Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/3993f350-b756-4916-8d84-484f025dffcc/0/3138322e3235332e3132392e302f32342d3234203d3e203137343531.roa
File:                     3138322e3235332e3132392e302f32342d3234203d3e203137343531.roa (raw, json)
Hash identifier:          yqyqdXY8Pvm8p/DvNixE11yNy7GKD7DMhriSCoVExk0=
Subject key identifier:   D7:D0:EE:C3:FA:35:AF:FB:99:09:2D:FD:00:62:54:CC:6B:93:68:22
Certificate issuer:       /CN=AC555447BA62C39107F16BF572F82A417F728DBF
Certificate serial:       053F7C8380847E46CCB006140B4445642C8B9B84
Authority key identifier: AC:55:54:47:BA:62:C3:91:07:F1:6B:F5:72:F8:2A:41:7F:72:8D:BF
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AC555447BA62C39107F16BF572F82A417F728DBF.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/3993f350-b756-4916-8d84-484f025dffcc/0/3138322e3235332e3132392e302f32342d3234203d3e203137343531.roa
Signing time:             Thu 30 Sep 2021 00:00:55 +0000
ROA not before:           Wed 29 Sep 2021 23:55:55 +0000
ROA not after:            Fri 30 Sep 2022 00:00:55 +0000
asID:                     17451
IP address blocks:        182.253.129.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            05:3f:7c:83:80:84:7e:46:cc:b0:06:14:0b:44:45:64:2c:8b:9b:84
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AC555447BA62C39107F16BF572F82A417F728DBF
        Validity
            Not Before: Sep 29 23:55:55 2021 GMT
            Not After : Sep 30 00:00:55 2022 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ec:63:6d:35:d8:b5:34:a8:0b:6a:09:6b:6b:42:
                    f6:7e:80:95:81:f6:22:ea:5b:7b:b2:3e:c5:b4:52:
                    b4:37:13:48:a1:db:63:74:1c:18:7e:3f:3d:f8:4f:
                    07:24:05:90:84:b9:43:87:4e:b2:47:4f:ab:58:6e:
                    8d:0a:7e:3e:d5:b2:19:cd:65:eb:c8:c3:35:54:91:
                    30:c9:14:a4:f0:a3:b4:6a:2d:96:5f:51:93:f9:94:
                    92:96:41:76:f6:d9:61:75:c0:55:d5:17:f1:5c:5f:
                    f9:8d:c9:46:6c:20:6f:41:e6:1a:9c:52:6f:52:f6:
                    61:b8:32:43:2a:64:74:24:81:7c:37:41:28:15:09:
                    90:70:3f:03:4d:56:5c:56:b1:4f:8e:26:dc:a8:fb:
                    e2:cf:98:c7:fd:6b:de:5f:f1:33:8f:23:15:47:34:
                    03:d0:d3:33:ee:83:b2:cd:0d:54:e7:a8:0a:c9:88:
                    b7:59:25:4c:24:f0:72:d4:a5:53:4a:a0:8e:9d:db:
                    f8:6d:5f:8a:15:6c:0a:1e:b1:99:16:ae:61:f2:42:
                    78:a0:f3:31:c1:f8:6a:50:7a:9c:0a:67:ee:3e:79:
                    76:5b:e1:79:df:7a:e5:9e:8e:d0:a8:63:fc:fb:8f:
                    85:bd:ff:05:f6:6f:d9:79:74:fa:06:38:01:44:60:
                    4f:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D7:D0:EE:C3:FA:35:AF:FB:99:09:2D:FD:00:62:54:CC:6B:93:68:22
            X509v3 Authority Key Identifier:
                keyid:AC:55:54:47:BA:62:C3:91:07:F1:6B:F5:72:F8:2A:41:7F:72:8D:BF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/3993f350-b756-4916-8d84-484f025dffcc/0/AC555447BA62C39107F16BF572F82A417F728DBF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AC555447BA62C39107F16BF572F82A417F728DBF.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/3993f350-b756-4916-8d84-484f025dffcc/0/3138322e3235332e3132392e302f32342d3234203d3e203137343531.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  182.253.129.0/24

    Signature Algorithm: sha256WithRSAEncryption
         76:52:54:9e:8c:26:cb:3f:9f:eb:8f:19:49:ff:16:f7:00:ad:
         0a:76:f7:12:4b:64:8c:79:89:5c:d3:14:55:fd:1b:66:f5:55:
         e4:c8:4e:6f:b5:bd:ee:3b:a0:8f:75:e5:db:0b:4f:43:60:10:
         2d:66:13:c5:97:67:93:13:6d:81:8b:21:e7:85:9a:90:b8:07:
         01:c1:b8:c6:95:64:7f:d5:bf:98:2b:9e:c4:2c:36:63:03:4b:
         f4:46:c8:fd:94:f9:1f:eb:87:bf:cc:46:8e:e0:d8:7d:83:98:
         c3:3a:0e:97:d2:8b:47:82:c9:b1:e0:d0:33:6c:62:21:f2:18:
         e4:18:d6:6c:6e:52:6f:1c:e2:c6:d3:3a:35:66:b2:15:05:c8:
         ab:61:83:35:46:e7:16:27:cd:b4:57:a3:7d:4b:42:fc:1b:34:
         8f:d8:8c:38:4f:7d:c3:64:e8:ee:80:d2:1a:8b:ab:9b:26:b6:
         ed:ee:28:58:dc:93:93:6e:62:c9:bd:bc:ca:0f:1a:1a:74:09:
         f7:d2:d1:d9:20:aa:ef:94:0a:df:da:1c:5d:69:37:88:69:85:
         d3:ee:b8:ba:8e:b8:98:90:8e:10:93:57:81:f2:c6:9c:db:c4:
         e9:4b:78:ee:91:36:e5:b0:59:36:40:d6:eb:21:f5:57:44:a0:
         d0:09:c4:63
-----BEGIN CERTIFICATE-----
MIIHJjCCBg6gAwIBAgIUBT98g4CEfkbMsAYUC0RFZCyLm4QwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQUM1NTU0NDdCQTYyQzM5MTA3RjE2QkY1NzJGODJBNDE3
RjcyOERCRjAeFw0yMTA5MjkyMzU1NTVaFw0yMjA5MzAwMDAwNTVaMIICLTGCAikw
ggIlBgNVBAMTggIcMzA4MjAxMEEwMjgyMDEwMTAwRUM2MzZEMzVEOEI1MzRBODBC
NkEwOTZCNkI0MkY2N0U4MDk1ODFGNjIyRUE1QjdCQjIzRUM1QjQ1MkI0MzcxMzQ4
QTFEQjYzNzQxQzE4N0UzRjNERjg0RjA3MjQwNTkwODRCOTQzODc0RUIyNDc0RkFC
NTg2RThEMEE3RTNFRDVCMjE5Q0Q2NUVCQzhDMzM1NTQ5MTMwQzkxNEE0RjBBM0I0
NkEyRDk2NUY1MTkzRjk5NDkyOTY0MTc2RjZEOTYxNzVDMDU1RDUxN0YxNUM1RkY5
OERDOTQ2NkMyMDZGNDFFNjFBOUM1MjZGNTJGNjYxQjgzMjQzMkE2NDc0MjQ4MTdD
Mzc0MTI4MTUwOTkwNzAzRjAzNEQ1NjVDNTZCMTRGOEUyNkRDQThGQkUyQ0Y5OEM3
RkQ2QkRFNUZGMTMzOEYyMzE1NDczNDAzRDBEMzMzRUU4M0IyQ0QwRDU0RTdBODBB
Qzk4OEI3NTkyNTRDMjRGMDcyRDRBNTUzNEFBMDhFOUREQkY4NkQ1RjhBMTU2QzBB
MUVCMTk5MTZBRTYxRjI0Mjc4QTBGMzMxQzFGODZBNTA3QTlDMEE2N0VFM0U3OTc2
NUJFMTc5REY3QUU1OUU4RUQwQTg2M0ZDRkI4Rjg1QkRGRjA1RjY2RkQ5Nzk3NEZB
MDYzODAxNDQ2MDRGRkYwMjAzMDEwMDAxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8A
MIIBCgKCAQEA7GNtNdi1NKgLaglra0L2foCVgfYi6lt7sj7FtFK0NxNIodtjdBwY
fj89+E8HJAWQhLlDh06yR0+rWG6NCn4+1bIZzWXryMM1VJEwyRSk8KO0ai2WX1GT
+ZSSlkF29tlhdcBV1RfxXF/5jclGbCBvQeYanFJvUvZhuDJDKmR0JIF8N0EoFQmQ
cD8DTVZcVrFPjibcqPviz5jH/WveX/EzjyMVRzQD0NMz7oOyzQ1U56gKyYi3WSVM
JPBy1KVTSqCOndv4bV+KFWwKHrGZFq5h8kJ4oPMxwfhqUHqcCmfuPnl2W+F533rl
no7QqGP8+4+Fvf8F9m/ZeXT6BjgBRGBP/wIDAQABo4ICNDCCAjAwHQYDVR0OBBYE
FNfQ7sP6Na/7mQkt/QBiVMxrk2giMB8GA1UdIwQYMBaAFKxVVEe6YsORB/Fr9XL4
KkF/co2/MA4GA1UdDwEB/wQEAwIHgDCBhQYDVR0fBH4wfDB6oHigdoZ0cnN5bmM6
Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMzk5M2YzNTAtYjc1Ni00OTE2LThk
ODQtNDg0ZjAyNWRmZmNjLzAvQUM1NTU0NDdCQTYyQzM5MTA3RjE2QkY1NzJGODJB
NDE3RjcyOERCRi5jcmwwdAYIKwYBBQUHAQEEaDBmMGQGCCsGAQUFBzAChlhyc3lu
YzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9JRE5JQy1JRC8yL0FDNTU1NDQ3
QkE2MkMzOTEwN0YxNkJGNTcyRjgyQTQxN0Y3MjhEQkYuY2VyMIGkBggrBgEFBQcB
CwSBlzCBlDCBkQYIKwYBBQUHMAuGgYRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5u
ZXQvcmVwby8zOTkzZjM1MC1iNzU2LTQ5MTYtOGQ4NC00ODRmMDI1ZGZmY2MvMC8z
MTM4MzIyZTMyMzUzMzJlMzEzMjM5MmUzMDJmMzIzNDJkMzIzNDIwM2QzZTIwMzEz
NzM0MzUzMS5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcB
BwEB/wQQMA4wDAQCAAEwBgMEALb9gTANBgkqhkiG9w0BAQsFAAOCAQEAdlJUnowm
yz+f648ZSf8W9wCtCnb3EktkjHmJXNMUVf0bZvVV5MhOb7W97jugj3Xl2wtPQ2AQ
LWYTxZdnkxNtgYsh54WakLgHAcG4xpVkf9W/mCuexCw2YwNL9EbI/ZT5H+uHv8xG
juDYfYOYwzoOl9KLR4LJseDQM2xiIfIY5BjWbG5SbxzixtM6NWayFQXIq2GDNUbn
FifNtFejfUtC/Bs0j9iMOE99w2To7oDSGourmya27e4oWNyTk25iyb28yg8aGnQJ
99LR2SCq75QK39ocXWk3iGmF0+64uo64mJCOEJNXgfLGnNvE6Ut47pE25bBZNkDW
6yH1V0Sg0AnEYw==
-----END CERTIFICATE-----