Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/3993f350-b756-4916-8d84-484f025dffcc/0/3131372e3130322e3131342e302f32342d3234203d3e203338343832.roa
File:                     3131372e3130322e3131342e302f32342d3234203d3e203338343832.roa (raw, json)
Hash identifier:          dCHVxD1gApZ4G10UorDn3OywKOGlKPcQLn7aVuuz+3k=
Subject key identifier:   DE:E1:FB:0D:C8:89:19:6B:6D:1D:A9:B8:96:96:1D:01:34:E4:54:7D
Certificate issuer:       /CN=AC555447BA62C39107F16BF572F82A417F728DBF
Certificate serial:       081D6C67938824C5738698B1EF5F157B51F0A32E
Authority key identifier: AC:55:54:47:BA:62:C3:91:07:F1:6B:F5:72:F8:2A:41:7F:72:8D:BF
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AC555447BA62C39107F16BF572F82A417F728DBF.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/3993f350-b756-4916-8d84-484f025dffcc/0/3131372e3130322e3131342e302f32342d3234203d3e203338343832.roa
Signing time:             Wed 23 Feb 2022 04:32:18 +0000
ROA not before:           Wed 23 Feb 2022 04:27:18 +0000
ROA not after:            Thu 23 Feb 2023 04:32:18 +0000
asID:                     38482
IP address blocks:        117.102.114.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            08:1d:6c:67:93:88:24:c5:73:86:98:b1:ef:5f:15:7b:51:f0:a3:2e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AC555447BA62C39107F16BF572F82A417F728DBF
        Validity
            Not Before: Feb 23 04:27:18 2022 GMT
            Not After : Feb 23 04:32:18 2023 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:09:6d:0c:19:84:e0:90:96:01:f7:94:2f:7a:
                    9a:d7:eb:c1:4c:bb:77:d9:99:38:2a:92:f4:53:3f:
                    21:f4:d9:ed:13:5e:0b:1e:8b:85:81:22:56:90:ec:
                    94:be:17:3e:91:68:86:d3:4d:f7:55:44:4d:a2:5a:
                    af:fc:11:31:e9:a4:15:cb:7e:30:dd:8e:fc:92:91:
                    37:63:4b:b2:ad:55:da:6e:3e:68:d9:a2:cb:b2:4e:
                    11:0e:58:fc:71:48:32:19:34:10:d9:a8:49:89:f3:
                    6d:da:a0:98:e5:cf:0e:4a:84:8e:d2:15:77:c6:43:
                    73:db:76:f1:88:3f:9f:8a:da:69:12:1c:01:0e:cc:
                    c6:d9:a0:e9:2d:04:be:8c:55:13:60:ca:40:19:7f:
                    c2:8f:57:00:99:35:11:ec:67:8e:fb:c5:69:e6:89:
                    68:29:98:d5:dd:6a:ac:4b:37:75:bf:b6:26:c2:7d:
                    8b:ab:57:6a:59:57:f0:d1:69:b1:78:a2:0c:d0:a1:
                    de:88:86:da:fe:a0:99:6a:76:26:68:1f:f8:00:86:
                    9d:9b:67:76:01:23:c0:42:64:ff:94:3e:85:c1:f7:
                    02:cf:79:9b:52:da:8e:34:93:0d:3f:74:0a:1f:3f:
                    f4:92:6c:99:ea:fb:e2:cf:03:79:c6:7b:4a:fa:f8:
                    bb:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DE:E1:FB:0D:C8:89:19:6B:6D:1D:A9:B8:96:96:1D:01:34:E4:54:7D
            X509v3 Authority Key Identifier:
                keyid:AC:55:54:47:BA:62:C3:91:07:F1:6B:F5:72:F8:2A:41:7F:72:8D:BF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/3993f350-b756-4916-8d84-484f025dffcc/0/AC555447BA62C39107F16BF572F82A417F728DBF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AC555447BA62C39107F16BF572F82A417F728DBF.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/3993f350-b756-4916-8d84-484f025dffcc/0/3131372e3130322e3131342e302f32342d3234203d3e203338343832.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  117.102.114.0/24

    Signature Algorithm: sha256WithRSAEncryption
         7c:e1:30:83:bf:2f:9d:bf:21:03:e7:22:bf:04:3a:10:f3:84:
         2a:71:0f:63:c6:89:82:1f:25:f4:2a:b5:6c:b1:31:49:86:84:
         20:60:89:1c:2a:fd:92:d6:74:70:6d:58:91:0d:e0:fa:44:97:
         7f:bd:64:8f:5d:19:da:c8:a6:e3:16:ab:c3:18:09:ca:ea:a4:
         4b:8e:bd:2a:90:02:23:07:a9:7c:bd:6c:0c:fd:86:49:bb:6e:
         9a:15:95:c8:35:47:fa:b8:db:a1:f1:97:9e:21:a9:66:1f:01:
         8e:70:6b:4d:fd:66:e6:98:2c:a4:3b:6d:f7:20:7c:a4:77:a9:
         49:44:fd:8d:a3:8e:e6:5b:a4:42:97:4a:02:63:ce:8c:bd:4a:
         a9:81:b4:b3:fa:01:9f:7c:39:67:f4:a4:54:99:b4:e2:12:de:
         34:ff:ec:39:14:61:09:ad:3b:87:3b:2e:3e:eb:8b:cd:6f:61:
         70:5c:a4:a0:bd:83:1d:10:97:bf:20:ba:45:4d:56:4a:03:2c:
         36:f0:8f:d4:4d:12:2c:e7:ee:5e:3c:f5:5b:4e:22:e7:df:84:
         af:95:52:24:68:ad:5d:83:b4:88:38:f2:2d:21:1f:75:3c:13:
         19:b8:59:18:4a:46:dc:15:22:1e:4f:00:a4:c7:76:50:6f:d1:
         77:4e:4f:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----