Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/3993f350-b756-4916-8d84-484f025dffcc/0/3138322e3235332e3234392e302f32342d3234203d3e203137343531.roa
File:                     3138322e3235332e3234392e302f32342d3234203d3e203137343531.roa (raw, json)
Hash identifier:          LHD3hIL0zQ8lfJ++NcxwOnLTk1SQ9q8uXRX6PU/o8wo=
Subject key identifier:   73:97:39:2C:71:2A:28:86:E1:C4:D2:DD:B2:C5:A7:2E:7B:19:A8:4C
Certificate issuer:       /CN=AC555447BA62C39107F16BF572F82A417F728DBF
Certificate serial:       0D74FC19927B4DE8A9F58619B143ED0C82C9296E
Authority key identifier: AC:55:54:47:BA:62:C3:91:07:F1:6B:F5:72:F8:2A:41:7F:72:8D:BF
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AC555447BA62C39107F16BF572F82A417F728DBF.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/3993f350-b756-4916-8d84-484f025dffcc/0/3138322e3235332e3234392e302f32342d3234203d3e203137343531.roa
Signing time:             Thu 30 Sep 2021 00:00:05 +0000
ROA not before:           Wed 29 Sep 2021 23:55:05 +0000
ROA not after:            Fri 30 Sep 2022 00:00:05 +0000
asID:                     17451
IP address blocks:        182.253.249.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0d:74:fc:19:92:7b:4d:e8:a9:f5:86:19:b1:43:ed:0c:82:c9:29:6e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AC555447BA62C39107F16BF572F82A417F728DBF
        Validity
            Not Before: Sep 29 23:55:05 2021 GMT
            Not After : Sep 30 00:00:05 2022 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:5c:0c:6b:b3:41:6c:6a:4e:29:4a:6b:61:e9:
                    7f:0a:af:df:13:71:bf:a4:38:a6:72:df:2b:57:c1:
                    39:de:ab:93:8d:61:e0:6b:8b:a1:af:e3:12:d9:23:
                    84:d7:d5:45:e4:df:0e:4e:0f:03:19:4d:e5:90:95:
                    3c:a9:11:a5:d2:ce:f1:16:84:5d:66:20:5a:34:ba:
                    7b:ee:1c:90:41:40:5b:81:05:f7:5f:f7:ef:d5:6a:
                    55:81:3f:55:ca:2b:9f:ca:89:32:16:5c:e4:da:90:
                    5b:56:3c:42:44:53:6e:6e:be:b4:a6:c1:e4:ee:ba:
                    e2:9a:6b:35:e7:97:a3:6e:96:10:79:9b:91:f0:65:
                    23:90:29:d8:cf:29:bc:26:f8:85:44:ea:a4:77:8e:
                    c6:b6:7b:e7:5c:0e:9d:4a:f4:d2:58:a4:1e:f7:8a:
                    c4:fa:b0:c1:d0:f5:35:9b:27:bf:a4:4a:23:3f:d4:
                    a6:59:91:a0:c6:ed:9b:ea:d6:bf:6f:81:06:47:c4:
                    28:08:34:6e:fc:20:24:ce:b4:0e:97:e7:41:cc:86:
                    d5:fb:94:14:28:19:c2:e5:02:93:10:79:c7:bd:0c:
                    fa:16:12:c3:b8:97:fe:43:a4:5d:08:39:3f:bb:40:
                    49:13:10:0e:41:d7:3f:33:3d:c3:8b:db:2a:2f:1d:
                    35:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                73:97:39:2C:71:2A:28:86:E1:C4:D2:DD:B2:C5:A7:2E:7B:19:A8:4C
            X509v3 Authority Key Identifier:
                keyid:AC:55:54:47:BA:62:C3:91:07:F1:6B:F5:72:F8:2A:41:7F:72:8D:BF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/3993f350-b756-4916-8d84-484f025dffcc/0/AC555447BA62C39107F16BF572F82A417F728DBF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AC555447BA62C39107F16BF572F82A417F728DBF.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/3993f350-b756-4916-8d84-484f025dffcc/0/3138322e3235332e3234392e302f32342d3234203d3e203137343531.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  182.253.249.0/24

    Signature Algorithm: sha256WithRSAEncryption
         1a:88:47:e3:31:5c:cb:7b:9f:d9:88:2c:2e:01:f3:49:19:45:
         3c:b0:a6:84:50:78:2f:14:92:20:3d:fc:15:b0:07:5e:1b:8d:
         9d:b7:a1:e5:a0:bf:b2:a1:a0:c8:88:92:54:3e:6a:66:6a:2b:
         6f:67:18:b6:aa:28:16:f1:3b:6d:20:fd:c6:61:7b:aa:24:61:
         1f:6e:3c:bf:ef:85:c1:cd:2e:c2:90:fb:fa:b8:06:57:8e:b7:
         6a:c3:17:44:b8:3b:98:7d:f7:01:32:c9:64:de:e4:e5:77:32:
         a4:15:ea:d3:a9:56:d5:fa:30:62:56:f3:4e:36:14:de:9e:2e:
         26:f8:1e:fd:cb:08:ed:b1:f8:0a:73:52:73:b7:8a:9a:80:d1:
         01:78:6f:d6:ce:ee:ea:c3:2b:ae:77:f1:34:5b:47:aa:54:01:
         f4:af:f5:db:db:68:66:9a:47:9c:db:00:1b:0b:55:d5:2a:76:
         d6:16:54:6d:ac:87:4b:25:4f:21:a2:55:2f:d1:d8:d0:e1:86:
         7d:e1:d3:3d:71:c1:06:fb:14:fc:39:bd:60:41:14:14:1e:55:
         a9:66:80:79:83:d7:6d:52:42:c4:43:a4:16:80:a0:7a:c5:e4:
         9f:51:80:3a:99:7e:df:ac:9e:48:6d:90:55:5b:ad:e7:f7:8f:
         87:14:0d:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----