Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/3993f350-b756-4916-8d84-484f025dffcc/0/3138322e3235332e3132302e302f32342d3234203d3e203137343531.roa
File:                     3138322e3235332e3132302e302f32342d3234203d3e203137343531.roa (raw, json)
Hash identifier:          F8whhvt9oExR5Ilh+PPpTSe/k+JQWA6wvirCjYA1hhM=
Subject key identifier:   7D:3A:50:E2:69:15:19:6F:36:DA:14:C9:09:77:EA:EB:12:00:FB:80
Certificate issuer:       /CN=AC555447BA62C39107F16BF572F82A417F728DBF
Certificate serial:       1A9875A869FE97909F20295B54F2D8C853D63AAF
Authority key identifier: AC:55:54:47:BA:62:C3:91:07:F1:6B:F5:72:F8:2A:41:7F:72:8D:BF
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AC555447BA62C39107F16BF572F82A417F728DBF.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/3993f350-b756-4916-8d84-484f025dffcc/0/3138322e3235332e3132302e302f32342d3234203d3e203137343531.roa
Signing time:             Thu 30 Sep 2021 00:00:40 +0000
ROA not before:           Wed 29 Sep 2021 23:55:40 +0000
ROA not after:            Fri 30 Sep 2022 00:00:40 +0000
asID:                     17451
IP address blocks:        182.253.120.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1a:98:75:a8:69:fe:97:90:9f:20:29:5b:54:f2:d8:c8:53:d6:3a:af
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AC555447BA62C39107F16BF572F82A417F728DBF
        Validity
            Not Before: Sep 29 23:55:40 2021 GMT
            Not After : Sep 30 00:00:40 2022 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:22:cd:50:33:84:fb:90:9d:92:e2:89:58:f8:
                    33:21:f4:eb:f6:1c:4d:02:63:02:bb:37:2a:36:16:
                    4b:b9:f8:bc:fb:c2:0c:ac:bb:91:c6:45:80:eb:48:
                    13:6b:a0:4a:d1:af:57:fc:45:77:34:62:f4:fd:d8:
                    09:8e:c5:50:c0:ae:67:8b:f2:99:2a:0f:09:57:64:
                    95:9f:cb:4a:56:66:40:ef:f5:0e:50:5e:ea:d3:8b:
                    8e:43:f1:af:36:e7:b3:ac:3a:09:02:75:da:93:4b:
                    fa:cf:02:1e:a8:0a:69:96:9d:01:7b:ad:5f:68:fc:
                    bb:2b:87:15:7a:25:9f:89:82:4a:f0:6c:d7:0a:e6:
                    d5:56:34:e0:b5:45:ea:7b:ed:3d:71:77:0f:2d:79:
                    32:8a:ed:b4:da:5b:e8:6c:f8:22:95:46:44:47:b6:
                    26:05:45:fd:1b:45:b0:42:72:67:ca:f2:e1:94:c9:
                    56:00:7b:a1:5f:b9:8b:7b:64:c7:7d:89:43:f2:c8:
                    83:0d:7c:d1:29:7c:0c:41:eb:7e:3d:c8:a2:21:94:
                    a5:f1:db:b4:64:08:11:de:2e:1f:c8:e3:fc:11:dd:
                    c3:04:5f:c8:5a:79:4f:dc:e0:75:a4:6c:a6:f1:47:
                    2d:7b:cc:4f:cf:fa:4f:39:5b:c5:12:46:65:24:27:
                    ab:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7D:3A:50:E2:69:15:19:6F:36:DA:14:C9:09:77:EA:EB:12:00:FB:80
            X509v3 Authority Key Identifier:
                keyid:AC:55:54:47:BA:62:C3:91:07:F1:6B:F5:72:F8:2A:41:7F:72:8D:BF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/3993f350-b756-4916-8d84-484f025dffcc/0/AC555447BA62C39107F16BF572F82A417F728DBF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AC555447BA62C39107F16BF572F82A417F728DBF.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/3993f350-b756-4916-8d84-484f025dffcc/0/3138322e3235332e3132302e302f32342d3234203d3e203137343531.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  182.253.120.0/24

    Signature Algorithm: sha256WithRSAEncryption
         26:4d:15:38:df:41:22:88:e4:23:72:b0:b8:56:d1:96:ca:39:
         6c:a0:d5:f0:71:a4:cd:32:de:63:c3:04:71:b6:19:59:fa:fe:
         7b:da:b9:d1:d6:58:34:af:2e:3a:14:44:76:84:1b:8a:e9:b4:
         02:d6:a0:4c:7e:cf:42:a0:99:a0:e1:cb:d8:10:c7:2e:d5:dc:
         54:d4:32:64:c7:18:7d:b7:8c:92:ca:34:3f:ff:b3:c0:08:42:
         9c:57:c9:ac:c6:42:5f:3b:f9:0e:92:c9:39:a0:1b:1f:8a:56:
         e3:4c:a5:17:e4:d1:39:4e:de:02:12:d4:a2:2c:b0:65:08:58:
         a6:dc:fa:0a:e4:b0:eb:15:f6:fa:22:2a:14:7d:75:d3:19:de:
         4c:9f:27:14:fd:e1:7d:a9:b0:92:e5:99:96:95:a0:63:69:7d:
         39:eb:f1:81:36:9c:6a:9e:fe:36:fe:49:58:08:0c:54:fb:c3:
         65:3c:e5:7a:92:2d:57:21:f5:4d:1e:97:7d:b4:d6:c3:52:de:
         0c:31:6f:86:82:0e:ef:c7:70:21:61:3e:ca:0e:43:cf:03:2e:
         bb:29:54:d2:0c:e1:38:a1:46:97:3a:d9:73:e8:fb:55:dd:8d:
         af:0b:e1:ad:0a:65:09:fb:b9:2d:de:50:33:7d:62:66:b8:11:
         0b:15:78:e2
-----BEGIN CERTIFICATE-----
MIIHJjCCBg6gAwIBAgIUGph1qGn+l5CfIClbVPLYyFPWOq8wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQUM1NTU0NDdCQTYyQzM5MTA3RjE2QkY1NzJGODJBNDE3
RjcyOERCRjAeFw0yMTA5MjkyMzU1NDBaFw0yMjA5MzAwMDAwNDBaMIICLTGCAikw
ggIlBgNVBAMTggIcMzA4MjAxMEEwMjgyMDEwMTAwQTcyMkNENTAzMzg0RkI5MDlE
OTJFMjg5NThGODMzMjFGNEVCRjYxQzREMDI2MzAyQkIzNzJBMzYxNjRCQjlGOEJD
RkJDMjBDQUNCQjkxQzY0NTgwRUI0ODEzNkJBMDRBRDFBRjU3RkM0NTc3MzQ2MkY0
RkREODA5OEVDNTUwQzBBRTY3OEJGMjk5MkEwRjA5NTc2NDk1OUZDQjRBNTY2NjQw
RUZGNTBFNTA1RUVBRDM4QjhFNDNGMUFGMzZFN0IzQUMzQTA5MDI3NURBOTM0QkZB
Q0YwMjFFQTgwQTY5OTY5RDAxN0JBRDVGNjhGQ0JCMkI4NzE1N0EyNTlGODk4MjRB
RjA2Q0Q3MEFFNkQ1NTYzNEUwQjU0NUVBN0JFRDNENzE3NzBGMkQ3OTMyOEFFREI0
REE1QkU4NkNGODIyOTU0NjQ0NDdCNjI2MDU0NUZEMUI0NUIwNDI3MjY3Q0FGMkUx
OTRDOTU2MDA3QkExNUZCOThCN0I2NEM3N0Q4OTQzRjJDODgzMEQ3Q0QxMjk3QzBD
NDFFQjdFM0RDOEEyMjE5NEE1RjFEQkI0NjQwODExREUyRTFGQzhFM0ZDMTFEREMz
MDQ1RkM4NUE3OTRGRENFMDc1QTQ2Q0E2RjE0NzJEN0JDQzRGQ0ZGQTRGMzk1QkM1
MTI0NjY1MjQyN0FCRDkwMjAzMDEwMDAxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8A
MIIBCgKCAQEApyLNUDOE+5CdkuKJWPgzIfTr9hxNAmMCuzcqNhZLufi8+8IMrLuR
xkWA60gTa6BK0a9X/EV3NGL0/dgJjsVQwK5ni/KZKg8JV2SVn8tKVmZA7/UOUF7q
04uOQ/GvNuezrDoJAnXak0v6zwIeqApplp0Be61faPy7K4cVeiWfiYJK8GzXCubV
VjTgtUXqe+09cXcPLXkyiu202lvobPgilUZER7YmBUX9G0WwQnJnyvLhlMlWAHuh
X7mLe2THfYlD8siDDXzRKXwMQet+PciiIZSl8du0ZAgR3i4fyOP8Ed3DBF/IWnlP
3OB1pGym8Ucte8xPz/pPOVvFEkZlJCer2QIDAQABo4ICNDCCAjAwHQYDVR0OBBYE
FH06UOJpFRlvNtoUyQl36usSAPuAMB8GA1UdIwQYMBaAFKxVVEe6YsORB/Fr9XL4
KkF/co2/MA4GA1UdDwEB/wQEAwIHgDCBhQYDVR0fBH4wfDB6oHigdoZ0cnN5bmM6
Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMzk5M2YzNTAtYjc1Ni00OTE2LThk
ODQtNDg0ZjAyNWRmZmNjLzAvQUM1NTU0NDdCQTYyQzM5MTA3RjE2QkY1NzJGODJB
NDE3RjcyOERCRi5jcmwwdAYIKwYBBQUHAQEEaDBmMGQGCCsGAQUFBzAChlhyc3lu
YzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9JRE5JQy1JRC8yL0FDNTU1NDQ3
QkE2MkMzOTEwN0YxNkJGNTcyRjgyQTQxN0Y3MjhEQkYuY2VyMIGkBggrBgEFBQcB
CwSBlzCBlDCBkQYIKwYBBQUHMAuGgYRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5u
ZXQvcmVwby8zOTkzZjM1MC1iNzU2LTQ5MTYtOGQ4NC00ODRmMDI1ZGZmY2MvMC8z
MTM4MzIyZTMyMzUzMzJlMzEzMjMwMmUzMDJmMzIzNDJkMzIzNDIwM2QzZTIwMzEz
NzM0MzUzMS5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcB
BwEB/wQQMA4wDAQCAAEwBgMEALb9eDANBgkqhkiG9w0BAQsFAAOCAQEAJk0VON9B
IojkI3KwuFbRlso5bKDV8HGkzTLeY8MEcbYZWfr+e9q50dZYNK8uOhREdoQbium0
AtagTH7PQqCZoOHL2BDHLtXcVNQyZMcYfbeMkso0P/+zwAhCnFfJrMZCXzv5DpLJ
OaAbH4pW40ylF+TROU7eAhLUoiywZQhYptz6CuSw6xX2+iIqFH110xneTJ8nFP3h
famwkuWZlpWgY2l9OevxgTacap7+Nv5JWAgMVPvDZTzlepItVyH1TR6XfbTWw1Le
DDFvhoIO78dwIWE+yg5DzwMuuylU0gzhOKFGlzrZc+j7Vd2NrwvhrQplCfu5Ld5Q
M31iZrgRCxV44g==
-----END CERTIFICATE-----