Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/3993f350-b756-4916-8d84-484f025dffcc/0/3138322e3235332e31342e302f32342d3234203d3e203137343531.roa
File:                     3138322e3235332e31342e302f32342d3234203d3e203137343531.roa (raw, json)
Hash identifier:          SwEF+3cSrdrNYSrAqZbsto4O6X+/mClWTDYwBNLiOkw=
Subject key identifier:   EC:3B:32:2C:61:C1:03:16:EB:E6:08:F9:52:9D:C5:36:60:A4:2D:6F
Certificate issuer:       /CN=AC555447BA62C39107F16BF572F82A417F728DBF
Certificate serial:       483D25C3AC3E92E8F6A68CBF98CE96FC0CB28447
Authority key identifier: AC:55:54:47:BA:62:C3:91:07:F1:6B:F5:72:F8:2A:41:7F:72:8D:BF
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AC555447BA62C39107F16BF572F82A417F728DBF.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/3993f350-b756-4916-8d84-484f025dffcc/0/3138322e3235332e31342e302f32342d3234203d3e203137343531.roa
Signing time:             Thu 30 Sep 2021 00:00:04 +0000
ROA not before:           Wed 29 Sep 2021 23:55:04 +0000
ROA not after:            Fri 30 Sep 2022 00:00:04 +0000
asID:                     17451
IP address blocks:        182.253.14.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            48:3d:25:c3:ac:3e:92:e8:f6:a6:8c:bf:98:ce:96:fc:0c:b2:84:47
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AC555447BA62C39107F16BF572F82A417F728DBF
        Validity
            Not Before: Sep 29 23:55:04 2021 GMT
            Not After : Sep 30 00:00:04 2022 GMT
        Subject: CN=3082010A0282010100CB2753A09D183E21FF06D6FC1161ED06AFC6A446B70AE9BFFEB4C9667A185A19C25742C141C0C844929A3116F3EAA71320BECB21572C96F727F17FB6124FDAF3045403AE1DFA66393DA8197BFD8C440E4678EA8BF2FABAF6EEBDB49302A5F791381A1D6901902EAFB287B80FDC26CBFC39A0D051436F806B5EA37268F91E29E422F9FF34DA08BA45F7908EB109797B1108DB1ED3A28A926C5CF8BD84D09DF4D2E0769F25F60CA0E3FB6926C5DD1DA55926F06E7CF264E246D07B3FFA80D35019947BF5213941B3F26BE9852DD009600F9CA07353994F547ECB1EE4A74E1404E46C70B0C3BE18D7BE06186B6FA241F7F643DA39CBE1099A2D85309CE201BBFFF70203010001
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:27:53:a0:9d:18:3e:21:ff:06:d6:fc:11:61:
                    ed:06:af:c6:a4:46:b7:0a:e9:bf:fe:b4:c9:66:7a:
                    18:5a:19:c2:57:42:c1:41:c0:c8:44:92:9a:31:16:
                    f3:ea:a7:13:20:be:cb:21:57:2c:96:f7:27:f1:7f:
                    b6:12:4f:da:f3:04:54:03:ae:1d:fa:66:39:3d:a8:
                    19:7b:fd:8c:44:0e:46:78:ea:8b:f2:fa:ba:f6:ee:
                    bd:b4:93:02:a5:f7:91:38:1a:1d:69:01:90:2e:af:
                    b2:87:b8:0f:dc:26:cb:fc:39:a0:d0:51:43:6f:80:
                    6b:5e:a3:72:68:f9:1e:29:e4:22:f9:ff:34:da:08:
                    ba:45:f7:90:8e:b1:09:79:7b:11:08:db:1e:d3:a2:
                    8a:92:6c:5c:f8:bd:84:d0:9d:f4:d2:e0:76:9f:25:
                    f6:0c:a0:e3:fb:69:26:c5:dd:1d:a5:59:26:f0:6e:
                    7c:f2:64:e2:46:d0:7b:3f:fa:80:d3:50:19:94:7b:
                    f5:21:39:41:b3:f2:6b:e9:85:2d:d0:09:60:0f:9c:
                    a0:73:53:99:4f:54:7e:cb:1e:e4:a7:4e:14:04:e4:
                    6c:70:b0:c3:be:18:d7:be:06:18:6b:6f:a2:41:f7:
                    f6:43:da:39:cb:e1:09:9a:2d:85:30:9c:e2:01:bb:
                    ff:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EC:3B:32:2C:61:C1:03:16:EB:E6:08:F9:52:9D:C5:36:60:A4:2D:6F
            X509v3 Authority Key Identifier:
                keyid:AC:55:54:47:BA:62:C3:91:07:F1:6B:F5:72:F8:2A:41:7F:72:8D:BF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/3993f350-b756-4916-8d84-484f025dffcc/0/AC555447BA62C39107F16BF572F82A417F728DBF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AC555447BA62C39107F16BF572F82A417F728DBF.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/3993f350-b756-4916-8d84-484f025dffcc/0/3138322e3235332e31342e302f32342d3234203d3e203137343531.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  182.253.14.0/24

    Signature Algorithm: sha256WithRSAEncryption
         94:42:66:4e:6f:bd:69:fc:b5:8a:09:b5:08:cf:1e:d3:3a:6c:
         ff:66:ed:6d:e9:d5:65:48:af:b5:35:90:33:f4:6e:17:8b:7f:
         fa:07:f0:be:8f:f4:04:eb:80:cc:78:1d:8b:37:fd:11:fc:a4:
         bc:fe:5a:d6:ff:13:77:88:af:eb:11:fc:97:dd:6b:42:07:44:
         6e:2a:6f:fb:5b:a5:f6:9e:41:24:96:64:48:b9:2d:c9:2c:41:
         a5:e6:a4:b1:a9:bf:a5:a6:7d:b2:b1:79:1d:1f:79:bc:b7:68:
         9b:fb:85:02:55:da:97:64:13:d2:5f:ce:f7:3f:10:d7:9b:53:
         5c:1a:af:b7:29:1c:28:37:8c:92:2d:a8:9f:31:ae:56:0a:a8:
         b4:50:85:bc:cd:f7:37:d3:07:b7:62:16:ca:b4:f7:d7:3f:a7:
         04:58:55:29:16:41:c7:da:02:d6:75:0c:42:81:d9:d2:14:dd:
         bb:45:c2:77:e8:9b:7d:d7:ad:19:e8:85:3c:c9:ca:4b:f3:6e:
         c0:98:24:d9:da:57:35:e1:f2:8d:6e:38:2a:0a:f5:57:2c:ba:
         10:25:56:1e:1c:95:72:ad:32:dd:b6:52:77:f4:6a:2c:7c:b7:
         23:43:96:de:6e:20:e4:4f:27:e8:94:ca:e4:2d:e2:41:9c:dd:
         ff:1c:93:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----