Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/3993f350-b756-4916-8d84-484f025dffcc/0/3138322e3235332e3139332e302f32342d3234203d3e203137343531.roa
File:                     3138322e3235332e3139332e302f32342d3234203d3e203137343531.roa (raw, json)
Hash identifier:          Nf7CJPPfvGVHCI+t2D6OKU235MtcSSLxY5yahq8OQFk=
Subject key identifier:   52:E8:98:69:3D:AC:37:64:DE:F4:7B:77:01:F2:A6:71:45:69:36:68
Certificate issuer:       /CN=AC555447BA62C39107F16BF572F82A417F728DBF
Certificate serial:       4AB906FE468FD5E98E01675EF78E5F787CB0EF0A
Authority key identifier: AC:55:54:47:BA:62:C3:91:07:F1:6B:F5:72:F8:2A:41:7F:72:8D:BF
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AC555447BA62C39107F16BF572F82A417F728DBF.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/3993f350-b756-4916-8d84-484f025dffcc/0/3138322e3235332e3139332e302f32342d3234203d3e203137343531.roa
Signing time:             Thu 30 Sep 2021 00:00:30 +0000
ROA not before:           Wed 29 Sep 2021 23:55:30 +0000
ROA not after:            Fri 30 Sep 2022 00:00:30 +0000
asID:                     17451
IP address blocks:        182.253.193.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4a:b9:06:fe:46:8f:d5:e9:8e:01:67:5e:f7:8e:5f:78:7c:b0:ef:0a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AC555447BA62C39107F16BF572F82A417F728DBF
        Validity
            Not Before: Sep 29 23:55:30 2021 GMT
            Not After : Sep 30 00:00:30 2022 GMT
        Subject: CN=3082010A0282010100DA778077C8EE523DC5F38503F5078ABE5326FCAAF57EED7D206E62A45A005FD52D1EE3157E6143E8EC4C9DFFA501CB0517B2ADC04928B3E8772F0B6B02B9E5FA26A0606D9459391CDCAE2FF17DBE82C8BE37AC486B3A9DF271C783D225C6847B4A48D953E15A761281D961FCDD7C4A83402B6B4991679F4B348A2E3D2DE41CBE23AB822F849C63D4C036EF7728BF299B6577CEAD3670E6A8A9003B61B8E3B181502C0365F7D2552A1FC9196C0BE9FA0E9417820F6D2AD90826D94D509677CA98430B343D300465C905B44ABF85CC52AED399BED800CF2BB5E7D5DBAE6B80D249D65708BA821A6D33FD2698B38F0594C78BF53C939B17F8CE2B0595BF0F0229950203010001
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:77:80:77:c8:ee:52:3d:c5:f3:85:03:f5:07:
                    8a:be:53:26:fc:aa:f5:7e:ed:7d:20:6e:62:a4:5a:
                    00:5f:d5:2d:1e:e3:15:7e:61:43:e8:ec:4c:9d:ff:
                    a5:01:cb:05:17:b2:ad:c0:49:28:b3:e8:77:2f:0b:
                    6b:02:b9:e5:fa:26:a0:60:6d:94:59:39:1c:dc:ae:
                    2f:f1:7d:be:82:c8:be:37:ac:48:6b:3a:9d:f2:71:
                    c7:83:d2:25:c6:84:7b:4a:48:d9:53:e1:5a:76:12:
                    81:d9:61:fc:dd:7c:4a:83:40:2b:6b:49:91:67:9f:
                    4b:34:8a:2e:3d:2d:e4:1c:be:23:ab:82:2f:84:9c:
                    63:d4:c0:36:ef:77:28:bf:29:9b:65:77:ce:ad:36:
                    70:e6:a8:a9:00:3b:61:b8:e3:b1:81:50:2c:03:65:
                    f7:d2:55:2a:1f:c9:19:6c:0b:e9:fa:0e:94:17:82:
                    0f:6d:2a:d9:08:26:d9:4d:50:96:77:ca:98:43:0b:
                    34:3d:30:04:65:c9:05:b4:4a:bf:85:cc:52:ae:d3:
                    99:be:d8:00:cf:2b:b5:e7:d5:db:ae:6b:80:d2:49:
                    d6:57:08:ba:82:1a:6d:33:fd:26:98:b3:8f:05:94:
                    c7:8b:f5:3c:93:9b:17:f8:ce:2b:05:95:bf:0f:02:
                    29:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                52:E8:98:69:3D:AC:37:64:DE:F4:7B:77:01:F2:A6:71:45:69:36:68
            X509v3 Authority Key Identifier:
                keyid:AC:55:54:47:BA:62:C3:91:07:F1:6B:F5:72:F8:2A:41:7F:72:8D:BF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/3993f350-b756-4916-8d84-484f025dffcc/0/AC555447BA62C39107F16BF572F82A417F728DBF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AC555447BA62C39107F16BF572F82A417F728DBF.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/3993f350-b756-4916-8d84-484f025dffcc/0/3138322e3235332e3139332e302f32342d3234203d3e203137343531.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  182.253.193.0/24

    Signature Algorithm: sha256WithRSAEncryption
         2e:bb:34:96:c9:b2:84:b1:93:d8:1e:08:ee:35:73:52:2e:6d:
         b9:09:be:54:72:45:1c:a0:d5:f6:2c:bf:a8:58:ab:48:03:80:
         eb:0f:e6:b0:e7:1a:11:63:5b:19:32:ae:23:d0:17:40:14:30:
         b1:11:d4:57:be:24:7c:ed:cc:e1:18:1c:5d:ea:0e:47:89:eb:
         77:eb:07:4a:97:e3:35:89:bd:ab:fc:4e:fa:b1:60:5e:57:a9:
         2e:f9:bc:56:4e:71:b6:81:6a:66:23:e1:5d:0d:53:dd:c8:bc:
         57:d3:75:a5:65:38:45:c9:7f:20:a6:e3:f3:bb:83:18:f9:e6:
         76:05:24:37:f6:3e:12:a7:52:61:b8:b4:54:ff:b3:e0:0c:5a:
         13:04:9c:95:b9:57:cf:a5:d9:0a:6e:b1:f3:95:83:0b:9a:79:
         90:15:a4:fb:0a:8f:5d:73:1a:f3:5f:9e:97:8f:03:f5:1a:39:
         a8:95:26:d4:df:72:5e:6d:03:ac:0c:0b:e6:7f:86:f3:0d:32:
         07:e6:11:b3:57:ae:7f:17:16:b5:44:4f:f2:3a:11:cd:6b:7a:
         a3:27:11:5d:cb:4c:60:09:db:43:a4:af:04:61:3f:f0:bd:9d:
         df:8d:9a:34:51:6e:6d:ad:34:59:e6:28:de:ad:66:d6:f8:8a:
         de:b7:81:f0
-----BEGIN CERTIFICATE-----
MIIHJjCCBg6gAwIBAgIUSrkG/kaP1emOAWde945feHyw7wowDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQUM1NTU0NDdCQTYyQzM5MTA3RjE2QkY1NzJGODJBNDE3
RjcyOERCRjAeFw0yMTA5MjkyMzU1MzBaFw0yMjA5MzAwMDAwMzBaMIICLTGCAikw
ggIlBgNVBAMTggIcMzA4MjAxMEEwMjgyMDEwMTAwREE3NzgwNzdDOEVFNTIzREM1
RjM4NTAzRjUwNzhBQkU1MzI2RkNBQUY1N0VFRDdEMjA2RTYyQTQ1QTAwNUZENTJE
MUVFMzE1N0U2MTQzRThFQzRDOURGRkE1MDFDQjA1MTdCMkFEQzA0OTI4QjNFODc3
MkYwQjZCMDJCOUU1RkEyNkEwNjA2RDk0NTkzOTFDRENBRTJGRjE3REJFODJDOEJF
MzdBQzQ4NkIzQTlERjI3MUM3ODNEMjI1QzY4NDdCNEE0OEQ5NTNFMTVBNzYxMjgx
RDk2MUZDREQ3QzRBODM0MDJCNkI0OTkxNjc5RjRCMzQ4QTJFM0QyREU0MUNCRTIz
QUI4MjJGODQ5QzYzRDRDMDM2RUY3NzI4QkYyOTlCNjU3N0NFQUQzNjcwRTZBOEE5
MDAzQjYxQjhFM0IxODE1MDJDMDM2NUY3RDI1NTJBMUZDOTE5NkMwQkU5RkEwRTk0
MTc4MjBGNkQyQUQ5MDgyNkQ5NEQ1MDk2NzdDQTk4NDMwQjM0M0QzMDA0NjVDOTA1
QjQ0QUJGODVDQzUyQUVEMzk5QkVEODAwQ0YyQkI1RTdENURCQUU2QjgwRDI0OUQ2
NTcwOEJBODIxQTZEMzNGRDI2OThCMzhGMDU5NEM3OEJGNTNDOTM5QjE3RjhDRTJC
MDU5NUJGMEYwMjI5OTUwMjAzMDEwMDAxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8A
MIIBCgKCAQEA2neAd8juUj3F84UD9QeKvlMm/Kr1fu19IG5ipFoAX9UtHuMVfmFD
6OxMnf+lAcsFF7KtwEkos+h3LwtrArnl+iagYG2UWTkc3K4v8X2+gsi+N6xIazqd
8nHHg9IlxoR7SkjZU+FadhKB2WH83XxKg0Ara0mRZ59LNIouPS3kHL4jq4IvhJxj
1MA273covymbZXfOrTZw5qipADthuOOxgVAsA2X30lUqH8kZbAvp+g6UF4IPbSrZ
CCbZTVCWd8qYQws0PTAEZckFtEq/hcxSrtOZvtgAzyu159XbrmuA0knWVwi6ghpt
M/0mmLOPBZTHi/U8k5sX+M4rBZW/DwIplQIDAQABo4ICNDCCAjAwHQYDVR0OBBYE
FFLomGk9rDdk3vR7dwHypnFFaTZoMB8GA1UdIwQYMBaAFKxVVEe6YsORB/Fr9XL4
KkF/co2/MA4GA1UdDwEB/wQEAwIHgDCBhQYDVR0fBH4wfDB6oHigdoZ0cnN5bmM6
Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMzk5M2YzNTAtYjc1Ni00OTE2LThk
ODQtNDg0ZjAyNWRmZmNjLzAvQUM1NTU0NDdCQTYyQzM5MTA3RjE2QkY1NzJGODJB
NDE3RjcyOERCRi5jcmwwdAYIKwYBBQUHAQEEaDBmMGQGCCsGAQUFBzAChlhyc3lu
YzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9JRE5JQy1JRC8yL0FDNTU1NDQ3
QkE2MkMzOTEwN0YxNkJGNTcyRjgyQTQxN0Y3MjhEQkYuY2VyMIGkBggrBgEFBQcB
CwSBlzCBlDCBkQYIKwYBBQUHMAuGgYRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5u
ZXQvcmVwby8zOTkzZjM1MC1iNzU2LTQ5MTYtOGQ4NC00ODRmMDI1ZGZmY2MvMC8z
MTM4MzIyZTMyMzUzMzJlMzEzOTMzMmUzMDJmMzIzNDJkMzIzNDIwM2QzZTIwMzEz
NzM0MzUzMS5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcB
BwEB/wQQMA4wDAQCAAEwBgMEALb9wTANBgkqhkiG9w0BAQsFAAOCAQEALrs0lsmy
hLGT2B4I7jVzUi5tuQm+VHJFHKDV9iy/qFirSAOA6w/msOcaEWNbGTKuI9AXQBQw
sRHUV74kfO3M4RgcXeoOR4nrd+sHSpfjNYm9q/xO+rFgXlepLvm8Vk5xtoFqZiPh
XQ1T3ci8V9N1pWU4Rcl/IKbj87uDGPnmdgUkN/Y+EqdSYbi0VP+z4AxaEwSclblX
z6XZCm6x85WDC5p5kBWk+wqPXXMa81+el48D9Ro5qJUm1N9yXm0DrAwL5n+G8w0y
B+YRs1eufxcWtURP8joRzWt6oycRXctMYAnbQ6SvBGE/8L2d342aNFFuba00WeYo
3q1m1viK3reB8A==
-----END CERTIFICATE-----