71:be:ae:
                    c9:a0:58:ae:af:72:55:e5:1e:f8:39:9a:ee:2b:c9:
                    8d:4f:4f:ca:ee:6d:dc:cf:92:e1:44:eb:0a:e2:05:
                    92:de:ff:22:89:59:01:0a:5f:f9:1b:a7:02:36:a6:
                    71:6b:62:a2:f9:f5:9d:2a:9a:f3:8b:9d:f3:7d:9a:
                    42:ad:67:8d:dd:6b:5d:5c:db:6b:db:91:24:7c:34:
                    4a:a4:59:02:0f:80:da:0a:1b:14:25:d3:70:89:c2:
                    af:77:03:9f:55:a3:22:20:33:58:58:94:85:f7:a3:
                    35:eb:9f:99:00:bc:68:6f:1d:32:5d:9a:fd:70:e6:
                    f8:c6:08:52:cb:9b:a6:d3:60:db:bd:2c:01:c4:b6:
                    f6:a7:03:0e:3c:cd:dc:66:42:4c:3b:73:93:3a:30:
                    5c:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4A:53:B5:9D:C5:48:D9:54:AE:E4:51:84:A9:30:C8:77:BF:51:E5:8B
            X509v3 Authority Key Identifier:
                keyid:AC:55:54:47:BA:62:C3:91:07:F1:6B:F5:72:F8:2A:41:7F:72:8D:BF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/3993f350-b756-4916-8d84-484f025dffcc/0/AC555447BA62C39107F16BF572F82A417F728DBF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AC555447BA62C39107F16BF572F82A417F728DBF.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/3993f350-b756-4916-8d84-484f025dffcc/0/3138322e3235332e3130322e302f32342d3234203d3e203137343531.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  182.253.102.0/24

    Signature Algorithm: sha256WithRSAEncryption
         14:99:82:ca:ce:10:91:08:ef:eb:88:7a:b5:57:79:2c:5e:d5:
         54:c5:f4:36:7d:eb:86:3d:97:28:c2:a6:aa:7e:51:d4:62:8a:
         44:14:c1:8a:cd:79:6a:a7:fe:31:18:fa:8c:8f:3f:d6:e9:77:
         05:56:36:80:59:1c:74:fe:d4:0b:ed:e2:a2:b6:5a:db:85:df:
         e1:69:8f:ab:1f:6f:5b:0c:75:1b:22:49:2d:6b:72:42:6d:36:
         76:50:66:54:8d:71:26:ca:3a:73:88:23:32:97:bd:0f:00:54:
         8b:11:45:89:df:42:6b:7c:3b:48:ab:4a:89:88:6c:6b:6e:11:
         d5:f8:37:ee:12:d3:74:c7:ec:5d:09:71:c7:4f:bb:11:75:f8:
         fb:ba:a7:33:bd:b4:7d:fb:b3:82:83:34:93:11:18:7e:81:0c:
         3f:9e:55:3b:d9:ed:2d:37:1a:e8:30:f5:c7:65:c5:3f:2c:54:
         df:f9:c6:55:1c:4f:87:05:a1:96:15:c1:b9:ce:80:49:46:da:
         3c:21:b4:3a:19:16:af:bd:ac:45:b8:de:a7:0e:a8:e1:c2:8e:
         29:d0:c9:7c:ec:56:57:35:81:d0:08:1b:73:de:24:52:13:fe:
         fb:8b:45:bd:0a:af:3c:06:3e:87:6f:82:19:55:7b:1c:b1:09:
         6d:3f:71:c7
-----BEGIN CERTIFICATE-----
MIIHJjCCBg6gAwIBAgIUU7n8Jr1C9CCplCaHpqS1KHaR+tkwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQUM1NTU0NDdCQTYyQzM5MTA3RjE2QkY1NzJGODJBNDE3
RjcyOERCRjAeFw0yMTA5MjkyMzU2MDBaFw0yMjA5MzAwMDAxMDBaMIICLTGCAikw
ggIlBgNVBAMTggIcMzA4MjAxMEEwMjgyMDEwMTAwQkJGODk1NjFFRUMyMTUyM0Ey
MzIzNDMyQTVDRkMzMjFCMDlENkNDMUVGREU0MTY2RThBOTczMkUzRjYwQzU0RDRB
MzBDNjE3MzExOUU3NTMzMkVDNzQxQjBGQzcwMkJGQzQ1QkEzRUIxQzUwQzlBQkEw
MjA0MjBEMTIwODhGNzA3OEJGMTg4MTk2QzJBQjE0MEEwN0JBNzM0NkJEMjhEQzA3
RTZCMkEyRjU4OUFDNUUxRTRCQjAzQUE5OTBBQjkzOUUyNjVDMkZEMDcxQkVBRUM5
QTA1OEFFQUY3MjU1RTUxRUY4Mzk5QUVFMkJDOThENEY0RkNBRUU2RERDQ0Y5MkUx
NDRFQjBBRTIwNTkyREVGRjIyODk1OTAxMEE1RkY5MUJBNzAyMzZBNjcxNkI2MkEy
RjlGNTlEMkE5QUYzOEI5REYzN0Q5QTQyQUQ2NzhEREQ2QjVENUNEQjZCREI5MTI0
N0MzNDRBQTQ1OTAyMEY4MERBMEExQjE0MjVEMzcwODlDMkFGNzcwMzlGNTVBMzIy
MjAzMzU4NTg5NDg1RjdBMzM1RUI5Rjk5MDBCQzY4NkYxRDMyNUQ5QUZENzBFNkY4
QzYwODUyQ0I5QkE2RDM2MERCQkQyQzAxQzRCNkY2QTcwMzBFM0NDRERDNjY0MjRD
M0I3MzkzM0EzMDVDRjUwMjAzMDEwMDAxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8A
MIIBCgKCAQEAu/iVYe7CFSOiMjQypc/DIbCdbMHv3kFm6KlzLj9gxU1KMMYXMRnn
UzLsdBsPxwK/xFuj6xxQyaugIEINEgiPcHi/GIGWwqsUCge6c0a9KNwH5rKi9Yms
Xh5LsDqpkKuTniZcL9Bxvq7JoFiur3JV5R74OZruK8mNT0/K7m3cz5LhROsK4gWS
3v8iiVkBCl/5G6cCNqZxa2Ki+fWdKprzi53zfZpCrWeN3WtdXNtr25EkfDRKpFkC
D4DaChsUJdNwicKvdwOfVaMiIDNYWJSF96M165+ZALxobx0yXZr9cOb4xghSy5um
02DbvSwBxLb2pwMOPM3cZkJMO3OTOjBc9QIDAQABo4ICNDCCAjAwHQYDVR0OBBYE
FEpTtZ3FSNlUruRRhKkwyHe/UeWLMB8GA1UdIwQYMBaAFKxVVEe6YsORB/Fr9XL4
KkF/co2/MA4GA1UdDwEB/wQEAwIHgDCBhQYDVR0fBH4wfDB6oHigdoZ0cnN5bmM6
Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMzk5M2YzNTAtYjc1Ni00OTE2LThk
ODQtNDg0ZjAyNWRmZmNjLzAvQUM1NTU0NDdCQTYyQzM5MTA3RjE2QkY1NzJGODJB
NDE3RjcyOERCRi5jcmwwdAYIKwYBBQUHAQEEaDBmMGQGCCsGAQUFBzAChlhyc3lu
YzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9JRE5JQy1JRC8yL0FDNTU1NDQ3
QkE2MkMzOTEwN0YxNkJGNTcyRjgyQTQxN0Y3MjhEQkYuY2VyMIGkBggrBgEFBQcB
CwSBlzCBlDCBkQYIKwYBBQUHMAuGgYRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5u
ZXQvcmVwby8zOTkzZjM1MC1iNzU2LTQ5MTYtOGQ4NC00ODRmMDI1ZGZmY2MvMC8z
MTM4MzIyZTMyMzUzMzJlMzEzMDMyMmUzMDJmMzIzNDJkMzIzNDIwM2QzZTIwMzEz
NzM0MzUzMS5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcB
BwEB/wQQMA4wDAQCAAEwBgMEALb9ZjANBgkqhkiG9w0BAQsFAAOCAQEAFJmCys4Q
kQjv64h6tVd5LF7VVMX0Nn3rhj2XKMKmqn5R1GKKRBTBis15aqf+MRj6jI8/1ul3
BVY2gFkcdP7UC+3iorZa24Xf4WmPqx9vWwx1GyJJLWtyQm02dlBmVI1xJso6c4gj
Mpe9DwBUixFFid9Ca3w7SKtKiYhsa24R1fg37hLTdMfsXQlxx0+7EXX4+7qnM720
ffuzgoM0kxEYfoEMP55VO9ntLTca6DD1x2XFPyxU3/nGVRxPhwWhlhXBuc6ASUba
PCG0OhkWr72sRbjepw6o4cKOKdDJfOxWVzWB0Agbc94kUhP++4tFvQqvPAY+h2+C
GVV7HLEJbT9xxw==
-----END CERTIFICATE-----