Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/3993f350-b756-4916-8d84-484f025dffcc/0/3131372e3130322e3132342e302f32342d3234203d3e203137343531.roa
File:                     3131372e3130322e3132342e302f32342d3234203d3e203137343531.roa (raw, json)
Hash identifier:          LCGmdDeo4HEA2nlgNLxJnwlykFylbRXJqDbNXh3m/QU=
Subject key identifier:   EC:0B:5F:90:61:E5:AE:E2:76:B1:F1:DE:4A:4B:2C:40:AE:B9:D8:80
Certificate issuer:       /CN=AC555447BA62C39107F16BF572F82A417F728DBF
Certificate serial:       637CB6A9888A0A186092E0B0313057A6DCC229B4
Authority key identifier: AC:55:54:47:BA:62:C3:91:07:F1:6B:F5:72:F8:2A:41:7F:72:8D:BF
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AC555447BA62C39107F16BF572F82A417F728DBF.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/3993f350-b756-4916-8d84-484f025dffcc/0/3131372e3130322e3132342e302f32342d3234203d3e203137343531.roa
Signing time:             Thu 30 Sep 2021 00:00:25 +0000
ROA not before:           Wed 29 Sep 2021 23:55:25 +0000
ROA not after:            Fri 30 Sep 2022 00:00:25 +0000
asID:                     17451
IP address blocks:        117.102.124.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            63:7c:b6:a9:88:8a:0a:18:60:92:e0:b0:31:30:57:a6:dc:c2:29:b4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AC555447BA62C39107F16BF572F82A417F728DBF
        Validity
            Not Before: Sep 29 23:55:25 2021 GMT
            Not After : Sep 30 00:00:25 2022 GMT
        Subject: CN=3082010A0282010100DB121B685AEE5F6F67325AED3933F62DAB6C33888AE28167802AF6A6F396005590F5E240F6608117D1C4BEDE8B787219F8C940CDEE1B1AC75FF0C2D9C1A809503A6788506A578B9B91B65BCBBA37AA22A3CEDA01DD1125F67CD24E195F89C74491D4CAEC0EAF1E3085A13B9019BB5D83DE899DB7930A4BBC051E12C86A2C5FA9FCBD8D178E17CF64097A887647FF89CC0400BE9F1A0B7C013B1B98D0A52F4C7E74B948115B17BB6BEBEDA42D712FF4FD7EF7FB79DE7E069A504D6F476DD700B8253C341381E00CF0BE6669B08BBFF43097B36E0C1E95F1A69309B3340906333283171FAACACBFC53AC53AC665C4906A7C827C5A4F6299CF69E2F12246E98294B0203010001
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:12:1b:68:5a:ee:5f:6f:67:32:5a:ed:39:33:
                    f6:2d:ab:6c:33:88:8a:e2:81:67:80:2a:f6:a6:f3:
                    96:00:55:90:f5:e2:40:f6:60:81:17:d1:c4:be:de:
                    8b:78:72:19:f8:c9:40:cd:ee:1b:1a:c7:5f:f0:c2:
                    d9:c1:a8:09:50:3a:67:88:50:6a:57:8b:9b:91:b6:
                    5b:cb:ba:37:aa:22:a3:ce:da:01:dd:11:25:f6:7c:
                    d2:4e:19:5f:89:c7:44:91:d4:ca:ec:0e:af:1e:30:
                    85:a1:3b:90:19:bb:5d:83:de:89:9d:b7:93:0a:4b:
                    bc:05:1e:12:c8:6a:2c:5f:a9:fc:bd:8d:17:8e:17:
                    cf:64:09:7a:88:76:47:ff:89:cc:04:00:be:9f:1a:
                    0b:7c:01:3b:1b:98:d0:a5:2f:4c:7e:74:b9:48:11:
                    5b:17:bb:6b:eb:ed:a4:2d:71:2f:f4:fd:7e:f7:fb:
                    79:de:7e:06:9a:50:4d:6f:47:6d:d7:00:b8:25:3c:
                    34:13:81:e0:0c:f0:be:66:69:b0:8b:bf:f4:30:97:
                    b3:6e:0c:1e:95:f1:a6:93:09:b3:34:09:06:33:32:
                    83:17:1f:aa:ca:cb:fc:53:ac:53:ac:66:5c:49:06:
                    a7:c8:27:c5:a4:f6:29:9c:f6:9e:2f:12:24:6e:98:
                    29:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EC:0B:5F:90:61:E5:AE:E2:76:B1:F1:DE:4A:4B:2C:40:AE:B9:D8:80
            X509v3 Authority Key Identifier:
                keyid:AC:55:54:47:BA:62:C3:91:07:F1:6B:F5:72:F8:2A:41:7F:72:8D:BF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/3993f350-b756-4916-8d84-484f025dffcc/0/AC555447BA62C39107F16BF572F82A417F728DBF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AC555447BA62C39107F16BF572F82A417F728DBF.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/3993f350-b756-4916-8d84-484f025dffcc/0/3131372e3130322e3132342e302f32342d3234203d3e203137343531.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  117.102.124.0/24

    Signature Algorithm: sha256WithRSAEncryption
         72:fa:e6:8f:84:65:33:66:5d:7f:2f:59:cd:69:59:a2:ae:95:
         a2:a9:e9:cb:10:01:91:02:29:d4:e6:29:e1:3c:1d:bd:24:04:
         e2:7c:68:1c:9a:6d:e8:11:56:cb:1b:71:46:37:c7:aa:ed:80:
         56:81:ca:fc:b4:37:0e:51:8e:a3:14:b6:75:83:09:d3:c2:01:
         0a:e9:23:3c:28:69:e2:b2:06:50:6a:d4:2a:d8:da:45:f5:b1:
         ba:4c:f1:68:c0:80:b3:71:08:86:0f:38:61:fb:b2:3f:bd:1a:
         2a:39:90:6c:db:fc:46:64:f1:76:00:9c:c2:16:b1:36:12:f0:
         33:39:62:0d:e1:68:cf:57:dc:44:5f:98:57:f9:ff:5c:a1:40:
         57:19:3e:00:6e:29:91:1d:68:1a:03:a7:f4:6b:09:bb:d1:5f:
         1f:80:5e:55:d1:0b:47:a1:df:48:0f:00:31:f7:39:1d:a2:c3:
         c9:50:e4:29:ef:80:ff:de:4b:18:7e:b1:e6:5a:23:97:80:78:
         ac:f4:a4:99:16:55:be:8d:2f:81:43:77:e3:3f:e8:ec:31:31:
         46:91:18:64:b2:6b:13:4c:cd:a6:2f:02:55:6c:e3:a0:3c:dd:
         a6:3e:44:15:52:03:23:56:0b:ea:a4:95:19:92:a6:b7:79:fb:
         3f:1a:d2:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----