Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/3993f350-b756-4916-8d84-484f025dffcc/0/3131372e3130322e38302e302f32342d3234203d3e203338343832.roa
File:                     3131372e3130322e38302e302f32342d3234203d3e203338343832.roa (raw, json)
Hash identifier:          F5Vsz7m5khbIqLhpyK97t8dICxFh/rzmFYY/qLUjkfk=
Subject key identifier:   EC:75:56:59:43:F2:4D:C5:ED:6E:8A:7E:6B:7B:89:0D:62:44:85:F5
Certificate issuer:       /CN=AC555447BA62C39107F16BF572F82A417F728DBF
Certificate serial:       3A2F1A8ADECD9898C2DE3455ACE4FE2603FFA364
Authority key identifier: AC:55:54:47:BA:62:C3:91:07:F1:6B:F5:72:F8:2A:41:7F:72:8D:BF
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AC555447BA62C39107F16BF572F82A417F728DBF.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/3993f350-b756-4916-8d84-484f025dffcc/0/3131372e3130322e38302e302f32342d3234203d3e203338343832.roa
Signing time:             Tue 01 Mar 2022 05:17:59 +0000
ROA not before:           Tue 01 Mar 2022 05:12:59 +0000
ROA not after:            Wed 01 Mar 2023 05:17:59 +0000
asID:                     38482
IP address blocks:        117.102.80.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3a:2f:1a:8a:de:cd:98:98:c2:de:34:55:ac:e4:fe:26:03:ff:a3:64
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AC555447BA62C39107F16BF572F82A417F728DBF
        Validity
            Not Before: Mar  1 05:12:59 2022 GMT
            Not After : Mar  1 05:17:59 2023 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:29:f6:1b:f5:26:f0:8c:fd:15:8f:55:d7:72:
                    49:89:7a:a2:f3:63:d3:12:22:f6:e0:1b:89:1c:b2:
                    69:97:5f:10:3a:16:be:92:0c:a5:ec:2a:29:25:e7:
                    18:0e:be:18:fc:3a:43:29:75:f2:eb:a9:39:a9:ff:
                    27:27:10:a9:9e:c8:2b:5b:6c:72:52:02:9d:f9:ca:
                    3f:50:5f:37:49:27:4b:ec:b1:ef:e5:f2:7e:44:d8:
                    89:39:eb:6b:3f:0e:56:77:1d:7e:4b:cf:a0:8b:61:
                    1b:f7:e4:00:9a:15:d1:ea:95:25:68:46:37:9a:98:
                    d1:22:23:8a:d6:6d:5a:d7:34:92:31:0b:0a:71:88:
                    4c:2a:71:52:23:7a:3b:99:5c:d7:8e:a3:c7:15:de:
                    c9:a1:2c:6b:c9:f9:4e:72:c8:16:2b:ea:4a:e0:2f:
                    f8:9f:48:e7:a4:a2:0c:ef:09:cb:92:a5:74:c8:dd:
                    f7:c5:25:e8:fb:54:32:67:e3:63:a5:90:fa:34:82:
                    0d:68:08:b4:b1:25:54:df:cb:71:a1:bb:bb:83:de:
                    e1:36:e0:2e:47:16:a4:f6:be:95:2d:f7:24:70:49:
                    19:28:ac:7e:0a:df:2c:aa:43:76:b9:b9:fb:e2:db:
                    cc:43:b8:e0:e5:4f:ad:57:ba:d1:0a:b1:6b:f5:c2:
                    3a:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EC:75:56:59:43:F2:4D:C5:ED:6E:8A:7E:6B:7B:89:0D:62:44:85:F5
            X509v3 Authority Key Identifier:
                keyid:AC:55:54:47:BA:62:C3:91:07:F1:6B:F5:72:F8:2A:41:7F:72:8D:BF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/3993f350-b756-4916-8d84-484f025dffcc/0/AC555447BA62C39107F16BF572F82A417F728DBF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AC555447BA62C39107F16BF572F82A417F728DBF.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/3993f350-b756-4916-8d84-484f025dffcc/0/3131372e3130322e38302e302f32342d3234203d3e203338343832.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  117.102.80.0/24

    Signature Algorithm: sha256WithRSAEncryption
         5e:46:0c:44:97:cb:d9:c6:01:68:ea:9c:b1:0b:9d:0e:8a:69:
         24:96:5d:f5:8a:9b:6b:1f:f9:a2:b5:2d:13:14:80:fd:43:dc:
         c1:84:6e:45:aa:14:9c:70:f0:c2:91:22:fd:f7:26:5f:81:c8:
         6e:46:4b:d0:4f:96:b0:43:0f:c0:65:9a:c0:c6:65:42:76:a8:
         fa:1e:82:e0:f1:82:6d:58:a1:84:1d:8e:a2:dc:40:9e:0c:f9:
         c4:ab:9b:5a:13:89:17:fd:ba:ad:0f:84:b1:05:70:05:ed:27:
         6a:2a:c3:e3:83:92:3f:85:98:b5:29:77:7f:40:e8:14:33:3d:
         24:70:15:29:87:26:2b:4e:86:54:ea:24:ac:04:d1:d4:1f:d7:
         01:87:58:de:8a:d5:9f:f2:0e:20:87:eb:c7:17:6c:90:f9:54:
         cb:0b:36:bc:dd:f2:2c:45:ed:7f:16:d2:cd:b5:a2:0a:47:87:
         85:2f:4d:fa:8f:94:09:78:be:6b:86:82:27:2e:fb:fb:8c:f3:
         84:8d:c3:f1:23:45:91:4b:36:b9:e3:8f:b5:0b:df:2d:05:09:
         0a:ac:f0:3a:05:d2:62:66:cc:d7:0e:78:d4:8a:3c:2b:8f:fa:
         50:24:f6:1e:81:8e:d1:cf:9a:67:d4:95:ec:fc:6a:a8:cb:a4:
         84:93:0e:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----