Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/3993f350-b756-4916-8d84-484f025dffcc/0/3138322e3235332e3136302e302f32332d3233203d3e203137343531.roa
File:                     3138322e3235332e3136302e302f32332d3233203d3e203137343531.roa (raw, json)
Hash identifier:          seNUuR4MUXnwul1j+phWTGmcLriijuk3fLZgFmUeXEw=
Subject key identifier:   E4:BE:0F:23:13:3E:02:5B:3E:6B:5F:8D:1E:FA:E4:68:2C:4A:85:53
Certificate issuer:       /CN=AC555447BA62C39107F16BF572F82A417F728DBF
Certificate serial:       7132E11A084546BAA41D97FE1EA152AEF253755D
Authority key identifier: AC:55:54:47:BA:62:C3:91:07:F1:6B:F5:72:F8:2A:41:7F:72:8D:BF
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AC555447BA62C39107F16BF572F82A417F728DBF.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/3993f350-b756-4916-8d84-484f025dffcc/0/3138322e3235332e3136302e302f32332d3233203d3e203137343531.roa
Signing time:             Thu 07 Oct 2021 05:00:00 +0000
ROA not before:           Thu 07 Oct 2021 04:55:00 +0000
ROA not after:            Fri 07 Oct 2022 05:00:00 +0000
asID:                     17451
IP address blocks:        182.253.160.0/23 maxlen: 23

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            71:32:e1:1a:08:45:46:ba:a4:1d:97:fe:1e:a1:52:ae:f2:53:75:5d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AC555447BA62C39107F16BF572F82A417F728DBF
        Validity
            Not Before: Oct  7 04:55:00 2021 GMT
            Not After : Oct  7 05:00:00 2022 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:91:c1:e7:ac:db:7b:1b:f8:ac:02:f3:1c:84:
                    ab:4e:c4:57:38:7d:09:24:9a:9c:62:0d:df:60:e6:
                    c6:06:63:8c:02:66:40:48:42:44:cc:f5:12:bc:14:
                    cf:db:93:5c:3f:d5:60:36:5b:70:21:de:c5:c3:b7:
                    c0:0f:b2:22:d0:12:78:67:e7:29:92:c5:64:62:2a:
                    a7:53:a9:fc:27:66:15:96:10:49:46:4b:b2:3c:38:
                    74:4c:b4:39:66:e0:e6:b6:ef:db:80:56:eb:4b:fd:
                    6a:f4:a7:b1:32:24:97:cd:a0:ce:45:ab:ea:ae:3d:
                    fe:cd:64:0d:0d:a3:c4:7b:9d:40:72:8e:0c:b0:bb:
                    bf:d8:02:b3:83:ed:af:62:5b:07:fc:30:c0:2c:d2:
                    b8:8a:3e:fc:52:fd:17:3b:a1:fe:86:98:cb:b1:fc:
                    ac:74:70:1c:a7:96:0d:08:22:cb:4b:d4:52:fe:12:
                    84:18:ff:52:fa:8e:66:81:d9:02:f4:a0:5b:4c:34:
                    5b:8f:44:83:8f:2f:5b:de:7e:2b:fe:5e:47:6c:55:
                    44:e3:37:04:57:ac:0c:ff:31:b2:d2:36:95:0a:fe:
                    d3:67:5c:b5:ee:b4:ba:7a:63:e5:f8:bf:51:44:03:
                    48:5b:8b:8f:12:66:b5:51:bf:9f:81:2f:10:d5:63:
                    12:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E4:BE:0F:23:13:3E:02:5B:3E:6B:5F:8D:1E:FA:E4:68:2C:4A:85:53
            X509v3 Authority Key Identifier:
                keyid:AC:55:54:47:BA:62:C3:91:07:F1:6B:F5:72:F8:2A:41:7F:72:8D:BF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/3993f350-b756-4916-8d84-484f025dffcc/0/AC555447BA62C39107F16BF572F82A417F728DBF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AC555447BA62C39107F16BF572F82A417F728DBF.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/3993f350-b756-4916-8d84-484f025dffcc/0/3138322e3235332e3136302e302f32332d3233203d3e203137343531.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  182.253.160.0/23

    Signature Algorithm: sha256WithRSAEncryption
         44:fc:c0:95:a6:d6:f2:8a:32:32:60:82:32:dd:9c:9a:c8:9f:
         ab:9a:a9:ed:70:07:5f:30:da:52:c6:c8:69:e7:90:21:4e:59:
         f8:f8:db:e2:d6:d1:de:89:f5:54:ea:57:7b:1f:51:85:14:d2:
         24:f0:ed:db:7a:60:78:35:33:2e:a2:23:b7:ab:56:56:3d:1c:
         3f:4b:5f:91:c9:1e:c0:66:06:1f:23:42:e9:6b:c8:09:8b:7e:
         df:46:36:d3:3d:1b:30:8f:90:74:13:0c:a5:0e:95:80:d7:24:
         2d:3e:c6:90:4d:81:0e:df:69:db:f3:51:ff:85:e9:d9:6b:50:
         10:45:c1:b1:65:43:7b:4b:e9:d7:ec:1a:53:05:66:4c:6e:02:
         15:49:dc:a2:3a:8c:46:e7:c6:b9:f0:39:bb:4b:c6:d2:aa:d1:
         99:80:75:95:65:5d:6b:cb:ad:0f:79:39:52:5c:c7:b1:45:c4:
         da:d2:34:85:a1:b0:a6:d8:a3:66:0e:d4:20:db:e2:63:21:05:
         ed:89:ae:d4:aa:95:8e:5a:b0:8a:d6:e9:c8:2e:f6:02:b5:40:
         59:46:8a:f8:64:d6:10:45:2e:59:9d:be:76:ef:99:44:46:01:
         16:9b:85:70:4d:9b:f0:78:6f:c5:f9:f9:d5:8a:25:eb:84:e2:
         b5:23:e9:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----