Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/3993f350-b756-4916-8d84-484f025dffcc/0/3138322e3235332e31392e302f32342d3234203d3e203137343531.roa
File:                     3138322e3235332e31392e302f32342d3234203d3e203137343531.roa (raw, json)
Hash identifier:          zM8zgB/gawtQ2t9IrtmpR/OB0uI9y/pe293bEYqEuwc=
Subject key identifier:   25:4E:03:C3:12:D5:49:53:3A:74:A5:DD:A0:50:A5:C4:14:A9:43:FD
Certificate issuer:       /CN=AC555447BA62C39107F16BF572F82A417F728DBF
Certificate serial:       1B3993EBAF7E72B720509EC33637530C1AB12F60
Authority key identifier: AC:55:54:47:BA:62:C3:91:07:F1:6B:F5:72:F8:2A:41:7F:72:8D:BF
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AC555447BA62C39107F16BF572F82A417F728DBF.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/3993f350-b756-4916-8d84-484f025dffcc/0/3138322e3235332e31392e302f32342d3234203d3e203137343531.roa
Signing time:             Thu 30 Sep 2021 00:01:01 +0000
ROA not before:           Wed 29 Sep 2021 23:56:01 +0000
ROA not after:            Fri 30 Sep 2022 00:01:01 +0000
asID:                     17451
IP address blocks:        182.253.19.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1b:39:93:eb:af:7e:72:b7:20:50:9e:c3:36:37:53:0c:1a:b1:2f:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AC555447BA62C39107F16BF572F82A417F728DBF
        Validity
            Not Before: Sep 29 23:56:01 2021 GMT
            Not After : Sep 30 00:01:01 2022 GMT
        Subject: CN=3082010A0282010100DD20B5ABB07A437B0E1E88C6A7199495CDD3726BF1A1A484458DC1F8A8B1F46E5D3DEAD0C02C417F42C71DBB6812E8C09B8899AC9CAA484489D0FE8E047DC55F6531770682E5EA840121321787C47BDE05293A4EC0B3588B352E1E62E2811EB023D9E304487A43EEA097DD66576A871F629DE135E2ED004DB4A8DF71EF0B40A969ABA1F839AFBA070F95DEAE9BD64CAE7BC48A355C9CA80ED2CF041BB9A4CFC4ED15208F839E6A480857AB531CEDB62D4043D9A3F6F69E01FD8CF30B7C26827479828F184A12C49AB1D922C2B83F30AD9AB5E497FAF9AEACA7C8CE9E3EA27D6F909056C902171CB79CC604B22913082B333D66DCCA50C9620B4EB2A8FDC729430203010001
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:20:b5:ab:b0:7a:43:7b:0e:1e:88:c6:a7:19:
                    94:95:cd:d3:72:6b:f1:a1:a4:84:45:8d:c1:f8:a8:
                    b1:f4:6e:5d:3d:ea:d0:c0:2c:41:7f:42:c7:1d:bb:
                    68:12:e8:c0:9b:88:99:ac:9c:aa:48:44:89:d0:fe:
                    8e:04:7d:c5:5f:65:31:77:06:82:e5:ea:84:01:21:
                    32:17:87:c4:7b:de:05:29:3a:4e:c0:b3:58:8b:35:
                    2e:1e:62:e2:81:1e:b0:23:d9:e3:04:48:7a:43:ee:
                    a0:97:dd:66:57:6a:87:1f:62:9d:e1:35:e2:ed:00:
                    4d:b4:a8:df:71:ef:0b:40:a9:69:ab:a1:f8:39:af:
                    ba:07:0f:95:de:ae:9b:d6:4c:ae:7b:c4:8a:35:5c:
                    9c:a8:0e:d2:cf:04:1b:b9:a4:cf:c4:ed:15:20:8f:
                    83:9e:6a:48:08:57:ab:53:1c:ed:b6:2d:40:43:d9:
                    a3:f6:f6:9e:01:fd:8c:f3:0b:7c:26:82:74:79:82:
                    8f:18:4a:12:c4:9a:b1:d9:22:c2:b8:3f:30:ad:9a:
                    b5:e4:97:fa:f9:ae:ac:a7:c8:ce:9e:3e:a2:7d:6f:
                    90:90:56:c9:02:17:1c:b7:9c:c6:04:b2:29:13:08:
                    2b:33:3d:66:dc:ca:50:c9:62:0b:4e:b2:a8:fd:c7:
                    29:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                25:4E:03:C3:12:D5:49:53:3A:74:A5:DD:A0:50:A5:C4:14:A9:43:FD
            X509v3 Authority Key Identifier:
                keyid:AC:55:54:47:BA:62:C3:91:07:F1:6B:F5:72:F8:2A:41:7F:72:8D:BF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/3993f350-b756-4916-8d84-484f025dffcc/0/AC555447BA62C39107F16BF572F82A417F728DBF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AC555447BA62C39107F16BF572F82A417F728DBF.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/3993f350-b756-4916-8d84-484f025dffcc/0/3138322e3235332e31392e302f32342d3234203d3e203137343531.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  182.253.19.0/24

    Signature Algorithm: sha256WithRSAEncryption
         71:87:f0:46:97:d1:c8:3f:b9:ca:3a:e2:46:1a:03:70:60:e3:
         9b:a8:ac:d6:6d:3e:47:0e:8a:55:5f:16:50:f9:80:d0:d8:25:
         4f:c5:b4:64:2f:22:6a:58:83:87:b3:e5:ef:b1:b7:fd:d9:b3:
         f3:5f:23:03:b5:c9:5e:47:2a:0d:b0:1a:c4:35:bd:9f:44:00:
         d6:d6:b3:fc:39:67:a0:cb:28:60:3c:9c:4a:e7:80:9b:bc:10:
         ff:16:8f:05:09:de:d6:87:b9:b6:76:ec:1c:5d:70:77:e5:f8:
         bd:a1:93:2a:26:35:09:3e:69:9f:83:4e:f1:8f:ea:66:b2:9e:
         7f:5d:fe:bb:5a:5b:dc:b4:6e:da:95:44:f9:91:ba:44:f0:a3:
         b3:6d:fa:1a:e5:6c:37:4a:f4:a3:3e:0f:e6:b1:47:d8:fe:d6:
         36:ec:d8:5b:4c:c3:b5:1e:ac:33:71:21:6a:12:ae:6d:36:b0:
         77:30:53:9d:04:20:6d:bf:3b:e2:97:81:d4:5c:20:62:34:71:
         4f:a0:1e:59:09:19:c9:c0:02:0b:2b:d1:6c:f5:66:81:ca:a6:
         ec:18:22:88:29:06:7a:e3:36:20:37:18:06:2d:5f:83:ed:e7:
         84:ab:19:13:29:ca:e5:ef:b7:b4:01:ae:36:24:a7:6a:65:77:
         7e:c9:c6:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----