Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/3993f350-b756-4916-8d84-484f025dffcc/0/3138322e3235332e332e302f32342d3234203d3e203137343531.roa
File:                     3138322e3235332e332e302f32342d3234203d3e203137343531.roa (raw, json)
Hash identifier:          bg6w7ht8sJ2mNLlEPztxDd2H5KB3rKvCaxM+79LUnHU=
Subject key identifier:   7E:7E:85:DD:F5:9E:E7:76:46:76:1C:90:23:86:FC:0A:F7:67:B0:6E
Certificate issuer:       /CN=AC555447BA62C39107F16BF572F82A417F728DBF
Certificate serial:       1527FBB4022FEF492DB171D4925619C93916A719
Authority key identifier: AC:55:54:47:BA:62:C3:91:07:F1:6B:F5:72:F8:2A:41:7F:72:8D:BF
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AC555447BA62C39107F16BF572F82A417F728DBF.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/3993f350-b756-4916-8d84-484f025dffcc/0/3138322e3235332e332e302f32342d3234203d3e203137343531.roa
Signing time:             Thu 30 Sep 2021 00:00:12 +0000
ROA not before:           Wed 29 Sep 2021 23:55:12 +0000
ROA not after:            Fri 30 Sep 2022 00:00:12 +0000
asID:                     17451
IP address blocks:        182.253.3.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            15:27:fb:b4:02:2f:ef:49:2d:b1:71:d4:92:56:19:c9:39:16:a7:19
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AC555447BA62C39107F16BF572F82A417F728DBF
        Validity
            Not Before: Sep 29 23:55:12 2021 GMT
            Not After : Sep 30 00:00:12 2022 GMT
        Subject: CN=3082010A0282010100DF65C4063AD1F23C72AD00E97D324CAF11A8474F09D4920299467903E6913041D9D0BCBBDEC1CFEB8CE38CFDFABC3764CFABF31DB20130DF51A7A4C32144A413A643ADAD57997835F69DB786E29C7EA6DE14502EBB0C24F1D48AD82989145E08B7E9D0BA1E33543742376807A2687F702AC4BF32D5A3C89CAC1A6D34C390D5F4F958B851279BF1EA23C43673A984BE01E7C0B8D3F5D2C0E5120D92367CE9E734D858AF920C883982254980B4E39F7EEC8F49B7FD886008827172B30F00F55E95B17E564C77641C096EC5FF718523644226439F971846F5B6697C7952ECAA7B4E7543E5DB07CDFFF8987A1CF13AE1ECBFC8DEE68B0748427C5881F6730BB075230203010001
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:65:c4:06:3a:d1:f2:3c:72:ad:00:e9:7d:32:
                    4c:af:11:a8:47:4f:09:d4:92:02:99:46:79:03:e6:
                    91:30:41:d9:d0:bc:bb:de:c1:cf:eb:8c:e3:8c:fd:
                    fa:bc:37:64:cf:ab:f3:1d:b2:01:30:df:51:a7:a4:
                    c3:21:44:a4:13:a6:43:ad:ad:57:99:78:35:f6:9d:
                    b7:86:e2:9c:7e:a6:de:14:50:2e:bb:0c:24:f1:d4:
                    8a:d8:29:89:14:5e:08:b7:e9:d0:ba:1e:33:54:37:
                    42:37:68:07:a2:68:7f:70:2a:c4:bf:32:d5:a3:c8:
                    9c:ac:1a:6d:34:c3:90:d5:f4:f9:58:b8:51:27:9b:
                    f1:ea:23:c4:36:73:a9:84:be:01:e7:c0:b8:d3:f5:
                    d2:c0:e5:12:0d:92:36:7c:e9:e7:34:d8:58:af:92:
                    0c:88:39:82:25:49:80:b4:e3:9f:7e:ec:8f:49:b7:
                    fd:88:60:08:82:71:72:b3:0f:00:f5:5e:95:b1:7e:
                    56:4c:77:64:1c:09:6e:c5:ff:71:85:23:64:42:26:
                    43:9f:97:18:46:f5:b6:69:7c:79:52:ec:aa:7b:4e:
                    75:43:e5:db:07:cd:ff:f8:98:7a:1c:f1:3a:e1:ec:
                    bf:c8:de:e6:8b:07:48:42:7c:58:81:f6:73:0b:b0:
                    75:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7E:7E:85:DD:F5:9E:E7:76:46:76:1C:90:23:86:FC:0A:F7:67:B0:6E
            X509v3 Authority Key Identifier:
                keyid:AC:55:54:47:BA:62:C3:91:07:F1:6B:F5:72:F8:2A:41:7F:72:8D:BF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/3993f350-b756-4916-8d84-484f025dffcc/0/AC555447BA62C39107F16BF572F82A417F728DBF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AC555447BA62C39107F16BF572F82A417F728DBF.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/3993f350-b756-4916-8d84-484f025dffcc/0/3138322e3235332e332e302f32342d3234203d3e203137343531.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  182.253.3.0/24

    Signature Algorithm: sha256WithRSAEncryption
         5f:75:8d:d9:6e:a9:48:98:49:b3:b8:42:76:f1:4e:1d:31:be:
         e1:2d:3d:58:bc:a2:b1:3b:f0:6b:f9:a3:99:13:aa:0b:bb:70:
         bf:c8:df:f8:00:e9:70:aa:61:28:4b:7e:9e:61:d4:bf:b1:2e:
         f9:f4:ac:ad:01:60:0a:a8:e7:84:15:18:ea:fc:a2:80:e0:94:
         bd:cb:ed:13:75:a4:3e:cf:3a:3c:21:81:f3:e2:bd:4c:92:dc:
         81:13:32:a9:e9:4d:46:75:25:08:41:1c:97:40:da:46:48:75:
         fe:6a:3a:88:49:29:b6:c9:b8:2a:ef:64:84:83:fe:9b:64:51:
         12:44:fe:02:99:06:0f:88:31:3a:66:c3:9b:00:3a:9b:09:1c:
         dc:49:cd:c0:7e:ea:a5:1e:e5:c1:21:c4:fa:0a:9c:0c:f8:24:
         7c:be:c5:84:21:dc:8a:1a:33:74:16:9d:c4:67:4e:aa:b4:77:
         de:0a:2f:62:9a:da:e9:cf:86:8b:8e:ba:0d:91:be:dd:f5:54:
         d0:b0:c1:e2:05:e4:94:5a:32:3b:34:00:bb:8e:c4:43:18:49:
         b0:24:09:9c:de:ff:db:c5:ae:6f:29:07:0d:f9:2e:14:d2:e4:
         22:fc:84:5c:5a:46:a5:b7:92:d8:05:c0:06:ae:0e:8a:51:d6:
         80:9b:00:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----