Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/3993f350-b756-4916-8d84-484f025dffcc/0/3138322e3235332e3235332e302f32342d3234203d3e203137343531.roa
File:                     3138322e3235332e3235332e302f32342d3234203d3e203137343531.roa (raw, json)
Hash identifier:          OE2+3oaPwLSXqx1mz0bC0FlsciQ8oG9vryEb/C+juL0=
Subject key identifier:   AA:3D:3D:6C:FB:7B:F4:22:0E:C4:93:40:05:B9:AF:27:76:B9:7D:BD
Certificate issuer:       /CN=AC555447BA62C39107F16BF572F82A417F728DBF
Certificate serial:       66E1F82B1E7984AE70E2F9F5567481F8A61E4C4B
Authority key identifier: AC:55:54:47:BA:62:C3:91:07:F1:6B:F5:72:F8:2A:41:7F:72:8D:BF
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AC555447BA62C39107F16BF572F82A417F728DBF.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/3993f350-b756-4916-8d84-484f025dffcc/0/3138322e3235332e3235332e302f32342d3234203d3e203137343531.roa
Signing time:             Thu 30 Sep 2021 00:00:32 +0000
ROA not before:           Wed 29 Sep 2021 23:55:32 +0000
ROA not after:            Fri 30 Sep 2022 00:00:32 +0000
asID:                     17451
IP address blocks:        182.253.253.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            66:e1:f8:2b:1e:79:84:ae:70:e2:f9:f5:56:74:81:f8:a6:1e:4c:4b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AC555447BA62C39107F16BF572F82A417F728DBF
        Validity
            Not Before: Sep 29 23:55:32 2021 GMT
            Not After : Sep 30 00:00:32 2022 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:b8:dd:b3:d8:90:33:ee:61:49:94:3f:f4:19:
                    82:d1:68:4b:01:fa:73:72:c7:87:b3:70:90:df:3a:
                    05:54:ed:21:c8:c3:bf:00:d2:39:4a:16:45:8d:94:
                    bf:45:72:7c:a4:24:21:25:8f:4e:fd:a1:70:00:d8:
                    41:29:c8:f6:14:04:d2:03:87:cb:47:3f:06:f4:f9:
                    c4:75:ba:b9:68:94:3a:65:81:df:7d:1c:7f:53:4b:
                    b8:8c:0c:63:ef:e6:0b:3c:94:0c:56:0d:af:46:6d:
                    47:78:85:de:21:76:e7:e6:61:78:be:21:7b:85:72:
                    09:18:08:cc:1e:ac:df:ed:31:c0:4d:af:7c:fb:9c:
                    15:f4:a1:ef:28:4a:f7:ab:3d:f7:23:9d:6a:5f:ce:
                    c2:b8:d7:09:23:7b:31:a0:7a:97:51:b8:ea:49:bc:
                    d7:64:ca:e0:7f:4e:1b:03:81:7b:29:3e:09:30:bb:
                    53:d5:63:e1:16:d8:38:c7:bb:50:8c:92:92:c6:9f:
                    9d:3e:09:3a:7d:ad:cc:f2:a2:25:0a:c2:3e:12:95:
                    8f:74:b8:30:60:64:ea:9a:00:4b:63:bf:b9:41:f3:
                    6c:4a:68:f8:eb:b8:a0:fc:a0:e0:1a:fa:36:0c:36:
                    e5:b4:96:c0:6e:09:b6:61:ef:26:68:06:49:07:c6:
                    d0:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AA:3D:3D:6C:FB:7B:F4:22:0E:C4:93:40:05:B9:AF:27:76:B9:7D:BD
            X509v3 Authority Key Identifier:
                keyid:AC:55:54:47:BA:62:C3:91:07:F1:6B:F5:72:F8:2A:41:7F:72:8D:BF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/3993f350-b756-4916-8d84-484f025dffcc/0/AC555447BA62C39107F16BF572F82A417F728DBF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AC555447BA62C39107F16BF572F82A417F728DBF.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/3993f350-b756-4916-8d84-484f025dffcc/0/3138322e3235332e3235332e302f32342d3234203d3e203137343531.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  182.253.253.0/24

    Signature Algorithm: sha256WithRSAEncryption
         5b:e1:3e:ab:d2:9f:03:97:e1:5d:07:78:31:04:e4:e2:88:55:
         f0:56:de:f5:f6:23:87:0a:26:da:6c:2a:d1:d1:6e:42:38:80:
         d4:77:82:56:61:66:12:69:17:0b:36:30:da:94:2e:9d:97:30:
         2f:b5:96:d0:df:0a:fb:2f:dd:4e:be:53:c2:a1:5a:25:0b:18:
         75:cd:b9:1c:c1:0c:e0:6e:14:45:35:b5:ad:9a:a8:53:c0:a2:
         7b:fa:a6:ce:69:9b:8a:ea:f7:7f:e0:c7:f1:a7:52:f6:a7:e0:
         d1:89:2e:cc:4f:5f:d6:08:16:53:b9:cb:d8:94:ec:47:77:72:
         f0:24:09:0d:56:f9:d2:55:a9:dd:27:a8:c8:df:95:56:6f:c8:
         d8:76:41:50:71:81:a7:ed:a2:9e:e4:78:82:b1:ad:f0:6d:eb:
         1c:e0:ed:50:1a:8d:90:e6:44:ca:20:48:2e:4e:c4:09:b5:61:
         92:c0:ec:d6:86:03:1e:3f:48:89:2d:81:c9:68:15:b1:84:00:
         58:25:42:6a:67:d8:c2:f5:22:22:0c:94:f7:80:80:46:37:89:
         d7:6b:3f:05:07:b7:2f:db:7d:31:4b:4a:4f:eb:b8:74:93:25:
         40:26:9f:b6:17:64:c1:23:a7:33:89:35:1a:9a:3b:1f:fa:80:
         b5:9d:b0:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----