Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/3993f350-b756-4916-8d84-484f025dffcc/0/3138322e3235332e3137322e302f32322d3232203d3e203137343531.roa
File:                     3138322e3235332e3137322e302f32322d3232203d3e203137343531.roa (raw, json)
Hash identifier:          G0pdQbZ7tl2xz22UpCDewFZSoH+9TcL03JWdm1jbXAI=
Subject key identifier:   D7:81:E3:90:29:5F:12:43:FB:38:10:90:78:E6:86:54:03:2F:53:FB
Certificate issuer:       /CN=AC555447BA62C39107F16BF572F82A417F728DBF
Certificate serial:       0ADDADC2D11113B6F1643525B16F87608E9AF14D
Authority key identifier: AC:55:54:47:BA:62:C3:91:07:F1:6B:F5:72:F8:2A:41:7F:72:8D:BF
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AC555447BA62C39107F16BF572F82A417F728DBF.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/3993f350-b756-4916-8d84-484f025dffcc/0/3138322e3235332e3137322e302f32322d3232203d3e203137343531.roa
Signing time:             Thu 30 Sep 2021 00:00:41 +0000
ROA not before:           Wed 29 Sep 2021 23:55:41 +0000
ROA not after:            Fri 30 Sep 2022 00:00:41 +0000
asID:                     17451
IP address blocks:        182.253.172.0/22 maxlen: 22

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0a:dd:ad:c2:d1:11:13:b6:f1:64:35:25:b1:6f:87:60:8e:9a:f1:4d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AC555447BA62C39107F16BF572F82A417F728DBF
        Validity
            Not Before: Sep 29 23:55:41 2021 GMT
            Not After : Sep 30 00:00:41 2022 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f2:4a:42:2c:91:fc:96:57:20:ee:3f:8a:a8:d7:
                    dd:c3:4f:03:7c:f4:f8:32:1c:3c:3e:65:51:f2:0f:
                    28:94:83:08:2e:c8:24:3e:a6:38:b5:a0:99:8d:f7:
                    f2:d8:56:0c:9f:73:38:a7:66:84:d7:24:8a:0b:19:
                    b7:4d:be:ed:43:f5:fa:aa:ad:38:0a:0f:51:a2:0b:
                    60:0a:3c:d7:f4:d7:09:f8:55:e9:95:79:d6:63:dc:
                    c7:22:a1:2d:63:77:9b:e0:11:40:d5:ce:3b:09:59:
                    20:a9:4d:86:5f:47:f4:b3:d4:50:32:08:8d:99:0b:
                    cf:8b:d3:2d:1d:51:0c:8b:cf:7f:02:96:8b:38:ee:
                    25:62:f4:2b:ac:6a:3a:a8:f1:23:ba:cc:e5:c9:25:
                    af:29:ea:0d:98:63:dc:a3:b4:61:73:96:91:b8:2e:
                    b1:b0:b6:18:fb:f5:8c:bf:f0:95:e8:a8:9e:41:13:
                    89:5f:8c:37:44:6d:f8:5b:42:09:80:20:d6:c2:a5:
                    b6:66:95:f6:3a:6f:c2:8e:37:11:6e:8c:9f:e1:d7:
                    af:20:0c:4a:47:3a:2b:92:08:50:10:49:a3:7c:bd:
                    48:30:c4:fe:26:cc:c8:7c:e6:c6:5c:77:3c:0b:d3:
                    31:6d:1e:aa:dc:4e:58:a0:80:f6:e1:68:fe:f3:4d:
                    18:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D7:81:E3:90:29:5F:12:43:FB:38:10:90:78:E6:86:54:03:2F:53:FB
            X509v3 Authority Key Identifier:
                keyid:AC:55:54:47:BA:62:C3:91:07:F1:6B:F5:72:F8:2A:41:7F:72:8D:BF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/3993f350-b756-4916-8d84-484f025dffcc/0/AC555447BA62C39107F16BF572F82A417F728DBF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AC555447BA62C39107F16BF572F82A417F728DBF.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/3993f350-b756-4916-8d84-484f025dffcc/0/3138322e3235332e3137322e302f32322d3232203d3e203137343531.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  182.253.172.0/22

    Signature Algorithm: sha256WithRSAEncryption
         46:43:48:19:cd:cf:56:8b:b1:d0:c2:aa:93:c9:ce:83:c1:dc:
         ae:ed:c0:6e:b4:bf:c8:9b:d7:29:2c:11:fb:bd:7c:d6:82:1d:
         02:8b:eb:e3:b3:af:ff:ee:52:82:2a:17:92:57:a5:36:4f:0c:
         ab:06:fd:21:f7:59:29:73:a4:4a:00:5b:ba:5b:91:e9:0e:27:
         38:05:0c:8a:73:23:d2:e3:11:64:42:5c:97:93:b9:00:a7:b6:
         7f:9b:ce:ff:f9:33:d3:e6:c8:72:32:06:66:b1:82:8b:76:d1:
         7b:82:e9:37:40:ae:9c:90:4c:8e:53:2a:07:29:82:d8:fb:11:
         d8:3f:aa:67:cd:76:79:45:72:e4:54:81:42:1d:08:f9:62:fc:
         43:77:81:b8:0d:16:67:35:03:12:5d:a6:d4:4e:4f:21:07:c8:
         28:63:c9:2c:60:9c:ef:c8:77:be:ba:11:d9:7a:6c:64:35:c8:
         cc:b4:96:e3:ad:9d:84:98:c4:e9:d9:44:e7:f6:dd:1a:46:f3:
         11:3c:f7:07:23:d5:c5:a7:b7:bd:0e:92:09:70:1a:c7:01:48:
         00:2d:b9:a9:76:1c:11:d3:a5:3f:32:c9:ae:79:21:05:5f:bc:
         8b:2e:45:15:90:32:3a:21:8c:90:a8:c0:94:6d:06:30:1e:54:
         7a:3f:aa:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----