Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/3993f350-b756-4916-8d84-484f025dffcc/0/3138322e3235332e32352e302f32342d3234203d3e203137343531.roa
File:                     3138322e3235332e32352e302f32342d3234203d3e203137343531.roa (raw, json)
Hash identifier:          b4SUyR6c8bXd3pDovh/D2Qg0diNzZvBNyiLEMC0rO/A=
Subject key identifier:   D4:68:02:E1:66:3F:FD:D7:AB:9D:40:C1:F7:A9:EA:87:F1:EC:CB:FA
Certificate issuer:       /CN=AC555447BA62C39107F16BF572F82A417F728DBF
Certificate serial:       5CFC6E511DBEDF015E07E8604D1033EC714C6530
Authority key identifier: AC:55:54:47:BA:62:C3:91:07:F1:6B:F5:72:F8:2A:41:7F:72:8D:BF
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AC555447BA62C39107F16BF572F82A417F728DBF.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/3993f350-b756-4916-8d84-484f025dffcc/0/3138322e3235332e32352e302f32342d3234203d3e203137343531.roa
Signing time:             Thu 30 Sep 2021 00:00:54 +0000
ROA not before:           Wed 29 Sep 2021 23:55:54 +0000
ROA not after:            Fri 30 Sep 2022 00:00:54 +0000
asID:                     17451
IP address blocks:        182.253.25.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5c:fc:6e:51:1d:be:df:01:5e:07:e8:60:4d:10:33:ec:71:4c:65:30
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AC555447BA62C39107F16BF572F82A417F728DBF
        Validity
            Not Before: Sep 29 23:55:54 2021 GMT
            Not After : Sep 30 00:00:54 2022 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:52:c5:60:e7:e8:f2:d2:02:2b:4a:60:d1:eb:
                    95:62:78:0a:1c:82:60:25:1d:00:4c:bd:51:06:ea:
                    f2:71:ce:e8:9c:be:1c:27:1d:2f:fb:b2:e8:f1:ce:
                    91:da:2f:64:5d:33:45:a5:3c:89:a7:8c:da:f6:ff:
                    a8:6b:38:9b:6e:f5:57:dc:70:62:ee:9a:c4:91:e1:
                    3a:a7:25:a8:bc:71:32:fa:fd:fe:12:08:a3:f9:37:
                    24:25:a6:09:35:14:8e:7c:85:fd:c4:1c:e8:42:10:
                    07:0e:87:52:74:24:da:16:65:9a:5a:82:21:bf:b7:
                    a7:f5:ec:d3:18:b8:c4:73:52:7d:62:2d:62:1e:bf:
                    61:f0:d8:e5:e9:6e:21:ae:51:09:1b:ce:a8:ef:f2:
                    5d:82:f0:67:9b:fe:8d:5a:52:80:df:5b:38:35:c7:
                    00:06:eb:30:d2:b6:c1:0f:db:f9:11:1b:78:46:6e:
                    ce:13:e6:9a:e0:08:d9:d7:a7:b3:05:14:1a:37:d8:
                    69:76:c9:b5:10:22:28:0f:6e:7e:e0:92:f5:84:26:
                    fe:68:ba:29:3b:c6:02:0d:90:f9:aa:59:b5:19:99:
                    e4:44:7f:2f:98:f6:0b:7c:d6:b1:d2:7a:72:78:fb:
                    1d:8e:be:ad:ac:e6:71:b0:ea:13:4f:e3:5d:b3:56:
                    fa:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D4:68:02:E1:66:3F:FD:D7:AB:9D:40:C1:F7:A9:EA:87:F1:EC:CB:FA
            X509v3 Authority Key Identifier:
                keyid:AC:55:54:47:BA:62:C3:91:07:F1:6B:F5:72:F8:2A:41:7F:72:8D:BF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/3993f350-b756-4916-8d84-484f025dffcc/0/AC555447BA62C39107F16BF572F82A417F728DBF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AC555447BA62C39107F16BF572F82A417F728DBF.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/3993f350-b756-4916-8d84-484f025dffcc/0/3138322e3235332e32352e302f32342d3234203d3e203137343531.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  182.253.25.0/24

    Signature Algorithm: sha256WithRSAEncryption
         40:d9:9a:21:0c:e5:55:65:a3:6c:10:02:79:2e:77:b5:f4:91:
         55:08:48:98:f9:e9:44:5b:4c:4a:66:e7:ff:79:8b:16:b2:ea:
         4b:93:ca:81:75:18:48:b1:00:24:81:15:f3:ae:ca:ae:0b:0f:
         be:95:39:9a:7c:0b:37:03:a2:b5:79:a3:05:87:9a:f7:3e:8a:
         54:ce:ea:86:04:e8:4e:0c:92:09:b8:df:00:c7:de:8f:a8:89:
         32:2e:0f:d7:2d:da:db:94:2e:ab:c0:b6:85:62:48:49:5e:cb:
         54:f1:d1:89:37:29:11:85:9f:ed:79:2f:91:6b:87:8a:2a:f2:
         99:12:cf:10:3f:53:2c:3d:3d:8f:3f:c0:36:5d:7b:69:92:f2:
         93:7b:c5:68:18:cb:7f:dc:0d:a9:b2:08:eb:3c:5c:22:e4:be:
         8e:ba:d9:84:9e:85:6c:57:cb:89:d3:db:13:e4:2f:b2:e7:91:
         28:7d:fb:63:8c:33:33:61:93:4d:4f:63:c4:7f:99:5f:b8:0a:
         92:e6:22:c3:e9:a6:f0:a0:2a:51:da:fe:be:01:1b:90:9a:5f:
         f6:5e:3c:43:ef:20:ec:8c:58:8e:f9:66:6d:f2:d1:47:89:f1:
         6f:71:98:b1:31:75:22:ed:12:3b:9a:8b:f3:fa:f6:0c:45:96:
         60:c1:95:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----