Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/3993f350-b756-4916-8d84-484f025dffcc/0/3138322e3235332e3234332e302f32342d3234203d3e203137343531.roa
File:                     3138322e3235332e3234332e302f32342d3234203d3e203137343531.roa (raw, json)
Hash identifier:          T553GmZhheHAg+MQfy8fimY1GU/ALh5822s4vNwmu0U=
Subject key identifier:   E4:9D:CC:05:95:76:58:76:75:FF:B4:6D:BD:0F:F0:CC:12:1F:80:33
Certificate issuer:       /CN=AC555447BA62C39107F16BF572F82A417F728DBF
Certificate serial:       5E2FCE999D299CA440858C4539A72E4F415C9BEC
Authority key identifier: AC:55:54:47:BA:62:C3:91:07:F1:6B:F5:72:F8:2A:41:7F:72:8D:BF
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AC555447BA62C39107F16BF572F82A417F728DBF.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/3993f350-b756-4916-8d84-484f025dffcc/0/3138322e3235332e3234332e302f32342d3234203d3e203137343531.roa
Signing time:             Thu 30 Sep 2021 00:00:45 +0000
ROA not before:           Wed 29 Sep 2021 23:55:45 +0000
ROA not after:            Fri 30 Sep 2022 00:00:45 +0000
asID:                     17451
IP address blocks:        182.253.243.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5e:2f:ce:99:9d:29:9c:a4:40:85:8c:45:39:a7:2e:4f:41:5c:9b:ec
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AC555447BA62C39107F16BF572F82A417F728DBF
        Validity
            Not Before: Sep 29 23:55:45 2021 GMT
            Not After : Sep 30 00:00:45 2022 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:1e:19:10:6a:d2:db:2f:fa:b1:69:af:1f:f4:
                    6e:f3:17:6e:10:96:c8:4c:1d:bf:73:4f:fb:01:1b:
                    bf:54:8b:5f:72:23:f6:35:70:a7:da:d0:42:d8:0b:
                    ab:4d:00:56:2e:bc:82:01:30:d2:11:c9:62:5c:5a:
                    33:89:bd:36:37:5f:f5:c7:fb:83:7a:ce:57:0b:ab:
                    d4:17:d3:38:7c:ed:65:b3:ea:c3:95:50:f3:42:e1:
                    21:e9:93:55:95:66:1c:54:13:85:01:d4:7a:b3:a0:
                    86:90:69:cd:d9:d4:93:d2:71:d2:39:dd:40:eb:46:
                    8f:63:84:70:4d:f8:1f:c8:dc:63:7c:c4:27:92:c6:
                    b6:73:c3:52:c3:76:53:f6:7b:f3:cc:f9:dc:5f:ff:
                    4b:cb:a7:c8:13:30:69:fa:81:e2:a3:e6:85:94:a8:
                    75:eb:e9:c9:6b:c0:1f:95:05:07:e5:2c:f0:5c:3e:
                    e2:07:62:32:ba:30:d4:fc:89:21:cc:46:af:58:54:
                    9b:cf:cd:f7:74:b8:f9:4e:68:2b:c6:4e:e0:f6:3a:
                    40:80:85:19:97:23:e3:ea:c3:7e:44:cb:3f:ee:9d:
                    46:73:92:7d:58:4a:b1:52:77:d8:c8:9e:5f:b8:ed:
                    95:bc:25:54:ce:d0:ec:9c:08:6b:02:ee:91:16:01:
                    4a:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E4:9D:CC:05:95:76:58:76:75:FF:B4:6D:BD:0F:F0:CC:12:1F:80:33
            X509v3 Authority Key Identifier:
                keyid:AC:55:54:47:BA:62:C3:91:07:F1:6B:F5:72:F8:2A:41:7F:72:8D:BF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/3993f350-b756-4916-8d84-484f025dffcc/0/AC555447BA62C39107F16BF572F82A417F728DBF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AC555447BA62C39107F16BF572F82A417F728DBF.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/3993f350-b756-4916-8d84-484f025dffcc/0/3138322e3235332e3234332e302f32342d3234203d3e203137343531.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  182.253.243.0/24

    Signature Algorithm: sha256WithRSAEncryption
         26:b3:51:c4:51:65:b1:ef:82:d6:b1:2a:b4:0c:0d:a5:ad:74:
         bf:b1:aa:d8:d3:d4:71:a3:fd:c4:8d:70:0c:fd:83:2c:3b:aa:
         00:c8:3e:ac:2d:fe:14:ab:a2:a7:45:8c:3e:c1:92:f0:d4:10:
         ac:06:99:4e:12:2a:4a:32:51:6f:28:7f:02:13:b2:bb:7d:85:
         1d:ef:92:dc:c3:0a:7c:a3:0c:1c:2b:a8:da:d3:a6:5c:b2:60:
         14:e0:a3:94:98:4a:82:5b:e0:10:1d:85:8f:ca:8b:a7:a6:bd:
         e8:26:47:21:a9:56:1f:2a:67:66:29:00:31:2f:3c:47:6a:eb:
         58:5f:45:ce:f6:f5:fc:80:96:ea:84:bc:82:f8:82:88:f5:be:
         76:89:8c:c1:00:3a:45:c4:1b:02:6f:03:f4:9b:27:6a:39:27:
         60:e0:2d:14:77:ab:50:c2:9f:74:0a:db:5d:81:a1:53:90:6b:
         2b:34:0d:e4:af:92:2b:97:e4:ab:9c:73:89:bc:6c:61:83:86:
         86:72:89:ad:d3:86:05:ee:77:89:42:69:a6:66:de:6d:d6:44:
         7d:05:f6:38:19:67:b0:93:57:f0:82:80:a8:84:12:f2:40:a9:
         e3:11:40:0a:86:29:80:b4:2e:fd:22:61:57:71:aa:3c:bb:2e:
         2a:d7:67:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----