Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/3993f350-b756-4916-8d84-484f025dffcc/0/3138322e3235332e33322e302f32342d3234203d3e203137343531.roa
File:                     3138322e3235332e33322e302f32342d3234203d3e203137343531.roa (raw, json)
Hash identifier:          ukQiHdj0nFBJ1xOLPwEkB5LhBj/iS5nv+dBWRqNvae8=
Subject key identifier:   52:27:F9:F1:E8:08:C0:74:D6:CD:D1:3D:6E:E0:08:00:99:75:13:CE
Certificate issuer:       /CN=AC555447BA62C39107F16BF572F82A417F728DBF
Certificate serial:       60370D8145B9C2F0D7EB546E68F203BFDCC748B2
Authority key identifier: AC:55:54:47:BA:62:C3:91:07:F1:6B:F5:72:F8:2A:41:7F:72:8D:BF
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AC555447BA62C39107F16BF572F82A417F728DBF.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/3993f350-b756-4916-8d84-484f025dffcc/0/3138322e3235332e33322e302f32342d3234203d3e203137343531.roa
Signing time:             Thu 30 Sep 2021 00:01:08 +0000
ROA not before:           Wed 29 Sep 2021 23:56:08 +0000
ROA not after:            Fri 30 Sep 2022 00:01:08 +0000
asID:                     17451
IP address blocks:        182.253.32.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            60:37:0d:81:45:b9:c2:f0:d7:eb:54:6e:68:f2:03:bf:dc:c7:48:b2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AC555447BA62C39107F16BF572F82A417F728DBF
        Validity
            Not Before: Sep 29 23:56:08 2021 GMT
            Not After : Sep 30 00:01:08 2022 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:29:18:f4:ba:e2:7d:bb:27:05:dd:49:14:c9:
                    df:55:90:84:ef:18:e2:0d:83:8d:61:9f:b6:53:03:
                    3c:eb:3c:8f:06:8b:bf:94:79:a9:be:a3:d2:51:6c:
                    e3:5a:33:ae:61:ea:8d:7e:36:98:d0:bf:14:f5:3c:
                    0b:b6:4a:f4:4a:d9:cc:6d:7c:5d:b5:dc:ba:92:a5:
                    49:bf:d2:59:95:1a:7d:26:76:7a:6e:e1:4d:60:57:
                    0e:4a:7e:d4:39:30:d3:1e:13:53:16:99:c6:64:bb:
                    1c:89:df:57:b3:66:18:20:75:8e:7e:53:be:c2:4a:
                    eb:32:ab:a8:be:fd:fb:66:bd:48:3e:f3:d0:0c:a5:
                    90:37:25:af:b6:f0:d4:35:9d:f0:35:1c:9d:74:77:
                    63:50:11:27:43:0f:22:86:df:8d:b1:80:51:f3:58:
                    c8:52:6a:9a:85:88:6e:84:62:97:68:19:41:39:f4:
                    c3:aa:0f:b7:63:ac:d3:62:39:57:1d:da:9d:34:76:
                    95:b8:63:03:06:f7:91:84:82:23:85:39:69:86:61:
                    b5:5c:a0:f1:ee:87:d5:61:c6:b9:6d:a9:00:d2:8b:
                    67:d7:a5:20:55:ce:5e:bd:80:f0:17:91:62:27:6b:
                    3c:66:0a:1b:4b:78:3d:36:0b:f9:a2:35:bd:65:0b:
                    4a:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                52:27:F9:F1:E8:08:C0:74:D6:CD:D1:3D:6E:E0:08:00:99:75:13:CE
            X509v3 Authority Key Identifier:
                keyid:AC:55:54:47:BA:62:C3:91:07:F1:6B:F5:72:F8:2A:41:7F:72:8D:BF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/3993f350-b756-4916-8d84-484f025dffcc/0/AC555447BA62C39107F16BF572F82A417F728DBF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AC555447BA62C39107F16BF572F82A417F728DBF.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/3993f350-b756-4916-8d84-484f025dffcc/0/3138322e3235332e33322e302f32342d3234203d3e203137343531.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  182.253.32.0/24

    Signature Algorithm: sha256WithRSAEncryption
         3f:73:21:a9:30:39:1f:90:b5:c7:8a:ec:8f:b4:ed:8d:02:29:
         66:b2:99:fa:a2:37:63:2a:26:36:e7:cb:04:f2:3f:8a:74:43:
         ad:25:5b:75:05:a3:2a:ff:6d:ca:65:d0:6e:86:f2:c0:68:8a:
         90:49:61:ee:e4:32:d6:6a:e1:03:e7:f9:20:e2:16:d1:9b:7b:
         03:8a:56:40:94:a4:d0:10:d3:4e:65:12:22:01:f9:89:0a:67:
         c8:27:85:8a:b0:28:a7:1d:c5:78:52:d9:8f:31:a8:ea:c6:46:
         98:17:d3:2e:4b:3c:5e:2a:b7:35:93:26:46:64:02:05:59:b0:
         0d:c8:65:4b:56:65:62:71:bf:7a:f7:f7:fa:72:ce:0a:14:8a:
         b6:0f:d4:ad:1c:14:5b:e8:30:60:d5:4c:82:f4:2c:32:36:b7:
         a9:a1:2c:70:b3:db:3d:b9:de:ea:db:f1:92:fe:6a:b2:bd:b0:
         be:d9:9a:69:00:01:30:7c:87:4b:50:4f:01:e9:5e:e4:b3:15:
         df:f4:44:8e:ff:0d:1a:2b:6e:0d:c2:d6:89:a0:88:47:3d:5f:
         c2:8b:1a:97:2b:90:c5:e9:10:b9:a9:87:ba:13:67:bb:cd:5a:
         f8:cd:70:79:cd:e5:e6:cb:ca:c4:48:e1:18:e3:22:8d:33:5e:
         e6:ab:bf:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----