Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/3993f350-b756-4916-8d84-484f025dffcc/0/3138322e3235332e31382e302f32342d3234203d3e203137343531.roa
File:                     3138322e3235332e31382e302f32342d3234203d3e203137343531.roa (raw, json)
Hash identifier:          vVsD4sbUJUrfhBMpVa143sQeLA2xWrN6uIfBpD2c1eg=
Subject key identifier:   78:61:82:67:9A:DD:06:6E:C0:55:D8:9B:0A:AD:B5:05:CB:64:6D:73
Certificate issuer:       /CN=AC555447BA62C39107F16BF572F82A417F728DBF
Certificate serial:       6EAC88CE78C595EF74A972B5BD1D5CA47BCFC69D
Authority key identifier: AC:55:54:47:BA:62:C3:91:07:F1:6B:F5:72:F8:2A:41:7F:72:8D:BF
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AC555447BA62C39107F16BF572F82A417F728DBF.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/3993f350-b756-4916-8d84-484f025dffcc/0/3138322e3235332e31382e302f32342d3234203d3e203137343531.roa
Signing time:             Thu 30 Sep 2021 00:00:56 +0000
ROA not before:           Wed 29 Sep 2021 23:55:56 +0000
ROA not after:            Fri 30 Sep 2022 00:00:56 +0000
asID:                     17451
IP address blocks:        182.253.18.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6e:ac:88:ce:78:c5:95:ef:74:a9:72:b5:bd:1d:5c:a4:7b:cf:c6:9d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AC555447BA62C39107F16BF572F82A417F728DBF
        Validity
            Not Before: Sep 29 23:55:56 2021 GMT
            Not After : Sep 30 00:00:56 2022 GMT
        Subject: CN=3082010A0282010100B009E20F4A400ABE466D1C36E3577E06A3D543E92E586AB98C841EE189641C8FD9F9BDE181E0B02D0B10E106A3DED1E4CC1E262BE7B56304B4E0A2172F7421F9E617EB7C9F1B1DAAB983B2A926BAFC9055DFB1E91B205F4C4C40B24A382F1855788B8E6293C70D0475ACF851FDCD553FBC15609D924C1AE67BCFA4CBCC8F53DB115C36D92D1C7A77C8D25CAD3C3BDD1E25ABDE4F4586E87110E933C85B0C503E8892BD659536C95EEE024103682C6DB4AE45754D8A8A0AA8FE1E6CAD4CE126733B0C081A7A36CACCCC7B089AB6F122B0FE898525612AC17B65E432312278F89785E64E764DA5BB6CFC111DA852C2CF23C69CA5CFB81AAE3962A317B127ACC2D50203010001
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:09:e2:0f:4a:40:0a:be:46:6d:1c:36:e3:57:
                    7e:06:a3:d5:43:e9:2e:58:6a:b9:8c:84:1e:e1:89:
                    64:1c:8f:d9:f9:bd:e1:81:e0:b0:2d:0b:10:e1:06:
                    a3:de:d1:e4:cc:1e:26:2b:e7:b5:63:04:b4:e0:a2:
                    17:2f:74:21:f9:e6:17:eb:7c:9f:1b:1d:aa:b9:83:
                    b2:a9:26:ba:fc:90:55:df:b1:e9:1b:20:5f:4c:4c:
                    40:b2:4a:38:2f:18:55:78:8b:8e:62:93:c7:0d:04:
                    75:ac:f8:51:fd:cd:55:3f:bc:15:60:9d:92:4c:1a:
                    e6:7b:cf:a4:cb:cc:8f:53:db:11:5c:36:d9:2d:1c:
                    7a:77:c8:d2:5c:ad:3c:3b:dd:1e:25:ab:de:4f:45:
                    86:e8:71:10:e9:33:c8:5b:0c:50:3e:88:92:bd:65:
                    95:36:c9:5e:ee:02:41:03:68:2c:6d:b4:ae:45:75:
                    4d:8a:8a:0a:a8:fe:1e:6c:ad:4c:e1:26:73:3b:0c:
                    08:1a:7a:36:ca:cc:cc:7b:08:9a:b6:f1:22:b0:fe:
                    89:85:25:61:2a:c1:7b:65:e4:32:31:22:78:f8:97:
                    85:e6:4e:76:4d:a5:bb:6c:fc:11:1d:a8:52:c2:cf:
                    23:c6:9c:a5:cf:b8:1a:ae:39:62:a3:17:b1:27:ac:
                    c2:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                78:61:82:67:9A:DD:06:6E:C0:55:D8:9B:0A:AD:B5:05:CB:64:6D:73
            X509v3 Authority Key Identifier:
                keyid:AC:55:54:47:BA:62:C3:91:07:F1:6B:F5:72:F8:2A:41:7F:72:8D:BF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/3993f350-b756-4916-8d84-484f025dffcc/0/AC555447BA62C39107F16BF572F82A417F728DBF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AC555447BA62C39107F16BF572F82A417F728DBF.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/3993f350-b756-4916-8d84-484f025dffcc/0/3138322e3235332e31382e302f32342d3234203d3e203137343531.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  182.253.18.0/24

    Signature Algorithm: sha256WithRSAEncryption
         9f:44:7f:17:bb:59:b9:ea:9e:16:cc:3b:64:08:ae:90:dd:67:
         d8:d6:c4:7b:b4:49:c4:12:84:93:47:a4:d1:aa:a6:8b:0c:5a:
         79:e1:93:73:94:09:7b:bf:ae:72:f2:a5:2b:f5:70:11:2a:2f:
         f3:09:f0:b4:f6:53:0f:0f:27:ca:ab:42:76:32:c0:1a:88:09:
         df:69:7f:8e:5e:06:11:e2:6f:9a:2e:21:81:10:b1:67:10:ed:
         1e:d9:2a:c4:ff:99:21:f3:2e:89:eb:b1:f6:dd:07:4d:9d:1e:
         eb:6a:f2:f7:1e:3b:e4:ff:6a:16:32:89:04:c8:7d:be:0b:de:
         31:28:c0:6b:c4:1f:97:d9:06:de:20:6f:ea:7a:e9:ab:5c:30:
         ad:96:18:49:4e:b2:36:b3:74:47:0f:c4:e2:4c:b7:29:9f:14:
         7c:d6:f5:b4:bc:00:5f:94:89:f2:b7:71:b9:07:07:04:e8:1a:
         70:ef:30:0c:a7:3b:6f:30:9e:3a:19:fc:d8:e4:d9:fa:81:9b:
         65:63:9f:9d:f1:07:7d:06:08:43:87:8d:a6:1f:ee:36:3b:e9:
         36:61:19:26:16:8c:99:17:7c:36:ab:5a:0a:87:cf:23:b7:64:
         79:c4:52:f1:cc:9f:90:c1:a1:71:7d:8c:7a:e3:3c:e2:fd:8d:
         40:5d:df:9e
-----BEGIN CERTIFICATE-----
MIIHJDCCBgygAwIBAgIUbqyIznjFle90qXK1vR1cpHvPxp0wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQUM1NTU0NDdCQTYyQzM5MTA3RjE2QkY1NzJGODJBNDE3
RjcyOERCRjAeFw0yMTA5MjkyMzU1NTZaFw0yMjA5MzAwMDAwNTZaMIICLTGCAikw
ggIlBgNVBAMTggIcMzA4MjAxMEEwMjgyMDEwMTAwQjAwOUUyMEY0QTQwMEFCRTQ2
NkQxQzM2RTM1NzdFMDZBM0Q1NDNFOTJFNTg2QUI5OEM4NDFFRTE4OTY0MUM4RkQ5
RjlCREUxODFFMEIwMkQwQjEwRTEwNkEzREVEMUU0Q0MxRTI2MkJFN0I1NjMwNEI0
RTBBMjE3MkY3NDIxRjlFNjE3RUI3QzlGMUIxREFBQjk4M0IyQTkyNkJBRkM5MDU1
REZCMUU5MUIyMDVGNEM0QzQwQjI0QTM4MkYxODU1Nzg4QjhFNjI5M0M3MEQwNDc1
QUNGODUxRkRDRDU1M0ZCQzE1NjA5RDkyNEMxQUU2N0JDRkE0Q0JDQzhGNTNEQjEx
NUMzNkQ5MkQxQzdBNzdDOEQyNUNBRDNDM0JERDFFMjVBQkRFNEY0NTg2RTg3MTEw
RTkzM0M4NUIwQzUwM0U4ODkyQkQ2NTk1MzZDOTVFRUUwMjQxMDM2ODJDNkRCNEFF
NDU3NTREOEE4QTBBQThGRTFFNkNBRDRDRTEyNjczM0IwQzA4MUE3QTM2Q0FDQ0ND
N0IwODlBQjZGMTIyQjBGRTg5ODUyNTYxMkFDMTdCNjVFNDMyMzEyMjc4Rjg5Nzg1
RTY0RTc2NERBNUJCNkNGQzExMURBODUyQzJDRjIzQzY5Q0E1Q0ZCODFBQUUzOTYy
QTMxN0IxMjdBQ0MyRDUwMjAzMDEwMDAxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8A
MIIBCgKCAQEAsAniD0pACr5GbRw241d+BqPVQ+kuWGq5jIQe4YlkHI/Z+b3hgeCw
LQsQ4Qaj3tHkzB4mK+e1YwS04KIXL3Qh+eYX63yfGx2quYOyqSa6/JBV37HpGyBf
TExAsko4LxhVeIuOYpPHDQR1rPhR/c1VP7wVYJ2STBrme8+ky8yPU9sRXDbZLRx6
d8jSXK08O90eJaveT0WG6HEQ6TPIWwxQPoiSvWWVNsle7gJBA2gsbbSuRXVNiooK
qP4ebK1M4SZzOwwIGno2yszMewiatvEisP6JhSVhKsF7ZeQyMSJ4+JeF5k52TaW7
bPwRHahSws8jxpylz7garjlioxexJ6zC1QIDAQABo4ICMjCCAi4wHQYDVR0OBBYE
FHhhgmea3QZuwFXYmwqttQXLZG1zMB8GA1UdIwQYMBaAFKxVVEe6YsORB/Fr9XL4
KkF/co2/MA4GA1UdDwEB/wQEAwIHgDCBhQYDVR0fBH4wfDB6oHigdoZ0cnN5bmM6
Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMzk5M2YzNTAtYjc1Ni00OTE2LThk
ODQtNDg0ZjAyNWRmZmNjLzAvQUM1NTU0NDdCQTYyQzM5MTA3RjE2QkY1NzJGODJB
NDE3RjcyOERCRi5jcmwwdAYIKwYBBQUHAQEEaDBmMGQGCCsGAQUFBzAChlhyc3lu
YzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9JRE5JQy1JRC8yL0FDNTU1NDQ3
QkE2MkMzOTEwN0YxNkJGNTcyRjgyQTQxN0Y3MjhEQkYuY2VyMIGiBggrBgEFBQcB
CwSBlTCBkjCBjwYIKwYBBQUHMAuGgYJyc3luYzovL3JlcG8tcnBraS5pZG5pYy5u
ZXQvcmVwby8zOTkzZjM1MC1iNzU2LTQ5MTYtOGQ4NC00ODRmMDI1ZGZmY2MvMC8z
MTM4MzIyZTMyMzUzMzJlMzEzODJlMzAyZjMyMzQyZDMyMzQyMDNkM2UyMDMxMzcz
NDM1MzEucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcB
Af8EEDAOMAwEAgABMAYDBAC2/RIwDQYJKoZIhvcNAQELBQADggEBAJ9Efxe7Wbnq
nhbMO2QIrpDdZ9jWxHu0ScQShJNHpNGqposMWnnhk3OUCXu/rnLypSv1cBEqL/MJ
8LT2Uw8PJ8qrQnYywBqICd9pf45eBhHib5ouIYEQsWcQ7R7ZKsT/mSHzLonrsfbd
B02dHutq8vceO+T/ahYyiQTIfb4L3jEowGvEH5fZBt4gb+p66atcMK2WGElOsjaz
dEcPxOJMtymfFHzW9bS8AF+UifK3cbkHBwToGnDvMAynO28wnjoZ/Njk2fqBm2Vj
n53xB30GCEOHjaYf7jY76TZhGSYWjJkXfDarWgqHzyO3ZHnEUvHMn5DBoXF9jHrj
POL9jUBd354=
-----END CERTIFICATE-----