Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/3993f350-b756-4916-8d84-484f025dffcc/0/3131372e3130322e3130382e302f32342d3234203d3e203137343531.roa
File:                     3131372e3130322e3130382e302f32342d3234203d3e203137343531.roa (raw, json)
Hash identifier:          w2Lc4h2LQ657BUEl8W4XteHqAWasW49cdPrcooHaSTg=
Subject key identifier:   ED:6C:2B:A5:83:19:6D:21:6D:45:E6:02:93:3A:EC:C4:8E:07:7D:DF
Certificate issuer:       /CN=AC555447BA62C39107F16BF572F82A417F728DBF
Certificate serial:       169742088D0503A8749B6CAFCEF685D55EA044C7
Authority key identifier: AC:55:54:47:BA:62:C3:91:07:F1:6B:F5:72:F8:2A:41:7F:72:8D:BF
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AC555447BA62C39107F16BF572F82A417F728DBF.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/3993f350-b756-4916-8d84-484f025dffcc/0/3131372e3130322e3130382e302f32342d3234203d3e203137343531.roa
Signing time:             Thu 30 Sep 2021 00:01:19 +0000
ROA not before:           Wed 29 Sep 2021 23:56:19 +0000
ROA not after:            Fri 30 Sep 2022 00:01:19 +0000
asID:                     17451
IP address blocks:        117.102.108.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            16:97:42:08:8d:05:03:a8:74:9b:6c:af:ce:f6:85:d5:5e:a0:44:c7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AC555447BA62C39107F16BF572F82A417F728DBF
        Validity
            Not Before: Sep 29 23:56:19 2021 GMT
            Not After : Sep 30 00:01:19 2022 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:9d:e1:5b:29:62:92:03:ff:12:01:7e:73:4d:
                    02:10:40:12:91:0f:d7:d4:9b:07:bf:0e:a9:36:8b:
                    de:62:5f:65:0d:38:af:2b:ec:ea:b9:d1:af:39:1a:
                    86:2a:67:cb:72:2d:09:68:bf:cb:fb:99:0f:01:79:
                    c1:ff:c1:ef:55:fb:1c:60:cd:95:75:c5:44:8c:38:
                    30:d4:e7:a2:5c:20:c0:37:65:2f:e9:97:b3:56:d8:
                    a6:7b:84:c5:0f:c7:1b:2a:8b:22:dd:83:55:ae:69:
                    90:c3:3c:1e:02:a9:2d:d2:e3:85:7c:e3:bc:07:6c:
                    c7:ad:26:5e:7d:b4:74:19:d6:94:5c:78:e1:11:0c:
                    19:1f:15:2c:48:ec:2b:43:ea:65:d7:45:69:b8:d0:
                    eb:db:ff:9c:29:22:d2:a4:23:62:f5:a8:78:aa:1d:
                    eb:14:5b:60:c3:45:1d:7c:01:9e:cc:f6:0b:08:9c:
                    0f:1c:6c:76:0d:33:45:77:63:e2:de:54:00:2b:61:
                    9b:47:42:94:22:6c:f1:ef:48:53:69:1f:f0:45:c2:
                    43:be:e7:91:6b:c1:ff:d5:18:d2:9d:aa:20:b9:28:
                    38:5b:33:2b:11:a1:a4:95:64:f8:50:1c:96:6a:f2:
                    41:b4:e5:e4:89:1d:e0:be:79:b5:c9:d6:7a:70:d9:
                    4b:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                ED:6C:2B:A5:83:19:6D:21:6D:45:E6:02:93:3A:EC:C4:8E:07:7D:DF
            X509v3 Authority Key Identifier:
                keyid:AC:55:54:47:BA:62:C3:91:07:F1:6B:F5:72:F8:2A:41:7F:72:8D:BF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/3993f350-b756-4916-8d84-484f025dffcc/0/AC555447BA62C39107F16BF572F82A417F728DBF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AC555447BA62C39107F16BF572F82A417F728DBF.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/3993f350-b756-4916-8d84-484f025dffcc/0/3131372e3130322e3130382e302f32342d3234203d3e203137343531.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  117.102.108.0/24

    Signature Algorithm: sha256WithRSAEncryption
         9c:9d:44:41:5f:66:6b:49:7e:10:68:0d:d4:35:2a:56:cb:a4:
         cf:7c:3c:46:31:a1:e8:95:b9:0b:c9:8d:aa:17:98:e2:2e:5b:
         18:9c:38:e6:ac:c9:c9:4b:33:88:e7:ff:c6:6f:74:bd:ae:32:
         17:39:de:50:43:fb:16:e4:01:e8:df:69:3d:45:91:20:16:ba:
         01:6f:c5:8a:28:06:f7:f4:80:c5:51:b3:d5:46:d0:03:16:da:
         49:0e:2d:63:ba:8d:e4:20:08:77:e7:45:62:cd:0a:25:e4:e1:
         2c:df:71:78:d8:51:ab:c3:37:5b:fa:46:ae:05:a8:b3:4b:67:
         b4:b9:38:71:e7:09:ae:79:77:23:7c:a2:3f:1a:8b:5d:d6:a0:
         f1:3b:10:e6:c9:6a:18:47:c1:80:14:4b:bc:c6:66:66:b1:93:
         54:bd:fc:f7:15:e9:3f:1f:fa:34:fb:6a:b6:c5:8f:5e:b0:a3:
         25:f6:43:f9:aa:c7:a2:8d:48:74:d1:5f:0a:86:92:88:0d:af:
         f3:f9:df:db:cb:3a:cc:d7:99:f4:8f:53:46:e4:6d:a6:5f:bd:
         56:6e:3c:59:a7:0b:49:2e:c0:7c:d8:f7:b0:13:1f:bf:06:18:
         b0:3f:4e:c5:fe:ec:59:0e:37:d5:a1:2b:ab:30:31:61:35:40:
         14:58:dd:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----