Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/3993f350-b756-4916-8d84-484f025dffcc/0/3138322e3235332e3233382e302f32342d3234203d3e203137343531.roa
File:                     3138322e3235332e3233382e302f32342d3234203d3e203137343531.roa (raw, json)
Hash identifier:          M8vsbmy8gvBxZVPHQeBa0S8mLy2tKJtmaIT+TEyYBfY=
Subject key identifier:   21:37:AE:69:D4:9D:76:7A:5B:EC:FF:E4:48:72:CA:BD:6C:6F:E2:51
Certificate issuer:       /CN=AC555447BA62C39107F16BF572F82A417F728DBF
Certificate serial:       1CB1816F0C1D48469180BD31BD72BB58E63A2EFE
Authority key identifier: AC:55:54:47:BA:62:C3:91:07:F1:6B:F5:72:F8:2A:41:7F:72:8D:BF
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AC555447BA62C39107F16BF572F82A417F728DBF.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/3993f350-b756-4916-8d84-484f025dffcc/0/3138322e3235332e3233382e302f32342d3234203d3e203137343531.roa
Signing time:             Thu 30 Sep 2021 00:00:44 +0000
ROA not before:           Wed 29 Sep 2021 23:55:44 +0000
ROA not after:            Fri 30 Sep 2022 00:00:44 +0000
asID:                     17451
IP address blocks:        182.253.238.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1c:b1:81:6f:0c:1d:48:46:91:80:bd:31:bd:72:bb:58:e6:3a:2e:fe
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AC555447BA62C39107F16BF572F82A417F728DBF
        Validity
            Not Before: Sep 29 23:55:44 2021 GMT
            Not After : Sep 30 00:00:44 2022 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:9c:e8:81:c8:86:cd:ee:0c:26:91:27:a2:dd:
                    19:34:88:93:2e:c2:e2:3e:14:d6:a9:10:c9:8f:55:
                    cf:39:d4:a1:ca:60:a6:b3:ea:54:61:c0:3b:43:dc:
                    a2:5e:b3:bb:a8:b6:75:42:d3:aa:e7:b6:86:81:83:
                    9b:9c:30:89:8f:f0:e8:93:1f:0d:1f:cd:ce:fe:37:
                    4b:c1:90:1f:ce:d8:4a:cb:c3:b2:cf:83:94:37:95:
                    0f:de:6c:86:f0:8e:b9:64:42:31:71:b5:77:41:05:
                    b6:d1:cd:f5:bc:56:38:89:a4:dd:c7:a6:36:5e:e9:
                    b6:84:ba:94:7c:ef:1d:46:8a:16:d5:86:49:b0:3d:
                    f5:e0:7a:dc:ba:c9:84:2b:02:ee:75:11:77:f1:f8:
                    eb:cf:bd:81:26:ec:19:74:d0:9a:c2:70:29:5e:68:
                    59:cc:c7:a1:12:97:bb:ae:1e:57:f4:b9:71:23:89:
                    d1:47:cc:4b:56:84:5e:26:cb:40:1d:45:94:3c:36:
                    cb:f0:94:49:35:57:12:94:29:22:9a:11:73:a9:49:
                    cf:24:73:42:5a:7e:0e:20:99:2e:12:3a:7f:9d:a5:
                    1b:7e:ba:8c:af:36:9d:9c:f1:b4:5a:36:8e:7c:94:
                    f5:9c:00:2c:74:2b:ad:b1:8f:b2:1d:36:2e:51:20:
                    ee:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                21:37:AE:69:D4:9D:76:7A:5B:EC:FF:E4:48:72:CA:BD:6C:6F:E2:51
            X509v3 Authority Key Identifier:
                keyid:AC:55:54:47:BA:62:C3:91:07:F1:6B:F5:72:F8:2A:41:7F:72:8D:BF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/3993f350-b756-4916-8d84-484f025dffcc/0/AC555447BA62C39107F16BF572F82A417F728DBF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AC555447BA62C39107F16BF572F82A417F728DBF.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/3993f350-b756-4916-8d84-484f025dffcc/0/3138322e3235332e3233382e302f32342d3234203d3e203137343531.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  182.253.238.0/24

    Signature Algorithm: sha256WithRSAEncryption
         39:81:a0:ed:3e:e3:35:fa:87:b1:7b:92:1b:c7:9d:dd:e9:bc:
         63:53:6d:72:cf:54:19:90:5a:9a:7b:4a:6c:e3:50:79:35:6b:
         74:e7:a7:eb:61:27:3f:25:d5:84:4e:f2:ac:b7:50:a3:d2:b1:
         1b:95:61:77:a4:d8:b9:1f:2c:53:a2:38:b9:21:ef:fb:eb:37:
         67:71:78:96:22:0c:d9:fe:f0:f4:33:ac:13:5b:65:5f:b1:51:
         f4:8f:62:7d:5b:d4:42:d9:87:f9:cb:52:51:cb:ed:5f:bb:8a:
         f1:57:50:95:ba:9e:d5:0c:7e:a0:26:a7:f8:4f:f2:9b:c3:3c:
         00:e5:65:4a:89:ff:bb:c5:12:05:9f:6d:38:63:70:3a:3c:e6:
         8c:fc:8d:83:a8:63:56:c9:db:ca:51:90:e0:fd:36:e9:ed:dc:
         5c:25:bc:7b:4d:83:59:90:f9:0e:98:d4:0b:df:77:30:52:1c:
         46:83:c6:64:ea:ba:29:47:0b:af:cb:4f:e7:a4:c5:80:28:ac:
         16:3c:0c:2e:1e:5e:e2:bb:76:b5:50:17:eb:33:c8:7c:a2:e1:
         5e:e1:1e:13:ec:42:9e:5c:f1:c2:bf:aa:dc:e6:12:fb:47:02:
         a6:b8:67:c1:26:10:21:f0:ff:92:1a:bc:cb:1c:a2:b2:8d:d2:
         2a:83:f7:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----