Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/3993f350-b756-4916-8d84-484f025dffcc/0/3131382e39392e38302e302f32342d3234203d3e203137343531.roa
File:                     3131382e39392e38302e302f32342d3234203d3e203137343531.roa (raw, json)
Hash identifier:          XSed7LwVep3vi/DI1s9ke4XPsgznKZdacsVQ6aTIWY4=
Subject key identifier:   F0:1E:E0:8E:09:70:E8:EA:AE:2F:E9:6D:6E:9B:07:63:9A:11:48:B8
Certificate issuer:       /CN=AC555447BA62C39107F16BF572F82A417F728DBF
Certificate serial:       4A309CE70FDB356585FA26D9C96783681C68E8F7
Authority key identifier: AC:55:54:47:BA:62:C3:91:07:F1:6B:F5:72:F8:2A:41:7F:72:8D:BF
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AC555447BA62C39107F16BF572F82A417F728DBF.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/3993f350-b756-4916-8d84-484f025dffcc/0/3131382e39392e38302e302f32342d3234203d3e203137343531.roa
Signing time:             Thu 16 Dec 2021 05:00:01 +0000
ROA not before:           Thu 16 Dec 2021 04:55:01 +0000
ROA not after:            Fri 16 Dec 2022 05:00:01 +0000
asID:                     17451
IP address blocks:        118.99.80.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4a:30:9c:e7:0f:db:35:65:85:fa:26:d9:c9:67:83:68:1c:68:e8:f7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AC555447BA62C39107F16BF572F82A417F728DBF
        Validity
            Not Before: Dec 16 04:55:01 2021 GMT
            Not After : Dec 16 05:00:01 2022 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:86:a2:7e:c3:4c:d4:7b:be:2f:2b:e6:4c:b9:
                    41:9f:10:52:68:f7:a2:63:b4:fa:a3:31:40:a7:23:
                    9d:68:03:b4:d1:6b:ae:6e:f4:46:db:af:a4:ed:dc:
                    2e:64:66:90:d6:f4:59:62:7a:e7:85:8a:c1:e8:bb:
                    c4:63:b9:e3:63:ba:2f:1b:28:da:92:2d:0a:2b:51:
                    88:5f:cb:6b:30:58:23:f1:f8:6e:ff:a2:74:15:84:
                    2d:b7:7d:40:95:30:74:09:4f:5a:89:b1:a7:71:c2:
                    45:aa:e0:36:6d:3a:65:7d:de:17:46:ab:7b:59:96:
                    34:83:ab:c9:fc:b9:57:1b:91:28:5d:2d:7a:32:76:
                    a7:b7:12:56:93:36:78:bd:e0:e6:4a:fe:64:cd:40:
                    3d:51:3c:50:54:da:24:75:5c:bf:4d:a6:75:66:ed:
                    bd:af:d0:4b:fe:c8:f6:49:87:99:11:c7:cb:f9:2c:
                    dc:b9:57:ed:36:11:96:f6:2c:83:15:b0:bb:6e:f2:
                    32:0a:43:63:81:4d:27:e2:04:22:83:d8:67:af:93:
                    fb:10:a3:63:34:f3:31:66:5c:24:4e:5a:20:7a:14:
                    b9:da:67:4e:34:37:63:f5:28:d7:3a:25:95:b9:6a:
                    48:19:bf:44:2f:d5:e7:0f:9e:c4:bf:85:e0:51:cc:
                    96:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F0:1E:E0:8E:09:70:E8:EA:AE:2F:E9:6D:6E:9B:07:63:9A:11:48:B8
            X509v3 Authority Key Identifier:
                keyid:AC:55:54:47:BA:62:C3:91:07:F1:6B:F5:72:F8:2A:41:7F:72:8D:BF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/3993f350-b756-4916-8d84-484f025dffcc/0/AC555447BA62C39107F16BF572F82A417F728DBF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AC555447BA62C39107F16BF572F82A417F728DBF.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/3993f350-b756-4916-8d84-484f025dffcc/0/3131382e39392e38302e302f32342d3234203d3e203137343531.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  118.99.80.0/24

    Signature Algorithm: sha256WithRSAEncryption
         89:5a:37:bb:5d:97:06:fb:0d:29:92:3c:f0:12:fb:6e:10:8d:
         8e:e6:29:73:2c:a2:02:15:e4:02:8e:42:c4:98:b0:0c:90:8c:
         58:eb:b1:10:89:4c:50:eb:52:3a:25:63:9f:eb:d4:74:02:cd:
         c8:0e:ad:4e:9a:ae:83:ae:3d:6b:f2:08:ee:f8:25:5d:42:43:
         ee:61:0e:eb:0b:61:68:29:1e:08:3f:0f:f1:74:10:47:9c:1a:
         a1:3c:b8:fc:0b:11:40:60:7b:5d:ac:2e:28:90:9f:2f:e9:c8:
         ba:43:aa:76:5a:67:2b:80:8d:dc:63:35:93:28:b5:60:66:18:
         60:45:63:7f:e8:70:ab:5c:c2:45:3b:45:b0:8c:31:93:7b:d2:
         32:37:51:e8:d9:75:2b:cf:07:cd:17:c1:42:fe:69:64:e3:ad:
         0f:9a:be:d6:ed:18:4b:3c:bb:92:64:07:1f:55:b5:1e:37:d2:
         ba:80:df:86:3d:7a:49:e3:79:da:a7:d6:64:bd:ac:a9:17:3e:
         81:40:05:25:e1:3d:d5:62:3a:12:8a:72:77:8c:0c:eb:54:88:
         f6:30:c3:37:3e:a7:ef:aa:6f:1c:87:0a:e9:4f:10:17:c9:be:
         58:f1:10:91:f0:5d:f0:72:79:30:f6:12:df:3b:3d:f4:90:2e:
         79:7a:d3:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----