Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/3993f350-b756-4916-8d84-484f025dffcc/0/3138322e3235332e3134302e302f32342d3234203d3e203137343531.roa
File:                     3138322e3235332e3134302e302f32342d3234203d3e203137343531.roa (raw, json)
Hash identifier:          PwSGr5F7xJ3eMGm5jr5kSgV3Q4eO+Od5kD2RIGWa2VY=
Subject key identifier:   E5:3A:55:D9:83:48:FB:68:D3:BF:AD:CE:F3:E6:14:0A:B2:C8:D1:4E
Certificate issuer:       /CN=AC555447BA62C39107F16BF572F82A417F728DBF
Certificate serial:       14F02EF9E53345445375510E21C4B95218F04E52
Authority key identifier: AC:55:54:47:BA:62:C3:91:07:F1:6B:F5:72:F8:2A:41:7F:72:8D:BF
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AC555447BA62C39107F16BF572F82A417F728DBF.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/3993f350-b756-4916-8d84-484f025dffcc/0/3138322e3235332e3134302e302f32342d3234203d3e203137343531.roa
Signing time:             Thu 30 Sep 2021 00:00:48 +0000
ROA not before:           Wed 29 Sep 2021 23:55:48 +0000
ROA not after:            Fri 30 Sep 2022 00:00:48 +0000
asID:                     17451
IP address blocks:        182.253.140.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            14:f0:2e:f9:e5:33:45:44:53:75:51:0e:21:c4:b9:52:18:f0:4e:52
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AC555447BA62C39107F16BF572F82A417F728DBF
        Validity
            Not Before: Sep 29 23:55:48 2021 GMT
            Not After : Sep 30 00:00:48 2022 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:49:eb:0a:90:4c:fd:c0:a2:fd:d6:70:31:51:
                    34:c6:e6:b6:e9:cc:0e:75:5c:8b:f3:93:1f:5f:22:
                    c2:42:ec:18:be:63:9b:e2:05:bc:67:98:01:7d:5a:
                    7d:0b:2f:a5:2a:e5:41:12:8f:5c:01:3a:ca:18:c7:
                    fb:45:b7:2b:a1:d5:ec:51:63:90:cb:0f:a7:ba:f5:
                    e2:8c:09:74:c6:69:0d:99:0b:d7:6f:28:be:fd:9c:
                    70:4b:9d:80:d3:91:04:7f:36:77:8b:f0:82:fd:c2:
                    99:43:8b:c7:c3:ef:d9:62:c9:dc:2d:32:6d:91:66:
                    eb:f1:ed:65:1f:ea:50:d5:b5:be:7c:31:23:ee:4a:
                    9a:c0:23:1c:6d:c4:82:c0:ba:ec:15:e4:ee:6d:a4:
                    f8:7c:d9:0c:9e:d2:73:ca:eb:e5:59:0a:1c:ae:24:
                    14:d5:6e:0d:7e:9e:1c:68:da:f9:6a:c1:e0:3b:06:
                    59:c8:01:16:d9:dc:b5:aa:8b:c7:04:93:76:f0:86:
                    3f:41:04:f7:19:0b:1e:e3:32:64:16:00:51:1f:39:
                    1d:e8:7f:e7:1a:d3:a4:79:e9:33:bd:9b:7d:bd:61:
                    fd:9e:bc:14:f6:0e:10:0a:79:8a:35:eb:0b:04:b4:
                    76:7c:f8:2b:8a:d2:5c:62:57:db:57:d3:e7:88:73:
                    35:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E5:3A:55:D9:83:48:FB:68:D3:BF:AD:CE:F3:E6:14:0A:B2:C8:D1:4E
            X509v3 Authority Key Identifier:
                keyid:AC:55:54:47:BA:62:C3:91:07:F1:6B:F5:72:F8:2A:41:7F:72:8D:BF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/3993f350-b756-4916-8d84-484f025dffcc/0/AC555447BA62C39107F16BF572F82A417F728DBF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AC555447BA62C39107F16BF572F82A417F728DBF.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/3993f350-b756-4916-8d84-484f025dffcc/0/3138322e3235332e3134302e302f32342d3234203d3e203137343531.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  182.253.140.0/24

    Signature Algorithm: sha256WithRSAEncryption
         2d:00:8e:50:86:f2:46:dd:7d:cc:9b:35:77:dc:d4:5b:90:ec:
         8d:09:35:6a:0c:d6:13:a6:aa:d4:ce:69:20:dd:9c:1d:3e:d7:
         3c:90:ea:f4:69:7d:b0:24:b7:58:37:68:85:b6:15:fe:d7:68:
         57:b1:4e:a8:c3:f3:30:71:63:cf:55:dd:8f:d7:4a:2d:9a:bf:
         8a:e1:89:85:93:da:72:e6:2f:8e:31:cf:f9:86:c9:4d:96:6c:
         b3:f9:8d:8d:71:d6:28:bd:d2:1a:b6:47:63:9f:1b:4c:24:34:
         6e:70:de:2e:3e:7f:a2:10:5a:5a:f0:70:88:94:72:bd:d9:f9:
         73:53:49:b3:81:c0:88:5a:af:a3:ad:6b:1a:9b:46:a7:ef:eb:
         8f:83:ac:1f:e5:fe:3f:94:bd:90:1c:3d:dc:a7:28:fd:27:e2:
         c2:a7:1b:e1:f7:02:15:e4:95:d7:ee:c7:ff:38:ea:2a:27:84:
         2a:72:58:bd:81:db:58:b4:6d:68:14:c6:85:ea:1c:a2:8f:81:
         cd:78:3b:aa:23:cd:45:2d:ab:ff:cf:6f:f0:6f:a9:9e:ed:75:
         77:7c:1e:5a:88:54:40:d8:86:0b:81:a8:71:3d:a4:e4:ff:f0:
         56:4d:53:69:61:c3:75:d8:5a:e3:3d:c6:dd:8f:25:60:de:25:
         35:01:d9:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----