Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/3993f350-b756-4916-8d84-484f025dffcc/0/3131322e37382e3138372e302f32342d3234203d3e203137343531.roa
File:                     3131322e37382e3138372e302f32342d3234203d3e203137343531.roa (raw, json)
Hash identifier:          Jt2ZABdWYce27T1yx2xmM+3EII1mZmppmFVXbXXsaVs=
Subject key identifier:   EE:F8:E9:D7:2F:1A:20:E5:37:59:79:30:E0:3D:7B:CD:EF:F4:0D:92
Certificate issuer:       /CN=AC555447BA62C39107F16BF572F82A417F728DBF
Certificate serial:       396E6EEAA5F95DE079FF4F2AC96F74C94212F583
Authority key identifier: AC:55:54:47:BA:62:C3:91:07:F1:6B:F5:72:F8:2A:41:7F:72:8D:BF
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AC555447BA62C39107F16BF572F82A417F728DBF.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/3993f350-b756-4916-8d84-484f025dffcc/0/3131322e37382e3138372e302f32342d3234203d3e203137343531.roa
Signing time:             Thu 30 Sep 2021 00:00:42 +0000
ROA not before:           Wed 29 Sep 2021 23:55:42 +0000
ROA not after:            Fri 30 Sep 2022 00:00:42 +0000
asID:                     17451
IP address blocks:        112.78.187.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            39:6e:6e:ea:a5:f9:5d:e0:79:ff:4f:2a:c9:6f:74:c9:42:12:f5:83
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AC555447BA62C39107F16BF572F82A417F728DBF
        Validity
            Not Before: Sep 29 23:55:42 2021 GMT
            Not After : Sep 30 00:00:42 2022 GMT
        Subject: CN=3082010A0282010100C3D912BBA1570AF4B6ECA38976F090331C5E512676939F0B9B6953C95DFC709A432CBB20834166B1EC9A3AEB22DFA4BBBEE7F54BC6A2CBF03E4EF905866BAE2BCDA194E05F32DE8364C60593212C163819DDB22407218F256B09A27EC926BE0E40D962A908AD2C4AECBA7194A82294BC88CAB3662AD8D3629193BAC5691562CC8159A6E736C567AE3ABCB0482DE6719A4320E8F50E7BC4CE9F56D90FF370AC03C89DE2498980F2BF02470A38078EDE881BE86BD9B2803F201FC27FAF5EEB422FE9FC986228D61B690EE4A84CB05223A6F2C8FC86A5040F313000F7D2DAA129E3B4EF4100FF3D0D96A18CE2FE34A14AF85565A25C18F5B893F45A3C0F68B116410203010001
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:d9:12:bb:a1:57:0a:f4:b6:ec:a3:89:76:f0:
                    90:33:1c:5e:51:26:76:93:9f:0b:9b:69:53:c9:5d:
                    fc:70:9a:43:2c:bb:20:83:41:66:b1:ec:9a:3a:eb:
                    22:df:a4:bb:be:e7:f5:4b:c6:a2:cb:f0:3e:4e:f9:
                    05:86:6b:ae:2b:cd:a1:94:e0:5f:32:de:83:64:c6:
                    05:93:21:2c:16:38:19:dd:b2:24:07:21:8f:25:6b:
                    09:a2:7e:c9:26:be:0e:40:d9:62:a9:08:ad:2c:4a:
                    ec:ba:71:94:a8:22:94:bc:88:ca:b3:66:2a:d8:d3:
                    62:91:93:ba:c5:69:15:62:cc:81:59:a6:e7:36:c5:
                    67:ae:3a:bc:b0:48:2d:e6:71:9a:43:20:e8:f5:0e:
                    7b:c4:ce:9f:56:d9:0f:f3:70:ac:03:c8:9d:e2:49:
                    89:80:f2:bf:02:47:0a:38:07:8e:de:88:1b:e8:6b:
                    d9:b2:80:3f:20:1f:c2:7f:af:5e:eb:42:2f:e9:fc:
                    98:62:28:d6:1b:69:0e:e4:a8:4c:b0:52:23:a6:f2:
                    c8:fc:86:a5:04:0f:31:30:00:f7:d2:da:a1:29:e3:
                    b4:ef:41:00:ff:3d:0d:96:a1:8c:e2:fe:34:a1:4a:
                    f8:55:65:a2:5c:18:f5:b8:93:f4:5a:3c:0f:68:b1:
                    16:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EE:F8:E9:D7:2F:1A:20:E5:37:59:79:30:E0:3D:7B:CD:EF:F4:0D:92
            X509v3 Authority Key Identifier:
                keyid:AC:55:54:47:BA:62:C3:91:07:F1:6B:F5:72:F8:2A:41:7F:72:8D:BF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/3993f350-b756-4916-8d84-484f025dffcc/0/AC555447BA62C39107F16BF572F82A417F728DBF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AC555447BA62C39107F16BF572F82A417F728DBF.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/3993f350-b756-4916-8d84-484f025dffcc/0/3131322e37382e3138372e302f32342d3234203d3e203137343531.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  112.78.187.0/24

    Signature Algorithm: sha256WithRSAEncryption
         70:8a:fb:40:bb:f3:e7:0f:33:4b:9e:ea:c0:4c:11:17:ea:63:
         72:39:59:21:3e:4b:b7:49:07:50:45:52:63:7d:a1:ff:23:cb:
         fc:18:5d:16:81:30:da:c9:b9:85:ef:35:88:50:a4:5c:d6:2f:
         e5:b9:b5:dd:c2:70:d7:d0:64:6f:59:cc:da:20:14:c7:3e:07:
         bf:3b:e9:b2:26:f7:33:1c:e2:14:af:67:5c:85:f0:d0:5c:f6:
         ad:d5:b7:34:d0:34:a9:44:0a:2c:a8:51:79:f5:71:ff:1e:fb:
         d5:92:f4:30:6d:97:0e:25:50:52:a8:93:a6:2f:4d:9f:1b:c8:
         66:cb:9f:14:86:e3:c9:30:78:75:a2:2c:7e:e4:e3:cc:f7:ef:
         35:77:06:42:cc:91:42:32:25:42:fc:96:d7:cd:45:f6:8e:a7:
         9b:0d:2f:54:89:ad:52:bd:fe:a3:b8:98:e2:84:19:ca:03:0b:
         42:11:fb:7c:c2:c6:4b:d4:da:aa:46:a8:19:fe:56:94:1a:8f:
         7f:59:fd:77:30:b9:9b:89:b6:9b:ac:b9:87:57:94:7d:4e:1c:
         8c:fa:53:25:13:14:e4:36:48:8e:e2:4e:3b:07:4f:e9:fd:ea:
         a7:58:8a:b0:ca:dd:90:32:04:b0:54:42:13:a5:c2:69:2d:42:
         35:d2:02:f3
-----BEGIN CERTIFICATE-----
MIIHJDCCBgygAwIBAgIUOW5u6qX5XeB5/08qyW90yUIS9YMwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQUM1NTU0NDdCQTYyQzM5MTA3RjE2QkY1NzJGODJBNDE3
RjcyOERCRjAeFw0yMTA5MjkyMzU1NDJaFw0yMjA5MzAwMDAwNDJaMIICLTGCAikw
ggIlBgNVBAMTggIcMzA4MjAxMEEwMjgyMDEwMTAwQzNEOTEyQkJBMTU3MEFGNEI2
RUNBMzg5NzZGMDkwMzMxQzVFNTEyNjc2OTM5RjBCOUI2OTUzQzk1REZDNzA5QTQz
MkNCQjIwODM0MTY2QjFFQzlBM0FFQjIyREZBNEJCQkVFN0Y1NEJDNkEyQ0JGMDNF
NEVGOTA1ODY2QkFFMkJDREExOTRFMDVGMzJERTgzNjRDNjA1OTMyMTJDMTYzODE5
RERCMjI0MDcyMThGMjU2QjA5QTI3RUM5MjZCRTBFNDBEOTYyQTkwOEFEMkM0QUVD
QkE3MTk0QTgyMjk0QkM4OENBQjM2NjJBRDhEMzYyOTE5M0JBQzU2OTE1NjJDQzgx
NTlBNkU3MzZDNTY3QUUzQUJDQjA0ODJERTY3MTlBNDMyMEU4RjUwRTdCQzRDRTlG
NTZEOTBGRjM3MEFDMDNDODlERTI0OTg5ODBGMkJGMDI0NzBBMzgwNzhFREU4ODFC
RTg2QkQ5QjI4MDNGMjAxRkMyN0ZBRjVFRUI0MjJGRTlGQzk4NjIyOEQ2MUI2OTBF
RTRBODRDQjA1MjIzQTZGMkM4RkM4NkE1MDQwRjMxMzAwMEY3RDJEQUExMjlFM0I0
RUY0MTAwRkYzRDBEOTZBMThDRTJGRTM0QTE0QUY4NTU2NUEyNUMxOEY1Qjg5M0Y0
NUEzQzBGNjhCMTE2NDEwMjAzMDEwMDAxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8A
MIIBCgKCAQEAw9kSu6FXCvS27KOJdvCQMxxeUSZ2k58Lm2lTyV38cJpDLLsgg0Fm
seyaOusi36S7vuf1S8aiy/A+TvkFhmuuK82hlOBfMt6DZMYFkyEsFjgZ3bIkByGP
JWsJon7JJr4OQNliqQitLErsunGUqCKUvIjKs2Yq2NNikZO6xWkVYsyBWabnNsVn
rjq8sEgt5nGaQyDo9Q57xM6fVtkP83CsA8id4kmJgPK/AkcKOAeO3ogb6GvZsoA/
IB/Cf69e60Iv6fyYYijWG2kO5KhMsFIjpvLI/IalBA8xMAD30tqhKeO070EA/z0N
lqGM4v40oUr4VWWiXBj1uJP0WjwPaLEWQQIDAQABo4ICMjCCAi4wHQYDVR0OBBYE
FO746dcvGiDlN1l5MOA9e83v9A2SMB8GA1UdIwQYMBaAFKxVVEe6YsORB/Fr9XL4
KkF/co2/MA4GA1UdDwEB/wQEAwIHgDCBhQYDVR0fBH4wfDB6oHigdoZ0cnN5bmM6
Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMzk5M2YzNTAtYjc1Ni00OTE2LThk
ODQtNDg0ZjAyNWRmZmNjLzAvQUM1NTU0NDdCQTYyQzM5MTA3RjE2QkY1NzJGODJB
NDE3RjcyOERCRi5jcmwwdAYIKwYBBQUHAQEEaDBmMGQGCCsGAQUFBzAChlhyc3lu
YzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9JRE5JQy1JRC8yL0FDNTU1NDQ3
QkE2MkMzOTEwN0YxNkJGNTcyRjgyQTQxN0Y3MjhEQkYuY2VyMIGiBggrBgEFBQcB
CwSBlTCBkjCBjwYIKwYBBQUHMAuGgYJyc3luYzovL3JlcG8tcnBraS5pZG5pYy5u
ZXQvcmVwby8zOTkzZjM1MC1iNzU2LTQ5MTYtOGQ4NC00ODRmMDI1ZGZmY2MvMC8z
MTMxMzIyZTM3MzgyZTMxMzgzNzJlMzAyZjMyMzQyZDMyMzQyMDNkM2UyMDMxMzcz
NDM1MzEucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcB
Af8EEDAOMAwEAgABMAYDBABwTrswDQYJKoZIhvcNAQELBQADggEBAHCK+0C78+cP
M0ue6sBMERfqY3I5WSE+S7dJB1BFUmN9of8jy/wYXRaBMNrJuYXvNYhQpFzWL+W5
td3CcNfQZG9ZzNogFMc+B7876bIm9zMc4hSvZ1yF8NBc9q3VtzTQNKlECiyoUXn1
cf8e+9WS9DBtlw4lUFKok6YvTZ8byGbLnxSG48kweHWiLH7k48z37zV3BkLMkUIy
JUL8ltfNRfaOp5sNL1SJrVK9/qO4mOKEGcoDC0IR+3zCxkvU2qpGqBn+VpQaj39Z
/XcwuZuJtpusuYdXlH1OHIz6UyUTFOQ2SI7iTjsHT+n96qdYirDK3ZAyBLBUQhOl
wmktQjXSAvM=
-----END CERTIFICATE-----