Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/3993f350-b756-4916-8d84-484f025dffcc/0/3138322e3235332e3231362e302f32342d3234203d3e203137343531.roa
File:                     3138322e3235332e3231362e302f32342d3234203d3e203137343531.roa (raw, json)
Hash identifier:          UYu/CDZSvSWVCKidjpWxFwpAqDIPxqCMLW6QYvuUAiE=
Subject key identifier:   F4:34:EB:17:67:72:ED:D9:CB:9B:EE:39:03:A1:69:18:E3:53:06:78
Certificate issuer:       /CN=AC555447BA62C39107F16BF572F82A417F728DBF
Certificate serial:       60D932D5DE18C4C23E06198250F1DB23791DB649
Authority key identifier: AC:55:54:47:BA:62:C3:91:07:F1:6B:F5:72:F8:2A:41:7F:72:8D:BF
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AC555447BA62C39107F16BF572F82A417F728DBF.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/3993f350-b756-4916-8d84-484f025dffcc/0/3138322e3235332e3231362e302f32342d3234203d3e203137343531.roa
Signing time:             Thu 30 Sep 2021 00:00:13 +0000
ROA not before:           Wed 29 Sep 2021 23:55:13 +0000
ROA not after:            Fri 30 Sep 2022 00:00:13 +0000
asID:                     17451
IP address blocks:        182.253.216.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            60:d9:32:d5:de:18:c4:c2:3e:06:19:82:50:f1:db:23:79:1d:b6:49
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AC555447BA62C39107F16BF572F82A417F728DBF
        Validity
            Not Before: Sep 29 23:55:13 2021 GMT
            Not After : Sep 30 00:00:13 2022 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:f1:f9:f2:7d:5c:a9:ea:0b:d4:fe:3d:00:76:
                    00:08:ff:3a:fa:cb:a7:bb:35:df:fa:72:94:94:f1:
                    6b:23:51:ec:29:d7:f7:46:d1:48:ac:9b:a2:09:48:
                    32:87:20:cc:62:5d:87:50:14:1f:c0:6c:d8:47:6f:
                    fb:50:2b:61:01:63:a1:f3:5b:13:50:df:5d:93:3a:
                    43:cc:06:f9:27:fd:f6:43:21:b3:db:41:86:8e:df:
                    2d:f5:2d:04:48:9b:dd:3e:66:d9:af:f1:9d:b6:91:
                    86:d5:37:7a:10:3f:af:e1:8f:c6:31:8d:e1:8f:a1:
                    4a:05:37:7f:c9:55:1c:90:92:1d:17:b1:11:99:cf:
                    2c:0e:19:ee:46:ac:05:ed:d8:b2:34:b1:26:aa:7e:
                    7c:25:94:18:43:fb:51:bf:70:5b:b9:91:9a:df:0e:
                    9c:85:c0:af:f3:81:41:2e:cd:76:84:1c:df:e4:8e:
                    da:7b:ec:f0:02:f2:f0:0f:d4:28:0f:4f:bf:76:f9:
                    ec:90:6d:fd:a0:50:ea:64:9e:af:8c:59:ab:73:40:
                    42:28:fa:cb:41:f2:47:d1:9e:e0:37:a0:38:4a:d9:
                    7b:cc:21:39:c3:e5:72:67:bd:9d:3d:08:d9:39:db:
                    65:f8:f0:80:89:b0:06:15:7c:5d:60:b4:c3:4d:db:
                    b1:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F4:34:EB:17:67:72:ED:D9:CB:9B:EE:39:03:A1:69:18:E3:53:06:78
            X509v3 Authority Key Identifier:
                keyid:AC:55:54:47:BA:62:C3:91:07:F1:6B:F5:72:F8:2A:41:7F:72:8D:BF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/3993f350-b756-4916-8d84-484f025dffcc/0/AC555447BA62C39107F16BF572F82A417F728DBF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AC555447BA62C39107F16BF572F82A417F728DBF.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/3993f350-b756-4916-8d84-484f025dffcc/0/3138322e3235332e3231362e302f32342d3234203d3e203137343531.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  182.253.216.0/24

    Signature Algorithm: sha256WithRSAEncryption
         86:ff:5e:cb:ae:2c:52:3a:98:90:e2:66:12:65:c6:a4:97:66:
         3e:c2:24:cf:0e:8e:97:75:be:52:a7:5f:ba:1b:d2:37:e7:84:
         68:1d:a1:7c:99:dd:ba:b7:43:26:f0:c6:42:53:fe:7c:4b:df:
         6c:ab:1b:77:7b:1e:8d:68:d4:50:ac:89:71:76:0a:40:77:56:
         c8:69:fd:c5:db:2b:c2:f7:ff:36:8f:8e:83:b7:86:c1:6f:6b:
         d0:f5:a6:b9:d5:fa:7e:58:70:5c:41:85:44:8f:85:b8:5c:e6:
         c1:3b:a0:28:aa:3c:10:01:b2:bc:e4:d5:63:5e:0f:e2:02:56:
         b9:af:de:ab:0f:2f:36:0d:15:06:ea:9b:df:1f:34:ee:46:73:
         48:fd:73:4b:89:c5:98:64:71:bf:91:d9:92:bc:f1:62:08:3f:
         04:cb:6c:dd:e0:b6:11:3a:1f:38:07:5f:0c:a5:0d:91:54:d8:
         db:94:cf:85:3a:0c:86:21:93:fd:20:f3:9d:45:33:74:89:58:
         46:9f:99:f6:40:5e:43:66:21:6d:e7:51:e2:58:c4:41:da:9c:
         fc:da:21:58:43:47:93:ee:df:a9:f7:eb:88:6e:e0:d1:b9:d4:
         2f:f8:d2:2f:f0:29:02:d7:a9:d2:bc:96:3f:48:47:b4:1d:12:
         ec:fa:fb:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----