Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/3993f350-b756-4916-8d84-484f025dffcc/0/3138322e3235332e3139392e302f32342d3234203d3e203137343531.roa
File:                     3138322e3235332e3139392e302f32342d3234203d3e203137343531.roa (raw, json)
Hash identifier:          Ppc59kKk5u777nuHIgsTl+LC6dPc3OAP2XxUs4erEL8=
Subject key identifier:   0C:0F:8B:BC:9B:FD:8D:8A:FB:19:2D:6D:08:22:8C:CA:02:A8:56:87
Certificate issuer:       /CN=AC555447BA62C39107F16BF572F82A417F728DBF
Certificate serial:       15585B344C7775A1142AA3000FCC3A3B461960F3
Authority key identifier: AC:55:54:47:BA:62:C3:91:07:F1:6B:F5:72:F8:2A:41:7F:72:8D:BF
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AC555447BA62C39107F16BF572F82A417F728DBF.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/3993f350-b756-4916-8d84-484f025dffcc/0/3138322e3235332e3139392e302f32342d3234203d3e203137343531.roa
Signing time:             Thu 30 Sep 2021 00:00:03 +0000
ROA not before:           Wed 29 Sep 2021 23:55:03 +0000
ROA not after:            Fri 30 Sep 2022 00:00:03 +0000
asID:                     17451
IP address blocks:        182.253.199.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            15:58:5b:34:4c:77:75:a1:14:2a:a3:00:0f:cc:3a:3b:46:19:60:f3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AC555447BA62C39107F16BF572F82A417F728DBF
        Validity
            Not Before: Sep 29 23:55:03 2021 GMT
            Not After : Sep 30 00:00:03 2022 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f6:5f:df:05:82:7f:75:75:1f:ef:f8:73:31:48:
                    f1:8a:04:b5:8a:c6:e5:6f:6b:a2:8b:4e:87:0a:84:
                    e6:75:88:f6:44:06:ec:ec:90:d7:63:7f:69:b2:03:
                    9f:3d:80:66:e1:da:76:f7:02:c0:8f:ef:5d:2a:d1:
                    6b:b7:63:aa:c9:7b:c9:00:00:b6:8e:6b:45:84:71:
                    d8:29:a9:d0:4a:03:02:ef:cb:80:2c:a5:a5:54:01:
                    e3:81:02:07:e2:16:3b:c0:c7:54:92:43:fa:c0:d1:
                    28:32:2b:f4:d2:19:0e:ec:7d:18:59:91:12:48:5b:
                    fa:b7:ae:ea:22:41:61:3f:07:28:81:72:dc:2a:b8:
                    ae:bb:6a:10:53:27:d3:70:42:cc:22:35:26:55:94:
                    f7:d5:51:3e:76:d9:e9:23:d0:54:30:77:44:c0:ac:
                    c1:0a:11:63:b7:84:60:1f:75:b8:ce:50:06:97:87:
                    0b:78:7b:21:e6:85:33:c3:7b:92:a1:c5:d6:64:4f:
                    7e:72:2f:cf:0c:70:5e:8d:a4:66:a6:ed:27:97:2b:
                    5c:1c:05:69:12:1f:1c:18:1b:c1:50:0f:e8:d0:57:
                    a4:13:66:59:bb:7c:ad:53:67:9c:97:7e:c4:cf:68:
                    2f:ac:08:9a:fa:b2:d8:19:b4:5a:e1:b6:17:8f:f5:
                    29:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0C:0F:8B:BC:9B:FD:8D:8A:FB:19:2D:6D:08:22:8C:CA:02:A8:56:87
            X509v3 Authority Key Identifier:
                keyid:AC:55:54:47:BA:62:C3:91:07:F1:6B:F5:72:F8:2A:41:7F:72:8D:BF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/3993f350-b756-4916-8d84-484f025dffcc/0/AC555447BA62C39107F16BF572F82A417F728DBF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AC555447BA62C39107F16BF572F82A417F728DBF.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/3993f350-b756-4916-8d84-484f025dffcc/0/3138322e3235332e3139392e302f32342d3234203d3e203137343531.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  182.253.199.0/24

    Signature Algorithm: sha256WithRSAEncryption
         87:bb:45:2d:cf:cd:19:68:e4:1f:9c:e2:24:c4:4f:26:f5:42:
         b4:55:25:dd:0e:97:5a:66:79:e5:48:22:97:14:26:11:09:15:
         e5:ca:15:16:d2:cf:0e:22:0a:11:14:46:f3:17:63:3a:74:b0:
         27:34:72:89:ea:c8:1f:7d:4a:8e:d0:66:4f:c8:99:74:ad:ae:
         50:b2:8c:10:4f:a1:d4:1b:f6:3a:59:b3:37:18:e6:d1:ce:aa:
         af:c3:b6:29:b0:ac:14:c9:1f:c9:7f:9c:12:3a:cf:38:41:65:
         1a:38:28:e7:9c:78:fa:2b:35:73:b6:9c:a1:6b:3b:3b:17:14:
         cd:a3:3f:d1:2b:c7:d5:75:a2:e2:c2:4e:99:94:14:17:31:ec:
         ba:a7:1c:6a:ad:2b:78:31:c7:75:18:f5:ee:d6:34:5d:82:bb:
         7b:1d:a5:a1:11:c1:6b:1b:f8:41:83:c3:6f:73:ff:68:de:41:
         d7:49:43:35:d6:3a:aa:3e:6c:ee:45:67:31:7b:e2:2f:d9:e7:
         c4:e5:50:32:a1:46:5b:f9:a2:94:2b:9b:02:5b:67:d2:29:2b:
         fd:0d:b7:d7:10:c3:02:0d:66:d6:fa:92:f9:c8:7f:03:ce:e8:
         5d:7d:99:fb:4c:01:a8:76:79:fe:ba:98:91:b1:a5:12:b9:c2:
         ce:63:10:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----