Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/3993f350-b756-4916-8d84-484f025dffcc/0/3131382e39392e3130342e302f32342d3234203d3e203137343531.roa
File:                     3131382e39392e3130342e302f32342d3234203d3e203137343531.roa (raw, json)
Hash identifier:          hxKcj8V6RnlMG0sb1VTHEl2jIJrLJ3y2GJNE1fK3814=
Subject key identifier:   DC:36:0E:13:DF:AF:A1:DB:86:82:85:4A:B1:9C:4E:84:7F:02:81:0E
Certificate issuer:       /CN=AC555447BA62C39107F16BF572F82A417F728DBF
Certificate serial:       722ED3BBA893DE7A7E02DA431DE74754067F65DA
Authority key identifier: AC:55:54:47:BA:62:C3:91:07:F1:6B:F5:72:F8:2A:41:7F:72:8D:BF
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AC555447BA62C39107F16BF572F82A417F728DBF.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/3993f350-b756-4916-8d84-484f025dffcc/0/3131382e39392e3130342e302f32342d3234203d3e203137343531.roa
Signing time:             Thu 30 Sep 2021 00:00:12 +0000
ROA not before:           Wed 29 Sep 2021 23:55:12 +0000
ROA not after:            Fri 30 Sep 2022 00:00:12 +0000
asID:                     17451
IP address blocks:        118.99.104.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            72:2e:d3:bb:a8:93:de:7a:7e:02:da:43:1d:e7:47:54:06:7f:65:da
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AC555447BA62C39107F16BF572F82A417F728DBF
        Validity
            Not Before: Sep 29 23:55:12 2021 GMT
            Not After : Sep 30 00:00:12 2022 GMT
        Subject: CN=3082010A0282010100C1D202EF03238638601D591A45C88434125753F6B77642AB0BEFD74AB8AE8C0D9566633569F6CFA3B85316E8CB6FFAB836DFF376E0AEE7B94E23A006FE3030D785529DFB3DE017CB72623AFC7316DD5E6711B32217EFFF0F095256D66E02E00191A817E58BFE404180D482C6DC66225B2F3A88241028BC0F82E226E4899AA2A87E8F68561A8D642524CDC7969D64963D33D5CEF29856CD25A594B71BB3A8FB50D237DDFDECBD7D38907F25845698F9449715EB2183D12594F5720CAA2292FA88AF0A7457FAED943D13B7592165E153371A0C612C847F29F58DA816A5FC642C20BB45A1513269EF2159CA5E3BCB63B0493737646E169AE2DC62C49171E22A86D30203010001
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:d2:02:ef:03:23:86:38:60:1d:59:1a:45:c8:
                    84:34:12:57:53:f6:b7:76:42:ab:0b:ef:d7:4a:b8:
                    ae:8c:0d:95:66:63:35:69:f6:cf:a3:b8:53:16:e8:
                    cb:6f:fa:b8:36:df:f3:76:e0:ae:e7:b9:4e:23:a0:
                    06:fe:30:30:d7:85:52:9d:fb:3d:e0:17:cb:72:62:
                    3a:fc:73:16:dd:5e:67:11:b3:22:17:ef:ff:0f:09:
                    52:56:d6:6e:02:e0:01:91:a8:17:e5:8b:fe:40:41:
                    80:d4:82:c6:dc:66:22:5b:2f:3a:88:24:10:28:bc:
                    0f:82:e2:26:e4:89:9a:a2:a8:7e:8f:68:56:1a:8d:
                    64:25:24:cd:c7:96:9d:64:96:3d:33:d5:ce:f2:98:
                    56:cd:25:a5:94:b7:1b:b3:a8:fb:50:d2:37:dd:fd:
                    ec:bd:7d:38:90:7f:25:84:56:98:f9:44:97:15:eb:
                    21:83:d1:25:94:f5:72:0c:aa:22:92:fa:88:af:0a:
                    74:57:fa:ed:94:3d:13:b7:59:21:65:e1:53:37:1a:
                    0c:61:2c:84:7f:29:f5:8d:a8:16:a5:fc:64:2c:20:
                    bb:45:a1:51:32:69:ef:21:59:ca:5e:3b:cb:63:b0:
                    49:37:37:64:6e:16:9a:e2:dc:62:c4:91:71:e2:2a:
                    86:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DC:36:0E:13:DF:AF:A1:DB:86:82:85:4A:B1:9C:4E:84:7F:02:81:0E
            X509v3 Authority Key Identifier:
                keyid:AC:55:54:47:BA:62:C3:91:07:F1:6B:F5:72:F8:2A:41:7F:72:8D:BF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/3993f350-b756-4916-8d84-484f025dffcc/0/AC555447BA62C39107F16BF572F82A417F728DBF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AC555447BA62C39107F16BF572F82A417F728DBF.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/3993f350-b756-4916-8d84-484f025dffcc/0/3131382e39392e3130342e302f32342d3234203d3e203137343531.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  118.99.104.0/24

    Signature Algorithm: sha256WithRSAEncryption
         41:be:4b:39:f3:68:40:8a:1e:29:07:9f:dc:53:cd:a2:ad:fb:
         20:e6:3e:57:92:11:b5:86:42:f1:df:0e:fd:1a:7b:67:fb:a0:
         1e:ea:b2:ce:fa:1a:23:53:f3:70:ec:6a:1b:cd:88:7c:99:e5:
         c3:df:51:01:c9:d2:65:eb:c1:a6:2d:04:e6:11:58:ae:59:34:
         a5:f9:99:b8:8f:83:32:91:f2:40:db:88:f2:49:95:71:10:ef:
         2f:1a:60:5a:d5:0f:44:da:61:f0:1d:df:e7:57:11:4f:e2:5b:
         94:dc:12:17:ab:7c:bb:5b:ac:e3:91:43:9d:72:16:9e:5f:57:
         7f:aa:1f:a7:a1:f1:15:79:ff:e1:88:a6:63:55:a1:ff:87:bd:
         73:08:2b:4a:f3:2e:96:2c:35:59:10:f6:7b:64:80:6c:9f:84:
         3d:c0:ac:29:54:75:eb:bc:14:d6:44:79:85:bc:a6:d9:b7:77:
         94:83:99:09:82:02:62:95:7f:02:a7:eb:3b:d1:a7:55:8d:cc:
         29:a6:d3:8b:a1:4c:d2:92:dc:bf:fd:5f:67:5a:f2:53:c5:89:
         bc:1b:19:f4:35:50:aa:a2:b6:a3:c8:e4:1b:9f:24:e2:9b:da:
         38:b9:c2:a6:87:44:1a:bc:3e:bd:63:d3:8c:9b:69:e0:0e:95:
         e1:15:b0:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----