Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/3993f350-b756-4916-8d84-484f025dffcc/0/3138322e3235332e32332e302f32342d3234203d3e203137343531.roa
File:                     3138322e3235332e32332e302f32342d3234203d3e203137343531.roa (raw, json)
Hash identifier:          fSwpZxnSqpPnoxOaPatJSt4YQRRgDengm7QZEF5fGdM=
Subject key identifier:   8C:2E:3E:26:C6:B5:07:6F:CE:53:92:29:D5:1D:B9:53:68:E7:84:25
Certificate issuer:       /CN=AC555447BA62C39107F16BF572F82A417F728DBF
Certificate serial:       37A4E7BBA154F9AA44834CEAA84CA8BDDE4350C1
Authority key identifier: AC:55:54:47:BA:62:C3:91:07:F1:6B:F5:72:F8:2A:41:7F:72:8D:BF
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AC555447BA62C39107F16BF572F82A417F728DBF.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/3993f350-b756-4916-8d84-484f025dffcc/0/3138322e3235332e32332e302f32342d3234203d3e203137343531.roa
Signing time:             Thu 30 Sep 2021 00:00:02 +0000
ROA not before:           Wed 29 Sep 2021 23:55:02 +0000
ROA not after:            Fri 30 Sep 2022 00:00:02 +0000
asID:                     17451
IP address blocks:        182.253.23.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            37:a4:e7:bb:a1:54:f9:aa:44:83:4c:ea:a8:4c:a8:bd:de:43:50:c1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AC555447BA62C39107F16BF572F82A417F728DBF
        Validity
            Not Before: Sep 29 23:55:02 2021 GMT
            Not After : Sep 30 00:00:02 2022 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:7d:fe:41:0d:66:37:71:d6:7f:91:96:19:c5:
                    85:4f:34:14:3c:38:bf:ae:38:ec:af:6d:9a:6c:e0:
                    f8:2f:87:25:9e:65:69:e7:e0:7c:1a:da:4b:0b:7a:
                    72:1d:79:80:0b:9d:37:0b:17:6c:4d:fc:56:08:aa:
                    37:0a:e9:69:ed:54:2e:67:bc:2d:93:c8:56:7c:a1:
                    ed:a0:41:c4:aa:22:04:af:c2:04:c1:8e:3d:f1:95:
                    00:ba:ba:0e:da:12:ea:91:2f:40:90:fa:01:cd:48:
                    04:46:5e:3f:5c:88:d3:a8:65:a6:1e:cf:f3:2a:f3:
                    ef:65:9e:5d:ec:4f:ce:fd:de:66:4d:4f:dd:b0:e9:
                    13:7b:f5:db:0d:a9:fb:66:f6:17:ff:a9:ab:ed:21:
                    e6:31:cc:96:bc:d1:87:08:d4:1a:c1:76:80:3b:a3:
                    80:a1:e2:0c:c5:65:74:85:72:44:6e:c5:a8:47:f9:
                    84:37:ee:01:78:51:53:97:fe:a5:43:d4:f6:5d:80:
                    4c:e8:64:21:12:c6:e6:73:11:42:05:29:5b:ac:b3:
                    55:af:44:30:7d:d4:23:75:4d:ff:8b:22:f1:03:01:
                    3f:19:ac:92:d9:15:05:a9:2d:ff:23:47:f6:af:93:
                    4b:da:ea:db:25:16:b8:f3:a0:0d:1f:d7:7b:5a:44:
                    33:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8C:2E:3E:26:C6:B5:07:6F:CE:53:92:29:D5:1D:B9:53:68:E7:84:25
            X509v3 Authority Key Identifier:
                keyid:AC:55:54:47:BA:62:C3:91:07:F1:6B:F5:72:F8:2A:41:7F:72:8D:BF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/3993f350-b756-4916-8d84-484f025dffcc/0/AC555447BA62C39107F16BF572F82A417F728DBF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AC555447BA62C39107F16BF572F82A417F728DBF.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/3993f350-b756-4916-8d84-484f025dffcc/0/3138322e3235332e32332e302f32342d3234203d3e203137343531.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  182.253.23.0/24

    Signature Algorithm: sha256WithRSAEncryption
         92:47:27:16:14:77:1f:85:3a:eb:2d:63:7b:b9:b8:0b:26:89:
         29:12:5d:d1:8b:10:dc:0d:e5:f1:11:c4:ef:01:d9:e0:ad:a4:
         3b:0f:64:e8:94:a7:48:1f:03:6b:ed:72:e4:23:ca:b1:b4:fc:
         fd:9b:bb:e2:3a:52:48:ec:ec:5c:dd:2d:6c:db:08:17:bc:56:
         55:81:28:84:38:6f:5f:ec:d4:65:c5:87:b2:c6:da:57:d2:99:
         ea:1f:a0:6f:86:c8:fa:4e:c6:c5:10:c5:d3:e6:c3:07:d1:52:
         fb:39:e9:88:80:bd:6c:13:c7:ed:30:d8:ed:99:1b:6c:ee:d8:
         57:54:e9:8d:a7:8a:02:49:32:b6:65:a1:84:b9:08:8a:03:bc:
         42:ba:86:49:16:b1:8b:f0:fc:25:27:0c:ff:74:ad:f6:cc:7f:
         d3:24:04:4d:a6:3b:7c:35:9b:e3:3f:8b:f2:9b:0c:ad:71:ba:
         25:c8:29:a9:ad:aa:4b:a5:b5:17:e8:a9:42:69:6e:64:b2:09:
         37:aa:27:65:2f:2b:64:a8:71:7d:0c:c3:78:60:1f:1c:d1:18:
         2c:c7:4a:c2:07:01:4e:79:8d:52:08:f4:c7:32:60:18:a5:33:
         04:9b:74:bc:80:fe:d3:d3:70:ec:75:1b:09:54:6c:1c:c1:79:
         0d:fd:99:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----