Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/3993f350-b756-4916-8d84-484f025dffcc/0/3131372e3130322e3130322e302f32342d3234203d3e203338343832.roa
File:                     3131372e3130322e3130322e302f32342d3234203d3e203338343832.roa (raw, json)
Hash identifier:          tRdFTo07NYBxXxKQKDLurNiRj02+Gz7D68afI+54Dzg=
Subject key identifier:   2B:CD:C8:CC:3C:53:5D:B5:67:7A:02:FB:31:14:19:DF:A4:47:12:66
Certificate issuer:       /CN=AC555447BA62C39107F16BF572F82A417F728DBF
Certificate serial:       6666DF32E28412DC93AA3E674B9B455ADD81DC1D
Authority key identifier: AC:55:54:47:BA:62:C3:91:07:F1:6B:F5:72:F8:2A:41:7F:72:8D:BF
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AC555447BA62C39107F16BF572F82A417F728DBF.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/3993f350-b756-4916-8d84-484f025dffcc/0/3131372e3130322e3130322e302f32342d3234203d3e203338343832.roa
Signing time:             Mon 24 Jan 2022 03:41:30 +0000
ROA not before:           Mon 24 Jan 2022 03:36:30 +0000
ROA not after:            Tue 24 Jan 2023 03:41:30 +0000
asID:                     38482
IP address blocks:        117.102.102.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            66:66:df:32:e2:84:12:dc:93:aa:3e:67:4b:9b:45:5a:dd:81:dc:1d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AC555447BA62C39107F16BF572F82A417F728DBF
        Validity
            Not Before: Jan 24 03:36:30 2022 GMT
            Not After : Jan 24 03:41:30 2023 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:2a:c4:49:a0:e1:d5:c5:2c:16:41:9e:dd:48:
                    25:30:44:d5:e1:fe:fc:e5:c0:12:06:2e:bd:b9:5f:
                    71:2f:a2:5a:29:bc:54:7b:40:0d:18:f9:e2:c7:a7:
                    82:17:e1:b0:47:ff:b8:31:83:99:40:08:85:b5:3c:
                    65:a8:f0:d7:83:89:a6:64:fb:80:32:02:42:b6:ae:
                    75:19:9a:36:48:f4:df:ff:f7:9f:9f:8e:4a:f9:24:
                    ea:3d:0d:52:6f:ae:22:7d:bd:92:37:b8:ec:ba:15:
                    b8:09:fe:a9:c9:c3:81:c2:6a:ed:12:4d:3e:03:a7:
                    bc:87:70:37:0d:33:0d:2e:ed:45:d4:60:29:38:12:
                    08:6a:16:5a:e1:92:a9:a7:aa:91:00:ef:2b:ce:3d:
                    20:01:14:8f:4b:fd:5d:b0:01:cd:db:fd:ca:3e:f0:
                    9f:1b:ba:54:3c:db:d7:0a:3e:2b:3f:5b:7b:b1:99:
                    41:52:18:2e:9b:85:29:be:0f:ef:5f:96:3e:62:f8:
                    ee:73:cb:05:7c:bd:dc:ac:d8:ef:6e:0c:23:47:4c:
                    c4:2f:d3:e7:19:e1:bf:37:d9:f4:9e:ca:fb:9b:f4:
                    0c:e7:df:93:ca:65:dc:f6:f1:44:35:b4:4a:b7:0f:
                    2a:78:1b:08:f6:b0:c6:a4:84:ac:61:19:c9:98:02:
                    0c:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2B:CD:C8:CC:3C:53:5D:B5:67:7A:02:FB:31:14:19:DF:A4:47:12:66
            X509v3 Authority Key Identifier:
                keyid:AC:55:54:47:BA:62:C3:91:07:F1:6B:F5:72:F8:2A:41:7F:72:8D:BF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/3993f350-b756-4916-8d84-484f025dffcc/0/AC555447BA62C39107F16BF572F82A417F728DBF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AC555447BA62C39107F16BF572F82A417F728DBF.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/3993f350-b756-4916-8d84-484f025dffcc/0/3131372e3130322e3130322e302f32342d3234203d3e203338343832.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  117.102.102.0/24

    Signature Algorithm: sha256WithRSAEncryption
         09:0d:90:14:30:f2:af:34:68:be:a4:35:eb:35:76:b3:48:60:
         08:5a:4d:cb:c3:8f:5f:bb:3f:6b:bf:4e:bc:1f:c5:76:2a:9a:
         0b:ca:30:3e:65:a2:12:82:81:cc:a6:59:dd:b0:aa:04:99:a6:
         35:e5:33:e6:01:0e:e1:cc:00:8e:13:1b:39:17:98:22:7f:21:
         1b:fd:0d:4f:53:3d:53:b1:36:a3:80:93:6d:d6:92:5e:8f:18:
         14:f8:f2:93:3a:27:ab:22:81:b7:64:7a:8a:ee:e8:29:1e:19:
         72:1c:96:9c:83:52:95:b0:73:aa:a0:12:de:ac:8a:0a:32:63:
         77:2f:8e:a4:02:dd:de:e0:0f:58:c7:9e:98:66:0a:52:8e:59:
         47:43:e4:14:8f:e9:d4:cd:7e:da:ed:b0:4b:95:5b:7d:df:a6:
         de:60:fd:39:fc:03:d5:80:8e:84:bf:54:3b:d3:7a:1c:2c:dc:
         81:d7:e4:96:b9:4d:2c:3a:18:9c:64:25:01:a3:81:d7:75:4d:
         68:97:91:cd:c5:26:08:42:5b:0c:a9:b5:fc:b3:b7:02:03:52:
         38:75:85:97:47:1b:33:fe:cf:6c:f2:32:d2:17:65:a2:55:9e:
         c2:b3:f1:c4:c2:cd:07:db:ec:af:b9:cb:6b:ac:2d:b0:00:61:
         05:24:e7:80
-----BEGIN CERTIFICATE-----
MIIHJjCCBg6gAwIBAgIUZmbfMuKEEtyTqj5nS5tFWt2B3B0wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQUM1NTU0NDdCQTYyQzM5MTA3RjE2QkY1NzJGODJBNDE3
RjcyOERCRjAeFw0yMjAxMjQwMzM2MzBaFw0yMzAxMjQwMzQxMzBaMIICLTGCAikw
ggIlBgNVBAMTggIcMzA4MjAxMEEwMjgyMDEwMTAwQTYyQUM0NDlBMEUxRDVDNTJD
MTY0MTlFREQ0ODI1MzA0NEQ1RTFGRUZDRTVDMDEyMDYyRUJEQjk1RjcxMkZBMjVB
MjlCQzU0N0I0MDBEMThGOUUyQzdBNzgyMTdFMUIwNDdGRkI4MzE4Mzk5NDAwODg1
QjUzQzY1QThGMEQ3ODM4OUE2NjRGQjgwMzIwMjQyQjZBRTc1MTk5QTM2NDhGNERG
RkZGNzlGOUY4RTRBRjkyNEVBM0QwRDUyNkZBRTIyN0RCRDkyMzdCOEVDQkExNUI4
MDlGRUE5QzlDMzgxQzI2QUVEMTI0RDNFMDNBN0JDODc3MDM3MEQzMzBEMkVFRDQ1
RDQ2MDI5MzgxMjA4NkExNjVBRTE5MkE5QTdBQTkxMDBFRjJCQ0UzRDIwMDExNDhG
NEJGRDVEQjAwMUNEREJGRENBM0VGMDlGMUJCQTU0M0NEQkQ3MEEzRTJCM0Y1QjdC
QjE5OTQxNTIxODJFOUI4NTI5QkUwRkVGNUY5NjNFNjJGOEVFNzNDQjA1N0NCRERD
QUNEOEVGNkUwQzIzNDc0Q0M0MkZEM0U3MTlFMUJGMzdEOUY0OUVDQUZCOUJGNDBD
RTdERjkzQ0E2NURDRjZGMTQ0MzVCNDRBQjcwRjJBNzgxQjA4RjZCMEM2QTQ4NEFD
NjExOUM5OTgwMjBDQ0YwMjAzMDEwMDAxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8A
MIIBCgKCAQEApirESaDh1cUsFkGe3UglMETV4f785cASBi69uV9xL6JaKbxUe0AN
GPnix6eCF+GwR/+4MYOZQAiFtTxlqPDXg4mmZPuAMgJCtq51GZo2SPTf//efn45K
+STqPQ1Sb64ifb2SN7jsuhW4Cf6pycOBwmrtEk0+A6e8h3A3DTMNLu1F1GApOBII
ahZa4ZKpp6qRAO8rzj0gARSPS/1dsAHN2/3KPvCfG7pUPNvXCj4rP1t7sZlBUhgu
m4Upvg/vX5Y+Yvjuc8sFfL3crNjvbgwjR0zEL9PnGeG/N9n0nsr7m/QM59+TymXc
9vFENbRKtw8qeBsI9rDGpISsYRnJmAIMzwIDAQABo4ICNDCCAjAwHQYDVR0OBBYE
FCvNyMw8U121Z3oC+zEUGd+kRxJmMB8GA1UdIwQYMBaAFKxVVEe6YsORB/Fr9XL4
KkF/co2/MA4GA1UdDwEB/wQEAwIHgDCBhQYDVR0fBH4wfDB6oHigdoZ0cnN5bmM6
Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMzk5M2YzNTAtYjc1Ni00OTE2LThk
ODQtNDg0ZjAyNWRmZmNjLzAvQUM1NTU0NDdCQTYyQzM5MTA3RjE2QkY1NzJGODJB
NDE3RjcyOERCRi5jcmwwdAYIKwYBBQUHAQEEaDBmMGQGCCsGAQUFBzAChlhyc3lu
YzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9JRE5JQy1JRC8yL0FDNTU1NDQ3
QkE2MkMzOTEwN0YxNkJGNTcyRjgyQTQxN0Y3MjhEQkYuY2VyMIGkBggrBgEFBQcB
CwSBlzCBlDCBkQYIKwYBBQUHMAuGgYRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5u
ZXQvcmVwby8zOTkzZjM1MC1iNzU2LTQ5MTYtOGQ4NC00ODRmMDI1ZGZmY2MvMC8z
MTMxMzcyZTMxMzAzMjJlMzEzMDMyMmUzMDJmMzIzNDJkMzIzNDIwM2QzZTIwMzMz
ODM0MzgzMi5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcB
BwEB/wQQMA4wDAQCAAEwBgMEAHVmZjANBgkqhkiG9w0BAQsFAAOCAQEACQ2QFDDy
rzRovqQ16zV2s0hgCFpNy8OPX7s/a79OvB/FdiqaC8owPmWiEoKBzKZZ3bCqBJmm
NeUz5gEO4cwAjhMbOReYIn8hG/0NT1M9U7E2o4CTbdaSXo8YFPjykzonqyKBt2R6
iu7oKR4ZchyWnINSlbBzqqAS3qyKCjJjdy+OpALd3uAPWMeemGYKUo5ZR0PkFI/p
1M1+2u2wS5Vbfd+m3mD9OfwD1YCOhL9UO9N6HCzcgdfklrlNLDoYnGQlAaOB13VN
aJeRzcUmCEJbDKm1/LO3AgNSOHWFl0cbM/7PbPIy0hdlolWewrPxxMLNB9vsr7nL
a6wtsABhBSTngA==
-----END CERTIFICATE-----