Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/3993f350-b756-4916-8d84-484f025dffcc/0/3138322e3235332e3232392e302f32342d3234203d3e203137343531.roa
File:                     3138322e3235332e3232392e302f32342d3234203d3e203137343531.roa (raw, json)
Hash identifier:          QtGiwwwPOufLRHyUU84OwsbfpzPq2zVizU2o8nR+0JA=
Subject key identifier:   B7:2C:1D:EE:4E:5D:DD:EF:22:25:25:15:F8:51:90:F1:23:90:D3:CF
Certificate issuer:       /CN=AC555447BA62C39107F16BF572F82A417F728DBF
Certificate serial:       4E80F691417F14166768878A4A3F338DF27E173D
Authority key identifier: AC:55:54:47:BA:62:C3:91:07:F1:6B:F5:72:F8:2A:41:7F:72:8D:BF
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AC555447BA62C39107F16BF572F82A417F728DBF.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/3993f350-b756-4916-8d84-484f025dffcc/0/3138322e3235332e3232392e302f32342d3234203d3e203137343531.roa
Signing time:             Thu 30 Sep 2021 00:00:43 +0000
ROA not before:           Wed 29 Sep 2021 23:55:43 +0000
ROA not after:            Fri 30 Sep 2022 00:00:43 +0000
asID:                     17451
IP address blocks:        182.253.229.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4e:80:f6:91:41:7f:14:16:67:68:87:8a:4a:3f:33:8d:f2:7e:17:3d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AC555447BA62C39107F16BF572F82A417F728DBF
        Validity
            Not Before: Sep 29 23:55:43 2021 GMT
            Not After : Sep 30 00:00:43 2022 GMT
        Subject: CN=3082010A028201010097572ACEDD7D2C80A75FE8C7E32448E8AA7254D9A789F42F6AC5DD3441F6F5E97067B2F53F3CCE7811B92A940FAF6E41B8BB96BCCA8958213E2D8B8C322E4BB9144EA0880C78D247785D4DB72D09750643AB6E4D68E87ECB19CFDD408C56524516AAB85C0057DCAEC77F632B9FB617F2A1AEE8B151571C82279259EFFC7F8BCDB7582754358BE69BADCDC1B830EE568B367DB34913CC9436032854FDD079032622C707650DE4815DBE33FC98E10ACFACD577D80094CC57A3A9D50C7AAC14C7B07EBD1CF511D41D9100A5CA3705D1139035F09C6022D026E6130DF5B960DE0E3E1454654E64E46F34CC439649D4B63B1004475099A2BBAEF9BD66D0A0561D11A90203010001
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:57:2a:ce:dd:7d:2c:80:a7:5f:e8:c7:e3:24:
                    48:e8:aa:72:54:d9:a7:89:f4:2f:6a:c5:dd:34:41:
                    f6:f5:e9:70:67:b2:f5:3f:3c:ce:78:11:b9:2a:94:
                    0f:af:6e:41:b8:bb:96:bc:ca:89:58:21:3e:2d:8b:
                    8c:32:2e:4b:b9:14:4e:a0:88:0c:78:d2:47:78:5d:
                    4d:b7:2d:09:75:06:43:ab:6e:4d:68:e8:7e:cb:19:
                    cf:dd:40:8c:56:52:45:16:aa:b8:5c:00:57:dc:ae:
                    c7:7f:63:2b:9f:b6:17:f2:a1:ae:e8:b1:51:57:1c:
                    82:27:92:59:ef:fc:7f:8b:cd:b7:58:27:54:35:8b:
                    e6:9b:ad:cd:c1:b8:30:ee:56:8b:36:7d:b3:49:13:
                    cc:94:36:03:28:54:fd:d0:79:03:26:22:c7:07:65:
                    0d:e4:81:5d:be:33:fc:98:e1:0a:cf:ac:d5:77:d8:
                    00:94:cc:57:a3:a9:d5:0c:7a:ac:14:c7:b0:7e:bd:
                    1c:f5:11:d4:1d:91:00:a5:ca:37:05:d1:13:90:35:
                    f0:9c:60:22:d0:26:e6:13:0d:f5:b9:60:de:0e:3e:
                    14:54:65:4e:64:e4:6f:34:cc:43:96:49:d4:b6:3b:
                    10:04:47:50:99:a2:bb:ae:f9:bd:66:d0:a0:56:1d:
                    11:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B7:2C:1D:EE:4E:5D:DD:EF:22:25:25:15:F8:51:90:F1:23:90:D3:CF
            X509v3 Authority Key Identifier:
                keyid:AC:55:54:47:BA:62:C3:91:07:F1:6B:F5:72:F8:2A:41:7F:72:8D:BF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/3993f350-b756-4916-8d84-484f025dffcc/0/AC555447BA62C39107F16BF572F82A417F728DBF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AC555447BA62C39107F16BF572F82A417F728DBF.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/3993f350-b756-4916-8d84-484f025dffcc/0/3138322e3235332e3232392e302f32342d3234203d3e203137343531.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  182.253.229.0/24

    Signature Algorithm: sha256WithRSAEncryption
         78:1e:36:e1:55:4c:0d:27:fe:c8:8a:67:4b:c3:f7:cf:26:e2:
         5b:77:fb:6c:3e:7b:72:cb:a4:11:7e:f1:13:2a:1a:22:fa:be:
         21:65:e7:54:c3:51:7e:2b:6b:40:18:5f:ab:c6:4f:c0:2a:5b:
         a2:e0:64:55:79:2d:65:89:1f:69:37:b8:b5:07:c8:ac:82:f3:
         73:e8:8e:1b:a3:8a:17:f0:79:d1:f0:03:05:78:5d:4a:18:c5:
         33:ab:96:e6:7f:ba:4a:d5:dd:3a:1d:0e:53:1c:19:81:55:2e:
         da:67:e2:f1:51:08:36:39:3a:bb:4b:a8:68:97:dc:99:05:17:
         cb:dc:b6:bb:fc:c1:e6:33:67:5f:16:d6:1f:2e:95:eb:d5:62:
         5c:22:21:30:85:23:09:53:47:96:75:11:e1:49:c2:02:74:0b:
         50:91:f5:ce:49:cf:8f:5c:c6:fe:74:75:45:47:91:76:ed:7e:
         e5:fd:ff:43:5c:f7:82:d8:6a:15:ea:74:8c:4f:96:97:6a:a9:
         15:a8:1c:52:98:04:0e:13:4a:c7:f3:30:db:34:10:27:8a:f8:
         ab:fe:b3:8e:41:ea:fc:f5:1c:8f:c4:49:49:da:7a:8f:9b:d5:
         1d:a8:ea:a9:69:d9:91:54:b9:11:6d:cc:71:91:59:25:15:5d:
         23:9a:45:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----