Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/3993f350-b756-4916-8d84-484f025dffcc/0/3230332e3134322e38302e302f32342d3234203d3e203137343531.roa
File:                     3230332e3134322e38302e302f32342d3234203d3e203137343531.roa (raw, json)
Hash identifier:          jp9CaQ3u01xC+p4jC8qptoVLn1O99muFX3BCFedBu4Y=
Subject key identifier:   7D:D4:D2:7E:0C:18:2B:9E:A9:48:AD:59:A0:B6:95:C0:30:99:13:A6
Certificate issuer:       /CN=AC555447BA62C39107F16BF572F82A417F728DBF
Certificate serial:       385DAC873ECDB47F66150AB967EDA8AAA9212703
Authority key identifier: AC:55:54:47:BA:62:C3:91:07:F1:6B:F5:72:F8:2A:41:7F:72:8D:BF
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AC555447BA62C39107F16BF572F82A417F728DBF.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/3993f350-b756-4916-8d84-484f025dffcc/0/3230332e3134322e38302e302f32342d3234203d3e203137343531.roa
Signing time:             Thu 30 Sep 2021 00:00:52 +0000
ROA not before:           Wed 29 Sep 2021 23:55:52 +0000
ROA not after:            Fri 30 Sep 2022 00:00:52 +0000
asID:                     17451
IP address blocks:        203.142.80.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            38:5d:ac:87:3e:cd:b4:7f:66:15:0a:b9:67:ed:a8:aa:a9:21:27:03
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AC555447BA62C39107F16BF572F82A417F728DBF
        Validity
            Not Before: Sep 29 23:55:52 2021 GMT
            Not After : Sep 30 00:00:52 2022 GMT
        Subject: CN=3082010A0282010100E0A3EB9EA3AD5D9D2A0AFECA5C68B234645BAEE1BABF41DAD42BA18753C7922C352DF08AE942719EF7FB2D405FA5293242749259B0760F63F922F07AEFE4D9F2B701CFA40673FDF6E4B3B9C9BBC567CC14545A6FCAD4A862B07DD632F1EABD439B6FBE2A24D8F31EA93194900A8280209A99AA265429379A7BF77016A377CBAE4BE0EAC43EB92D2239E0701216D733E267975A4890F49C4A39DCB504B2465F562064BD839F33CCAF1198B3AC43B13AE9407D0144757B47E8DAF9935BDE5F7D64B4AC7A06E8F5920AB5F604768FB5B81D417C7AFA6274598287217F81D552DF22D33EEA03CED027C08842B9A599C2779B884BAC98E53038543A915AB2DD6D6F330203010001
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:a3:eb:9e:a3:ad:5d:9d:2a:0a:fe:ca:5c:68:
                    b2:34:64:5b:ae:e1:ba:bf:41:da:d4:2b:a1:87:53:
                    c7:92:2c:35:2d:f0:8a:e9:42:71:9e:f7:fb:2d:40:
                    5f:a5:29:32:42:74:92:59:b0:76:0f:63:f9:22:f0:
                    7a:ef:e4:d9:f2:b7:01:cf:a4:06:73:fd:f6:e4:b3:
                    b9:c9:bb:c5:67:cc:14:54:5a:6f:ca:d4:a8:62:b0:
                    7d:d6:32:f1:ea:bd:43:9b:6f:be:2a:24:d8:f3:1e:
                    a9:31:94:90:0a:82:80:20:9a:99:aa:26:54:29:37:
                    9a:7b:f7:70:16:a3:77:cb:ae:4b:e0:ea:c4:3e:b9:
                    2d:22:39:e0:70:12:16:d7:33:e2:67:97:5a:48:90:
                    f4:9c:4a:39:dc:b5:04:b2:46:5f:56:20:64:bd:83:
                    9f:33:cc:af:11:98:b3:ac:43:b1:3a:e9:40:7d:01:
                    44:75:7b:47:e8:da:f9:93:5b:de:5f:7d:64:b4:ac:
                    7a:06:e8:f5:92:0a:b5:f6:04:76:8f:b5:b8:1d:41:
                    7c:7a:fa:62:74:59:82:87:21:7f:81:d5:52:df:22:
                    d3:3e:ea:03:ce:d0:27:c0:88:42:b9:a5:99:c2:77:
                    9b:88:4b:ac:98:e5:30:38:54:3a:91:5a:b2:dd:6d:
                    6f:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7D:D4:D2:7E:0C:18:2B:9E:A9:48:AD:59:A0:B6:95:C0:30:99:13:A6
            X509v3 Authority Key Identifier:
                keyid:AC:55:54:47:BA:62:C3:91:07:F1:6B:F5:72:F8:2A:41:7F:72:8D:BF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/3993f350-b756-4916-8d84-484f025dffcc/0/AC555447BA62C39107F16BF572F82A417F728DBF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AC555447BA62C39107F16BF572F82A417F728DBF.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/3993f350-b756-4916-8d84-484f025dffcc/0/3230332e3134322e38302e302f32342d3234203d3e203137343531.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  203.142.80.0/24

    Signature Algorithm: sha256WithRSAEncryption
         74:8a:bd:4e:88:47:db:2b:67:29:c8:e7:76:f1:79:9c:dd:0a:
         26:11:36:f0:3e:1a:e2:b7:4c:fa:93:75:af:93:1a:ff:18:a3:
         d0:54:66:3c:0c:7a:0a:bb:df:be:06:40:9a:0d:a5:26:b9:1d:
         ae:ec:b4:8c:10:5c:c5:93:0f:c7:7c:6a:fc:e3:19:36:e8:8d:
         cf:e5:ad:8a:99:ed:01:2d:62:26:b3:b0:c8:53:ae:21:f0:48:
         49:37:f9:2b:cd:50:42:5a:c1:b6:dd:e6:55:48:d6:63:bb:b9:
         a4:a1:1b:36:3d:04:d4:d1:25:5c:c3:f4:14:2d:43:13:7a:48:
         7e:bb:6f:e8:90:22:00:5c:45:1f:a6:17:e8:9f:eb:fb:f3:97:
         a9:37:2c:3e:fd:3c:b2:f1:9b:b1:23:3f:97:a9:c1:a0:94:8f:
         c0:95:7a:23:7c:61:7e:51:88:86:cc:ae:be:be:c2:35:f9:87:
         ef:20:20:a4:33:ac:a2:86:72:f5:0e:de:b2:30:35:8f:06:28:
         e5:01:8b:74:c9:ad:d9:9f:67:9c:35:71:ac:31:8f:0f:9e:19:
         c5:aa:31:e6:0c:4c:78:0b:6a:fd:d3:a4:4f:8b:c1:11:ea:bc:
         06:13:14:88:d9:55:a2:d2:ef:71:ea:42:b8:5e:b1:a9:e3:c0:
         d3:d2:f1:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----