Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/3993f350-b756-4916-8d84-484f025dffcc/0/3230322e3136392e34362e302f32342d3234203d3e203137343531.roa
File:                     3230322e3136392e34362e302f32342d3234203d3e203137343531.roa (raw, json)
Hash identifier:          5TXRxfmeShEMSoRD5G+J9PSvj+HHVH6cbPWZHpTSojg=
Subject key identifier:   01:61:0D:85:36:F3:F3:40:A9:16:17:8A:83:94:A5:55:4E:76:69:79
Certificate issuer:       /CN=AC555447BA62C39107F16BF572F82A417F728DBF
Certificate serial:       7B072DE23389A7D4FC7ACC30130BFF31CE2AE639
Authority key identifier: AC:55:54:47:BA:62:C3:91:07:F1:6B:F5:72:F8:2A:41:7F:72:8D:BF
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AC555447BA62C39107F16BF572F82A417F728DBF.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/3993f350-b756-4916-8d84-484f025dffcc/0/3230322e3136392e34362e302f32342d3234203d3e203137343531.roa
Signing time:             Thu 30 Sep 2021 00:00:48 +0000
ROA not before:           Wed 29 Sep 2021 23:55:48 +0000
ROA not after:            Fri 30 Sep 2022 00:00:48 +0000
asID:                     17451
IP address blocks:        202.169.46.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7b:07:2d:e2:33:89:a7:d4:fc:7a:cc:30:13:0b:ff:31:ce:2a:e6:39
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AC555447BA62C39107F16BF572F82A417F728DBF
        Validity
            Not Before: Sep 29 23:55:48 2021 GMT
            Not After : Sep 30 00:00:48 2022 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:5d:45:4f:df:ca:b3:05:9a:1f:d4:27:9a:6b:
                    09:07:a6:8d:27:6c:dd:b2:23:76:78:92:f2:b1:47:
                    84:7c:70:0e:88:63:fe:1f:6a:77:72:dc:a7:79:b4:
                    c4:d3:9f:18:d5:2c:6b:0f:68:5e:03:ce:60:f9:07:
                    6b:6f:ed:07:55:76:9b:1b:fb:b1:e3:90:03:34:7f:
                    e6:06:37:5c:6b:4b:a4:bd:1e:5b:7e:69:fb:a2:91:
                    84:ff:89:a9:54:6a:36:fd:99:83:6d:72:63:40:45:
                    7b:f2:65:02:1a:10:62:25:41:be:f2:34:c1:48:6f:
                    24:18:32:99:5c:8f:c7:0b:f7:8d:64:01:95:b7:bf:
                    2f:c2:7f:5c:ec:ea:79:cd:e1:af:77:88:6c:1b:61:
                    7f:52:24:30:7d:b9:a3:71:4f:8e:2b:73:7f:87:ce:
                    df:76:39:2f:71:d6:62:6a:a8:6d:e2:64:fb:93:4d:
                    8b:1b:19:ea:51:b0:01:ce:3a:91:26:6b:b9:b0:43:
                    a9:bb:68:f5:ec:51:37:ac:de:37:e6:78:74:70:3e:
                    6d:04:26:61:6f:a0:ad:a1:f4:80:07:2d:ad:3d:72:
                    9b:53:e4:dd:bd:5e:ab:07:ab:c3:82:c1:e4:4f:ad:
                    09:4b:0b:30:3c:5b:58:39:24:6d:4c:fb:ad:10:67:
                    dc:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                01:61:0D:85:36:F3:F3:40:A9:16:17:8A:83:94:A5:55:4E:76:69:79
            X509v3 Authority Key Identifier:
                keyid:AC:55:54:47:BA:62:C3:91:07:F1:6B:F5:72:F8:2A:41:7F:72:8D:BF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/3993f350-b756-4916-8d84-484f025dffcc/0/AC555447BA62C39107F16BF572F82A417F728DBF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AC555447BA62C39107F16BF572F82A417F728DBF.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/3993f350-b756-4916-8d84-484f025dffcc/0/3230322e3136392e34362e302f32342d3234203d3e203137343531.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  202.169.46.0/24

    Signature Algorithm: sha256WithRSAEncryption
         46:42:5b:53:9d:00:83:ad:96:87:d9:4f:21:cf:9f:b6:85:7d:
         e7:fa:16:96:22:5b:16:64:82:85:a7:5f:ad:ab:00:74:9e:8f:
         71:84:da:cb:2a:0a:33:a2:de:9e:95:05:7c:d3:f6:ce:2a:74:
         dd:52:b3:ad:31:8f:b0:1e:3d:c0:cb:92:7f:6a:09:ef:fd:4b:
         96:ad:cd:76:78:3f:c2:e2:70:9f:37:9b:55:f4:c0:1c:6e:cd:
         fe:28:24:7c:ff:6a:b1:e2:c1:4b:2e:df:b8:65:26:e8:12:7a:
         9b:62:71:93:5b:c9:fd:11:61:5b:4a:7c:65:c1:42:b1:10:95:
         77:3e:45:ab:4e:c3:b8:a8:85:de:df:83:20:37:61:11:ef:e4:
         ab:41:4e:64:48:53:56:cd:3d:6d:a4:01:e2:67:fa:a5:5a:12:
         19:6d:ad:85:8d:19:1b:26:3c:b9:6a:a3:c9:b2:94:91:61:6e:
         bf:91:ec:fd:3b:d5:4a:e5:fc:31:f4:35:30:2b:9f:f2:7b:9e:
         7e:77:af:df:fc:96:44:68:3d:93:5c:14:a9:f9:32:79:0c:7a:
         4b:61:b1:41:e7:97:5d:0f:ab:d9:92:57:b2:70:3e:27:f9:5e:
         e5:2a:5a:88:c7:e8:19:a9:55:93:30:f4:df:be:e0:9f:9b:d5:
         97:ac:77:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----