Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/3993f350-b756-4916-8d84-484f025dffcc/0/3138322e3235332e3138372e302f32342d3234203d3e203137343531.roa
File:                     3138322e3235332e3138372e302f32342d3234203d3e203137343531.roa (raw, json)
Hash identifier:          pEm2LdejAZ0vGbhmXBocl267jPshSAxVGxchnUt4ntQ=
Subject key identifier:   6A:0D:3F:9E:64:F3:C8:2A:AA:0D:8E:89:0E:BB:36:D7:4C:B6:06:08
Certificate issuer:       /CN=AC555447BA62C39107F16BF572F82A417F728DBF
Certificate serial:       30A586808A5751B26715E8C862438161BBFE1701
Authority key identifier: AC:55:54:47:BA:62:C3:91:07:F1:6B:F5:72:F8:2A:41:7F:72:8D:BF
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AC555447BA62C39107F16BF572F82A417F728DBF.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/3993f350-b756-4916-8d84-484f025dffcc/0/3138322e3235332e3138372e302f32342d3234203d3e203137343531.roa
Signing time:             Tue 14 Sep 2021 05:17:16 +0000
ROA not before:           Tue 14 Sep 2021 05:12:16 +0000
ROA not after:            Wed 14 Sep 2022 05:17:16 +0000
asID:                     17451
IP address blocks:        182.253.187.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            30:a5:86:80:8a:57:51:b2:67:15:e8:c8:62:43:81:61:bb:fe:17:01
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AC555447BA62C39107F16BF572F82A417F728DBF
        Validity
            Not Before: Sep 14 05:12:16 2021 GMT
            Not After : Sep 14 05:17:16 2022 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:c0:52:8f:6c:38:52:e2:0e:bb:12:50:2a:ad:
                    be:94:fc:a9:45:62:e3:08:32:36:ea:1e:26:68:51:
                    47:3c:a0:6f:ec:ed:22:36:22:80:ca:fd:2b:d3:8e:
                    12:aa:a2:d4:33:08:4c:39:73:59:8b:7c:1e:75:b0:
                    3b:51:3c:c2:b3:c6:4d:90:57:ad:d0:2e:95:3f:ec:
                    36:a7:77:7b:45:75:26:cc:48:9a:1d:f4:b8:c6:9c:
                    7e:ae:a2:50:1f:cf:4b:6f:58:56:0f:fa:e1:fb:31:
                    19:0a:05:89:4c:6d:f4:07:34:6a:91:6d:21:75:ce:
                    08:40:46:c8:02:c7:ba:95:f8:48:3e:a1:e2:60:f1:
                    13:b8:a6:b0:f5:1c:55:47:b2:5d:6c:61:c6:35:44:
                    1d:df:fa:2c:ee:1d:30:07:f4:d3:bc:7a:0c:b9:96:
                    d8:89:e3:e4:49:6a:c1:78:e7:3e:8b:fc:af:70:7c:
                    87:9e:d2:79:b5:8a:89:8b:37:c3:f3:ec:ec:0f:b6:
                    fc:25:75:b1:1c:42:05:e9:2c:db:ef:5a:e6:15:5d:
                    c4:8b:d0:52:4d:b3:83:66:a4:3f:e5:ed:ac:ea:35:
                    cd:3b:f7:18:88:a4:90:1a:3b:f8:49:28:da:9e:5c:
                    ff:7c:41:f6:da:99:23:54:c9:99:f5:e6:d5:d2:cf:
                    1f:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6A:0D:3F:9E:64:F3:C8:2A:AA:0D:8E:89:0E:BB:36:D7:4C:B6:06:08
            X509v3 Authority Key Identifier:
                keyid:AC:55:54:47:BA:62:C3:91:07:F1:6B:F5:72:F8:2A:41:7F:72:8D:BF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/3993f350-b756-4916-8d84-484f025dffcc/0/AC555447BA62C39107F16BF572F82A417F728DBF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AC555447BA62C39107F16BF572F82A417F728DBF.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/3993f350-b756-4916-8d84-484f025dffcc/0/3138322e3235332e3138372e302f32342d3234203d3e203137343531.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  182.253.187.0/24

    Signature Algorithm: sha256WithRSAEncryption
         47:25:0c:70:9c:7c:e7:dd:f8:00:4c:33:a0:f0:16:da:62:dd:
         35:55:98:26:5d:22:4d:d4:19:bd:4e:81:2c:b7:00:cd:7d:4a:
         4f:86:60:40:43:f6:10:4b:1d:17:d1:40:cd:7f:a5:6f:40:39:
         e9:6f:90:f7:ea:fa:de:d5:8d:ab:27:fb:ef:39:45:23:d2:b3:
         14:3c:c9:40:ba:8d:a2:83:78:18:40:cb:cd:5b:c3:b9:24:e5:
         d3:83:48:e2:03:19:5d:06:a7:cc:0f:bc:55:a3:ce:0b:a0:8b:
         a2:62:1e:87:97:6d:3d:5d:81:ac:80:93:f4:17:b6:8c:f1:37:
         28:4a:22:21:b6:61:60:70:8e:d9:b0:8f:4d:d6:67:10:87:f8:
         9d:0c:0f:72:11:2b:b5:50:93:10:79:10:83:6a:d4:18:1f:d7:
         71:16:29:af:e9:01:30:2c:cb:61:c0:08:a5:fd:02:ed:6b:0a:
         6d:a1:50:a3:bc:e3:75:5b:68:ff:47:31:03:b1:77:59:e4:b2:
         d0:c0:5d:86:83:27:73:8b:02:85:4a:0e:45:ed:48:c3:8e:51:
         fe:3b:32:66:5d:57:2f:0e:3c:96:90:6d:34:bf:d2:51:85:b4:
         89:9e:9f:84:2a:59:d3:a1:77:5e:3c:b8:93:25:09:39:72:7b:
         30:2b:49:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----