Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/3993f350-b756-4916-8d84-484f025dffcc/0/3138322e3235332e3132312e302f32342d3234203d3e203137343531.roa
File:                     3138322e3235332e3132312e302f32342d3234203d3e203137343531.roa (raw, json)
Hash identifier:          AmWe6zRwyDf6KgtFCZh57+dnGO/n+FF1BCX4eAETbKg=
Subject key identifier:   E6:69:BA:5F:49:A0:8F:F5:E1:C7:34:C6:F3:73:FD:3E:1C:89:89:BC
Certificate issuer:       /CN=AC555447BA62C39107F16BF572F82A417F728DBF
Certificate serial:       1CE6C404B2C6388261EBBA055C045CBC779F664D
Authority key identifier: AC:55:54:47:BA:62:C3:91:07:F1:6B:F5:72:F8:2A:41:7F:72:8D:BF
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AC555447BA62C39107F16BF572F82A417F728DBF.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/3993f350-b756-4916-8d84-484f025dffcc/0/3138322e3235332e3132312e302f32342d3234203d3e203137343531.roa
Signing time:             Thu 30 Sep 2021 00:00:50 +0000
ROA not before:           Wed 29 Sep 2021 23:55:50 +0000
ROA not after:            Fri 30 Sep 2022 00:00:50 +0000
asID:                     17451
IP address blocks:        182.253.121.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1c:e6:c4:04:b2:c6:38:82:61:eb:ba:05:5c:04:5c:bc:77:9f:66:4d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AC555447BA62C39107F16BF572F82A417F728DBF
        Validity
            Not Before: Sep 29 23:55:50 2021 GMT
            Not After : Sep 30 00:00:50 2022 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ef:03:a8:86:3d:5a:1c:b0:cb:65:c4:cc:43:27:
                    35:5b:87:90:9b:76:94:56:7d:f1:90:76:75:48:46:
                    20:fd:f3:fa:cf:0e:97:42:23:4f:cf:57:6e:6d:49:
                    27:f3:e6:36:aa:16:a2:50:e7:46:f7:a1:71:38:dd:
                    bd:9e:f8:65:b5:5d:8d:d2:08:13:84:11:ad:3c:60:
                    9b:90:57:2e:ad:42:62:f2:b9:c6:94:32:f8:0b:a3:
                    37:76:b2:f2:87:4b:b6:22:5b:fc:56:a4:53:2b:81:
                    aa:84:bf:36:4e:07:32:74:fc:15:83:9d:38:62:62:
                    fc:96:ac:8f:4f:db:8c:f5:cd:ef:74:84:0b:32:23:
                    60:b1:ee:f3:44:02:0e:96:91:92:dd:4f:9f:d2:41:
                    35:94:ff:65:24:a8:19:5c:42:ca:87:ac:c2:18:3e:
                    48:85:42:e5:1b:fd:17:fc:f4:3e:7e:25:29:58:b7:
                    df:dd:e9:92:82:a1:7a:d0:0d:07:41:35:8b:85:10:
                    4d:8f:ee:c9:b8:f8:21:55:de:4b:7f:33:cf:3a:26:
                    79:6a:46:ae:b1:83:ea:41:fe:64:56:ec:00:fd:eb:
                    31:5f:47:54:ce:89:7b:af:49:54:70:55:24:8b:51:
                    00:aa:06:9a:cc:6b:89:8f:4a:b3:c8:40:70:16:7f:
                    9d:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E6:69:BA:5F:49:A0:8F:F5:E1:C7:34:C6:F3:73:FD:3E:1C:89:89:BC
            X509v3 Authority Key Identifier:
                keyid:AC:55:54:47:BA:62:C3:91:07:F1:6B:F5:72:F8:2A:41:7F:72:8D:BF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/3993f350-b756-4916-8d84-484f025dffcc/0/AC555447BA62C39107F16BF572F82A417F728DBF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AC555447BA62C39107F16BF572F82A417F728DBF.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/3993f350-b756-4916-8d84-484f025dffcc/0/3138322e3235332e3132312e302f32342d3234203d3e203137343531.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  182.253.121.0/24

    Signature Algorithm: sha256WithRSAEncryption
         17:46:73:74:e7:80:57:df:5f:fe:3a:f6:4f:3a:59:3e:0b:23:
         51:6d:a1:67:31:e1:50:92:99:4f:07:f5:e4:0d:6b:db:4b:d3:
         c2:82:77:52:9e:72:19:cd:5f:4e:4d:d8:e1:e8:2d:5a:cb:5c:
         a1:8f:62:01:91:b7:88:c5:9e:b8:17:06:b2:99:c7:0f:72:5e:
         9d:4a:c0:cf:4e:5d:42:c6:28:6b:28:12:02:59:f4:11:a4:7a:
         d0:98:d9:76:d3:f2:ae:8d:99:d0:f2:f4:13:7a:05:ad:ec:9c:
         aa:1a:4f:f8:dd:86:00:49:8d:6c:a4:6b:6d:f9:89:2d:a2:cf:
         71:06:c8:43:2c:6e:ec:c8:d2:00:fc:41:88:b3:d2:7f:cb:ff:
         ca:ed:6a:f9:6e:9a:df:83:52:c7:4e:89:72:a6:1e:b0:96:c8:
         20:f4:7c:e9:9a:b3:3a:12:d0:91:a6:dd:06:b2:e9:05:ce:f6:
         89:dc:4e:46:42:35:9d:ce:4c:e8:91:10:97:bb:46:10:f5:dd:
         3a:9c:a6:32:95:b5:de:e1:d9:61:ac:f2:f1:33:5a:85:dc:ca:
         f3:5b:8f:72:31:09:f2:46:78:a8:0a:1c:13:49:6a:3e:8c:22:
         e8:6c:08:20:22:27:1a:a9:0c:7b:8a:ad:e1:15:5c:71:1b:6e:
         62:e7:c8:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----