Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/3993f350-b756-4916-8d84-484f025dffcc/0/3131372e3130322e38392e302f32342d3234203d3e203137343531.roa
File:                     3131372e3130322e38392e302f32342d3234203d3e203137343531.roa (raw, json)
Hash identifier:          ZVO7Piyk9VAKv9eT0cyvFrdfT5AegEru2WEbWhd20p0=
Subject key identifier:   66:C5:99:45:D5:03:1A:CD:EE:F5:51:40:B9:FB:E7:32:11:EF:9C:E8
Certificate issuer:       /CN=AC555447BA62C39107F16BF572F82A417F728DBF
Certificate serial:       29BCCE69E614ADB66493AD2CE02B2FE6C67A42F6
Authority key identifier: AC:55:54:47:BA:62:C3:91:07:F1:6B:F5:72:F8:2A:41:7F:72:8D:BF
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AC555447BA62C39107F16BF572F82A417F728DBF.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/3993f350-b756-4916-8d84-484f025dffcc/0/3131372e3130322e38392e302f32342d3234203d3e203137343531.roa
Signing time:             Thu 30 Sep 2021 00:01:19 +0000
ROA not before:           Wed 29 Sep 2021 23:56:19 +0000
ROA not after:            Fri 30 Sep 2022 00:01:19 +0000
asID:                     17451
IP address blocks:        117.102.89.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            29:bc:ce:69:e6:14:ad:b6:64:93:ad:2c:e0:2b:2f:e6:c6:7a:42:f6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AC555447BA62C39107F16BF572F82A417F728DBF
        Validity
            Not Before: Sep 29 23:56:19 2021 GMT
            Not After : Sep 30 00:01:19 2022 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:88:bd:25:ef:ae:e4:01:d5:1d:82:01:02:34:
                    7f:2b:93:53:95:a8:fd:58:4c:60:33:31:19:87:43:
                    81:59:c3:38:33:ce:7e:28:54:31:2b:23:2c:1b:25:
                    fb:44:1b:ee:f6:98:79:92:8a:7b:30:ac:6a:1e:55:
                    aa:3d:ee:c3:0d:32:bb:b1:9e:7a:85:76:e5:68:0c:
                    75:11:56:95:ce:23:ba:8e:75:6b:54:df:58:8e:b8:
                    1b:a6:9b:93:ee:ff:44:80:f8:de:43:ea:2c:dc:b2:
                    07:7b:f9:c6:6c:f7:0e:e5:c1:b1:0a:a3:41:31:2b:
                    92:49:1c:39:54:83:4a:92:bd:75:1c:c5:5b:c4:1d:
                    f5:d9:2f:2f:35:53:8f:b1:81:d8:83:e2:85:6c:89:
                    7b:7d:96:60:2d:66:00:49:2e:66:b7:e4:b7:24:e6:
                    7d:86:34:cb:90:ac:72:51:5f:28:08:53:a5:e9:5b:
                    b9:bf:9c:e2:89:ef:50:a8:a7:c5:06:7a:2f:b1:5d:
                    dd:3d:2f:d1:ac:80:72:b5:9d:25:81:d1:e2:f6:cc:
                    d9:3e:16:57:72:2b:49:70:e8:b6:f7:dc:8d:8e:17:
                    ef:30:92:1a:34:d6:11:6b:3b:d8:e0:d1:9d:15:4a:
                    9a:6c:c9:ae:a8:ed:86:f3:7f:5d:6a:58:63:4d:c2:
                    8c:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                66:C5:99:45:D5:03:1A:CD:EE:F5:51:40:B9:FB:E7:32:11:EF:9C:E8
            X509v3 Authority Key Identifier:
                keyid:AC:55:54:47:BA:62:C3:91:07:F1:6B:F5:72:F8:2A:41:7F:72:8D:BF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/3993f350-b756-4916-8d84-484f025dffcc/0/AC555447BA62C39107F16BF572F82A417F728DBF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AC555447BA62C39107F16BF572F82A417F728DBF.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/3993f350-b756-4916-8d84-484f025dffcc/0/3131372e3130322e38392e302f32342d3234203d3e203137343531.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  117.102.89.0/24

    Signature Algorithm: sha256WithRSAEncryption
         94:21:bd:97:43:e1:41:88:6f:e7:a5:14:77:f6:2b:78:e9:04:
         c2:3f:39:e0:5e:75:72:36:57:d9:03:c5:86:76:35:d7:0b:29:
         72:64:43:27:f0:a6:9b:b8:2d:71:4a:25:44:d1:4f:84:34:91:
         81:f5:a4:4d:7c:49:40:00:08:e1:8e:ec:d8:09:cd:01:8c:32:
         4d:99:23:fc:59:ed:93:78:ad:df:8d:68:d3:6f:9d:22:62:6b:
         09:16:bc:b1:5f:a5:eb:75:d0:38:16:c8:c8:c1:e9:16:02:4a:
         d4:c5:d1:8f:d5:24:c8:f2:77:82:c5:92:ec:eb:50:84:e4:5c:
         1f:e6:6e:e7:52:85:41:75:c3:5d:fe:e3:13:db:b3:a5:65:98:
         55:59:c0:98:09:54:6d:4a:6d:19:f3:28:26:87:23:c5:3a:3e:
         d8:ad:57:4d:a8:3c:7b:05:2a:18:65:cf:e1:a0:cf:2c:c6:ea:
         b4:de:b1:0a:a4:02:14:91:f0:64:58:fa:f8:c3:46:24:06:64:
         a5:ab:63:97:f6:71:4d:7d:82:be:40:cf:98:6e:87:23:d7:44:
         2e:00:6c:27:1d:fc:c1:41:0f:88:60:c4:56:16:20:9b:82:93:
         81:d6:32:41:48:45:26:37:5e:93:be:89:dd:bb:c3:a4:d9:35:
         3d:45:37:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----