Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/88f2915d-18c9-4e03-bbfb-2074c5980898/0/3230322e3138322e34382e302f32312d3234203d3e203338353131.roa
File:                     3230322e3138322e34382e302f32312d3234203d3e203338353131.roa (raw, json)
Hash identifier:          rFmLwDIyDuNutNMeq9VFrwWq2uubcZDB5NbfbFrzWE0=
Subject key identifier:   3B:7D:A6:35:21:BD:40:95:D4:C3:C3:F2:EE:52:AA:38:E3:80:A9:FE
Certificate issuer:       /CN=9169B9B6526CD14984DDE3A42E24DD8FE7ABC17F
Certificate serial:       2C4687EF12DE90EBC876D851098E14B7316804B1
Authority key identifier: 91:69:B9:B6:52:6C:D1:49:84:DD:E3:A4:2E:24:DD:8F:E7:AB:C1:7F
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9169B9B6526CD14984DDE3A42E24DD8FE7ABC17F.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/88f2915d-18c9-4e03-bbfb-2074c5980898/0/3230322e3138322e34382e302f32312d3234203d3e203338353131.roa
Signing time:             Sat 25 Sep 2021 23:00:00 +0000
ROA not before:           Sat 25 Sep 2021 22:55:00 +0000
ROA not after:            Sun 25 Sep 2022 23:00:00 +0000
asID:                     38511
IP address blocks:        202.182.48.0/21 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2c:46:87:ef:12:de:90:eb:c8:76:d8:51:09:8e:14:b7:31:68:04:b1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9169B9B6526CD14984DDE3A42E24DD8FE7ABC17F
        Validity
            Not Before: Sep 25 22:55:00 2021 GMT
            Not After : Sep 25 23:00:00 2022 GMT
        Subject: CN=3082010A0282010100B7B4AB3A50B887B3588E30314E226786C0B9A7E4007A8209CF3FDB5F88482AC13CAAA79E6C67288D0CD5954918657B58A2F7B75E7FB75CA3161BC30C5748C09B85D5640F12AB733A33CB4D499FC5B2F20540409EFF55ED94AABC12F464E941D2033E482BEF3558C0DFF84A6317AEE71AEC72D1B59288883433D84DBBEEFC3A87E46BDD730E0EC634CD9E3F5BF2D158F44C92D1A7D62454D5D3C1F0E2F38D19710E623614651F58571F8A7193A12B3008E7917E82477A833E56A796FFF62BC74B89E9AF1B0FEAE721F844CEBFBD8FF6DDEF8276A9658C8F2A0CBB8B54A514204D78C9A8DAE59954DC11F6AD22EFF315AEDD16D98768BAF400B167E4B4BBDC18BF0203010001
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:b4:ab:3a:50:b8:87:b3:58:8e:30:31:4e:22:
                    67:86:c0:b9:a7:e4:00:7a:82:09:cf:3f:db:5f:88:
                    48:2a:c1:3c:aa:a7:9e:6c:67:28:8d:0c:d5:95:49:
                    18:65:7b:58:a2:f7:b7:5e:7f:b7:5c:a3:16:1b:c3:
                    0c:57:48:c0:9b:85:d5:64:0f:12:ab:73:3a:33:cb:
                    4d:49:9f:c5:b2:f2:05:40:40:9e:ff:55:ed:94:aa:
                    bc:12:f4:64:e9:41:d2:03:3e:48:2b:ef:35:58:c0:
                    df:f8:4a:63:17:ae:e7:1a:ec:72:d1:b5:92:88:88:
                    34:33:d8:4d:bb:ee:fc:3a:87:e4:6b:dd:73:0e:0e:
                    c6:34:cd:9e:3f:5b:f2:d1:58:f4:4c:92:d1:a7:d6:
                    24:54:d5:d3:c1:f0:e2:f3:8d:19:71:0e:62:36:14:
                    65:1f:58:57:1f:8a:71:93:a1:2b:30:08:e7:91:7e:
                    82:47:7a:83:3e:56:a7:96:ff:f6:2b:c7:4b:89:e9:
                    af:1b:0f:ea:e7:21:f8:44:ce:bf:bd:8f:f6:dd:ef:
                    82:76:a9:65:8c:8f:2a:0c:bb:8b:54:a5:14:20:4d:
                    78:c9:a8:da:e5:99:54:dc:11:f6:ad:22:ef:f3:15:
                    ae:dd:16:d9:87:68:ba:f4:00:b1:67:e4:b4:bb:dc:
                    18:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3B:7D:A6:35:21:BD:40:95:D4:C3:C3:F2:EE:52:AA:38:E3:80:A9:FE
            X509v3 Authority Key Identifier:
                keyid:91:69:B9:B6:52:6C:D1:49:84:DD:E3:A4:2E:24:DD:8F:E7:AB:C1:7F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/88f2915d-18c9-4e03-bbfb-2074c5980898/0/9169B9B6526CD14984DDE3A42E24DD8FE7ABC17F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9169B9B6526CD14984DDE3A42E24DD8FE7ABC17F.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/88f2915d-18c9-4e03-bbfb-2074c5980898/0/3230322e3138322e34382e302f32312d3234203d3e203338353131.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  202.182.48.0/21

    Signature Algorithm: sha256WithRSAEncryption
         1e:ec:c6:85:d5:c7:85:e6:65:b7:6a:a5:46:25:6b:bd:64:63:
         a4:f7:f3:3f:2f:f5:59:c7:b5:49:64:f3:b2:22:79:98:d8:f6:
         aa:16:2c:6d:14:54:14:03:88:50:3b:e3:45:0c:48:1c:62:2f:
         90:84:52:b5:30:f7:11:2b:69:73:5f:a8:5e:10:69:82:10:da:
         cb:98:5a:6b:fb:ff:4c:4a:09:db:e1:5c:99:5d:e7:e5:af:b2:
         43:48:7e:dc:d5:c3:15:63:ab:23:09:8a:7d:8b:ee:2b:96:cc:
         48:45:b8:da:be:e7:68:8d:2c:94:76:59:2e:00:a5:df:f3:10:
         ad:8f:36:93:82:f4:29:4c:2f:b5:16:ae:26:0f:d0:30:5a:54:
         3d:36:4b:25:cb:0b:e6:15:e6:6e:be:8a:fd:68:bd:63:2c:3b:
         86:64:a7:c9:65:67:fb:a2:94:2a:a1:85:a0:d8:42:af:45:9b:
         31:4e:83:69:c1:68:44:06:e8:c0:b0:cf:94:fa:0b:f2:30:6b:
         63:17:5b:3e:a7:8e:b4:a1:bf:b5:18:63:65:4a:dd:fe:4c:02:
         78:48:42:e5:51:56:29:18:da:38:b8:49:fb:48:c6:f2:37:bb:
         f4:f5:17:8d:7e:bb:ad:55:44:3a:0c:c7:ea:00:56:50:aa:db:
         af:42:0b:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----