Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/3993f350-b756-4916-8d84-484f025dffcc/0/3138322e3235332e3232322e302f32342d3234203d3e203137343531.roa
File:                     3138322e3235332e3232322e302f32342d3234203d3e203137343531.roa (raw, json)
Hash identifier:          Voj/lOY7grXU12igea/rUkCbDMeGoI787/EIyrT71fQ=
Subject key identifier:   52:90:28:17:54:07:98:54:6A:20:F1:2E:DB:BA:60:9E:C7:36:3C:4D
Certificate issuer:       /CN=AC555447BA62C39107F16BF572F82A417F728DBF
Certificate serial:       0E11686A41992D513FE1F0ADA27E6E165A1746F1
Authority key identifier: AC:55:54:47:BA:62:C3:91:07:F1:6B:F5:72:F8:2A:41:7F:72:8D:BF
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AC555447BA62C39107F16BF572F82A417F728DBF.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/3993f350-b756-4916-8d84-484f025dffcc/0/3138322e3235332e3232322e302f32342d3234203d3e203137343531.roa
Signing time:             Thu 30 Sep 2021 00:01:22 +0000
ROA not before:           Wed 29 Sep 2021 23:56:22 +0000
ROA not after:            Fri 30 Sep 2022 00:01:22 +0000
asID:                     17451
IP address blocks:        182.253.222.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0e:11:68:6a:41:99:2d:51:3f:e1:f0:ad:a2:7e:6e:16:5a:17:46:f1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AC555447BA62C39107F16BF572F82A417F728DBF
        Validity
            Not Before: Sep 29 23:56:22 2021 GMT
            Not After : Sep 30 00:01:22 2022 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:8b:7b:96:03:e6:6f:fa:f5:16:3a:25:5a:63:
                    c5:b4:84:cd:c0:8d:6e:27:88:5a:cc:37:b5:2f:27:
                    83:71:15:5a:c0:f8:56:c8:92:8b:be:23:25:c7:9e:
                    d0:88:ed:5a:77:65:e5:4f:1c:93:b8:63:32:d5:90:
                    d4:7f:4c:a9:94:83:21:1d:12:4d:7c:67:2d:88:c0:
                    5f:99:59:f8:3e:b5:9d:01:93:db:d9:0b:2d:9b:14:
                    9a:5a:e9:17:b2:77:83:58:0e:62:69:0e:81:00:28:
                    33:9d:5a:c5:84:b3:58:41:66:ea:77:e7:e7:dd:c5:
                    90:69:0e:f9:1d:06:74:3d:32:6e:8d:75:24:28:90:
                    67:67:e6:d4:aa:c5:99:d8:8b:16:af:8f:83:8d:2b:
                    10:1c:b7:32:9d:5a:d1:38:26:58:7b:f1:79:46:34:
                    ff:e0:1f:0d:ca:ab:4f:92:0b:20:f1:51:d9:88:ab:
                    71:29:72:d3:8f:b4:47:98:0b:57:f8:2a:11:7b:57:
                    6f:9d:96:9e:9c:90:e3:c0:78:8f:f4:e0:8f:1c:35:
                    8a:d3:2e:fe:85:2f:28:c3:bb:0c:05:69:4a:5d:72:
                    08:a6:d8:e4:7e:62:9e:e6:6c:13:a7:d2:79:f7:d4:
                    58:40:bf:52:95:90:ff:55:2c:b4:de:b3:8e:96:be:
                    82:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                52:90:28:17:54:07:98:54:6A:20:F1:2E:DB:BA:60:9E:C7:36:3C:4D
            X509v3 Authority Key Identifier:
                keyid:AC:55:54:47:BA:62:C3:91:07:F1:6B:F5:72:F8:2A:41:7F:72:8D:BF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/3993f350-b756-4916-8d84-484f025dffcc/0/AC555447BA62C39107F16BF572F82A417F728DBF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AC555447BA62C39107F16BF572F82A417F728DBF.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/3993f350-b756-4916-8d84-484f025dffcc/0/3138322e3235332e3232322e302f32342d3234203d3e203137343531.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  182.253.222.0/24

    Signature Algorithm: sha256WithRSAEncryption
         a5:52:a1:4a:fc:23:64:97:57:c8:63:c1:1f:fe:7c:24:b6:ba:
         20:4f:6c:ea:42:e5:df:70:d0:58:1b:56:85:d5:80:7e:23:c4:
         1e:9e:0c:17:19:f9:f0:cb:36:83:71:85:6a:71:b8:ba:b7:f4:
         ba:ce:3f:51:c9:7e:0d:c4:7a:05:e6:84:7d:e9:ac:5b:7f:5d:
         53:25:11:32:ef:ab:97:19:9d:71:71:70:24:01:70:90:70:ef:
         ed:0a:be:b7:50:b5:8e:0c:be:01:2d:9d:9b:ae:68:d7:10:db:
         40:96:55:2d:1e:d5:2c:63:07:98:80:21:ae:3b:d8:07:51:55:
         eb:40:8b:2d:1a:ef:db:0a:fe:ed:7c:b4:49:a4:21:68:93:12:
         62:6f:f3:88:29:c3:b6:3e:65:33:0b:05:b2:e6:a2:ef:aa:bb:
         6f:35:66:ed:90:0e:59:96:65:93:f6:8e:b0:41:0e:8e:2f:b5:
         a2:95:65:56:3f:3d:1d:62:dd:ea:22:d2:f4:fa:e8:46:4e:2e:
         6c:15:be:8d:df:90:b6:26:a1:46:c4:a1:ab:a2:2b:0a:be:d5:
         b7:10:aa:fb:6e:03:ac:ff:e4:7f:f4:83:57:48:9a:92:5b:03:
         7b:b3:ac:3c:97:9f:5e:0a:09:92:84:e9:84:d2:10:b5:19:a3:
         74:44:53:48
-----BEGIN CERTIFICATE-----
MIIHJjCCBg6gAwIBAgIUDhFoakGZLVE/4fCton5uFloXRvEwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQUM1NTU0NDdCQTYyQzM5MTA3RjE2QkY1NzJGODJBNDE3
RjcyOERCRjAeFw0yMTA5MjkyMzU2MjJaFw0yMjA5MzAwMDAxMjJaMIICLTGCAikw
ggIlBgNVBAMTggIcMzA4MjAxMEEwMjgyMDEwMTAwQzA4QjdCOTYwM0U2NkZGQUY1
MTYzQTI1NUE2M0M1QjQ4NENEQzA4RDZFMjc4ODVBQ0MzN0I1MkYyNzgzNzExNTVB
QzBGODU2Qzg5MjhCQkUyMzI1Qzc5RUQwODhFRDVBNzc2NUU1NEYxQzkzQjg2MzMy
RDU5MEQ0N0Y0Q0E5OTQ4MzIxMUQxMjREN0M2NzJEODhDMDVGOTk1OUY4M0VCNTlE
MDE5M0RCRDkwQjJEOUIxNDlBNUFFOTE3QjI3NzgzNTgwRTYyNjkwRTgxMDAyODMz
OUQ1QUM1ODRCMzU4NDE2NkVBNzdFN0U3RERDNTkwNjkwRUY5MUQwNjc0M0QzMjZF
OEQ3NTI0Mjg5MDY3NjdFNkQ0QUFDNTk5RDg4QjE2QUY4RjgzOEQyQjEwMUNCNzMy
OUQ1QUQxMzgyNjU4N0JGMTc5NDYzNEZGRTAxRjBEQ0FBQjRGOTIwQjIwRjE1MUQ5
ODhBQjcxMjk3MkQzOEZCNDQ3OTgwQjU3RjgyQTExN0I1NzZGOUQ5NjlFOUM5MEUz
QzA3ODhGRjRFMDhGMUMzNThBRDMyRUZFODUyRjI4QzNCQjBDMDU2OTRBNUQ3MjA4
QTZEOEU0N0U2MjlFRTY2QzEzQTdEMjc5RjdENDU4NDBCRjUyOTU5MEZGNTUyQ0I0
REVCMzhFOTZCRTgyNEIwMjAzMDEwMDAxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8A
MIIBCgKCAQEAwIt7lgPmb/r1FjolWmPFtITNwI1uJ4hazDe1LyeDcRVawPhWyJKL
viMlx57QiO1ad2XlTxyTuGMy1ZDUf0yplIMhHRJNfGctiMBfmVn4PrWdAZPb2Qst
mxSaWukXsneDWA5iaQ6BACgznVrFhLNYQWbqd+fn3cWQaQ75HQZ0PTJujXUkKJBn
Z+bUqsWZ2IsWr4+DjSsQHLcynVrROCZYe/F5RjT/4B8NyqtPkgsg8VHZiKtxKXLT
j7RHmAtX+CoRe1dvnZaenJDjwHiP9OCPHDWK0y7+hS8ow7sMBWlKXXIIptjkfmKe
5mwTp9J599RYQL9SlZD/VSy03rOOlr6CSwIDAQABo4ICNDCCAjAwHQYDVR0OBBYE
FFKQKBdUB5hUaiDxLtu6YJ7HNjxNMB8GA1UdIwQYMBaAFKxVVEe6YsORB/Fr9XL4
KkF/co2/MA4GA1UdDwEB/wQEAwIHgDCBhQYDVR0fBH4wfDB6oHigdoZ0cnN5bmM6
Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMzk5M2YzNTAtYjc1Ni00OTE2LThk
ODQtNDg0ZjAyNWRmZmNjLzAvQUM1NTU0NDdCQTYyQzM5MTA3RjE2QkY1NzJGODJB
NDE3RjcyOERCRi5jcmwwdAYIKwYBBQUHAQEEaDBmMGQGCCsGAQUFBzAChlhyc3lu
YzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9JRE5JQy1JRC8yL0FDNTU1NDQ3
QkE2MkMzOTEwN0YxNkJGNTcyRjgyQTQxN0Y3MjhEQkYuY2VyMIGkBggrBgEFBQcB
CwSBlzCBlDCBkQYIKwYBBQUHMAuGgYRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5u
ZXQvcmVwby8zOTkzZjM1MC1iNzU2LTQ5MTYtOGQ4NC00ODRmMDI1ZGZmY2MvMC8z
MTM4MzIyZTMyMzUzMzJlMzIzMjMyMmUzMDJmMzIzNDJkMzIzNDIwM2QzZTIwMzEz
NzM0MzUzMS5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcB
BwEB/wQQMA4wDAQCAAEwBgMEALb93jANBgkqhkiG9w0BAQsFAAOCAQEApVKhSvwj
ZJdXyGPBH/58JLa6IE9s6kLl33DQWBtWhdWAfiPEHp4MFxn58Ms2g3GFanG4urf0
us4/Ucl+DcR6BeaEfemsW39dUyURMu+rlxmdcXFwJAFwkHDv7Qq+t1C1jgy+AS2d
m65o1xDbQJZVLR7VLGMHmIAhrjvYB1FV60CLLRrv2wr+7Xy0SaQhaJMSYm/ziCnD
tj5lMwsFsuai76q7bzVm7ZAOWZZlk/aOsEEOji+1opVlVj89HWLd6iLS9ProRk4u
bBW+jd+QtiahRsShq6IrCr7VtxCq+24DrP/kf/SDV0iaklsDe7OsPJefXgoJkoTp
hNIQtRmjdERTSA==
-----END CERTIFICATE-----