Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/3993f350-b756-4916-8d84-484f025dffcc/0/3138322e3235332e3233392e302f32342d3234203d3e203137343531.roa
File:                     3138322e3235332e3233392e302f32342d3234203d3e203137343531.roa (raw, json)
Hash identifier:          u7QQGlO7D1R9p4aAOjbI6n4F2kHMG4W6JBh1oBw5Zio=
Subject key identifier:   C0:FA:C0:EA:E8:C2:62:88:4A:F9:FE:02:44:E1:C5:90:6B:CD:72:16
Certificate issuer:       /CN=AC555447BA62C39107F16BF572F82A417F728DBF
Certificate serial:       070AF9E09205E9856332ED0E9170FA8E5BDFC98B
Authority key identifier: AC:55:54:47:BA:62:C3:91:07:F1:6B:F5:72:F8:2A:41:7F:72:8D:BF
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AC555447BA62C39107F16BF572F82A417F728DBF.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/3993f350-b756-4916-8d84-484f025dffcc/0/3138322e3235332e3233392e302f32342d3234203d3e203137343531.roa
Signing time:             Thu 30 Sep 2021 00:01:21 +0000
ROA not before:           Wed 29 Sep 2021 23:56:21 +0000
ROA not after:            Fri 30 Sep 2022 00:01:21 +0000
asID:                     17451
IP address blocks:        182.253.239.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            07:0a:f9:e0:92:05:e9:85:63:32:ed:0e:91:70:fa:8e:5b:df:c9:8b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AC555447BA62C39107F16BF572F82A417F728DBF
        Validity
            Not Before: Sep 29 23:56:21 2021 GMT
            Not After : Sep 30 00:01:21 2022 GMT
        Subject: CN=3082010A0282010100A29AD82D090994193BCDCDDE97F59BC0ADD9775A40680E97FA296CD886CB3B454BEDB4DD1648CDE1AD428FA144DD9A0AFDF22ACD146F74D2761DE2D4CCC46E4EC4EC6992EA7CC590EFBD2780623705638711E8191F03F48746EFF6C914BD41F6E25937FF5D0073570B3BF2ED0228E7A8831FE3C41EB22E2DB49DF9C5A0D663BFED1A7F8D597A283FFF9E3A4824E9A3C7271BB01D06417E0385058DF612DD3844C4E526061E4282EB938EDD93B29F91CCECDE48ECD7B75B20F206BF2EA96D0ACFCD82BAABBB0BD9F44D04C59BEAD99A12C5C9DF5848FF30DC5CB2DA2B5F2762C6EB5D636EEF9341172618C7D95C52D313BF94199183270DE9E71610AEA0CE647B0203010001
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:9a:d8:2d:09:09:94:19:3b:cd:cd:de:97:f5:
                    9b:c0:ad:d9:77:5a:40:68:0e:97:fa:29:6c:d8:86:
                    cb:3b:45:4b:ed:b4:dd:16:48:cd:e1:ad:42:8f:a1:
                    44:dd:9a:0a:fd:f2:2a:cd:14:6f:74:d2:76:1d:e2:
                    d4:cc:c4:6e:4e:c4:ec:69:92:ea:7c:c5:90:ef:bd:
                    27:80:62:37:05:63:87:11:e8:19:1f:03:f4:87:46:
                    ef:f6:c9:14:bd:41:f6:e2:59:37:ff:5d:00:73:57:
                    0b:3b:f2:ed:02:28:e7:a8:83:1f:e3:c4:1e:b2:2e:
                    2d:b4:9d:f9:c5:a0:d6:63:bf:ed:1a:7f:8d:59:7a:
                    28:3f:ff:9e:3a:48:24:e9:a3:c7:27:1b:b0:1d:06:
                    41:7e:03:85:05:8d:f6:12:dd:38:44:c4:e5:26:06:
                    1e:42:82:eb:93:8e:dd:93:b2:9f:91:cc:ec:de:48:
                    ec:d7:b7:5b:20:f2:06:bf:2e:a9:6d:0a:cf:cd:82:
                    ba:ab:bb:0b:d9:f4:4d:04:c5:9b:ea:d9:9a:12:c5:
                    c9:df:58:48:ff:30:dc:5c:b2:da:2b:5f:27:62:c6:
                    eb:5d:63:6e:ef:93:41:17:26:18:c7:d9:5c:52:d3:
                    13:bf:94:19:91:83:27:0d:e9:e7:16:10:ae:a0:ce:
                    64:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C0:FA:C0:EA:E8:C2:62:88:4A:F9:FE:02:44:E1:C5:90:6B:CD:72:16
            X509v3 Authority Key Identifier:
                keyid:AC:55:54:47:BA:62:C3:91:07:F1:6B:F5:72:F8:2A:41:7F:72:8D:BF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/3993f350-b756-4916-8d84-484f025dffcc/0/AC555447BA62C39107F16BF572F82A417F728DBF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AC555447BA62C39107F16BF572F82A417F728DBF.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/3993f350-b756-4916-8d84-484f025dffcc/0/3138322e3235332e3233392e302f32342d3234203d3e203137343531.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  182.253.239.0/24

    Signature Algorithm: sha256WithRSAEncryption
         78:1d:2a:d3:55:86:47:1b:c2:33:90:64:d4:84:e3:18:be:fa:
         f6:e9:21:d8:f0:fd:20:8a:93:2d:b0:4b:42:78:6b:c7:88:8c:
         2e:0b:96:e9:af:a4:af:d9:34:58:98:3c:bd:a5:bb:20:1b:26:
         b8:52:26:d8:d1:09:53:99:b0:84:df:33:9f:a9:83:1d:8e:ad:
         a5:3b:46:a4:c9:01:d1:7c:31:03:60:89:45:5a:77:96:c4:f7:
         80:3b:9a:2d:9f:f8:eb:82:26:78:41:30:41:b9:7c:cd:03:c1:
         c1:4c:f7:93:93:24:5e:39:ea:d0:e0:cc:ff:14:9e:5d:65:1a:
         b2:c8:55:bf:e1:9c:f9:0c:ab:d4:cf:29:2e:e9:39:8d:f4:41:
         88:6b:73:70:34:7f:da:b5:55:3b:7e:55:71:69:3f:6f:87:7f:
         6f:c4:8a:6f:55:c5:1e:a1:01:9d:48:67:74:63:88:70:b8:11:
         46:9a:2f:43:0c:cf:f4:20:98:be:c4:c3:b1:b2:de:60:e5:2e:
         ee:4d:e3:2d:f5:de:21:73:43:7b:21:6e:bc:57:04:1c:53:c2:
         82:72:6d:7b:30:6c:c3:da:16:5c:f7:28:17:61:4e:57:8d:d0:
         b0:c9:a6:97:b6:3d:9e:a3:ff:d3:e0:ca:b6:f0:7e:0c:5b:39:
         39:f0:7e:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----