Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/88f2915d-18c9-4e03-bbfb-2074c5980898/0/3130312e3235352e3137312e302f32342d3234203d3e203536323432.roa
File:                     3130312e3235352e3137312e302f32342d3234203d3e203536323432.roa (raw, json)
Hash identifier:          AWOooJNJ1OJhEXx5EU5UZHJy1rHl92pVRCtaTbQdENI=
Subject key identifier:   45:5D:D4:14:C1:38:C7:12:66:1E:9A:AE:32:5A:CE:0B:E5:24:20:98
Certificate issuer:       /CN=9169B9B6526CD14984DDE3A42E24DD8FE7ABC17F
Certificate serial:       050096EC3B467B4ADC03243872E457531C57A1D5
Authority key identifier: 91:69:B9:B6:52:6C:D1:49:84:DD:E3:A4:2E:24:DD:8F:E7:AB:C1:7F
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9169B9B6526CD14984DDE3A42E24DD8FE7ABC17F.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/88f2915d-18c9-4e03-bbfb-2074c5980898/0/3130312e3235352e3137312e302f32342d3234203d3e203536323432.roa
Signing time:             Sat 25 Sep 2021 23:00:00 +0000
ROA not before:           Sat 25 Sep 2021 22:55:00 +0000
ROA not after:            Sun 25 Sep 2022 23:00:00 +0000
asID:                     56242
IP address blocks:        101.255.171.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            05:00:96:ec:3b:46:7b:4a:dc:03:24:38:72:e4:57:53:1c:57:a1:d5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9169B9B6526CD14984DDE3A42E24DD8FE7ABC17F
        Validity
            Not Before: Sep 25 22:55:00 2021 GMT
            Not After : Sep 25 23:00:00 2022 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:19:84:f0:ad:e1:fd:82:cd:18:5f:a6:0a:7f:
                    09:1e:dd:1c:80:0a:ac:cc:31:8a:d0:51:40:8d:68:
                    1f:8e:1e:91:92:4b:b9:03:18:c5:0f:df:86:19:8c:
                    13:b6:07:13:d8:39:d2:2c:ad:62:97:c8:92:83:09:
                    80:17:fd:e3:0a:fd:1a:90:ba:ac:28:5e:e0:cd:95:
                    50:07:46:e6:28:19:aa:52:44:a3:a5:40:ab:1e:d7:
                    0e:a9:2f:03:de:9d:03:72:34:88:b7:49:25:13:82:
                    8e:b4:d5:06:62:81:f0:02:d6:6b:7c:95:39:13:6e:
                    86:e8:c6:7b:25:44:65:48:9f:48:4d:18:3d:2e:dc:
                    9d:10:cb:10:92:f0:88:a0:be:e4:f1:b3:ca:b9:ea:
                    b3:0b:2a:e6:34:c1:80:c2:2c:71:4f:b9:3f:c7:63:
                    7a:4e:fd:3c:19:c9:51:72:39:a0:9c:93:15:f5:0c:
                    dc:eb:d9:3e:a6:0d:27:2a:97:d8:94:96:fb:9b:16:
                    97:a0:db:2e:d1:0e:40:34:6a:ee:a1:c5:7d:cf:c5:
                    06:43:2f:fa:65:24:c1:ff:e6:dd:4a:66:5d:53:f5:
                    bb:05:14:37:e7:81:fd:2d:3f:f0:1c:b2:82:f7:66:
                    29:21:ee:87:2a:cf:d3:26:f0:bc:b6:52:89:dc:b5:
                    18:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                45:5D:D4:14:C1:38:C7:12:66:1E:9A:AE:32:5A:CE:0B:E5:24:20:98
            X509v3 Authority Key Identifier:
                keyid:91:69:B9:B6:52:6C:D1:49:84:DD:E3:A4:2E:24:DD:8F:E7:AB:C1:7F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/88f2915d-18c9-4e03-bbfb-2074c5980898/0/9169B9B6526CD14984DDE3A42E24DD8FE7ABC17F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9169B9B6526CD14984DDE3A42E24DD8FE7ABC17F.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/88f2915d-18c9-4e03-bbfb-2074c5980898/0/3130312e3235352e3137312e302f32342d3234203d3e203536323432.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  101.255.171.0/24

    Signature Algorithm: sha256WithRSAEncryption
         bd:e3:de:78:9b:4b:ea:41:6d:de:cb:c2:20:da:66:9e:b6:a7:
         95:1c:c0:97:cc:4a:02:65:10:a4:76:ed:50:d9:2b:11:ac:f6:
         6b:38:b2:b1:b8:3d:9f:c1:ff:b5:ac:70:45:f7:70:d2:3a:4d:
         5e:26:17:38:07:16:38:7b:23:a5:55:5a:41:da:f7:d8:ba:f3:
         54:35:ca:ac:73:5d:0b:4a:0c:f3:23:8f:9f:01:77:f5:e7:35:
         fa:91:5a:2c:50:ac:c1:4c:f4:7e:22:fb:b0:87:76:26:04:58:
         a2:df:61:f8:c9:46:f0:1d:bd:a7:ac:c6:1c:66:e5:c4:c0:c0:
         7a:82:4c:5b:dc:4c:79:cc:6b:44:c2:cb:77:22:a1:3f:c0:51:
         99:d2:15:e8:2d:cf:bb:0d:62:9b:2e:27:71:57:9c:04:07:9f:
         09:c0:e5:c5:96:67:00:1f:0c:45:4d:6f:c4:66:d0:55:45:32:
         e4:e1:d2:90:53:e5:e9:9f:f8:9f:51:a1:80:3b:1d:3e:11:2d:
         d1:94:bb:0b:a7:cf:88:8a:19:fd:b9:52:91:d3:2e:d6:7c:0c:
         61:16:37:66:19:b8:68:d3:48:e2:b9:2d:82:e6:44:2e:22:77:
         c7:06:c7:59:c8:17:e5:94:44:ee:bb:38:63:91:01:8e:bf:0c:
         99:09:3f:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----