Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/3993f350-b756-4916-8d84-484f025dffcc/0/3138322e3235332e33342e302f32342d3234203d3e203137343531.roa
File:                     3138322e3235332e33342e302f32342d3234203d3e203137343531.roa (raw, json)
Hash identifier:          Eyb96mmtow1ikfN5ZWFRuV3q4tAwcywV8H73SU8ppIU=
Subject key identifier:   D6:06:8C:E3:F7:D3:CF:A0:2C:5F:AC:F1:0F:B9:49:F9:CB:33:F4:6C
Certificate issuer:       /CN=AC555447BA62C39107F16BF572F82A417F728DBF
Certificate serial:       479526BA9A7F73018D26CB894EB72DD318C477EB
Authority key identifier: AC:55:54:47:BA:62:C3:91:07:F1:6B:F5:72:F8:2A:41:7F:72:8D:BF
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AC555447BA62C39107F16BF572F82A417F728DBF.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/3993f350-b756-4916-8d84-484f025dffcc/0/3138322e3235332e33342e302f32342d3234203d3e203137343531.roa
Signing time:             Thu 30 Sep 2021 00:00:58 +0000
ROA not before:           Wed 29 Sep 2021 23:55:58 +0000
ROA not after:            Fri 30 Sep 2022 00:00:58 +0000
asID:                     17451
IP address blocks:        182.253.34.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            47:95:26:ba:9a:7f:73:01:8d:26:cb:89:4e:b7:2d:d3:18:c4:77:eb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AC555447BA62C39107F16BF572F82A417F728DBF
        Validity
            Not Before: Sep 29 23:55:58 2021 GMT
            Not After : Sep 30 00:00:58 2022 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:ad:4e:d5:96:41:bc:55:b6:ed:d5:13:26:12:
                    47:93:2e:fc:f7:7e:2b:7d:f3:6a:a2:f3:66:ed:6a:
                    55:41:7d:b0:9e:1b:60:fc:52:9b:f6:76:09:3a:d0:
                    ef:87:0f:e8:60:af:08:ac:e6:ec:e9:43:36:0a:14:
                    4e:64:b1:8e:25:0d:05:bb:62:c1:2f:b2:04:22:a8:
                    00:9a:1b:e4:a6:7f:66:83:57:8e:dc:d1:2e:67:75:
                    12:8e:0d:d0:2b:24:1a:10:6e:cd:f9:0b:4c:98:d2:
                    a7:5b:bd:49:e0:d0:a4:25:2b:3f:ab:bf:1d:ba:4d:
                    8a:78:6f:5a:49:cd:ea:b2:8f:ac:f7:03:7e:e4:cb:
                    43:03:c7:be:13:a3:63:d9:f1:bd:17:6d:8a:53:e1:
                    6a:50:32:5b:17:29:44:90:05:56:11:f3:29:a1:f9:
                    ff:9b:bc:2b:e1:da:c1:e5:67:4a:b3:85:7c:b7:45:
                    39:6d:33:20:7d:a8:04:4d:97:1d:f8:cb:3e:65:db:
                    c3:e8:c8:72:bc:88:f5:d0:ba:e2:87:df:1d:e4:32:
                    d9:e1:2f:3b:d3:49:3f:20:51:74:6d:ed:49:9f:40:
                    ee:a7:b7:cf:c5:6e:e4:28:a8:00:26:8d:68:fb:4c:
                    eb:c3:91:6b:17:b5:a7:9d:57:f7:2d:2b:af:62:af:
                    01:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D6:06:8C:E3:F7:D3:CF:A0:2C:5F:AC:F1:0F:B9:49:F9:CB:33:F4:6C
            X509v3 Authority Key Identifier:
                keyid:AC:55:54:47:BA:62:C3:91:07:F1:6B:F5:72:F8:2A:41:7F:72:8D:BF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/3993f350-b756-4916-8d84-484f025dffcc/0/AC555447BA62C39107F16BF572F82A417F728DBF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AC555447BA62C39107F16BF572F82A417F728DBF.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/3993f350-b756-4916-8d84-484f025dffcc/0/3138322e3235332e33342e302f32342d3234203d3e203137343531.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  182.253.34.0/24

    Signature Algorithm: sha256WithRSAEncryption
         28:11:18:e9:60:4f:0a:59:af:0e:a8:56:43:6c:16:1b:da:c6:
         e0:c2:ea:97:5e:35:b0:ac:f7:38:c7:e4:f4:b1:b5:85:6f:b2:
         60:0c:ea:32:40:d9:cd:43:d0:ab:b8:a2:f1:6f:26:9c:52:4d:
         51:61:f6:a5:b8:f8:02:55:8a:90:c3:be:9f:a7:06:12:2e:a8:
         fd:ae:b8:59:96:39:4b:82:24:f9:53:7d:78:f0:81:94:45:cf:
         b9:9e:87:1b:0c:1b:5a:50:ba:b9:b9:3c:b5:3c:6c:bd:b5:2c:
         ef:29:40:cc:92:0f:ff:62:5d:45:82:ae:93:4c:d1:b8:da:dd:
         79:a1:08:92:6d:20:31:1d:a7:db:6e:50:74:dd:7a:22:56:31:
         f3:d6:1f:02:dd:c0:aa:a9:2c:c0:a0:3f:45:68:fe:2a:f8:a0:
         8d:1f:a0:2e:ba:da:81:c8:84:7a:e4:64:22:43:a1:db:d3:81:
         21:7a:cd:2f:1a:7a:c8:80:f1:08:47:bc:6b:c4:97:74:65:67:
         6e:8d:9d:3f:1c:3d:2a:8d:1d:af:77:c4:80:13:f7:a5:75:9b:
         1f:99:0e:6b:bd:a1:45:b8:ff:02:6f:0c:66:b6:02:f4:1f:74:
         8b:9b:72:fa:fb:2f:fe:3a:b0:e7:e6:95:b6:b6:7d:93:4d:ad:
         6b:e2:e7:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----