Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/3993f350-b756-4916-8d84-484f025dffcc/0/3138322e3235332e3235352e302f32342d3234203d3e203137343531.roa
File:                     3138322e3235332e3235352e302f32342d3234203d3e203137343531.roa (raw, json)
Hash identifier:          35u7R4Y47ETd+Pe4z04cn330xWTDGflgDmgt1Hrrq4E=
Subject key identifier:   8C:C1:CC:E4:74:8B:56:1C:9E:79:D5:F6:20:47:23:7E:B8:B1:15:6D
Certificate issuer:       /CN=AC555447BA62C39107F16BF572F82A417F728DBF
Certificate serial:       77A15C7832FF331B80585BA54AE81C3C495A3415
Authority key identifier: AC:55:54:47:BA:62:C3:91:07:F1:6B:F5:72:F8:2A:41:7F:72:8D:BF
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AC555447BA62C39107F16BF572F82A417F728DBF.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/3993f350-b756-4916-8d84-484f025dffcc/0/3138322e3235332e3235352e302f32342d3234203d3e203137343531.roa
Signing time:             Thu 30 Sep 2021 00:00:45 +0000
ROA not before:           Wed 29 Sep 2021 23:55:45 +0000
ROA not after:            Fri 30 Sep 2022 00:00:45 +0000
asID:                     17451
IP address blocks:        182.253.255.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            77:a1:5c:78:32:ff:33:1b:80:58:5b:a5:4a:e8:1c:3c:49:5a:34:15
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AC555447BA62C39107F16BF572F82A417F728DBF
        Validity
            Not Before: Sep 29 23:55:45 2021 GMT
            Not After : Sep 30 00:00:45 2022 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:b4:49:74:7a:a6:4f:17:4f:8f:80:7a:4b:74:
                    c2:4d:7e:55:c4:94:b6:4c:6c:6e:59:e1:42:e6:f2:
                    6f:5c:1e:0f:28:3d:ec:d4:b0:97:cb:4b:83:9f:a0:
                    ff:c0:a9:80:bb:d8:1e:05:36:d7:da:7f:b3:a5:3b:
                    37:a0:7e:9d:d9:a9:a5:1e:b7:f5:56:6e:7a:c5:6b:
                    3f:a3:6e:c1:b4:df:4f:89:15:a9:83:aa:16:70:38:
                    17:ba:8f:20:50:7e:b7:ea:09:25:03:5b:8c:65:02:
                    4f:3a:c7:d8:fd:cb:e9:c1:4c:ed:ed:60:e3:34:96:
                    7b:84:90:30:5b:55:d9:c9:da:a0:fb:e6:36:9f:38:
                    88:31:d6:52:42:ee:9d:88:6e:a4:d6:c6:ed:de:79:
                    f2:9c:92:87:35:73:e8:4d:9d:6c:a5:13:fb:f0:d4:
                    ca:9d:5d:2e:8f:9b:78:b9:c1:52:ec:d4:5c:db:a6:
                    77:e1:d8:2c:e8:54:2d:ae:96:c1:47:9c:de:f9:be:
                    6a:80:a7:e0:47:6a:f2:29:c6:7d:ee:a9:a8:4b:1d:
                    05:d6:11:6b:98:9e:f8:75:5b:28:f0:65:b2:11:e1:
                    1c:da:16:9c:bb:31:b8:88:a0:2c:0d:93:63:a6:9a:
                    34:e7:68:2f:85:f8:b0:81:d7:e8:ee:b7:fe:1e:dd:
                    28:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8C:C1:CC:E4:74:8B:56:1C:9E:79:D5:F6:20:47:23:7E:B8:B1:15:6D
            X509v3 Authority Key Identifier:
                keyid:AC:55:54:47:BA:62:C3:91:07:F1:6B:F5:72:F8:2A:41:7F:72:8D:BF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/3993f350-b756-4916-8d84-484f025dffcc/0/AC555447BA62C39107F16BF572F82A417F728DBF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AC555447BA62C39107F16BF572F82A417F728DBF.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/3993f350-b756-4916-8d84-484f025dffcc/0/3138322e3235332e3235352e302f32342d3234203d3e203137343531.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  182.253.255.0/24

    Signature Algorithm: sha256WithRSAEncryption
         a2:b0:36:93:69:50:8a:bf:93:f0:5a:24:a6:4a:9e:72:42:f4:
         05:4a:58:db:bf:af:65:8d:8a:65:a2:33:b7:fe:4d:8f:57:ae:
         59:2a:cb:a3:e1:f8:e1:d5:29:ba:b3:77:7d:09:26:f5:04:c9:
         0f:a2:fa:af:f9:04:06:a2:7a:b9:b5:dd:31:78:70:a9:6f:db:
         31:82:0d:80:87:83:09:31:ed:7b:e1:76:45:05:7c:f1:c2:cc:
         c8:4b:0f:9d:1a:bc:83:48:ee:9d:46:8f:29:bc:2c:77:98:66:
         fa:79:6f:06:7d:6a:2c:bf:39:95:78:32:43:9e:56:13:45:1c:
         93:0d:b7:a7:f3:a0:0a:a3:69:31:f2:ef:61:11:25:8e:2a:94:
         02:6e:82:31:17:21:1f:08:92:05:2b:26:a5:7d:20:74:ee:5f:
         cc:4c:98:bc:59:20:3c:b9:47:55:5d:51:7e:4a:ae:49:61:14:
         29:b2:8e:6e:bc:3d:13:e2:7c:2f:ba:28:82:23:60:95:49:e3:
         f1:f6:58:c4:f6:cb:4a:d3:fc:45:c8:08:7f:f8:ed:7d:4a:c1:
         fa:3f:5f:0f:9e:05:bf:3f:87:a9:3c:b6:a3:f5:96:01:de:ca:
         65:de:86:59:9e:ba:1f:87:89:f8:4d:ee:2e:eb:27:08:b2:82:
         9b:30:32:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----