Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/3993f350-b756-4916-8d84-484f025dffcc/0/3138322e3235332e3234302e302f32342d3234203d3e203137343531.roa
File:                     3138322e3235332e3234302e302f32342d3234203d3e203137343531.roa (raw, json)
Hash identifier:          Wkn+l5K97SsMUJd+67mAPXbv+prSmPW44hAVYtcxk/w=
Subject key identifier:   9E:A9:7D:6F:70:49:8D:F5:86:4D:02:D1:7E:CB:1D:EE:BA:E0:84:E1
Certificate issuer:       /CN=AC555447BA62C39107F16BF572F82A417F728DBF
Certificate serial:       3BFE825F7C3ACE7A1D81402B25D4588747EAB812
Authority key identifier: AC:55:54:47:BA:62:C3:91:07:F1:6B:F5:72:F8:2A:41:7F:72:8D:BF
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AC555447BA62C39107F16BF572F82A417F728DBF.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/3993f350-b756-4916-8d84-484f025dffcc/0/3138322e3235332e3234302e302f32342d3234203d3e203137343531.roa
Signing time:             Thu 30 Sep 2021 00:00:33 +0000
ROA not before:           Wed 29 Sep 2021 23:55:33 +0000
ROA not after:            Fri 30 Sep 2022 00:00:33 +0000
asID:                     17451
IP address blocks:        182.253.240.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3b:fe:82:5f:7c:3a:ce:7a:1d:81:40:2b:25:d4:58:87:47:ea:b8:12
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AC555447BA62C39107F16BF572F82A417F728DBF
        Validity
            Not Before: Sep 29 23:55:33 2021 GMT
            Not After : Sep 30 00:00:33 2022 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:22:4f:5c:08:ba:df:e5:85:4e:3f:98:1d:a0:
                    dc:3d:3f:f9:05:be:1e:00:7f:53:08:17:e2:b0:f7:
                    22:be:e6:6d:ac:e1:c1:1b:f3:9e:3b:5e:dd:3f:4c:
                    05:5d:76:73:19:a4:65:31:88:0b:bc:0c:a1:98:79:
                    ce:ee:bc:41:17:f4:8a:29:07:61:19:b6:df:74:d2:
                    42:5b:ce:f3:7d:10:40:aa:ad:28:9c:c0:fd:99:70:
                    08:7b:cb:55:3e:9a:56:f1:e9:bc:16:36:51:6b:9e:
                    5c:ee:9b:76:f9:a5:6d:ba:54:fd:84:7b:b0:8e:a5:
                    84:0f:96:fb:ec:10:ce:84:99:be:26:d4:67:0b:a9:
                    dd:81:c3:fa:a0:dd:97:ca:be:98:79:b4:7f:f7:15:
                    ab:65:6c:f7:b4:45:6d:66:29:15:33:b1:38:ba:63:
                    2f:ea:e3:a0:24:6e:06:98:77:ab:ed:76:eb:30:1d:
                    dd:98:4d:f7:8e:ba:30:ab:cc:da:d6:d2:7b:b3:ad:
                    e6:f9:0d:84:c5:18:3e:e0:a8:2a:e6:78:65:28:d4:
                    db:51:f6:3d:b8:d3:b2:ba:ee:19:f7:99:94:1a:ff:
                    81:e9:a8:d9:90:45:4e:63:89:59:b9:3a:57:78:4a:
                    fa:46:81:57:69:8f:28:0e:13:70:bb:78:e9:65:66:
                    f1:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9E:A9:7D:6F:70:49:8D:F5:86:4D:02:D1:7E:CB:1D:EE:BA:E0:84:E1
            X509v3 Authority Key Identifier:
                keyid:AC:55:54:47:BA:62:C3:91:07:F1:6B:F5:72:F8:2A:41:7F:72:8D:BF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/3993f350-b756-4916-8d84-484f025dffcc/0/AC555447BA62C39107F16BF572F82A417F728DBF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AC555447BA62C39107F16BF572F82A417F728DBF.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/3993f350-b756-4916-8d84-484f025dffcc/0/3138322e3235332e3234302e302f32342d3234203d3e203137343531.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  182.253.240.0/24

    Signature Algorithm: sha256WithRSAEncryption
         44:6a:9b:14:5f:a8:61:71:3f:cd:e6:e7:ee:28:56:e9:c0:3c:
         d8:32:1b:ac:c4:47:e7:4f:42:26:0c:5c:d2:e1:f7:3e:2b:e8:
         d5:4b:5a:25:f7:6d:dc:b5:e5:ca:ff:8c:c5:a0:f6:6a:5a:db:
         e3:c4:b3:71:67:92:40:e2:d5:e7:0c:a1:1c:47:3d:27:07:dd:
         2e:2b:ba:05:9f:de:48:8b:ef:7e:8d:69:49:ab:7a:3b:51:d9:
         43:6c:cc:06:6f:52:17:0b:fd:19:c8:93:01:2c:43:ae:bb:79:
         62:d8:94:a2:52:9c:ff:34:fd:8a:45:f1:67:94:96:d4:bd:02:
         6c:bf:7f:39:07:1f:0a:2a:4b:2d:42:42:c9:3e:a8:d3:1a:1b:
         ba:85:19:7b:c6:9d:61:07:7a:05:29:d6:bd:15:6a:dc:8e:b2:
         71:be:24:18:53:9f:81:2b:64:9c:ff:92:a6:3e:86:dd:5b:b9:
         69:9c:15:f3:d5:b2:ed:d5:7e:72:42:e2:76:f9:8c:06:d6:2c:
         3b:7d:3a:99:d3:3c:78:07:ad:e4:c8:93:65:6d:1f:f3:b3:f3:
         6e:6a:dd:2a:12:54:b1:01:8f:6e:27:61:9d:d2:ec:82:d9:d4:
         28:95:1c:9e:97:6c:52:24:70:09:98:9c:50:61:06:e3:3a:8d:
         6f:da:f4:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----