Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/3993f350-b756-4916-8d84-484f025dffcc/0/3138322e3235332e3138392e302f32342d3234203d3e203137343531.roa
File:                     3138322e3235332e3138392e302f32342d3234203d3e203137343531.roa (raw, json)
Hash identifier:          rbPLVRCtQai2/yiwy0Y24Ysaazi/kgBepVHBR8O0z1I=
Subject key identifier:   99:AA:0F:73:7C:00:E2:E2:13:B7:36:34:25:7A:04:CC:5C:77:7D:A4
Certificate issuer:       /CN=AC555447BA62C39107F16BF572F82A417F728DBF
Certificate serial:       3888425E3AB37033C78E72118921DE7B9B718218
Authority key identifier: AC:55:54:47:BA:62:C3:91:07:F1:6B:F5:72:F8:2A:41:7F:72:8D:BF
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AC555447BA62C39107F16BF572F82A417F728DBF.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/3993f350-b756-4916-8d84-484f025dffcc/0/3138322e3235332e3138392e302f32342d3234203d3e203137343531.roa
Signing time:             Thu 30 Sep 2021 00:00:10 +0000
ROA not before:           Wed 29 Sep 2021 23:55:10 +0000
ROA not after:            Fri 30 Sep 2022 00:00:10 +0000
asID:                     17451
IP address blocks:        182.253.189.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            38:88:42:5e:3a:b3:70:33:c7:8e:72:11:89:21:de:7b:9b:71:82:18
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AC555447BA62C39107F16BF572F82A417F728DBF
        Validity
            Not Before: Sep 29 23:55:10 2021 GMT
            Not After : Sep 30 00:00:10 2022 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:ab:67:a9:8c:cb:b6:e2:16:0f:28:cf:92:7c:
                    b9:c3:9c:63:e5:67:6d:47:91:c2:0f:a5:fa:04:88:
                    17:5d:4b:92:b3:56:ab:76:d0:54:93:63:69:bb:82:
                    27:39:e2:a5:41:9b:2e:54:20:76:c1:2c:12:12:03:
                    ad:e0:a1:5b:ca:29:8a:2e:4b:d1:d3:c1:0d:2c:b5:
                    ed:7a:df:78:60:80:d9:f2:54:b9:df:71:f4:96:8a:
                    57:dc:d1:0a:14:9f:ab:22:6b:43:98:3b:77:eb:5c:
                    5b:cd:4f:d9:48:54:5c:ee:c5:04:a9:0a:cc:42:10:
                    9b:c4:a6:2f:76:8a:eb:eb:f9:38:e0:27:7c:9f:1e:
                    65:a4:49:0e:57:65:14:43:58:47:fd:7a:aa:87:db:
                    f2:39:61:2a:15:d0:93:8e:4f:ca:e9:2e:41:e3:8f:
                    7f:41:5c:30:9a:2a:34:e8:f0:2a:bc:77:8d:74:8c:
                    1e:2c:8c:5d:bf:c4:18:0d:e4:35:03:24:64:75:7d:
                    86:c9:2f:8c:a7:1a:0a:b2:63:92:94:db:aa:89:28:
                    a9:fe:9c:4b:c3:b5:fe:23:5e:23:bb:ba:93:b1:89:
                    9f:a6:b6:af:fa:b1:9b:d9:08:52:4a:9d:02:8c:42:
                    b6:62:e0:4e:4a:e1:3c:4a:9b:a0:7f:a7:c0:52:07:
                    3a:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                99:AA:0F:73:7C:00:E2:E2:13:B7:36:34:25:7A:04:CC:5C:77:7D:A4
            X509v3 Authority Key Identifier:
                keyid:AC:55:54:47:BA:62:C3:91:07:F1:6B:F5:72:F8:2A:41:7F:72:8D:BF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/3993f350-b756-4916-8d84-484f025dffcc/0/AC555447BA62C39107F16BF572F82A417F728DBF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AC555447BA62C39107F16BF572F82A417F728DBF.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/3993f350-b756-4916-8d84-484f025dffcc/0/3138322e3235332e3138392e302f32342d3234203d3e203137343531.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  182.253.189.0/24

    Signature Algorithm: sha256WithRSAEncryption
         73:26:f6:b9:d9:af:8d:fc:14:0f:7c:50:8a:d6:e1:ec:5e:f6:
         8b:9b:47:47:77:86:cf:31:85:62:40:c0:64:e7:61:fd:c5:de:
         c7:82:29:fb:39:76:f7:80:36:22:d2:3d:5a:7c:57:5b:f9:9f:
         4c:5d:3b:2d:f4:a9:fe:7f:15:73:ae:55:48:10:8a:b4:89:a1:
         73:2d:d4:46:55:77:b9:a1:fe:19:86:0c:f0:02:e8:1d:8b:03:
         eb:66:cb:a5:d6:b2:7a:59:e7:8a:0b:a7:49:fe:dd:b8:4f:ee:
         32:58:20:81:71:c0:87:61:c2:a2:71:07:51:89:7e:84:61:d0:
         70:20:69:a5:73:cc:a8:12:01:8d:60:48:00:f2:0e:70:32:ea:
         47:25:5b:5e:21:9b:d3:59:70:ea:68:5c:ef:46:9d:f1:d6:cf:
         0f:72:5f:b8:e9:e1:30:6a:14:2a:31:86:03:d3:92:a3:e7:e9:
         64:27:18:53:76:cb:90:57:0d:b2:b0:35:72:0e:84:2e:54:90:
         15:d1:d2:b7:2b:42:aa:84:99:af:f5:60:6a:7d:bb:4d:3a:b9:
         97:0b:9b:6c:11:07:43:59:78:25:40:68:7e:2c:02:c8:33:0f:
         88:5e:4f:9b:d4:f4:42:b7:ee:db:56:9a:f7:46:66:ff:55:d4:
         f4:2f:cf:2a
-----BEGIN CERTIFICATE-----
MIIHJjCCBg6gAwIBAgIUOIhCXjqzcDPHjnIRiSHee5txghgwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQUM1NTU0NDdCQTYyQzM5MTA3RjE2QkY1NzJGODJBNDE3
RjcyOERCRjAeFw0yMTA5MjkyMzU1MTBaFw0yMjA5MzAwMDAwMTBaMIICLTGCAikw
ggIlBgNVBAMTggIcMzA4MjAxMEEwMjgyMDEwMTAwRENBQjY3QTk4Q0NCQjZFMjE2
MEYyOENGOTI3Q0I5QzM5QzYzRTU2NzZENDc5MUMyMEZBNUZBMDQ4ODE3NUQ0Qjky
QjM1NkFCNzZEMDU0OTM2MzY5QkI4MjI3MzlFMkE1NDE5QjJFNTQyMDc2QzEyQzEy
MTIwM0FERTBBMTVCQ0EyOThBMkU0QkQxRDNDMTBEMkNCNUVEN0FERjc4NjA4MEQ5
RjI1NEI5REY3MUY0OTY4QTU3RENEMTBBMTQ5RkFCMjI2QjQzOTgzQjc3RUI1QzVC
Q0Q0RkQ5NDg1NDVDRUVDNTA0QTkwQUNDNDIxMDlCQzRBNjJGNzY4QUVCRUJGOTM4
RTAyNzdDOUYxRTY1QTQ0OTBFNTc2NTE0NDM1ODQ3RkQ3QUFBODdEQkYyMzk2MTJB
MTVEMDkzOEU0RkNBRTkyRTQxRTM4RjdGNDE1QzMwOUEyQTM0RThGMDJBQkM3NzhE
NzQ4QzFFMkM4QzVEQkZDNDE4MERFNDM1MDMyNDY0NzU3RDg2QzkyRjhDQTcxQTBB
QjI2MzkyOTREQkFBODkyOEE5RkU5QzRCQzNCNUZFMjM1RTIzQkJCQTkzQjE4OTlG
QTZCNkFGRkFCMTlCRDkwODUyNEE5RDAyOEM0MkI2NjJFMDRFNEFFMTNDNEE5QkEw
N0ZBN0MwNTIwNzNBOEIwMjAzMDEwMDAxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8A
MIIBCgKCAQEA3KtnqYzLtuIWDyjPkny5w5xj5WdtR5HCD6X6BIgXXUuSs1ardtBU
k2Npu4InOeKlQZsuVCB2wSwSEgOt4KFbyimKLkvR08ENLLXtet94YIDZ8lS533H0
lopX3NEKFJ+rImtDmDt361xbzU/ZSFRc7sUEqQrMQhCbxKYvdorr6/k44Cd8nx5l
pEkOV2UUQ1hH/Xqqh9vyOWEqFdCTjk/K6S5B449/QVwwmio06PAqvHeNdIweLIxd
v8QYDeQ1AyRkdX2GyS+MpxoKsmOSlNuqiSip/pxLw7X+I14ju7qTsYmfprav+rGb
2QhSSp0CjEK2YuBOSuE8Spugf6fAUgc6iwIDAQABo4ICNDCCAjAwHQYDVR0OBBYE
FJmqD3N8AOLiE7c2NCV6BMxcd32kMB8GA1UdIwQYMBaAFKxVVEe6YsORB/Fr9XL4
KkF/co2/MA4GA1UdDwEB/wQEAwIHgDCBhQYDVR0fBH4wfDB6oHigdoZ0cnN5bmM6
Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMzk5M2YzNTAtYjc1Ni00OTE2LThk
ODQtNDg0ZjAyNWRmZmNjLzAvQUM1NTU0NDdCQTYyQzM5MTA3RjE2QkY1NzJGODJB
NDE3RjcyOERCRi5jcmwwdAYIKwYBBQUHAQEEaDBmMGQGCCsGAQUFBzAChlhyc3lu
YzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9JRE5JQy1JRC8yL0FDNTU1NDQ3
QkE2MkMzOTEwN0YxNkJGNTcyRjgyQTQxN0Y3MjhEQkYuY2VyMIGkBggrBgEFBQcB
CwSBlzCBlDCBkQYIKwYBBQUHMAuGgYRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5u
ZXQvcmVwby8zOTkzZjM1MC1iNzU2LTQ5MTYtOGQ4NC00ODRmMDI1ZGZmY2MvMC8z
MTM4MzIyZTMyMzUzMzJlMzEzODM5MmUzMDJmMzIzNDJkMzIzNDIwM2QzZTIwMzEz
NzM0MzUzMS5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcB
BwEB/wQQMA4wDAQCAAEwBgMEALb9vTANBgkqhkiG9w0BAQsFAAOCAQEAcyb2udmv
jfwUD3xQitbh7F72i5tHR3eGzzGFYkDAZOdh/cXex4Ip+zl294A2ItI9WnxXW/mf
TF07LfSp/n8Vc65VSBCKtImhcy3URlV3uaH+GYYM8ALoHYsD62bLpdayelnnigun
Sf7duE/uMlgggXHAh2HConEHUYl+hGHQcCBppXPMqBIBjWBIAPIOcDLqRyVbXiGb
01lw6mhc70ad8dbPD3JfuOnhMGoUKjGGA9OSo+fpZCcYU3bLkFcNsrA1cg6ELlSQ
FdHStytCqoSZr/Vgan27TTq5lwubbBEHQ1l4JUBofiwCyDMPiF5Pm9T0Qrfu21aa
90Zm/1XU9C/PKg==
-----END CERTIFICATE-----