Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/3993f350-b756-4916-8d84-484f025dffcc/0/3138322e3235332e3131352e302f32342d3234203d3e203137343531.roa
File:                     3138322e3235332e3131352e302f32342d3234203d3e203137343531.roa (raw, json)
Hash identifier:          1jFCabN5zfQujeVRA7RXAB00zKvqWnLoRc4+RERKj80=
Subject key identifier:   85:34:C9:40:1B:B6:F9:CF:0B:14:D5:6C:42:0A:97:C1:26:2B:65:1A
Certificate issuer:       /CN=AC555447BA62C39107F16BF572F82A417F728DBF
Certificate serial:       014A72A543117785A2D7F6310BA5AC2CC6577516
Authority key identifier: AC:55:54:47:BA:62:C3:91:07:F1:6B:F5:72:F8:2A:41:7F:72:8D:BF
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AC555447BA62C39107F16BF572F82A417F728DBF.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/3993f350-b756-4916-8d84-484f025dffcc/0/3138322e3235332e3131352e302f32342d3234203d3e203137343531.roa
Signing time:             Thu 30 Sep 2021 00:00:43 +0000
ROA not before:           Wed 29 Sep 2021 23:55:43 +0000
ROA not after:            Fri 30 Sep 2022 00:00:43 +0000
asID:                     17451
IP address blocks:        182.253.115.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:4a:72:a5:43:11:77:85:a2:d7:f6:31:0b:a5:ac:2c:c6:57:75:16
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AC555447BA62C39107F16BF572F82A417F728DBF
        Validity
            Not Before: Sep 29 23:55:43 2021 GMT
            Not After : Sep 30 00:00:43 2022 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:50:9e:f5:6a:7a:ee:f8:23:7b:a1:46:61:37:
                    4d:46:e8:ae:4c:fb:ec:2e:47:c7:68:ec:32:24:ac:
                    81:88:14:47:f0:c7:93:ef:63:21:fc:2b:f9:d0:0f:
                    8c:88:fb:35:d0:dc:5f:a2:28:0d:12:ca:64:20:26:
                    33:39:6c:20:42:10:c7:5b:15:10:1c:c2:68:c6:b8:
                    3b:81:ba:e3:c4:ab:2f:66:6b:29:cc:f9:9e:3e:12:
                    bf:65:17:27:0e:68:dd:4c:34:9a:91:cc:d5:86:17:
                    a6:ba:49:a3:e1:f7:cc:dc:b5:bd:38:4a:27:ea:c6:
                    73:5a:ed:12:c4:15:69:47:a3:f5:0e:2f:2c:ea:88:
                    5e:83:b0:f0:e1:e9:ff:17:90:26:eb:ab:fa:65:83:
                    d1:3a:40:99:15:3a:99:33:f2:ba:39:a6:35:53:6d:
                    83:4c:0e:30:55:f3:4e:af:19:71:ac:73:f6:97:f4:
                    e3:04:ad:a7:2d:4d:b2:cb:ce:f9:b1:ea:0a:72:25:
                    6e:6f:65:58:b0:89:6c:df:af:05:f0:78:e5:bf:e6:
                    1b:37:22:83:76:9e:97:59:4c:32:c4:f7:39:36:eb:
                    35:46:ef:dd:9e:d4:36:f7:1c:21:49:8c:ff:7b:a6:
                    4f:ab:e7:59:8f:1a:8e:b4:af:b8:fb:32:50:98:5c:
                    2c:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                85:34:C9:40:1B:B6:F9:CF:0B:14:D5:6C:42:0A:97:C1:26:2B:65:1A
            X509v3 Authority Key Identifier:
                keyid:AC:55:54:47:BA:62:C3:91:07:F1:6B:F5:72:F8:2A:41:7F:72:8D:BF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/3993f350-b756-4916-8d84-484f025dffcc/0/AC555447BA62C39107F16BF572F82A417F728DBF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AC555447BA62C39107F16BF572F82A417F728DBF.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/3993f350-b756-4916-8d84-484f025dffcc/0/3138322e3235332e3131352e302f32342d3234203d3e203137343531.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  182.253.115.0/24

    Signature Algorithm: sha256WithRSAEncryption
         ab:15:9c:7f:3a:33:eb:69:39:ec:b6:1a:57:ae:e1:b3:35:90:
         c6:83:d5:3e:6d:50:ce:4f:33:1d:81:f1:31:fd:30:15:cd:21:
         a4:04:95:b5:b8:27:de:7d:74:c1:37:d3:d7:16:88:41:50:de:
         1d:d8:59:00:de:a2:d0:eb:ac:9d:b2:a2:f2:3d:9c:5f:00:45:
         80:3b:a8:ee:53:5a:ae:ee:da:e4:d2:04:8b:eb:9b:21:32:1f:
         64:ce:ef:06:ab:fc:33:e6:ec:ae:29:f4:17:f1:b3:a9:c5:e5:
         68:fa:74:9e:80:ac:4c:73:18:da:88:a3:55:e1:19:12:f7:d5:
         1c:24:ad:65:b0:92:7f:0c:ff:f8:dc:fc:d4:c6:9f:ec:ac:e7:
         7c:32:fd:47:b3:d2:78:0e:24:69:eb:99:91:1a:b1:68:88:96:
         c1:b2:05:4b:65:ac:2a:91:e3:2e:09:be:da:8e:21:86:55:fa:
         35:89:d7:55:56:f8:c5:2e:95:88:b8:46:e4:2c:c3:4b:ad:e2:
         a1:dc:1f:e6:54:17:88:0f:4f:3b:44:b3:ca:4e:94:f8:c8:bb:
         ad:ea:16:e7:7f:e5:e7:a2:5a:e0:35:d9:fe:6f:e4:a1:37:9f:
         5b:57:68:57:2e:2e:8b:24:10:f2:12:0c:75:b5:30:9e:bd:f4:
         de:08:31:d1
-----BEGIN CERTIFICATE-----
MIIHJjCCBg6gAwIBAgIUAUpypUMRd4Wi1/YxC6WsLMZXdRYwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQUM1NTU0NDdCQTYyQzM5MTA3RjE2QkY1NzJGODJBNDE3
RjcyOERCRjAeFw0yMTA5MjkyMzU1NDNaFw0yMjA5MzAwMDAwNDNaMIICLTGCAikw
ggIlBgNVBAMTggIcMzA4MjAxMEEwMjgyMDEwMTAwQjY1MDlFRjU2QTdBRUVGODIz
N0JBMTQ2NjEzNzRENDZFOEFFNENGQkVDMkU0N0M3NjhFQzMyMjRBQzgxODgxNDQ3
RjBDNzkzRUY2MzIxRkMyQkY5RDAwRjhDODhGQjM1RDBEQzVGQTIyODBEMTJDQTY0
MjAyNjMzMzk2QzIwNDIxMEM3NUIxNTEwMUNDMjY4QzZCODNCODFCQUUzQzRBQjJG
NjY2QjI5Q0NGOTlFM0UxMkJGNjUxNzI3MEU2OERENEMzNDlBOTFDQ0Q1ODYxN0E2
QkE0OUEzRTFGN0NDRENCNUJEMzg0QTI3RUFDNjczNUFFRDEyQzQxNTY5NDdBM0Y1
MEUyRjJDRUE4ODVFODNCMEYwRTFFOUZGMTc5MDI2RUJBQkZBNjU4M0QxM0E0MDk5
MTUzQTk5MzNGMkJBMzlBNjM1NTM2RDgzNEMwRTMwNTVGMzRFQUYxOTcxQUM3M0Y2
OTdGNEUzMDRBREE3MkQ0REIyQ0JDRUY5QjFFQTBBNzIyNTZFNkY2NTU4QjA4OTZD
REZBRjA1RjA3OEU1QkZFNjFCMzcyMjgzNzY5RTk3NTk0QzMyQzRGNzM5MzZFQjM1
NDZFRkREOUVENDM2RjcxQzIxNDk4Q0ZGN0JBNjRGQUJFNzU5OEYxQThFQjRBRkI4
RkIzMjUwOTg1QzJDRjkwMjAzMDEwMDAxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8A
MIIBCgKCAQEAtlCe9Wp67vgje6FGYTdNRuiuTPvsLkfHaOwyJKyBiBRH8MeT72Mh
/Cv50A+MiPs10NxfoigNEspkICYzOWwgQhDHWxUQHMJoxrg7gbrjxKsvZmspzPme
PhK/ZRcnDmjdTDSakczVhhemukmj4ffM3LW9OEon6sZzWu0SxBVpR6P1Di8s6ohe
g7Dw4en/F5Am66v6ZYPROkCZFTqZM/K6OaY1U22DTA4wVfNOrxlxrHP2l/TjBK2n
LU2yy875seoKciVub2VYsIls368F8Hjlv+YbNyKDdp6XWUwyxPc5Nus1Ru/dntQ2
9xwhSYz/e6ZPq+dZjxqOtK+4+zJQmFws+QIDAQABo4ICNDCCAjAwHQYDVR0OBBYE
FIU0yUAbtvnPCxTVbEIKl8EmK2UaMB8GA1UdIwQYMBaAFKxVVEe6YsORB/Fr9XL4
KkF/co2/MA4GA1UdDwEB/wQEAwIHgDCBhQYDVR0fBH4wfDB6oHigdoZ0cnN5bmM6
Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMzk5M2YzNTAtYjc1Ni00OTE2LThk
ODQtNDg0ZjAyNWRmZmNjLzAvQUM1NTU0NDdCQTYyQzM5MTA3RjE2QkY1NzJGODJB
NDE3RjcyOERCRi5jcmwwdAYIKwYBBQUHAQEEaDBmMGQGCCsGAQUFBzAChlhyc3lu
YzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9JRE5JQy1JRC8yL0FDNTU1NDQ3
QkE2MkMzOTEwN0YxNkJGNTcyRjgyQTQxN0Y3MjhEQkYuY2VyMIGkBggrBgEFBQcB
CwSBlzCBlDCBkQYIKwYBBQUHMAuGgYRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5u
ZXQvcmVwby8zOTkzZjM1MC1iNzU2LTQ5MTYtOGQ4NC00ODRmMDI1ZGZmY2MvMC8z
MTM4MzIyZTMyMzUzMzJlMzEzMTM1MmUzMDJmMzIzNDJkMzIzNDIwM2QzZTIwMzEz
NzM0MzUzMS5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcB
BwEB/wQQMA4wDAQCAAEwBgMEALb9czANBgkqhkiG9w0BAQsFAAOCAQEAqxWcfzoz
62k57LYaV67hszWQxoPVPm1Qzk8zHYHxMf0wFc0hpASVtbgn3n10wTfT1xaIQVDe
HdhZAN6i0OusnbKi8j2cXwBFgDuo7lNaru7a5NIEi+ubITIfZM7vBqv8M+bsrin0
F/GzqcXlaPp0noCsTHMY2oijVeEZEvfVHCStZbCSfwz/+Nz81Maf7KznfDL9R7PS
eA4kaeuZkRqxaIiWwbIFS2WsKpHjLgm+2o4hhlX6NYnXVVb4xS6ViLhG5CzDS63i
odwf5lQXiA9PO0Szyk6U+Mi7reoW53/l56Ja4DXZ/m/koTefW1doVy4uiyQQ8hIM
dbUwnr303ggx0Q==
-----END CERTIFICATE-----