Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/3993f350-b756-4916-8d84-484f025dffcc/0/3131372e3130322e3131382e302f32342d3234203d3e203338343832.roa
File:                     3131372e3130322e3131382e302f32342d3234203d3e203338343832.roa (raw, json)
Hash identifier:          8n6nB8HEuPTC5TIBuSDlPBvsCAW1BSGeo2TvHm/6OmA=
Subject key identifier:   0F:8C:55:3B:88:73:F2:70:C1:EE:B8:23:12:86:1B:C7:86:D8:47:EB
Certificate issuer:       /CN=AC555447BA62C39107F16BF572F82A417F728DBF
Certificate serial:       6A26B2EA99DF388155517D00B6D658EC8A843CFD
Authority key identifier: AC:55:54:47:BA:62:C3:91:07:F1:6B:F5:72:F8:2A:41:7F:72:8D:BF
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AC555447BA62C39107F16BF572F82A417F728DBF.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/3993f350-b756-4916-8d84-484f025dffcc/0/3131372e3130322e3131382e302f32342d3234203d3e203338343832.roa
Signing time:             Mon 03 Jan 2022 05:31:47 +0000
ROA not before:           Mon 03 Jan 2022 05:26:47 +0000
ROA not after:            Tue 03 Jan 2023 05:31:47 +0000
asID:                     38482
IP address blocks:        117.102.118.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6a:26:b2:ea:99:df:38:81:55:51:7d:00:b6:d6:58:ec:8a:84:3c:fd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AC555447BA62C39107F16BF572F82A417F728DBF
        Validity
            Not Before: Jan  3 05:26:47 2022 GMT
            Not After : Jan  3 05:31:47 2023 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:e9:5e:11:51:ba:da:1a:2e:bb:86:a7:6c:f3:
                    53:25:56:a5:d8:7f:10:fd:26:4c:c4:bc:cf:47:f6:
                    77:3c:e2:b0:91:d5:16:06:5b:a1:65:de:df:d6:d3:
                    3b:f1:15:79:0e:e3:58:df:1c:9b:12:e9:3c:a7:92:
                    dd:89:3a:b5:d8:4b:e1:a3:03:e9:f8:2d:95:c7:c5:
                    50:40:8c:5c:06:af:ac:fb:cf:bb:df:32:06:ef:72:
                    77:09:a5:2d:fb:fd:6c:1b:a1:c7:a5:93:a1:96:1a:
                    ac:f8:16:71:64:c7:d4:fb:fb:bc:40:5b:4d:0c:0a:
                    39:7b:33:38:bf:5f:d1:4e:51:96:da:d7:e7:0b:af:
                    65:02:11:ca:dc:de:21:b8:96:04:9c:bb:bd:8b:bc:
                    44:00:6a:c0:db:eb:87:b8:a3:72:47:5b:62:76:a6:
                    fa:33:87:a8:8a:23:17:eb:e9:86:92:30:0d:3f:18:
                    7e:f5:a4:2b:a8:89:17:25:6b:ab:f7:b2:b7:41:36:
                    e5:b3:b9:59:c3:55:26:cc:9b:22:78:21:59:14:d0:
                    70:d1:24:e2:be:43:72:6d:55:2f:3f:06:29:96:13:
                    06:2f:7a:d1:9b:c0:ce:91:f7:3a:aa:d1:1b:c6:66:
                    2a:27:95:86:f5:05:ad:62:94:81:17:a3:e4:f9:f5:
                    6d:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0F:8C:55:3B:88:73:F2:70:C1:EE:B8:23:12:86:1B:C7:86:D8:47:EB
            X509v3 Authority Key Identifier:
                keyid:AC:55:54:47:BA:62:C3:91:07:F1:6B:F5:72:F8:2A:41:7F:72:8D:BF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/3993f350-b756-4916-8d84-484f025dffcc/0/AC555447BA62C39107F16BF572F82A417F728DBF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AC555447BA62C39107F16BF572F82A417F728DBF.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/3993f350-b756-4916-8d84-484f025dffcc/0/3131372e3130322e3131382e302f32342d3234203d3e203338343832.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  117.102.118.0/24

    Signature Algorithm: sha256WithRSAEncryption
         40:66:5f:37:76:10:75:12:09:13:65:e8:af:40:7e:15:dd:e2:
         60:5a:ce:ca:55:60:c3:3e:da:8f:14:a8:42:e9:1c:a9:81:66:
         37:56:43:21:9f:f3:f9:a8:42:4c:87:d8:5e:cc:1e:98:9d:27:
         c0:06:5f:37:95:a3:50:7c:81:8c:4f:5c:6d:e9:8b:2b:ef:8c:
         17:a5:c8:b3:e8:66:41:23:7c:9e:4f:46:19:5a:8b:db:70:a0:
         e1:54:22:d3:f0:b6:61:26:b1:9e:ce:d9:78:8d:62:f4:ab:ba:
         e6:8f:8b:26:09:d5:d4:bf:62:9c:ea:cd:b2:7e:e8:45:9b:fb:
         b7:34:c4:7a:64:a0:6e:f4:0b:56:8b:94:59:51:73:7e:64:13:
         30:ab:94:43:cc:2b:cd:b6:f3:14:98:d7:45:30:59:19:f8:16:
         b1:b4:88:08:6d:b3:c6:16:f9:a4:cc:38:92:f6:73:81:05:f7:
         84:b4:46:82:19:6a:18:6e:40:69:c5:45:87:d0:ea:54:39:9f:
         33:3a:32:5d:48:87:77:37:d3:8c:b2:8c:43:5d:f3:d3:3d:ab:
         05:a1:62:db:c8:08:ce:eb:15:fe:05:17:15:bf:b8:24:38:44:
         e2:a1:0d:0c:7c:c7:a0:ce:c3:3e:84:f2:1c:6e:60:ba:91:09:
         ee:eb:56:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----