Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/3993f350-b756-4916-8d84-484f025dffcc/0/3138322e3235332e31352e302f32342d3234203d3e203137343531.roa
File:                     3138322e3235332e31352e302f32342d3234203d3e203137343531.roa (raw, json)
Hash identifier:          j/wU/Xbz9pxBLBeOPEPPXzAS6J+txTf5cFqWRaa5Jdo=
Subject key identifier:   B8:D8:C7:FE:C3:16:46:30:69:84:0C:15:FF:4D:22:EA:AF:13:46:B6
Certificate issuer:       /CN=AC555447BA62C39107F16BF572F82A417F728DBF
Certificate serial:       0B2657DA58A0DA7D327D98A6E6308AC9093C8E4C
Authority key identifier: AC:55:54:47:BA:62:C3:91:07:F1:6B:F5:72:F8:2A:41:7F:72:8D:BF
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AC555447BA62C39107F16BF572F82A417F728DBF.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/3993f350-b756-4916-8d84-484f025dffcc/0/3138322e3235332e31352e302f32342d3234203d3e203137343531.roa
Signing time:             Thu 30 Sep 2021 00:00:14 +0000
ROA not before:           Wed 29 Sep 2021 23:55:14 +0000
ROA not after:            Fri 30 Sep 2022 00:00:14 +0000
asID:                     17451
IP address blocks:        182.253.15.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0b:26:57:da:58:a0:da:7d:32:7d:98:a6:e6:30:8a:c9:09:3c:8e:4c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AC555447BA62C39107F16BF572F82A417F728DBF
        Validity
            Not Before: Sep 29 23:55:14 2021 GMT
            Not After : Sep 30 00:00:14 2022 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:10:2f:5d:2b:73:31:6d:c5:78:be:87:04:5d:
                    2e:72:7d:84:ec:17:27:2a:19:f2:ec:3e:2c:9d:56:
                    7b:a9:88:80:ba:95:94:c3:3e:b3:d9:d0:8b:0a:3b:
                    04:b9:5d:50:11:c2:7f:af:bd:1c:12:83:74:08:a0:
                    ec:ed:1a:79:17:9f:af:22:6d:6a:9b:1e:11:57:f4:
                    e2:e9:b7:7f:c7:db:69:1b:8a:59:21:94:2f:65:1b:
                    b8:ca:2f:a5:e1:60:77:e5:10:b2:a3:36:e1:fb:09:
                    ff:2d:06:47:28:e0:47:68:d7:3e:cf:fb:a3:a7:dd:
                    57:5a:33:42:bb:a4:fc:1d:10:c1:8c:7a:af:d5:0a:
                    ce:6d:41:1c:c7:e2:e8:52:9a:d0:10:7e:ad:79:8d:
                    4d:a4:d3:a6:30:b0:c5:61:57:26:80:72:55:63:0b:
                    06:36:a0:00:42:e2:c1:3a:78:60:26:cb:16:5b:b0:
                    c1:e7:4d:74:5b:15:64:02:70:4a:d1:92:44:5b:54:
                    72:4f:2c:8c:20:98:43:84:0d:64:96:68:b2:0a:7a:
                    a6:91:d6:9d:f0:e7:a9:9b:e9:2c:38:7e:29:cc:23:
                    f7:b5:4a:1b:31:50:f5:75:b2:b1:92:11:e3:6e:7a:
                    1c:65:bf:fe:22:4f:de:aa:b7:91:46:b4:c6:a5:f6:
                    9f:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B8:D8:C7:FE:C3:16:46:30:69:84:0C:15:FF:4D:22:EA:AF:13:46:B6
            X509v3 Authority Key Identifier:
                keyid:AC:55:54:47:BA:62:C3:91:07:F1:6B:F5:72:F8:2A:41:7F:72:8D:BF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/3993f350-b756-4916-8d84-484f025dffcc/0/AC555447BA62C39107F16BF572F82A417F728DBF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AC555447BA62C39107F16BF572F82A417F728DBF.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/3993f350-b756-4916-8d84-484f025dffcc/0/3138322e3235332e31352e302f32342d3234203d3e203137343531.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  182.253.15.0/24

    Signature Algorithm: sha256WithRSAEncryption
         5a:a8:64:8d:df:51:f7:c5:43:8a:9f:ff:9a:d4:ab:97:fc:80:
         96:f2:4a:1a:f4:ed:cd:ba:bb:12:81:ec:f1:bc:ad:99:06:c6:
         3c:5b:e3:2f:7c:1a:15:a6:54:20:9b:0d:5c:a6:a2:34:04:ff:
         c0:29:a2:01:a2:f8:9c:1a:22:84:39:13:9d:64:b1:5d:ef:0f:
         f1:79:1c:45:f7:69:66:ac:dd:d1:ce:95:d6:01:98:05:81:dc:
         e5:f3:9e:ea:2a:81:f7:97:6b:af:6b:d4:7a:2c:6f:ad:c3:79:
         d2:07:03:f7:6c:ed:d5:3d:00:e1:f0:22:79:d0:82:15:af:d7:
         b4:43:f9:1d:83:dc:fe:e4:44:f7:a8:63:d3:89:50:3d:d8:76:
         37:ff:00:73:ae:1c:6f:b9:7f:c8:38:57:87:8e:c4:2e:18:5d:
         b7:44:53:17:20:dc:5a:d0:88:aa:6a:a7:35:bd:9b:84:1b:14:
         dc:ae:12:9b:cb:c8:ff:7c:c5:93:91:08:40:44:f8:ea:f2:73:
         e5:ff:09:60:b1:7d:51:95:ea:96:7e:fc:87:51:9c:fd:8d:68:
         e5:98:f2:17:7e:3d:5b:8a:70:6e:8e:0a:a0:97:99:10:bb:74:
         50:4a:42:bb:9d:c1:1d:27:f6:45:4e:df:70:30:86:51:68:1e:
         a5:5f:a1:6d
-----BEGIN CERTIFICATE-----
MIIHJDCCBgygAwIBAgIUCyZX2lig2n0yfZim5jCKyQk8jkwwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQUM1NTU0NDdCQTYyQzM5MTA3RjE2QkY1NzJGODJBNDE3
RjcyOERCRjAeFw0yMTA5MjkyMzU1MTRaFw0yMjA5MzAwMDAwMTRaMIICLTGCAikw
ggIlBgNVBAMTggIcMzA4MjAxMEEwMjgyMDEwMTAwQjkxMDJGNUQyQjczMzE2REM1
NzhCRTg3MDQ1RDJFNzI3RDg0RUMxNzI3MkExOUYyRUMzRTJDOUQ1NjdCQTk4ODgw
QkE5NTk0QzMzRUIzRDlEMDhCMEEzQjA0Qjk1RDUwMTFDMjdGQUZCRDFDMTI4Mzc0
MDhBMEVDRUQxQTc5MTc5RkFGMjI2RDZBOUIxRTExNTdGNEUyRTlCNzdGQzdEQjY5
MUI4QTU5MjE5NDJGNjUxQkI4Q0EyRkE1RTE2MDc3RTUxMEIyQTMzNkUxRkIwOUZG
MkQwNjQ3MjhFMDQ3NjhENzNFQ0ZGQkEzQTdERDU3NUEzMzQyQkJBNEZDMUQxMEMx
OEM3QUFGRDUwQUNFNkQ0MTFDQzdFMkU4NTI5QUQwMTA3RUFENzk4RDREQTREM0E2
MzBCMEM1NjE1NzI2ODA3MjU1NjMwQjA2MzZBMDAwNDJFMkMxM0E3ODYwMjZDQjE2
NUJCMEMxRTc0RDc0NUIxNTY0MDI3MDRBRDE5MjQ0NUI1NDcyNEYyQzhDMjA5ODQz
ODQwRDY0OTY2OEIyMEE3QUE2OTFENjlERjBFN0E5OUJFOTJDMzg3RTI5Q0MyM0Y3
QjU0QTFCMzE1MEY1NzVCMkIxOTIxMUUzNkU3QTFDNjVCRkZFMjI0RkRFQUFCNzkx
NDZCNEM2QTVGNjlGODEwMjAzMDEwMDAxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8A
MIIBCgKCAQEAuRAvXStzMW3FeL6HBF0ucn2E7BcnKhny7D4snVZ7qYiAupWUwz6z
2dCLCjsEuV1QEcJ/r70cEoN0CKDs7Rp5F5+vIm1qmx4RV/Ti6bd/x9tpG4pZIZQv
ZRu4yi+l4WB35RCyozbh+wn/LQZHKOBHaNc+z/ujp91XWjNCu6T8HRDBjHqv1QrO
bUEcx+LoUprQEH6teY1NpNOmMLDFYVcmgHJVYwsGNqAAQuLBOnhgJssWW7DB5010
WxVkAnBK0ZJEW1RyTyyMIJhDhA1klmiyCnqmkdad8Oepm+ksOH4pzCP3tUobMVD1
dbKxkhHjbnocZb/+Ik/eqreRRrTGpfafgQIDAQABo4ICMjCCAi4wHQYDVR0OBBYE
FLjYx/7DFkYwaYQMFf9NIuqvE0a2MB8GA1UdIwQYMBaAFKxVVEe6YsORB/Fr9XL4
KkF/co2/MA4GA1UdDwEB/wQEAwIHgDCBhQYDVR0fBH4wfDB6oHigdoZ0cnN5bmM6
Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMzk5M2YzNTAtYjc1Ni00OTE2LThk
ODQtNDg0ZjAyNWRmZmNjLzAvQUM1NTU0NDdCQTYyQzM5MTA3RjE2QkY1NzJGODJB
NDE3RjcyOERCRi5jcmwwdAYIKwYBBQUHAQEEaDBmMGQGCCsGAQUFBzAChlhyc3lu
YzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9JRE5JQy1JRC8yL0FDNTU1NDQ3
QkE2MkMzOTEwN0YxNkJGNTcyRjgyQTQxN0Y3MjhEQkYuY2VyMIGiBggrBgEFBQcB
CwSBlTCBkjCBjwYIKwYBBQUHMAuGgYJyc3luYzovL3JlcG8tcnBraS5pZG5pYy5u
ZXQvcmVwby8zOTkzZjM1MC1iNzU2LTQ5MTYtOGQ4NC00ODRmMDI1ZGZmY2MvMC8z
MTM4MzIyZTMyMzUzMzJlMzEzNTJlMzAyZjMyMzQyZDMyMzQyMDNkM2UyMDMxMzcz
NDM1MzEucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcB
Af8EEDAOMAwEAgABMAYDBAC2/Q8wDQYJKoZIhvcNAQELBQADggEBAFqoZI3fUffF
Q4qf/5rUq5f8gJbyShr07c26uxKB7PG8rZkGxjxb4y98GhWmVCCbDVymojQE/8Ap
ogGi+JwaIoQ5E51ksV3vD/F5HEX3aWas3dHOldYBmAWB3OXznuoqgfeXa69r1Hos
b63DedIHA/ds7dU9AOHwInnQghWv17RD+R2D3P7kRPeoY9OJUD3Ydjf/AHOuHG+5
f8g4V4eOxC4YXbdEUxcg3FrQiKpqpzW9m4QbFNyuEpvLyP98xZORCEBE+Oryc+X/
CWCxfVGV6pZ+/IdRnP2NaOWY8hd+PVuKcG6OCqCXmRC7dFBKQrudwR0n9kVO33Aw
hlFoHqVfoW0=
-----END CERTIFICATE-----