Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/3993f350-b756-4916-8d84-484f025dffcc/0/3138322e3235332e35362e302f32342d3234203d3e203137343531.roa
File:                     3138322e3235332e35362e302f32342d3234203d3e203137343531.roa (raw, json)
Hash identifier:          S1+l6mlc3Wai3a+PA2/4S2YawgazERDEz/+CQA1Ma0I=
Subject key identifier:   66:70:91:61:F0:34:7D:A3:E1:4F:EF:73:5E:FE:9F:32:8F:63:14:96
Certificate issuer:       /CN=AC555447BA62C39107F16BF572F82A417F728DBF
Certificate serial:       486C83081885260784B1D02443E7094521E352E0
Authority key identifier: AC:55:54:47:BA:62:C3:91:07:F1:6B:F5:72:F8:2A:41:7F:72:8D:BF
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AC555447BA62C39107F16BF572F82A417F728DBF.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/3993f350-b756-4916-8d84-484f025dffcc/0/3138322e3235332e35362e302f32342d3234203d3e203137343531.roa
Signing time:             Thu 30 Sep 2021 00:01:21 +0000
ROA not before:           Wed 29 Sep 2021 23:56:21 +0000
ROA not after:            Fri 30 Sep 2022 00:01:21 +0000
asID:                     17451
IP address blocks:        182.253.56.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            48:6c:83:08:18:85:26:07:84:b1:d0:24:43:e7:09:45:21:e3:52:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AC555447BA62C39107F16BF572F82A417F728DBF
        Validity
            Not Before: Sep 29 23:56:21 2021 GMT
            Not After : Sep 30 00:01:21 2022 GMT
        Subject: CN=3082010A0282010100C34E6638396B1F53117A423DEFC05CE133CDFE4192AB3280D138A01DA10DEE17961647C40387C774127D867516FDB186535ABDE7085025A52ECEFCCC80DAC5DE710DE5C3754920ADAAA274FE15EB6B18CE7C017CC1C5C07BF5C58812FB272A1967B0B8343444C01866CF54CCA45F84181253305ACF84FA6FC42792C9554EFD25CC15B878DF9D9CE54F7C54B8E8AD9B13DA18E4C65EDAD4C7BB44D774CCC100178B5760256C38AA2FCFDCD5014AB6568EBE44BFBD87C2483F698B23B62B94F329DBD53EE9D2CEFEC3AC91A5D20D951F66E4ACA475EBBA01429E2AF8266D1F5A4BA9B84B8F1070C60A4929892E3DE7E272CE1E75E1E91C63EE989A9AF785512E050203010001
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:4e:66:38:39:6b:1f:53:11:7a:42:3d:ef:c0:
                    5c:e1:33:cd:fe:41:92:ab:32:80:d1:38:a0:1d:a1:
                    0d:ee:17:96:16:47:c4:03:87:c7:74:12:7d:86:75:
                    16:fd:b1:86:53:5a:bd:e7:08:50:25:a5:2e:ce:fc:
                    cc:80:da:c5:de:71:0d:e5:c3:75:49:20:ad:aa:a2:
                    74:fe:15:eb:6b:18:ce:7c:01:7c:c1:c5:c0:7b:f5:
                    c5:88:12:fb:27:2a:19:67:b0:b8:34:34:44:c0:18:
                    66:cf:54:cc:a4:5f:84:18:12:53:30:5a:cf:84:fa:
                    6f:c4:27:92:c9:55:4e:fd:25:cc:15:b8:78:df:9d:
                    9c:e5:4f:7c:54:b8:e8:ad:9b:13:da:18:e4:c6:5e:
                    da:d4:c7:bb:44:d7:74:cc:c1:00:17:8b:57:60:25:
                    6c:38:aa:2f:cf:dc:d5:01:4a:b6:56:8e:be:44:bf:
                    bd:87:c2:48:3f:69:8b:23:b6:2b:94:f3:29:db:d5:
                    3e:e9:d2:ce:fe:c3:ac:91:a5:d2:0d:95:1f:66:e4:
                    ac:a4:75:eb:ba:01:42:9e:2a:f8:26:6d:1f:5a:4b:
                    a9:b8:4b:8f:10:70:c6:0a:49:29:89:2e:3d:e7:e2:
                    72:ce:1e:75:e1:e9:1c:63:ee:98:9a:9a:f7:85:51:
                    2e:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                66:70:91:61:F0:34:7D:A3:E1:4F:EF:73:5E:FE:9F:32:8F:63:14:96
            X509v3 Authority Key Identifier:
                keyid:AC:55:54:47:BA:62:C3:91:07:F1:6B:F5:72:F8:2A:41:7F:72:8D:BF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/3993f350-b756-4916-8d84-484f025dffcc/0/AC555447BA62C39107F16BF572F82A417F728DBF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AC555447BA62C39107F16BF572F82A417F728DBF.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/3993f350-b756-4916-8d84-484f025dffcc/0/3138322e3235332e35362e302f32342d3234203d3e203137343531.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  182.253.56.0/24

    Signature Algorithm: sha256WithRSAEncryption
         96:93:9b:a8:51:a8:9e:82:78:e6:d9:1e:0e:6a:cc:8d:2f:33:
         c0:cf:9b:b4:b7:5f:c2:35:f2:a2:42:9c:9b:91:f6:a3:e6:c6:
         6d:d2:37:b8:d7:1e:54:8c:3d:d8:f0:8d:a8:cc:b9:0b:5c:aa:
         42:71:21:42:c6:03:0b:90:17:cf:ac:05:1a:82:5a:cb:25:0a:
         14:2b:d6:b0:59:c5:89:90:50:b1:11:0c:9f:ca:a8:83:ea:8b:
         77:d4:cb:e6:aa:53:95:63:a7:45:7d:24:cf:5f:0a:8e:fa:5f:
         5a:01:d5:f1:e4:3f:40:ee:4e:f6:cc:a2:95:be:19:a3:9b:b1:
         fb:42:e3:69:36:ec:3b:44:38:f1:82:ea:80:c5:5f:64:e7:a3:
         1d:b6:c7:3b:cc:e6:5b:0b:2e:02:77:c9:53:f5:e5:f1:94:b0:
         a9:4a:fd:65:f3:92:9d:21:a0:eb:73:e2:6e:d3:1c:e0:16:70:
         4d:4c:cf:1a:f5:da:e8:41:de:01:a8:cc:8d:8a:42:85:db:96:
         6c:51:0c:08:24:f9:81:2c:5a:06:e8:53:73:36:9b:5e:08:c7:
         c0:43:80:fc:76:91:3f:d1:94:93:06:8e:22:c0:8f:ee:18:6b:
         43:8e:ab:da:83:50:98:0c:f2:35:c9:05:07:8e:04:f4:36:44:
         e9:9e:89:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----