Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/3993f350-b756-4916-8d84-484f025dffcc/0/3138322e3235332e3131372e302f32342d3234203d3e203137343531.roa
File:                     3138322e3235332e3131372e302f32342d3234203d3e203137343531.roa (raw, json)
Hash identifier:          qgqOYQg7nH0W7i9mXKl+9hPNKeXUcfp0KbnM9KgG6ZA=
Subject key identifier:   EB:FC:5B:EB:5C:22:70:97:8F:03:1B:B3:5A:B0:7E:9C:57:9B:54:42
Certificate issuer:       /CN=AC555447BA62C39107F16BF572F82A417F728DBF
Certificate serial:       7E8643316840F95A4A62AF6D78E1F8EA387AD552
Authority key identifier: AC:55:54:47:BA:62:C3:91:07:F1:6B:F5:72:F8:2A:41:7F:72:8D:BF
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AC555447BA62C39107F16BF572F82A417F728DBF.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/3993f350-b756-4916-8d84-484f025dffcc/0/3138322e3235332e3131372e302f32342d3234203d3e203137343531.roa
Signing time:             Thu 30 Sep 2021 00:00:11 +0000
ROA not before:           Wed 29 Sep 2021 23:55:11 +0000
ROA not after:            Fri 30 Sep 2022 00:00:11 +0000
asID:                     17451
IP address blocks:        182.253.117.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7e:86:43:31:68:40:f9:5a:4a:62:af:6d:78:e1:f8:ea:38:7a:d5:52
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AC555447BA62C39107F16BF572F82A417F728DBF
        Validity
            Not Before: Sep 29 23:55:11 2021 GMT
            Not After : Sep 30 00:00:11 2022 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:bc:7b:f1:1d:30:21:9e:50:c3:e3:40:9f:64:
                    8a:37:2b:76:15:c5:50:20:da:fb:d1:1a:23:ed:74:
                    1c:c1:eb:42:e6:f0:e6:f9:0d:e8:5f:a1:cf:94:e1:
                    49:70:4c:bf:2e:6f:a8:78:2e:0d:f7:e7:d2:5c:00:
                    dd:f2:34:90:a9:5e:25:7c:f0:0f:41:dd:ce:80:ab:
                    a3:40:aa:61:9f:94:28:43:e6:80:bc:2d:60:76:54:
                    ab:28:3d:e2:53:bb:bc:ab:b4:f3:c6:54:1b:c2:6c:
                    d9:a9:27:08:4a:55:60:24:8c:39:d2:5d:59:2f:55:
                    56:f3:fe:8a:f3:26:e3:88:6e:c6:ed:90:df:01:1e:
                    f8:d4:12:32:c6:f7:23:d2:56:cf:8f:e1:1e:e2:1c:
                    e6:5b:9e:7f:f4:3d:b9:24:21:e3:34:36:dd:c0:a0:
                    68:41:e3:30:b9:bc:0f:37:63:cd:b7:52:4f:f8:43:
                    4a:97:bf:86:b2:99:c7:62:3a:94:f3:bb:98:39:5c:
                    d6:b9:15:c0:5d:55:28:30:00:e9:ef:80:44:a5:3c:
                    5f:7e:1d:c2:7c:fc:cb:0f:14:5f:ca:bb:68:4b:70:
                    cf:eb:a8:fe:fa:dd:64:ef:6d:2a:05:e1:16:dd:04:
                    d4:66:40:f9:49:a2:7b:d1:38:49:87:e9:81:b6:4f:
                    e2:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EB:FC:5B:EB:5C:22:70:97:8F:03:1B:B3:5A:B0:7E:9C:57:9B:54:42
            X509v3 Authority Key Identifier:
                keyid:AC:55:54:47:BA:62:C3:91:07:F1:6B:F5:72:F8:2A:41:7F:72:8D:BF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/3993f350-b756-4916-8d84-484f025dffcc/0/AC555447BA62C39107F16BF572F82A417F728DBF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AC555447BA62C39107F16BF572F82A417F728DBF.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/3993f350-b756-4916-8d84-484f025dffcc/0/3138322e3235332e3131372e302f32342d3234203d3e203137343531.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  182.253.117.0/24

    Signature Algorithm: sha256WithRSAEncryption
         6a:4a:b7:54:b7:bc:fb:ff:3e:de:91:1f:f1:19:77:ac:ec:e1:
         f0:22:9b:92:90:86:11:9e:bb:70:16:a1:2a:c1:c2:a3:41:41:
         56:6e:cd:1d:9b:62:54:7e:66:a8:a4:1a:02:4a:7f:a6:9c:15:
         f6:df:1d:a4:54:2b:bd:62:ab:3a:5c:f4:9f:09:27:a6:15:de:
         b1:16:62:e8:94:c9:d6:08:46:f0:d7:e1:52:11:eb:43:bf:33:
         7a:3a:5d:f7:c2:3d:bc:a9:4f:99:6e:1c:c0:24:60:7b:22:a5:
         05:d4:a5:94:33:4a:07:53:07:a7:f2:8c:5f:87:cf:9b:f3:75:
         71:22:a2:c9:30:2e:99:33:ba:40:eb:ab:be:22:26:59:46:79:
         8f:4e:2c:4f:fa:be:3f:56:23:e0:1d:d6:5e:a1:1d:8c:c5:00:
         50:bc:ad:e4:77:32:ad:47:b1:b6:27:b1:d7:67:2d:a6:f9:21:
         98:44:cd:3d:a6:83:58:d7:24:0b:10:4d:e0:d0:75:eb:4d:bb:
         b4:35:d0:00:08:38:33:a5:c7:3e:55:0c:7a:e2:2c:0a:87:8c:
         6f:66:fb:3b:90:85:8a:f7:58:86:46:15:f5:7b:59:22:ca:44:
         87:d2:7f:62:df:24:fc:98:c5:2c:d2:1e:de:6a:22:5f:36:5d:
         44:06:c9:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----