Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/3993f350-b756-4916-8d84-484f025dffcc/0/3138322e3235332e34352e302f32342d3234203d3e203137343531.roa
File:                     3138322e3235332e34352e302f32342d3234203d3e203137343531.roa (raw, json)
Hash identifier:          +dUyuAgYLU5YrLz2Q0GXnetnmpVVl4rLWZGXL7IeeiU=
Subject key identifier:   B6:D0:18:0B:26:67:CE:E8:E4:6F:88:82:0A:FA:8E:0E:41:72:39:DD
Certificate issuer:       /CN=AC555447BA62C39107F16BF572F82A417F728DBF
Certificate serial:       78652C6BD7D516A7F8CDD4A51393DD8980A5CC37
Authority key identifier: AC:55:54:47:BA:62:C3:91:07:F1:6B:F5:72:F8:2A:41:7F:72:8D:BF
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AC555447BA62C39107F16BF572F82A417F728DBF.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/3993f350-b756-4916-8d84-484f025dffcc/0/3138322e3235332e34352e302f32342d3234203d3e203137343531.roa
Signing time:             Fri 21 Jan 2022 18:00:09 +0000
ROA not before:           Fri 21 Jan 2022 17:55:09 +0000
ROA not after:            Sat 21 Jan 2023 18:00:09 +0000
asID:                     17451
IP address blocks:        182.253.45.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            78:65:2c:6b:d7:d5:16:a7:f8:cd:d4:a5:13:93:dd:89:80:a5:cc:37
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AC555447BA62C39107F16BF572F82A417F728DBF
        Validity
            Not Before: Jan 21 17:55:09 2022 GMT
            Not After : Jan 21 18:00:09 2023 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:5f:a8:a3:ff:df:b4:6b:be:76:60:37:c9:da:
                    f1:5a:46:0f:55:e9:bb:b9:cf:c2:a7:3e:bf:ed:0d:
                    b7:de:1f:7b:00:71:39:77:72:55:1c:89:55:e1:a5:
                    fa:a3:19:3d:a1:c3:20:2d:d2:a5:1e:b8:34:23:6a:
                    ba:e3:23:26:fb:53:38:dc:c5:69:8a:a7:bb:23:47:
                    a1:61:d5:6b:ef:00:d4:c8:18:42:71:01:ac:0f:03:
                    b1:13:6e:a3:c0:73:cb:76:be:0c:4b:0b:89:07:95:
                    fc:c8:7d:f2:3c:f8:c7:c2:83:a9:f0:bf:51:72:55:
                    96:29:da:72:1c:e9:af:69:35:7b:32:17:d3:0e:17:
                    0e:d3:d7:56:6a:66:05:fb:bb:a4:69:92:5c:a4:fb:
                    31:17:ea:60:a6:de:3c:9f:95:92:fd:77:a4:18:db:
                    30:ef:5f:36:b5:10:8f:75:d3:6f:e5:c4:b0:23:a3:
                    79:50:5e:5f:57:66:53:18:c7:8d:95:ab:5d:11:4e:
                    06:61:df:3f:63:28:ff:34:7a:f6:f1:8e:2f:ec:81:
                    03:79:45:ca:9c:81:81:ce:45:69:7e:65:0c:19:fb:
                    30:e6:97:03:e7:27:cd:39:5d:3d:56:c8:51:89:68:
                    e5:fe:af:e3:80:dd:fa:09:60:fa:de:91:79:0e:d1:
                    bc:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B6:D0:18:0B:26:67:CE:E8:E4:6F:88:82:0A:FA:8E:0E:41:72:39:DD
            X509v3 Authority Key Identifier:
                keyid:AC:55:54:47:BA:62:C3:91:07:F1:6B:F5:72:F8:2A:41:7F:72:8D:BF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/3993f350-b756-4916-8d84-484f025dffcc/0/AC555447BA62C39107F16BF572F82A417F728DBF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AC555447BA62C39107F16BF572F82A417F728DBF.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/3993f350-b756-4916-8d84-484f025dffcc/0/3138322e3235332e34352e302f32342d3234203d3e203137343531.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  182.253.45.0/24

    Signature Algorithm: sha256WithRSAEncryption
         18:3e:dd:b2:54:c9:42:4d:6d:77:93:77:9c:7c:48:bc:24:10:
         12:a9:e2:68:f2:ad:30:d8:19:e0:92:f8:da:82:72:36:78:77:
         16:94:67:eb:9f:0e:1c:5f:16:32:da:4e:78:a0:81:63:fc:35:
         5d:a0:5f:97:9d:f3:ff:d8:96:34:a7:da:4b:5b:af:2c:55:3d:
         0a:d7:ab:a5:39:4f:48:30:e0:25:37:c5:7d:48:21:68:51:03:
         df:36:52:8a:f5:ea:be:f1:eb:21:54:17:70:22:08:78:91:1d:
         2a:3f:fc:de:af:17:93:61:58:1f:f7:0f:f6:57:46:83:da:79:
         57:ed:db:24:14:82:b1:81:d6:46:02:79:21:5a:af:06:22:94:
         92:ab:4f:c4:ae:3b:2d:d4:76:07:37:63:86:53:3c:9d:ba:b4:
         8c:cf:15:4b:da:0e:5a:cb:0d:2c:2e:bb:f3:d6:0b:97:79:28:
         1c:bd:57:8a:28:9c:8f:08:bf:a4:d2:ed:ab:9f:00:7d:18:99:
         fc:48:f3:4a:e3:96:79:03:97:6b:9d:aa:28:c6:9b:ce:97:2e:
         03:9a:4a:c0:f4:c3:ec:6f:83:c7:26:c1:06:99:e2:8a:b4:ba:
         1f:03:0e:d9:ee:55:7b:39:97:91:c4:c6:6c:c9:9c:0a:09:61:
         1b:ca:ad:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----