Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/3993f350-b756-4916-8d84-484f025dffcc/0/3138322e3235332e35312e302f32342d3234203d3e203137343531.roa
File:                     3138322e3235332e35312e302f32342d3234203d3e203137343531.roa (raw, json)
Hash identifier:          ot9a3UZLGs1rbUPtFHWlaIyPmUmkS0yR2VCphrqiSCA=
Subject key identifier:   72:37:C1:CA:CD:41:F3:84:CB:54:8A:9E:34:CD:A6:48:6D:59:1A:F4
Certificate issuer:       /CN=AC555447BA62C39107F16BF572F82A417F728DBF
Certificate serial:       12E336E0876A6BA063E9948BD7D71D41B9A9C065
Authority key identifier: AC:55:54:47:BA:62:C3:91:07:F1:6B:F5:72:F8:2A:41:7F:72:8D:BF
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AC555447BA62C39107F16BF572F82A417F728DBF.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/3993f350-b756-4916-8d84-484f025dffcc/0/3138322e3235332e35312e302f32342d3234203d3e203137343531.roa
Signing time:             Thu 30 Sep 2021 00:00:17 +0000
ROA not before:           Wed 29 Sep 2021 23:55:17 +0000
ROA not after:            Fri 30 Sep 2022 00:00:17 +0000
asID:                     17451
IP address blocks:        182.253.51.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            12:e3:36:e0:87:6a:6b:a0:63:e9:94:8b:d7:d7:1d:41:b9:a9:c0:65
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AC555447BA62C39107F16BF572F82A417F728DBF
        Validity
            Not Before: Sep 29 23:55:17 2021 GMT
            Not After : Sep 30 00:00:17 2022 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e4:93:ca:8c:63:b9:ba:13:36:8c:06:cc:8e:85:
                    70:9a:2e:a1:b1:a5:d9:95:c3:74:f8:71:48:c6:e3:
                    c7:cb:b1:e8:12:d2:18:c2:5b:6d:3c:71:62:de:59:
                    17:29:18:06:28:7c:3b:88:84:c5:40:ef:d8:e2:66:
                    d4:d6:73:28:be:ae:67:b2:44:bc:d3:f0:15:34:26:
                    9e:c7:98:44:1d:b2:f8:e6:68:2c:75:f2:d3:ee:85:
                    8e:c9:71:e6:a4:2e:f9:77:fe:4c:1d:23:21:33:fd:
                    fb:fd:13:2f:fc:e1:1c:8f:17:83:bc:a7:fa:58:68:
                    70:8f:87:42:37:f1:64:d7:14:1d:1c:9f:74:0d:a9:
                    db:f6:ce:a5:ec:e4:6d:7b:26:6f:b1:62:6e:40:69:
                    62:a6:e5:f6:d9:06:93:2f:d2:6b:8b:fa:34:04:90:
                    d2:de:81:1e:92:27:e1:3c:1e:11:a2:a0:eb:d5:86:
                    d5:90:cf:8a:37:f8:bc:60:86:51:4f:af:26:64:f2:
                    b6:f8:a5:23:96:b2:10:99:a7:de:46:37:4b:7b:ba:
                    98:d5:16:4f:77:61:e2:d2:46:07:18:57:9f:c4:f4:
                    95:f2:ff:b8:fc:a0:be:7d:03:85:f0:39:5c:a3:d0:
                    95:17:f0:a0:3c:a5:2c:38:2d:73:fa:b4:3b:5f:a6:
                    b1:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                72:37:C1:CA:CD:41:F3:84:CB:54:8A:9E:34:CD:A6:48:6D:59:1A:F4
            X509v3 Authority Key Identifier:
                keyid:AC:55:54:47:BA:62:C3:91:07:F1:6B:F5:72:F8:2A:41:7F:72:8D:BF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/3993f350-b756-4916-8d84-484f025dffcc/0/AC555447BA62C39107F16BF572F82A417F728DBF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AC555447BA62C39107F16BF572F82A417F728DBF.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/3993f350-b756-4916-8d84-484f025dffcc/0/3138322e3235332e35312e302f32342d3234203d3e203137343531.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  182.253.51.0/24

    Signature Algorithm: sha256WithRSAEncryption
         74:d6:15:5d:31:09:e0:9b:3f:89:63:33:ec:a1:2a:6b:8a:2a:
         60:ee:ad:f8:00:ed:cb:12:90:b1:79:85:7f:62:d0:91:b0:cc:
         bd:67:76:72:20:e8:7e:0d:5d:25:97:f7:64:a6:0c:fc:78:c6:
         7b:37:a7:de:ab:5b:c2:60:7c:a0:2b:3b:19:ac:8e:3c:25:ad:
         b1:28:c4:a1:43:95:b0:00:96:40:f0:1f:7e:4f:63:03:14:ea:
         09:51:91:13:e2:f7:5f:fc:f9:e8:2c:7f:1e:23:77:9b:60:cb:
         4b:3c:f7:39:f1:54:df:b7:d2:13:5f:1c:d4:12:93:22:b7:e8:
         2d:a4:6b:8a:6b:d3:21:f1:f5:1a:ee:51:64:c2:bf:e2:7a:97:
         62:40:66:83:ad:59:b4:54:94:9b:e0:20:c1:f4:e8:09:74:1d:
         d0:6e:52:4b:e7:77:67:c8:c8:ca:b5:83:4b:18:3e:17:25:2a:
         bf:a3:0f:e8:ac:2f:8b:27:c8:e2:66:15:d0:99:6f:73:c7:66:
         ab:a4:5c:01:32:68:0c:9f:91:03:b0:ba:c8:d8:41:49:4c:c5:
         26:35:ea:1f:a5:2b:3b:79:16:76:66:2e:ea:f2:2c:db:8b:15:
         03:b6:84:d0:61:ff:71:a7:0c:1c:b4:7b:8a:41:08:91:89:cf:
         f2:1a:5a:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----