Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/3993f350-b756-4916-8d84-484f025dffcc/0/3138322e3235332e342e302f32342d3234203d3e203137343531.roa
File:                     3138322e3235332e342e302f32342d3234203d3e203137343531.roa (raw, json)
Hash identifier:          GP6N9+k2hav5s4CYyZD69zrK0D2IhFTm7GgBj5DbpUY=
Subject key identifier:   3D:73:6C:EB:FB:07:62:5D:E7:47:49:E1:3F:81:56:AC:41:09:40:DA
Certificate issuer:       /CN=AC555447BA62C39107F16BF572F82A417F728DBF
Certificate serial:       529BB0517442957FF460F78431160A4F2EAA2D47
Authority key identifier: AC:55:54:47:BA:62:C3:91:07:F1:6B:F5:72:F8:2A:41:7F:72:8D:BF
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AC555447BA62C39107F16BF572F82A417F728DBF.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/3993f350-b756-4916-8d84-484f025dffcc/0/3138322e3235332e342e302f32342d3234203d3e203137343531.roa
Signing time:             Thu 30 Sep 2021 00:00:51 +0000
ROA not before:           Wed 29 Sep 2021 23:55:51 +0000
ROA not after:            Fri 30 Sep 2022 00:00:51 +0000
asID:                     17451
IP address blocks:        182.253.4.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            52:9b:b0:51:74:42:95:7f:f4:60:f7:84:31:16:0a:4f:2e:aa:2d:47
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AC555447BA62C39107F16BF572F82A417F728DBF
        Validity
            Not Before: Sep 29 23:55:51 2021 GMT
            Not After : Sep 30 00:00:51 2022 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:c9:7f:4d:0c:6f:4b:bd:ff:3f:d6:fd:9f:b3:
                    e8:b3:f0:d1:7e:1c:87:c6:81:45:d6:cb:4c:b8:68:
                    e1:70:1c:66:58:a1:f9:4c:34:71:ad:dd:cb:88:ea:
                    b1:e5:9c:38:62:ec:ec:5a:5d:4b:6a:50:e2:80:1a:
                    43:ff:c6:d7:bf:ed:cf:74:2d:f4:f9:9f:5b:4f:6a:
                    cb:4f:6a:ff:b0:b1:b1:82:11:42:e9:ff:07:25:1e:
                    b4:f4:3c:e5:77:e9:47:5b:81:77:67:22:19:fe:54:
                    68:c9:67:c1:1a:88:b8:80:4f:b5:49:4f:c1:5d:a3:
                    58:43:d0:b7:44:42:07:0f:11:55:e9:8d:5b:c8:f3:
                    28:4e:b3:69:ec:06:e7:97:a3:0a:9c:7a:38:e4:38:
                    1b:0a:65:b7:0b:49:ec:6d:6f:67:56:f3:ba:71:42:
                    bf:ab:ed:e1:5c:1d:c1:9b:14:c7:24:6d:ae:6b:c2:
                    46:ed:c7:a4:3c:5c:e8:f4:83:6e:54:d4:83:d2:e5:
                    60:2d:03:a8:8c:ee:fc:3f:27:98:5c:39:ed:55:f7:
                    6b:fb:ca:66:f1:ae:8a:e8:cd:38:e6:92:9b:c2:72:
                    fb:c0:e3:b5:6e:32:ac:eb:64:d5:37:e8:23:7e:f1:
                    86:ca:b6:d4:3b:83:10:2b:3e:84:b0:f0:74:42:df:
                    b2:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3D:73:6C:EB:FB:07:62:5D:E7:47:49:E1:3F:81:56:AC:41:09:40:DA
            X509v3 Authority Key Identifier:
                keyid:AC:55:54:47:BA:62:C3:91:07:F1:6B:F5:72:F8:2A:41:7F:72:8D:BF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/3993f350-b756-4916-8d84-484f025dffcc/0/AC555447BA62C39107F16BF572F82A417F728DBF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AC555447BA62C39107F16BF572F82A417F728DBF.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/3993f350-b756-4916-8d84-484f025dffcc/0/3138322e3235332e342e302f32342d3234203d3e203137343531.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  182.253.4.0/24

    Signature Algorithm: sha256WithRSAEncryption
         3f:ed:29:b7:f2:7c:ff:2b:7a:c3:e4:cd:84:3d:e6:3e:23:d7:
         c1:99:55:7e:76:24:e4:4c:bc:51:b0:64:d1:9e:64:2e:d0:bd:
         3d:4b:d2:c0:92:b2:e5:0b:38:9e:f2:ac:9f:7f:9f:ae:a5:42:
         37:39:e8:83:d6:47:6c:77:82:ec:40:cf:ce:67:5f:e9:b6:34:
         53:d5:c4:28:1b:9c:6e:7e:c7:ae:76:58:36:8a:02:d2:df:28:
         1e:14:d4:f5:74:b3:10:a0:5f:b2:e7:e9:17:28:cf:82:1a:62:
         53:9a:81:79:5c:f1:dd:6a:ae:00:36:05:e4:3a:de:8e:6e:5f:
         e1:99:6f:ca:55:e1:d3:53:d9:96:c9:87:c3:b2:d7:55:c4:d2:
         b6:99:68:87:3f:26:54:ed:68:01:d4:f7:71:da:43:17:c5:46:
         5c:6c:df:fa:52:67:6a:22:a2:7a:02:2d:1d:f9:4f:aa:1b:5b:
         db:6f:df:ac:a7:a0:39:c4:53:ce:52:6c:8c:85:3a:06:e6:12:
         21:36:75:9b:59:ee:40:55:09:67:62:8c:48:57:98:0d:c4:39:
         c8:b2:c1:05:f9:1c:7d:17:14:3e:e4:21:50:9a:16:be:b9:e7:
         c2:df:e9:6d:3c:9a:ec:ba:89:17:d5:d8:ae:99:4f:9c:24:e7:
         f8:3d:e1:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----