Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/3993f350-b756-4916-8d84-484f025dffcc/0/3138322e3235332e3134322e302f32342d3234203d3e203137343531.roa
File:                     3138322e3235332e3134322e302f32342d3234203d3e203137343531.roa (raw, json)
Hash identifier:          OvDcGVeLwrFqgAzAhgESzJeK9SW4qYxwRXjp7W2fwSA=
Subject key identifier:   6C:FC:7D:1D:7F:4D:1E:B7:98:70:0E:BA:CE:EE:3F:91:6E:36:EC:7D
Certificate issuer:       /CN=AC555447BA62C39107F16BF572F82A417F728DBF
Certificate serial:       1057F70BA0BF8290DD755391663CA8360FA528A4
Authority key identifier: AC:55:54:47:BA:62:C3:91:07:F1:6B:F5:72:F8:2A:41:7F:72:8D:BF
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AC555447BA62C39107F16BF572F82A417F728DBF.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/3993f350-b756-4916-8d84-484f025dffcc/0/3138322e3235332e3134322e302f32342d3234203d3e203137343531.roa
Signing time:             Thu 30 Sep 2021 00:00:37 +0000
ROA not before:           Wed 29 Sep 2021 23:55:37 +0000
ROA not after:            Fri 30 Sep 2022 00:00:37 +0000
asID:                     17451
IP address blocks:        182.253.142.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            10:57:f7:0b:a0:bf:82:90:dd:75:53:91:66:3c:a8:36:0f:a5:28:a4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AC555447BA62C39107F16BF572F82A417F728DBF
        Validity
            Not Before: Sep 29 23:55:37 2021 GMT
            Not After : Sep 30 00:00:37 2022 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:30:c7:a9:44:be:ca:78:8a:6c:b6:9f:e4:8d:
                    e0:33:a2:2c:d9:6f:13:44:94:51:48:20:6b:2e:f6:
                    b1:8c:7d:f3:47:fd:65:40:1b:50:a4:5b:43:d4:c2:
                    47:95:68:a5:f3:2c:3d:55:45:d9:3b:46:07:91:8b:
                    91:a6:bd:6d:8c:fc:7c:fb:f0:c3:d6:60:59:aa:7a:
                    5d:87:a2:88:6d:f6:91:3d:b6:56:b3:f6:e7:14:6d:
                    c5:44:57:c4:8f:8e:69:c7:8b:a8:80:93:68:81:5c:
                    4d:c9:84:e0:ea:2c:9b:db:04:aa:1a:0b:34:4a:4f:
                    ad:95:fc:14:a2:e3:2d:e3:34:67:30:c5:91:b8:95:
                    69:45:4b:ea:6e:57:79:8a:9e:ca:40:64:91:bd:f9:
                    b5:4e:a7:c8:32:d7:bb:a6:a8:22:ed:0f:b6:47:94:
                    07:cf:fa:77:7f:02:c6:46:22:1d:0c:14:8a:a2:11:
                    92:ad:82:60:d6:fe:56:d4:4b:18:c7:a9:e6:4f:02:
                    4b:13:12:62:47:07:bd:5a:c3:1b:07:71:31:97:78:
                    ec:a6:ba:71:17:6e:7a:bb:ba:74:e7:76:24:38:25:
                    dc:3f:d3:fa:5c:24:24:c5:c3:41:60:28:e2:88:a0:
                    7b:96:55:4a:de:07:0b:1c:88:1b:fc:3d:d5:22:07:
                    a7:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6C:FC:7D:1D:7F:4D:1E:B7:98:70:0E:BA:CE:EE:3F:91:6E:36:EC:7D
            X509v3 Authority Key Identifier:
                keyid:AC:55:54:47:BA:62:C3:91:07:F1:6B:F5:72:F8:2A:41:7F:72:8D:BF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/3993f350-b756-4916-8d84-484f025dffcc/0/AC555447BA62C39107F16BF572F82A417F728DBF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AC555447BA62C39107F16BF572F82A417F728DBF.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/3993f350-b756-4916-8d84-484f025dffcc/0/3138322e3235332e3134322e302f32342d3234203d3e203137343531.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  182.253.142.0/24

    Signature Algorithm: sha256WithRSAEncryption
         6f:51:f0:9a:e6:bd:92:bd:6b:1b:21:b2:c5:51:bb:0e:db:6b:
         5b:22:3d:ee:80:9e:2e:a0:49:34:5f:32:d0:8b:e9:0c:83:5e:
         7b:a7:d7:2d:df:ff:8d:e9:fb:c6:21:36:55:3e:ec:14:e4:e7:
         91:28:01:bb:92:8f:da:ee:64:78:8b:9c:b0:a5:77:3a:97:ae:
         ae:9f:c1:ae:e0:62:f4:9b:ec:7f:04:c3:5b:b0:c6:96:f2:ad:
         4c:cb:4d:e7:ac:fc:ab:7a:0e:4c:84:76:23:7c:15:fd:2a:9c:
         d9:0c:3e:9e:3b:6b:c0:43:74:02:41:ed:5b:3d:2f:9b:3d:41:
         51:8c:c0:73:a8:33:29:6d:08:37:bc:90:da:43:1f:24:96:ed:
         57:d1:76:07:b6:8f:0a:0f:ad:74:22:1d:c4:76:35:e1:2a:e9:
         52:e6:30:0a:0d:95:42:82:e7:9b:b4:d7:27:66:ac:22:f4:58:
         69:b2:8d:ad:14:fc:ec:77:d3:bf:5b:22:91:f4:45:9a:98:d5:
         f9:2e:b1:2d:54:7a:a6:32:19:e1:90:19:c3:58:32:f9:c7:97:
         24:4e:49:76:d6:1e:68:91:af:52:86:40:14:c9:e5:4e:8e:26:
         31:ec:db:2d:c7:51:52:3e:a3:2c:63:1d:07:87:87:12:8b:ef:
         2d:3c:cd:fd
-----BEGIN CERTIFICATE-----
MIIHJjCCBg6gAwIBAgIUEFf3C6C/gpDddVORZjyoNg+lKKQwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQUM1NTU0NDdCQTYyQzM5MTA3RjE2QkY1NzJGODJBNDE3
RjcyOERCRjAeFw0yMTA5MjkyMzU1MzdaFw0yMjA5MzAwMDAwMzdaMIICLTGCAikw
ggIlBgNVBAMTggIcMzA4MjAxMEEwMjgyMDEwMTAwQUUzMEM3QTk0NEJFQ0E3ODhB
NkNCNjlGRTQ4REUwMzNBMjJDRDk2RjEzNDQ5NDUxNDgyMDZCMkVGNkIxOEM3REYz
NDdGRDY1NDAxQjUwQTQ1QjQzRDRDMjQ3OTU2OEE1RjMyQzNENTU0NUQ5M0I0NjA3
OTE4QjkxQTZCRDZEOENGQzdDRkJGMEMzRDY2MDU5QUE3QTVEODdBMjg4NkRGNjkx
M0RCNjU2QjNGNkU3MTQ2REM1NDQ1N0M0OEY4RTY5Qzc4QkE4ODA5MzY4ODE1QzRE
Qzk4NEUwRUEyQzlCREIwNEFBMUEwQjM0NEE0RkFEOTVGQzE0QTJFMzJERTMzNDY3
MzBDNTkxQjg5NTY5NDU0QkVBNkU1Nzc5OEE5RUNBNDA2NDkxQkRGOUI1NEVBN0M4
MzJEN0JCQTZBODIyRUQwRkI2NDc5NDA3Q0ZGQTc3N0YwMkM2NDYyMjFEMEMxNDhB
QTIxMTkyQUQ4MjYwRDZGRTU2RDQ0QjE4QzdBOUU2NEYwMjRCMTMxMjYyNDcwN0JE
NUFDMzFCMDc3MTMxOTc3OEVDQTZCQTcxMTc2RTdBQkJCQTc0RTc3NjI0MzgyNURD
M0ZEM0ZBNUMyNDI0QzVDMzQxNjAyOEUyODhBMDdCOTY1NTRBREUwNzBCMUM4ODFC
RkMzREQ1MjIwN0E3RTUwMjAzMDEwMDAxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8A
MIIBCgKCAQEArjDHqUS+yniKbLaf5I3gM6Is2W8TRJRRSCBrLvaxjH3zR/1lQBtQ
pFtD1MJHlWil8yw9VUXZO0YHkYuRpr1tjPx8+/DD1mBZqnpdh6KIbfaRPbZWs/bn
FG3FRFfEj45px4uogJNogVxNyYTg6iyb2wSqGgs0Sk+tlfwUouMt4zRnMMWRuJVp
RUvqbld5ip7KQGSRvfm1TqfIMte7pqgi7Q+2R5QHz/p3fwLGRiIdDBSKohGSrYJg
1v5W1EsYx6nmTwJLExJiRwe9WsMbB3Exl3jsprpxF256u7p053YkOCXcP9P6XCQk
xcNBYCjiiKB7llVK3gcLHIgb/D3VIgen5QIDAQABo4ICNDCCAjAwHQYDVR0OBBYE
FGz8fR1/TR63mHAOus7uP5FuNux9MB8GA1UdIwQYMBaAFKxVVEe6YsORB/Fr9XL4
KkF/co2/MA4GA1UdDwEB/wQEAwIHgDCBhQYDVR0fBH4wfDB6oHigdoZ0cnN5bmM6
Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMzk5M2YzNTAtYjc1Ni00OTE2LThk
ODQtNDg0ZjAyNWRmZmNjLzAvQUM1NTU0NDdCQTYyQzM5MTA3RjE2QkY1NzJGODJB
NDE3RjcyOERCRi5jcmwwdAYIKwYBBQUHAQEEaDBmMGQGCCsGAQUFBzAChlhyc3lu
YzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9JRE5JQy1JRC8yL0FDNTU1NDQ3
QkE2MkMzOTEwN0YxNkJGNTcyRjgyQTQxN0Y3MjhEQkYuY2VyMIGkBggrBgEFBQcB
CwSBlzCBlDCBkQYIKwYBBQUHMAuGgYRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5u
ZXQvcmVwby8zOTkzZjM1MC1iNzU2LTQ5MTYtOGQ4NC00ODRmMDI1ZGZmY2MvMC8z
MTM4MzIyZTMyMzUzMzJlMzEzNDMyMmUzMDJmMzIzNDJkMzIzNDIwM2QzZTIwMzEz
NzM0MzUzMS5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcB
BwEB/wQQMA4wDAQCAAEwBgMEALb9jjANBgkqhkiG9w0BAQsFAAOCAQEAb1Hwmua9
kr1rGyGyxVG7DttrWyI97oCeLqBJNF8y0IvpDINee6fXLd//jen7xiE2VT7sFOTn
kSgBu5KP2u5keIucsKV3Opeurp/BruBi9JvsfwTDW7DGlvKtTMtN56z8q3oOTIR2
I3wV/Sqc2Qw+njtrwEN0AkHtWz0vmz1BUYzAc6gzKW0IN7yQ2kMfJJbtV9F2B7aP
Cg+tdCIdxHY14SrpUuYwCg2VQoLnm7TXJ2asIvRYabKNrRT87HfTv1sikfRFmpjV
+S6xLVR6pjIZ4ZAZw1gy+ceXJE5JdtYeaJGvUoZAFMnlTo4mMezbLcdRUj6jLGMd
B4eHEovvLTzN/Q==
-----END CERTIFICATE-----