Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/3993f350-b756-4916-8d84-484f025dffcc/0/3131322e37382e3137302e302f32342d3234203d3e203338343832.roa
File:                     3131322e37382e3137302e302f32342d3234203d3e203338343832.roa (raw, json)
Hash identifier:          WCHy+4yRIZDo3S24XeGfrRaUZvVwL8bl5+dXZ55QuJ0=
Subject key identifier:   B1:A2:41:3A:4B:AA:28:54:DA:47:5A:CA:39:5D:0F:77:03:4A:C6:59
Certificate issuer:       /CN=AC555447BA62C39107F16BF572F82A417F728DBF
Certificate serial:       5335E70DE082B54AFE5607AE1231D52E1DD06DD8
Authority key identifier: AC:55:54:47:BA:62:C3:91:07:F1:6B:F5:72:F8:2A:41:7F:72:8D:BF
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AC555447BA62C39107F16BF572F82A417F728DBF.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/3993f350-b756-4916-8d84-484f025dffcc/0/3131322e37382e3137302e302f32342d3234203d3e203338343832.roa
Signing time:             Fri 28 Jan 2022 04:25:10 +0000
ROA not before:           Fri 28 Jan 2022 04:20:10 +0000
ROA not after:            Sat 28 Jan 2023 04:25:10 +0000
asID:                     38482
IP address blocks:        112.78.170.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            53:35:e7:0d:e0:82:b5:4a:fe:56:07:ae:12:31:d5:2e:1d:d0:6d:d8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AC555447BA62C39107F16BF572F82A417F728DBF
        Validity
            Not Before: Jan 28 04:20:10 2022 GMT
            Not After : Jan 28 04:25:10 2023 GMT
        Subject: CN=3082010A0282010100C61B576C530039572F3D74CAB80E3352B5E814E728CEADCC08B9CDD3C0A3452A1D93D0D5E6E30C385217F8206FD9CACF6E4EBC711B309E7E44F61AA29FC730AC87F96BC832421D5C5334E5C710A949597439B481ADBC1F50A61218EEBEA700FAEB022BB0B27D8552BCE47313A4A0802702029E0A6FEAD38B727728AF22FC7C635A0A903F6446DFA82D11B9445F3BC2317D99C6E8ABB17FB0A93A11A234D2611781A25636A7FC0840E8FA5BD1649646383A8A7402C1D785BBEC281818D48BFA69173AEBA2FB716E5520CA01D3B8B3E674256139AAEDB2B95EB14F42318A376C38EC51197B434A647CE4F8A6BBC8E11D67139AE696902D5F9687FB7132F5D7DE110203010001
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:1b:57:6c:53:00:39:57:2f:3d:74:ca:b8:0e:
                    33:52:b5:e8:14:e7:28:ce:ad:cc:08:b9:cd:d3:c0:
                    a3:45:2a:1d:93:d0:d5:e6:e3:0c:38:52:17:f8:20:
                    6f:d9:ca:cf:6e:4e:bc:71:1b:30:9e:7e:44:f6:1a:
                    a2:9f:c7:30:ac:87:f9:6b:c8:32:42:1d:5c:53:34:
                    e5:c7:10:a9:49:59:74:39:b4:81:ad:bc:1f:50:a6:
                    12:18:ee:be:a7:00:fa:eb:02:2b:b0:b2:7d:85:52:
                    bc:e4:73:13:a4:a0:80:27:02:02:9e:0a:6f:ea:d3:
                    8b:72:77:28:af:22:fc:7c:63:5a:0a:90:3f:64:46:
                    df:a8:2d:11:b9:44:5f:3b:c2:31:7d:99:c6:e8:ab:
                    b1:7f:b0:a9:3a:11:a2:34:d2:61:17:81:a2:56:36:
                    a7:fc:08:40:e8:fa:5b:d1:64:96:46:38:3a:8a:74:
                    02:c1:d7:85:bb:ec:28:18:18:d4:8b:fa:69:17:3a:
                    eb:a2:fb:71:6e:55:20:ca:01:d3:b8:b3:e6:74:25:
                    61:39:aa:ed:b2:b9:5e:b1:4f:42:31:8a:37:6c:38:
                    ec:51:19:7b:43:4a:64:7c:e4:f8:a6:bb:c8:e1:1d:
                    67:13:9a:e6:96:90:2d:5f:96:87:fb:71:32:f5:d7:
                    de:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B1:A2:41:3A:4B:AA:28:54:DA:47:5A:CA:39:5D:0F:77:03:4A:C6:59
            X509v3 Authority Key Identifier:
                keyid:AC:55:54:47:BA:62:C3:91:07:F1:6B:F5:72:F8:2A:41:7F:72:8D:BF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/3993f350-b756-4916-8d84-484f025dffcc/0/AC555447BA62C39107F16BF572F82A417F728DBF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AC555447BA62C39107F16BF572F82A417F728DBF.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/3993f350-b756-4916-8d84-484f025dffcc/0/3131322e37382e3137302e302f32342d3234203d3e203338343832.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  112.78.170.0/24

    Signature Algorithm: sha256WithRSAEncryption
         33:66:fd:ba:20:26:98:f1:60:18:a3:14:e4:dd:17:99:72:b5:
         73:fb:0f:36:20:df:89:b6:ab:45:8b:b9:ee:61:38:82:02:38:
         a2:81:52:cf:a6:9b:e7:c5:21:7e:a0:47:ec:d1:55:50:22:40:
         1a:80:ee:49:5d:f6:ee:ac:03:e9:a2:5f:e8:aa:43:9c:71:92:
         b7:53:6b:34:23:eb:0c:66:f4:27:a6:dd:b2:6a:db:16:83:48:
         ee:16:8c:03:52:40:02:39:3c:ac:3d:26:8e:82:91:23:02:73:
         1c:8b:c3:1a:4c:e1:f0:01:94:0c:cc:fa:44:2c:a8:35:46:03:
         67:37:33:f2:0f:96:41:94:51:a0:b8:33:e2:17:ce:72:50:1a:
         33:0e:38:47:78:51:16:20:1a:88:09:77:57:60:e2:ad:96:0d:
         61:24:b8:f6:3f:7b:67:df:15:c5:1d:6c:71:d4:66:49:85:e6:
         05:cb:fa:d1:af:fb:02:9e:b1:42:f6:b4:63:c3:a2:ce:ab:a6:
         c0:60:31:c2:bf:7d:d5:e3:c1:9c:f3:f6:79:9b:6d:1f:5f:da:
         2d:d8:4c:1a:bb:e6:a6:fc:9a:8f:8a:5c:79:92:e9:fa:b5:94:
         57:0e:ee:1f:62:6a:55:a4:a6:4e:07:28:29:dc:9b:1d:ff:06:
         59:f9:49:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----