Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/3993f350-b756-4916-8d84-484f025dffcc/0/3138322e3235332e3132382e302f32342d3234203d3e203137343531.roa
File:                     3138322e3235332e3132382e302f32342d3234203d3e203137343531.roa (raw, json)
Hash identifier:          Su6AsXYJFOa885+2r4hrrc6VJVnZ3INWXTyasLtDL+w=
Subject key identifier:   43:57:5D:4B:EE:86:95:6D:23:07:FA:A4:97:01:E3:52:46:AE:35:A3
Certificate issuer:       /CN=AC555447BA62C39107F16BF572F82A417F728DBF
Certificate serial:       722EF2FC060AF9F6DA12EA088B53054FEE4B9275
Authority key identifier: AC:55:54:47:BA:62:C3:91:07:F1:6B:F5:72:F8:2A:41:7F:72:8D:BF
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AC555447BA62C39107F16BF572F82A417F728DBF.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/3993f350-b756-4916-8d84-484f025dffcc/0/3138322e3235332e3132382e302f32342d3234203d3e203137343531.roa
Signing time:             Thu 30 Sep 2021 00:00:24 +0000
ROA not before:           Wed 29 Sep 2021 23:55:24 +0000
ROA not after:            Fri 30 Sep 2022 00:00:24 +0000
asID:                     17451
IP address blocks:        182.253.128.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            72:2e:f2:fc:06:0a:f9:f6:da:12:ea:08:8b:53:05:4f:ee:4b:92:75
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AC555447BA62C39107F16BF572F82A417F728DBF
        Validity
            Not Before: Sep 29 23:55:24 2021 GMT
            Not After : Sep 30 00:00:24 2022 GMT
        Subject: CN=3082010A028201010099EFF0287086BB1A5DE59774F98DBFA2BB5911D6EC849EA2AD0AF99B0E914EDB2D6C1FE89C4A55640B7D92D84C05FACB929E6A93690071B3EF07F76891F804501B68577F8F992F833E6AB9621352BF750257F8CF0CF56CFAF3BB9C4F9B5011B165DF41BEDFE9362A130B6B5413512220C18C5CEE69C6CEFCBD8A2B8D188F63B2856EEB9D1C611C05F723F553BBE3B8104022877FE6D6F91E46F16A2DBCA5B9B4C56194F9457C3F49875FDE9B6855D8FC5AF6CD0759B385650FA6791621F467763322DE621FA5ED53609B62C236D8DEB0E96EAC20545EA9013F5D9201B1BDAF32421577CEA7A0CCE485C3040E8AFB4EE0752261CDF92FCAC94895FB16B3BA22210203010001
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:ef:f0:28:70:86:bb:1a:5d:e5:97:74:f9:8d:
                    bf:a2:bb:59:11:d6:ec:84:9e:a2:ad:0a:f9:9b:0e:
                    91:4e:db:2d:6c:1f:e8:9c:4a:55:64:0b:7d:92:d8:
                    4c:05:fa:cb:92:9e:6a:93:69:00:71:b3:ef:07:f7:
                    68:91:f8:04:50:1b:68:57:7f:8f:99:2f:83:3e:6a:
                    b9:62:13:52:bf:75:02:57:f8:cf:0c:f5:6c:fa:f3:
                    bb:9c:4f:9b:50:11:b1:65:df:41:be:df:e9:36:2a:
                    13:0b:6b:54:13:51:22:20:c1:8c:5c:ee:69:c6:ce:
                    fc:bd:8a:2b:8d:18:8f:63:b2:85:6e:eb:9d:1c:61:
                    1c:05:f7:23:f5:53:bb:e3:b8:10:40:22:87:7f:e6:
                    d6:f9:1e:46:f1:6a:2d:bc:a5:b9:b4:c5:61:94:f9:
                    45:7c:3f:49:87:5f:de:9b:68:55:d8:fc:5a:f6:cd:
                    07:59:b3:85:65:0f:a6:79:16:21:f4:67:76:33:22:
                    de:62:1f:a5:ed:53:60:9b:62:c2:36:d8:de:b0:e9:
                    6e:ac:20:54:5e:a9:01:3f:5d:92:01:b1:bd:af:32:
                    42:15:77:ce:a7:a0:cc:e4:85:c3:04:0e:8a:fb:4e:
                    e0:75:22:61:cd:f9:2f:ca:c9:48:95:fb:16:b3:ba:
                    22:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                43:57:5D:4B:EE:86:95:6D:23:07:FA:A4:97:01:E3:52:46:AE:35:A3
            X509v3 Authority Key Identifier:
                keyid:AC:55:54:47:BA:62:C3:91:07:F1:6B:F5:72:F8:2A:41:7F:72:8D:BF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/3993f350-b756-4916-8d84-484f025dffcc/0/AC555447BA62C39107F16BF572F82A417F728DBF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AC555447BA62C39107F16BF572F82A417F728DBF.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/3993f350-b756-4916-8d84-484f025dffcc/0/3138322e3235332e3132382e302f32342d3234203d3e203137343531.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  182.253.128.0/24

    Signature Algorithm: sha256WithRSAEncryption
         9f:2a:66:be:5c:e0:29:08:3d:6d:24:a2:d0:fb:b0:b6:cc:8d:
         8d:92:46:2c:9e:5a:85:70:45:a4:0f:ae:41:8c:01:18:24:eb:
         63:75:44:a3:71:99:83:c2:04:8a:10:cc:ac:80:4a:74:4a:12:
         4e:51:fd:a9:fc:58:76:40:94:f2:b0:31:40:c0:ab:d9:63:a0:
         62:49:69:de:7b:b4:dd:60:af:06:de:bf:d5:4e:ae:7d:a9:d8:
         26:8a:fb:ce:71:01:a6:d9:3f:3a:48:25:d1:07:94:f0:ed:6a:
         ff:00:14:dd:3c:87:48:ea:71:37:41:67:24:a4:68:8b:5e:c6:
         b0:84:cc:14:6d:aa:83:a6:65:16:a2:78:d7:2f:3b:c1:27:b3:
         f4:9a:b7:51:d0:9c:1e:82:a8:ef:08:0e:8d:78:53:2d:ca:45:
         5b:47:e0:65:d9:3a:30:23:ad:4f:5f:f4:bd:ec:e0:2d:ab:dd:
         af:83:9e:d4:0c:67:e6:16:37:f2:1d:19:47:ca:85:ec:01:89:
         24:ab:97:0c:2c:2b:73:02:f4:aa:ea:0c:28:70:46:1f:20:2f:
         0e:6a:25:24:ca:fd:de:d9:26:e8:81:79:ad:8a:f2:a8:c2:f1:
         68:c9:af:89:7f:e7:1a:bb:b7:3f:61:0c:d5:a9:f5:a3:d6:c1:
         38:8c:44:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----