Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/3993f350-b756-4916-8d84-484f025dffcc/0/3138322e3235332e322e302f32342d3234203d3e203137343531.roa
File:                     3138322e3235332e322e302f32342d3234203d3e203137343531.roa (raw, json)
Hash identifier:          Pvo6qEXjrerz9c7kgIIVabzS8Qo80VKliq3iGn0irzM=
Subject key identifier:   99:A9:EF:02:2D:4F:AF:78:A9:AE:D1:A1:FA:9E:C8:82:49:0A:E1:9E
Certificate issuer:       /CN=AC555447BA62C39107F16BF572F82A417F728DBF
Certificate serial:       20F87ACE66C4FFA79607EAE44469BE2177E83864
Authority key identifier: AC:55:54:47:BA:62:C3:91:07:F1:6B:F5:72:F8:2A:41:7F:72:8D:BF
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AC555447BA62C39107F16BF572F82A417F728DBF.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/3993f350-b756-4916-8d84-484f025dffcc/0/3138322e3235332e322e302f32342d3234203d3e203137343531.roa
Signing time:             Thu 30 Sep 2021 00:00:52 +0000
ROA not before:           Wed 29 Sep 2021 23:55:52 +0000
ROA not after:            Fri 30 Sep 2022 00:00:52 +0000
asID:                     17451
IP address blocks:        182.253.2.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            20:f8:7a:ce:66:c4:ff:a7:96:07:ea:e4:44:69:be:21:77:e8:38:64
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AC555447BA62C39107F16BF572F82A417F728DBF
        Validity
            Not Before: Sep 29 23:55:52 2021 GMT
            Not After : Sep 30 00:00:52 2022 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:3c:98:d9:da:43:e9:e8:1d:02:21:df:15:fb:
                    84:c8:ff:c9:36:1a:59:93:c8:91:37:e1:50:65:64:
                    f2:c2:40:28:3e:14:ad:e9:19:de:fb:d0:50:40:8b:
                    ae:06:9c:85:0e:7b:42:d4:b4:82:48:f0:de:86:d3:
                    15:f2:de:56:80:7e:ee:8d:76:6a:b9:52:c0:4b:33:
                    3f:3b:89:91:f0:67:3a:3e:0b:06:2f:37:d6:30:75:
                    93:33:17:6a:b9:42:e4:67:6f:4d:52:f8:1d:6d:1d:
                    15:23:12:c5:19:07:17:85:af:b3:52:1d:e1:51:01:
                    de:bb:80:73:a3:3e:24:46:23:59:73:86:59:cb:3b:
                    f1:7e:f8:44:60:8b:6c:ad:6c:cb:84:d5:be:d8:59:
                    22:ba:65:25:e3:1f:5c:c4:01:57:d3:a1:c1:21:0d:
                    3e:2b:af:02:ae:3b:da:47:5e:58:48:6c:09:84:46:
                    63:9a:84:33:8a:41:ea:4a:f1:73:d3:6f:d5:d2:1f:
                    3a:7e:c1:21:b0:59:88:5a:13:53:79:7c:62:79:55:
                    2e:b9:9e:21:31:90:ba:12:03:26:91:7c:fe:93:94:
                    23:0a:e3:90:af:9c:e5:c9:4b:37:8a:05:18:11:8d:
                    15:4a:11:fc:e9:7d:1e:7a:d0:95:c0:75:eb:63:ff:
                    13:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                99:A9:EF:02:2D:4F:AF:78:A9:AE:D1:A1:FA:9E:C8:82:49:0A:E1:9E
            X509v3 Authority Key Identifier:
                keyid:AC:55:54:47:BA:62:C3:91:07:F1:6B:F5:72:F8:2A:41:7F:72:8D:BF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/3993f350-b756-4916-8d84-484f025dffcc/0/AC555447BA62C39107F16BF572F82A417F728DBF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AC555447BA62C39107F16BF572F82A417F728DBF.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/3993f350-b756-4916-8d84-484f025dffcc/0/3138322e3235332e322e302f32342d3234203d3e203137343531.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  182.253.2.0/24

    Signature Algorithm: sha256WithRSAEncryption
         6c:81:9e:e0:2f:fe:17:e2:16:f5:ea:bb:de:b8:47:85:ad:d5:
         cb:5d:a7:a8:61:0f:16:e9:62:f9:de:72:ac:7f:87:6b:34:75:
         5b:a3:52:63:4d:6a:eb:89:a4:6a:ad:ba:a2:ee:3e:8d:7f:5a:
         7d:1f:17:35:e7:78:e9:0e:39:d2:5d:50:c0:77:4b:1d:50:e4:
         ff:7b:64:c5:ad:05:d5:19:69:b7:86:7a:37:46:d6:e4:90:4d:
         d4:f3:a9:7d:b8:bf:d7:06:bc:59:16:10:5f:66:21:d0:7f:b3:
         0a:39:5e:6c:9c:87:c8:88:56:ae:c5:4a:a9:de:bb:87:16:8c:
         8c:e9:05:f8:4c:e1:ff:4e:7c:0b:f4:6c:6e:cf:3b:61:b0:96:
         59:a0:2c:29:3b:0a:3b:c4:03:a2:1f:5a:1a:7a:b9:a1:bb:bf:
         d9:1e:48:bd:08:a8:d9:c8:3a:8e:60:ab:5d:80:93:7c:f4:24:
         a5:3a:ce:20:25:0c:e3:41:de:11:2f:d7:7a:c5:65:55:7d:78:
         23:d5:1b:9e:03:49:49:36:22:47:22:ff:76:1f:8d:ff:d9:07:
         02:82:cb:fd:0a:f1:28:fd:a9:7b:83:51:9e:36:7d:c3:7f:63:
         b7:ee:de:8e:44:bf:a1:33:24:ba:59:ab:5d:f1:fa:e0:13:64:
         d2:2d:16:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----