Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/3993f350-b756-4916-8d84-484f025dffcc/0/3138322e3235332e3133332e302f32342d3234203d3e203137343531.roa
File:                     3138322e3235332e3133332e302f32342d3234203d3e203137343531.roa (raw, json)
Hash identifier:          ofPcNo9UcJnt5hGtsJImxLLAxyeiTCeQpyA7M1ODqkc=
Subject key identifier:   97:FA:A6:D7:90:1C:B5:B6:47:EA:65:6D:3B:9C:D8:3A:D2:07:26:C0
Certificate issuer:       /CN=AC555447BA62C39107F16BF572F82A417F728DBF
Certificate serial:       542953A47B118E466C9D1499F5B88782150E7FA7
Authority key identifier: AC:55:54:47:BA:62:C3:91:07:F1:6B:F5:72:F8:2A:41:7F:72:8D:BF
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AC555447BA62C39107F16BF572F82A417F728DBF.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/3993f350-b756-4916-8d84-484f025dffcc/0/3138322e3235332e3133332e302f32342d3234203d3e203137343531.roa
Signing time:             Thu 30 Sep 2021 00:00:04 +0000
ROA not before:           Wed 29 Sep 2021 23:55:04 +0000
ROA not after:            Fri 30 Sep 2022 00:00:04 +0000
asID:                     17451
IP address blocks:        182.253.133.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            54:29:53:a4:7b:11:8e:46:6c:9d:14:99:f5:b8:87:82:15:0e:7f:a7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AC555447BA62C39107F16BF572F82A417F728DBF
        Validity
            Not Before: Sep 29 23:55:04 2021 GMT
            Not After : Sep 30 00:00:04 2022 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:90:cb:38:1d:b4:67:5a:28:58:8f:bb:1e:ca:
                    04:c4:f9:f8:62:b8:3c:27:47:7f:fc:e2:9c:1b:ea:
                    e3:71:27:0c:c7:8b:b7:8d:eb:3a:5f:11:44:66:1f:
                    71:c6:33:02:61:9b:71:11:8c:9c:06:fb:85:a7:bc:
                    53:a4:e4:49:db:67:fe:9d:a6:99:53:47:54:72:3e:
                    51:3d:4a:88:ee:49:b3:3f:68:02:b2:a5:96:73:9c:
                    81:a0:6d:dd:d1:aa:a5:3c:55:53:e6:42:08:79:f7:
                    f1:da:e2:78:3f:9b:39:9a:48:07:31:6c:fd:e9:e5:
                    4e:c7:57:6b:96:b7:88:f4:6a:fe:24:d2:76:77:dd:
                    d8:02:6b:08:2d:dc:64:4b:15:a1:20:cf:6c:d5:24:
                    a2:a9:aa:f8:6d:56:7e:d9:0e:f5:7d:9a:46:93:b9:
                    d4:0b:a5:ec:f3:3f:6c:39:70:5c:89:5e:c6:11:ea:
                    6f:b9:23:0b:ba:eb:8a:69:ae:fb:6b:c3:b0:b2:7f:
                    fb:23:62:56:ba:fa:de:c2:54:c3:05:8d:b1:cc:3b:
                    9b:26:c5:53:d5:1a:23:df:06:40:ec:29:f3:5e:a2:
                    fe:cf:9d:7a:a5:ee:22:df:68:0a:ca:77:c1:74:2b:
                    1a:de:b5:90:b7:6e:ba:13:12:09:b0:76:66:3c:ab:
                    20:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                97:FA:A6:D7:90:1C:B5:B6:47:EA:65:6D:3B:9C:D8:3A:D2:07:26:C0
            X509v3 Authority Key Identifier:
                keyid:AC:55:54:47:BA:62:C3:91:07:F1:6B:F5:72:F8:2A:41:7F:72:8D:BF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/3993f350-b756-4916-8d84-484f025dffcc/0/AC555447BA62C39107F16BF572F82A417F728DBF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AC555447BA62C39107F16BF572F82A417F728DBF.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/3993f350-b756-4916-8d84-484f025dffcc/0/3138322e3235332e3133332e302f32342d3234203d3e203137343531.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  182.253.133.0/24

    Signature Algorithm: sha256WithRSAEncryption
         61:6b:a2:46:54:95:ee:ef:a8:90:55:98:84:cf:db:8a:e0:11:
         bd:87:cc:66:d4:20:d6:d2:6b:87:c3:72:f2:67:fc:6d:f6:3b:
         9f:35:d7:0c:57:d9:35:e4:55:09:8a:af:be:fc:a7:b9:bc:5e:
         50:01:1e:2a:5b:1f:9f:ca:8f:18:1d:ff:c6:67:e7:9b:93:6a:
         81:58:23:d8:66:f7:25:0f:d1:be:7d:03:20:27:63:f8:2f:07:
         41:7d:a9:59:2d:0e:01:50:a6:9e:b5:40:e3:d8:67:1c:b1:24:
         3d:21:f9:d7:be:6c:9e:0b:4d:60:5c:bb:43:af:a6:4a:bb:68:
         dd:45:e7:49:f4:30:6b:22:f4:5f:a8:4b:c8:5b:6f:7f:85:c6:
         3e:32:2e:a0:65:51:45:d5:44:91:6b:e9:b0:87:66:f5:92:24:
         f7:d6:58:fb:1a:52:a1:6e:84:d1:65:d2:f2:4a:0c:32:5a:7f:
         82:83:70:19:e9:1e:be:5d:00:a0:77:cd:69:c3:ef:40:c8:d3:
         d0:75:13:8e:52:ba:38:30:f8:f1:02:89:9a:0f:30:cb:b6:11:
         d2:ea:6d:26:1b:a6:c4:c4:d3:ef:40:1f:45:a4:a8:80:4e:d9:
         85:27:74:d8:eb:ef:62:b2:2c:b9:b0:98:cc:31:04:d2:7c:64:
         e6:0b:ea:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----