Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/3993f350-b756-4916-8d84-484f025dffcc/0/3138322e3235332e3234322e302f32342d3234203d3e203137343531.roa
File:                     3138322e3235332e3234322e302f32342d3234203d3e203137343531.roa (raw, json)
Hash identifier:          HEJ3chd/uBHiQpm5t2ROBks/yWv3no7pXenzkf8myU8=
Subject key identifier:   39:98:E9:7E:3D:74:4B:C7:1E:B6:3B:F7:F6:7B:17:A3:98:F5:3A:EF
Certificate issuer:       /CN=AC555447BA62C39107F16BF572F82A417F728DBF
Certificate serial:       3316AA9E1D758F4035371ABD28C292B3030CE693
Authority key identifier: AC:55:54:47:BA:62:C3:91:07:F1:6B:F5:72:F8:2A:41:7F:72:8D:BF
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AC555447BA62C39107F16BF572F82A417F728DBF.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/3993f350-b756-4916-8d84-484f025dffcc/0/3138322e3235332e3234322e302f32342d3234203d3e203137343531.roa
Signing time:             Thu 30 Sep 2021 00:00:20 +0000
ROA not before:           Wed 29 Sep 2021 23:55:20 +0000
ROA not after:            Fri 30 Sep 2022 00:00:20 +0000
asID:                     17451
IP address blocks:        182.253.242.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            33:16:aa:9e:1d:75:8f:40:35:37:1a:bd:28:c2:92:b3:03:0c:e6:93
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AC555447BA62C39107F16BF572F82A417F728DBF
        Validity
            Not Before: Sep 29 23:55:20 2021 GMT
            Not After : Sep 30 00:00:20 2022 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:09:5d:f8:bd:b4:9a:6b:ef:d0:71:3d:c2:af:
                    e9:1d:32:51:20:20:9a:bb:b3:4b:20:58:8f:c8:a4:
                    31:5d:a0:a3:f0:79:8f:17:98:58:83:a2:36:77:11:
                    7d:99:50:8f:b0:9b:5c:35:52:d6:32:4d:f6:13:14:
                    69:9f:43:da:57:82:ee:c2:3f:8f:27:42:3f:74:94:
                    9e:3f:7b:17:da:84:3c:50:11:1c:f2:31:c8:aa:1c:
                    b0:7b:53:4f:89:64:2b:71:5d:31:7a:b6:07:49:51:
                    93:e0:6a:db:3e:19:0f:14:2f:9b:df:a9:3c:36:79:
                    43:b1:83:8f:cb:f7:48:47:92:99:b5:5d:5c:fc:9c:
                    31:29:4f:73:f7:19:0d:91:9c:ef:5a:a5:cd:b8:f6:
                    31:7a:d4:9b:bf:c2:10:73:3a:fc:65:84:8b:3e:1c:
                    ab:3d:cb:09:d7:4f:38:16:cd:f5:e2:cc:a6:f8:71:
                    1a:da:65:bc:b4:d2:8d:b5:c0:e9:ce:c5:e8:1b:46:
                    7c:0b:69:37:7b:45:d6:4f:8b:83:fa:9c:63:09:1c:
                    52:d3:c7:a2:53:ac:2c:33:cf:84:48:c1:ea:92:08:
                    61:bb:72:31:53:31:31:62:e0:4f:98:20:c6:86:a1:
                    c1:52:bf:b5:ec:9d:4f:0b:45:3d:b7:d4:b6:29:44:
                    10:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                39:98:E9:7E:3D:74:4B:C7:1E:B6:3B:F7:F6:7B:17:A3:98:F5:3A:EF
            X509v3 Authority Key Identifier:
                keyid:AC:55:54:47:BA:62:C3:91:07:F1:6B:F5:72:F8:2A:41:7F:72:8D:BF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/3993f350-b756-4916-8d84-484f025dffcc/0/AC555447BA62C39107F16BF572F82A417F728DBF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AC555447BA62C39107F16BF572F82A417F728DBF.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/3993f350-b756-4916-8d84-484f025dffcc/0/3138322e3235332e3234322e302f32342d3234203d3e203137343531.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  182.253.242.0/24

    Signature Algorithm: sha256WithRSAEncryption
         3c:1c:d9:9d:76:2d:e8:0e:6a:8f:a2:e3:65:b9:c7:3a:e7:53:
         f3:9b:26:21:0b:6e:2c:36:57:c5:37:4c:ec:76:26:de:6a:07:
         d8:e2:35:8c:2a:ab:c6:38:c0:74:16:6b:61:5b:2c:b7:bd:03:
         95:61:d1:0e:79:a9:8e:96:0c:07:e2:b6:48:e3:a9:18:d3:f8:
         ba:e1:fe:46:00:5f:63:6f:43:64:36:c6:70:53:a1:b9:e5:03:
         87:6a:94:50:5a:63:cb:52:17:ee:c0:5a:78:d7:74:1e:0e:26:
         1d:a6:c8:f9:c1:54:3f:87:da:d4:77:e0:37:12:b9:19:f4:77:
         8f:46:a4:98:fd:20:66:70:e5:2e:aa:10:a8:46:fb:35:71:f5:
         6e:a9:7d:19:87:d2:c0:d2:a4:b8:bb:87:c4:8e:99:b4:73:90:
         02:f3:cc:c3:ae:02:db:2f:9f:26:da:21:4e:1a:5f:e0:2d:45:
         b9:72:50:81:34:55:50:71:c9:fd:b2:30:93:42:12:f9:6a:de:
         5e:91:fe:56:6c:f9:bc:53:a7:ac:05:7f:d5:64:cc:35:0b:1e:
         4d:46:75:21:73:d9:98:65:96:cd:11:2a:67:80:d8:f0:7f:3a:
         94:0b:70:ae:db:a6:3d:30:54:75:7b:c3:bd:05:9b:84:3c:36:
         f1:5a:b7:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----