Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/c621f753-a88e-4edf-a306-bd93d5a38fea/0/3230322e38312e36332e302f32342d3234203d3e203435333132.roa
File:                     3230322e38312e36332e302f32342d3234203d3e203435333132.roa (raw, json)
Hash identifier:          UkS9rMq9krnAMgUcjKv3lmrq7XU9KyNf3tgRkYMGe3M=
Subject key identifier:   AA:4E:49:AD:0C:BE:94:A4:B9:41:7D:B4:21:69:95:B7:EC:54:5C:1D
Certificate issuer:       /CN=154EE03198467B96315FDB527FB3BBCCA0BFC441
Certificate serial:       7FC3ABE4FA8A84848FD9C0345B5A1CE5779B05AF
Authority key identifier: 15:4E:E0:31:98:46:7B:96:31:5F:DB:52:7F:B3:BB:CC:A0:BF:C4:41
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/154EE03198467B96315FDB527FB3BBCCA0BFC441.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/c621f753-a88e-4edf-a306-bd93d5a38fea/0/3230322e38312e36332e302f32342d3234203d3e203435333132.roa
Signing time:             Sat 25 Sep 2021 22:01:56 +0000
ROA not before:           Sat 25 Sep 2021 21:56:56 +0000
ROA not after:            Sun 25 Sep 2022 22:01:56 +0000
asID:                     45312
IP address blocks:        202.81.63.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7f:c3:ab:e4:fa:8a:84:84:8f:d9:c0:34:5b:5a:1c:e5:77:9b:05:af
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=154EE03198467B96315FDB527FB3BBCCA0BFC441
        Validity
            Not Before: Sep 25 21:56:56 2021 GMT
            Not After : Sep 25 22:01:56 2022 GMT
        Subject: CN=3082010A0282010100C475EEC536621278E14FA7FA2AC0971A5155CDAF88B6582A9424C7BB67CF5220EF4F36A7EB31EEB7D9BC1EF97CC490538CB1DCC652D2C2C66CFBB517E1BD40EB2CF7670EE59A967F2FC08CFD10470B6C4C2183D14BB47274E8C91712429AD872BD9C90A4C91749741999DA1230318ABDA2398268F0543132C6BAD76EDE60076CFD9578E02AD196325B67AB556319021FB0BF30C7F2017F36E2260C4ABD527396E7D64C6E76D8E315C16FC63F079BAB904A713DB6D7514740DE6C0E09E9FCB2921B8FB1C4E8D0A2ED501FF2C62B52CBC3F6C6B7593DB7ECF9C41621D30DD17D68352C3B7C3418CA05C26F1B6911952F1C3448E6C98C9E7D91BFA33A384D347DDD0203010001
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:75:ee:c5:36:62:12:78:e1:4f:a7:fa:2a:c0:
                    97:1a:51:55:cd:af:88:b6:58:2a:94:24:c7:bb:67:
                    cf:52:20:ef:4f:36:a7:eb:31:ee:b7:d9:bc:1e:f9:
                    7c:c4:90:53:8c:b1:dc:c6:52:d2:c2:c6:6c:fb:b5:
                    17:e1:bd:40:eb:2c:f7:67:0e:e5:9a:96:7f:2f:c0:
                    8c:fd:10:47:0b:6c:4c:21:83:d1:4b:b4:72:74:e8:
                    c9:17:12:42:9a:d8:72:bd:9c:90:a4:c9:17:49:74:
                    19:99:da:12:30:31:8a:bd:a2:39:82:68:f0:54:31:
                    32:c6:ba:d7:6e:de:60:07:6c:fd:95:78:e0:2a:d1:
                    96:32:5b:67:ab:55:63:19:02:1f:b0:bf:30:c7:f2:
                    01:7f:36:e2:26:0c:4a:bd:52:73:96:e7:d6:4c:6e:
                    76:d8:e3:15:c1:6f:c6:3f:07:9b:ab:90:4a:71:3d:
                    b6:d7:51:47:40:de:6c:0e:09:e9:fc:b2:92:1b:8f:
                    b1:c4:e8:d0:a2:ed:50:1f:f2:c6:2b:52:cb:c3:f6:
                    c6:b7:59:3d:b7:ec:f9:c4:16:21:d3:0d:d1:7d:68:
                    35:2c:3b:7c:34:18:ca:05:c2:6f:1b:69:11:95:2f:
                    1c:34:48:e6:c9:8c:9e:7d:91:bf:a3:3a:38:4d:34:
                    7d:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AA:4E:49:AD:0C:BE:94:A4:B9:41:7D:B4:21:69:95:B7:EC:54:5C:1D
            X509v3 Authority Key Identifier:
                keyid:15:4E:E0:31:98:46:7B:96:31:5F:DB:52:7F:B3:BB:CC:A0:BF:C4:41

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/c621f753-a88e-4edf-a306-bd93d5a38fea/0/154EE03198467B96315FDB527FB3BBCCA0BFC441.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/154EE03198467B96315FDB527FB3BBCCA0BFC441.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/c621f753-a88e-4edf-a306-bd93d5a38fea/0/3230322e38312e36332e302f32342d3234203d3e203435333132.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  202.81.63.0/24

    Signature Algorithm: sha256WithRSAEncryption
         c1:64:43:a3:92:bf:0e:42:ef:03:a5:18:13:bd:97:84:84:d8:
         e1:89:a3:c6:78:8e:13:12:9e:0c:30:02:09:9a:bf:3c:ce:5e:
         40:ef:4b:0d:0e:68:96:95:e4:29:b8:cf:cd:84:e3:84:e5:fe:
         9a:15:a2:f4:46:81:e1:fa:ad:b4:c9:b0:27:3f:a0:f0:8f:11:
         e8:dc:2c:b8:49:c0:67:4d:a5:74:c8:a0:2e:f3:ed:81:77:b4:
         57:dc:99:8c:44:8c:4a:cf:57:c5:20:0e:c8:36:a8:62:c1:4a:
         55:4c:bd:e5:89:49:8e:84:75:79:e4:b5:40:26:05:37:75:54:
         ce:ac:3f:9b:e7:b1:d5:f9:d6:cf:68:54:76:3b:a8:fb:81:52:
         35:31:9a:0a:e5:1c:59:fb:0a:ad:b0:c9:0f:ae:14:b6:08:13:
         ae:28:5e:59:7e:5a:4a:ea:5c:c3:07:a2:67:9d:51:7e:77:4c:
         26:18:2f:57:11:3c:f2:68:1d:64:7b:f8:2c:fb:78:40:f1:23:
         d0:6d:1c:fe:03:56:6d:9a:b3:ca:ca:78:82:8e:6c:8d:f1:8e:
         97:6e:d0:cc:2e:5d:49:92:bc:6b:ca:d9:71:e5:49:02:4c:f5:
         92:9d:64:ea:4e:53:be:3a:ea:d2:17:00:d9:78:b0:ce:59:d6:
         39:0b:51:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----