Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/3993f350-b756-4916-8d84-484f025dffcc/0/3138322e3235332e3232352e302f32342d3234203d3e203137343531.roa
File:                     3138322e3235332e3232352e302f32342d3234203d3e203137343531.roa (raw, json)
Hash identifier:          MeZlFycWCGlUz1UB5JSgJYL8cHmap9vf76WIVJhVkKA=
Subject key identifier:   D8:4B:D7:AB:05:2A:40:8A:FB:F5:CF:5B:3D:CD:D4:85:E4:77:63:9E
Certificate issuer:       /CN=AC555447BA62C39107F16BF572F82A417F728DBF
Certificate serial:       52DB7C7E4C53F64DB77947B12634B3859414A9CF
Authority key identifier: AC:55:54:47:BA:62:C3:91:07:F1:6B:F5:72:F8:2A:41:7F:72:8D:BF
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AC555447BA62C39107F16BF572F82A417F728DBF.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/3993f350-b756-4916-8d84-484f025dffcc/0/3138322e3235332e3232352e302f32342d3234203d3e203137343531.roa
Signing time:             Thu 30 Sep 2021 00:00:20 +0000
ROA not before:           Wed 29 Sep 2021 23:55:20 +0000
ROA not after:            Fri 30 Sep 2022 00:00:20 +0000
asID:                     17451
IP address blocks:        182.253.225.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            52:db:7c:7e:4c:53:f6:4d:b7:79:47:b1:26:34:b3:85:94:14:a9:cf
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AC555447BA62C39107F16BF572F82A417F728DBF
        Validity
            Not Before: Sep 29 23:55:20 2021 GMT
            Not After : Sep 30 00:00:20 2022 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:cb:08:5a:c7:6f:e5:ab:41:c1:9b:5a:c0:55:
                    dd:45:d5:bb:d3:92:6f:ab:9f:ea:e2:ee:75:d0:74:
                    b1:e3:38:b8:96:49:53:be:75:1b:90:89:e2:55:11:
                    47:47:d3:ae:bc:29:92:e1:d9:0e:f2:17:79:51:9c:
                    95:a3:1a:69:2f:6a:b7:c6:e3:a5:22:92:27:b6:73:
                    c4:93:9d:4c:ca:fd:67:7a:d2:9b:2a:9e:54:87:b6:
                    1a:d7:17:e6:0d:a5:e2:c4:cf:ef:d6:b7:77:12:69:
                    67:dc:ab:3f:3d:d0:43:f0:2c:96:88:31:73:e6:f3:
                    d0:60:1f:77:ff:40:89:01:22:09:98:01:b9:24:32:
                    c3:aa:72:d7:0a:41:be:11:6c:b8:31:23:dc:00:2f:
                    22:42:94:94:25:f0:28:06:89:28:1b:72:f4:f1:b9:
                    bc:9c:23:54:ac:34:47:a1:4e:37:08:6a:df:12:b5:
                    fa:3c:0b:7c:a8:f2:08:91:f6:fd:1f:ef:04:ac:69:
                    a9:9d:9d:83:f3:7f:97:58:04:00:0c:1b:c2:fd:df:
                    7f:6f:a5:4f:56:ad:e4:a5:99:a9:9b:63:21:d0:16:
                    7f:85:a9:65:44:ee:3c:64:20:b5:c0:ad:91:9c:17:
                    fc:39:9d:eb:78:8c:6d:3b:18:43:f8:34:62:01:e1:
                    55:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D8:4B:D7:AB:05:2A:40:8A:FB:F5:CF:5B:3D:CD:D4:85:E4:77:63:9E
            X509v3 Authority Key Identifier:
                keyid:AC:55:54:47:BA:62:C3:91:07:F1:6B:F5:72:F8:2A:41:7F:72:8D:BF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/3993f350-b756-4916-8d84-484f025dffcc/0/AC555447BA62C39107F16BF572F82A417F728DBF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AC555447BA62C39107F16BF572F82A417F728DBF.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/3993f350-b756-4916-8d84-484f025dffcc/0/3138322e3235332e3232352e302f32342d3234203d3e203137343531.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  182.253.225.0/24

    Signature Algorithm: sha256WithRSAEncryption
         7b:80:63:95:08:08:6c:74:ad:ec:3f:1a:32:00:93:bd:50:ab:
         86:f6:83:c2:6c:50:b6:93:eb:ba:6b:ec:80:b1:a4:02:85:2c:
         b4:8c:83:96:df:11:e2:6a:a4:22:9b:de:a2:ca:c2:9f:12:8f:
         73:04:8c:d8:a9:71:e1:2f:61:bd:1b:7b:66:ba:70:8b:68:0c:
         76:69:f3:b3:f1:b9:46:6a:7e:4c:2c:2d:23:a9:4a:be:df:61:
         65:0c:1e:ff:58:d0:65:d2:63:7a:7e:71:bd:e9:ed:25:2d:88:
         b0:3d:bb:b8:f6:23:fa:eb:49:fb:0a:6b:73:a2:85:72:8a:a1:
         f0:93:23:ba:dc:ad:cb:cc:16:13:8d:c9:ab:7a:c0:9c:34:68:
         80:bc:ce:d4:f4:76:06:b3:b5:7f:24:ca:88:87:7a:37:8f:fd:
         d0:14:7c:90:4b:e2:59:1a:99:d3:89:17:1f:61:7e:af:a8:f8:
         87:65:09:cf:fe:8e:48:fc:12:56:ff:4c:bd:c6:74:24:4e:69:
         23:da:02:3a:9c:66:2e:d1:54:5c:f1:ea:c2:4b:f8:36:51:83:
         d9:cf:1d:ae:bd:50:4f:ef:af:81:88:4d:e0:22:93:88:00:d8:
         f4:94:8e:70:26:1f:20:31:0a:06:b8:65:5b:15:3d:7b:a8:0f:
         79:54:15:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----