Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/3993f350-b756-4916-8d84-484f025dffcc/0/3131372e3130322e3130312e302f32342d3234203d3e203137343531.roa
File:                     3131372e3130322e3130312e302f32342d3234203d3e203137343531.roa (raw, json)
Hash identifier:          qlCzr2QOYMLoh6zDpzjngjCLWA6BhPFPfNXZi2pqlaw=
Subject key identifier:   A0:C4:41:E3:5D:A0:9B:9D:DF:E9:79:74:88:9F:61:64:BC:5B:09:B2
Certificate issuer:       /CN=AC555447BA62C39107F16BF572F82A417F728DBF
Certificate serial:       5B27D66F4C35829FF8B153A389A89FBCEE7605A7
Authority key identifier: AC:55:54:47:BA:62:C3:91:07:F1:6B:F5:72:F8:2A:41:7F:72:8D:BF
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AC555447BA62C39107F16BF572F82A417F728DBF.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/3993f350-b756-4916-8d84-484f025dffcc/0/3131372e3130322e3130312e302f32342d3234203d3e203137343531.roa
Signing time:             Thu 30 Sep 2021 00:00:09 +0000
ROA not before:           Wed 29 Sep 2021 23:55:09 +0000
ROA not after:            Fri 30 Sep 2022 00:00:09 +0000
asID:                     17451
IP address blocks:        117.102.101.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5b:27:d6:6f:4c:35:82:9f:f8:b1:53:a3:89:a8:9f:bc:ee:76:05:a7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AC555447BA62C39107F16BF572F82A417F728DBF
        Validity
            Not Before: Sep 29 23:55:09 2021 GMT
            Not After : Sep 30 00:00:09 2022 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:cf:2c:a0:92:bd:58:ef:d0:8a:ff:08:60:93:
                    17:7c:5c:5b:50:02:22:3b:8b:2a:6a:ce:46:1b:7f:
                    c0:7c:44:8f:c7:5e:4b:00:49:fe:51:a8:56:a2:68:
                    af:fe:f6:bf:3d:db:3c:21:d9:ce:ce:d6:69:79:13:
                    74:84:f7:62:7b:5a:b4:3a:3e:53:ff:f8:0e:14:69:
                    b5:8b:41:7b:47:04:c9:6a:1b:fb:93:4c:23:b0:89:
                    cc:ab:34:ab:9f:37:fd:77:a5:d3:63:37:d2:3c:aa:
                    a4:a1:1e:4d:59:fc:0f:2f:a5:5b:1a:00:73:80:c1:
                    f3:11:32:30:c2:d1:78:bb:23:c7:91:98:8b:96:54:
                    2b:37:52:d1:be:32:52:71:f7:80:1a:40:10:5d:4e:
                    cc:9c:0c:12:a0:32:2c:80:49:5b:f7:e0:ca:22:0a:
                    24:a8:00:b5:3d:7f:6c:bd:f2:58:e1:8c:22:d2:3f:
                    4a:c7:d5:90:0c:1d:f0:d7:1e:9c:86:4e:1b:e0:e4:
                    03:1a:7f:11:7d:d3:18:5b:95:bd:29:5d:cb:24:b2:
                    41:c8:f6:01:90:0c:f9:f3:0e:10:5b:f2:4d:dd:ff:
                    72:94:ff:7e:3e:b4:74:62:75:9c:af:c1:30:e9:38:
                    50:56:03:01:9e:98:a7:f5:35:92:00:af:e0:f2:80:
                    ed:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A0:C4:41:E3:5D:A0:9B:9D:DF:E9:79:74:88:9F:61:64:BC:5B:09:B2
            X509v3 Authority Key Identifier:
                keyid:AC:55:54:47:BA:62:C3:91:07:F1:6B:F5:72:F8:2A:41:7F:72:8D:BF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/3993f350-b756-4916-8d84-484f025dffcc/0/AC555447BA62C39107F16BF572F82A417F728DBF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AC555447BA62C39107F16BF572F82A417F728DBF.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/3993f350-b756-4916-8d84-484f025dffcc/0/3131372e3130322e3130312e302f32342d3234203d3e203137343531.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  117.102.101.0/24

    Signature Algorithm: sha256WithRSAEncryption
         9d:c9:d4:b5:06:44:bc:0c:60:08:89:6a:ac:7d:b9:55:60:fd:
         09:c9:c5:a0:c3:2b:cd:c8:31:4b:37:00:8d:3e:06:30:d2:c7:
         81:9e:7c:36:cc:94:71:d9:73:31:14:54:34:08:1c:b3:13:13:
         3d:8d:22:f7:23:ab:e2:82:8a:31:c9:91:e3:c0:f0:cf:c7:ab:
         56:72:65:7a:d0:2d:70:14:e0:a3:75:a3:83:36:3d:cb:59:1e:
         f2:fe:ca:4e:f4:da:b8:77:d1:24:df:4e:a3:0a:f0:4c:12:22:
         e9:a9:9b:b5:1a:e3:80:d1:0d:68:25:8f:ea:d8:c6:1c:c6:e0:
         dd:c3:4d:df:3a:57:54:97:a3:41:39:e9:6d:f2:c2:06:72:1b:
         48:63:cb:c2:61:59:59:6c:00:71:41:47:ef:bb:8f:8f:a6:be:
         2a:f8:7f:99:77:3e:96:d3:6f:6f:63:6a:2f:bd:e8:23:d9:7e:
         4b:8a:6a:84:d3:40:0e:69:48:02:32:e4:35:f4:36:54:29:ec:
         ed:93:53:d7:eb:cd:54:eb:84:08:62:c7:51:e3:2d:6f:b4:04:
         ab:34:e7:2d:22:4a:0c:c9:4a:23:57:a5:e3:1b:78:00:2f:75:
         84:1c:d3:75:0d:eb:35:b6:6a:6c:2b:d2:ba:f2:62:15:ae:8a:
         e4:2a:16:cb
-----BEGIN CERTIFICATE-----
MIIHJjCCBg6gAwIBAgIUWyfWb0w1gp/4sVOjiaifvO52BacwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQUM1NTU0NDdCQTYyQzM5MTA3RjE2QkY1NzJGODJBNDE3
RjcyOERCRjAeFw0yMTA5MjkyMzU1MDlaFw0yMjA5MzAwMDAwMDlaMIICLTGCAikw
ggIlBgNVBAMTggIcMzA4MjAxMEEwMjgyMDEwMTAwQjFDRjJDQTA5MkJENThFRkQw
OEFGRjA4NjA5MzE3N0M1QzVCNTAwMjIyM0I4QjJBNkFDRTQ2MUI3RkMwN0M0NDhG
Qzc1RTRCMDA0OUZFNTFBODU2QTI2OEFGRkVGNkJGM0REQjNDMjFEOUNFQ0VENjY5
NzkxMzc0ODRGNzYyN0I1QUI0M0EzRTUzRkZGODBFMTQ2OUI1OEI0MTdCNDcwNEM5
NkExQkZCOTM0QzIzQjA4OUNDQUIzNEFCOUYzN0ZENzdBNUQzNjMzN0QyM0NBQUE0
QTExRTRENTlGQzBGMkZBNTVCMUEwMDczODBDMUYzMTEzMjMwQzJEMTc4QkIyM0M3
OTE5ODhCOTY1NDJCMzc1MkQxQkUzMjUyNzFGNzgwMUE0MDEwNUQ0RUNDOUMwQzEy
QTAzMjJDODA0OTVCRjdFMENBMjIwQTI0QTgwMEI1M0Q3RjZDQkRGMjU4RTE4QzIy
RDIzRjRBQzdENTkwMEMxREYwRDcxRTlDODY0RTFCRTBFNDAzMUE3RjExN0REMzE4
NUI5NUJEMjk1RENCMjRCMjQxQzhGNjAxOTAwQ0Y5RjMwRTEwNUJGMjRERERGRjcy
OTRGRjdFM0VCNDc0NjI3NTlDQUZDMTMwRTkzODUwNTYwMzAxOUU5OEE3RjUzNTky
MDBBRkUwRjI4MEVEREQwMjAzMDEwMDAxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8A
MIIBCgKCAQEAsc8soJK9WO/Qiv8IYJMXfFxbUAIiO4sqas5GG3/AfESPx15LAEn+
UahWomiv/va/Pds8IdnOztZpeRN0hPdie1q0Oj5T//gOFGm1i0F7RwTJahv7k0wj
sInMqzSrnzf9d6XTYzfSPKqkoR5NWfwPL6VbGgBzgMHzETIwwtF4uyPHkZiLllQr
N1LRvjJScfeAGkAQXU7MnAwSoDIsgElb9+DKIgokqAC1PX9svfJY4Ywi0j9Kx9WQ
DB3w1x6chk4b4OQDGn8RfdMYW5W9KV3LJLJByPYBkAz58w4QW/JN3f9ylP9+PrR0
YnWcr8Ew6ThQVgMBnpin9TWSAK/g8oDt3QIDAQABo4ICNDCCAjAwHQYDVR0OBBYE
FKDEQeNdoJud3+l5dIifYWS8WwmyMB8GA1UdIwQYMBaAFKxVVEe6YsORB/Fr9XL4
KkF/co2/MA4GA1UdDwEB/wQEAwIHgDCBhQYDVR0fBH4wfDB6oHigdoZ0cnN5bmM6
Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMzk5M2YzNTAtYjc1Ni00OTE2LThk
ODQtNDg0ZjAyNWRmZmNjLzAvQUM1NTU0NDdCQTYyQzM5MTA3RjE2QkY1NzJGODJB
NDE3RjcyOERCRi5jcmwwdAYIKwYBBQUHAQEEaDBmMGQGCCsGAQUFBzAChlhyc3lu
YzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9JRE5JQy1JRC8yL0FDNTU1NDQ3
QkE2MkMzOTEwN0YxNkJGNTcyRjgyQTQxN0Y3MjhEQkYuY2VyMIGkBggrBgEFBQcB
CwSBlzCBlDCBkQYIKwYBBQUHMAuGgYRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5u
ZXQvcmVwby8zOTkzZjM1MC1iNzU2LTQ5MTYtOGQ4NC00ODRmMDI1ZGZmY2MvMC8z
MTMxMzcyZTMxMzAzMjJlMzEzMDMxMmUzMDJmMzIzNDJkMzIzNDIwM2QzZTIwMzEz
NzM0MzUzMS5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcB
BwEB/wQQMA4wDAQCAAEwBgMEAHVmZTANBgkqhkiG9w0BAQsFAAOCAQEAncnUtQZE
vAxgCIlqrH25VWD9CcnFoMMrzcgxSzcAjT4GMNLHgZ58NsyUcdlzMRRUNAgcsxMT
PY0i9yOr4oKKMcmR48Dwz8erVnJletAtcBTgo3WjgzY9y1ke8v7KTvTauHfRJN9O
owrwTBIi6ambtRrjgNENaCWP6tjGHMbg3cNN3zpXVJejQTnpbfLCBnIbSGPLwmFZ
WWwAcUFH77uPj6a+Kvh/mXc+ltNvb2NqL73oI9l+S4pqhNNADmlIAjLkNfQ2VCns
7ZNT1+vNVOuECGLHUeMtb7QEqzTnLSJKDMlKI1el4xt4AC91hBzTdQ3rNbZqbCvS
uvJiFa6K5CoWyw==
-----END CERTIFICATE-----