Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/3993f350-b756-4916-8d84-484f025dffcc/0/3138322e3235332e34382e302f32342d3234203d3e203137343531.roa
File:                     3138322e3235332e34382e302f32342d3234203d3e203137343531.roa (raw, json)
Hash identifier:          GtQsyBgRRWlomd52cFAv+Tv99i9D62NoFtAnMO4qsvQ=
Subject key identifier:   CC:0B:82:85:33:97:E2:19:0B:EB:9C:2B:75:AC:E2:15:81:C7:4B:84
Certificate issuer:       /CN=AC555447BA62C39107F16BF572F82A417F728DBF
Certificate serial:       515856E84587BC364808DD511AF3F672012E13E0
Authority key identifier: AC:55:54:47:BA:62:C3:91:07:F1:6B:F5:72:F8:2A:41:7F:72:8D:BF
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AC555447BA62C39107F16BF572F82A417F728DBF.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/3993f350-b756-4916-8d84-484f025dffcc/0/3138322e3235332e34382e302f32342d3234203d3e203137343531.roa
Signing time:             Thu 30 Sep 2021 00:01:16 +0000
ROA not before:           Wed 29 Sep 2021 23:56:16 +0000
ROA not after:            Fri 30 Sep 2022 00:01:16 +0000
asID:                     17451
IP address blocks:        182.253.48.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            51:58:56:e8:45:87:bc:36:48:08:dd:51:1a:f3:f6:72:01:2e:13:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AC555447BA62C39107F16BF572F82A417F728DBF
        Validity
            Not Before: Sep 29 23:56:16 2021 GMT
            Not After : Sep 30 00:01:16 2022 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:be:5e:77:89:b1:c6:cc:21:53:3b:d4:59:0f:
                    da:4e:0b:3c:3f:35:e2:45:e3:5a:07:7d:20:df:0d:
                    b8:42:ff:80:62:a3:d5:53:64:63:d9:5e:6f:07:e2:
                    cd:e6:99:c5:f8:30:33:4f:2f:d4:02:57:37:54:ff:
                    e0:97:5b:76:0e:56:d4:1b:87:c9:68:3e:65:28:6b:
                    ed:e9:fe:0e:6b:ab:d6:f0:12:8e:8d:be:d1:6f:e7:
                    8b:82:f1:75:25:05:06:c7:ef:67:a3:66:a4:1f:80:
                    9e:a4:1e:71:95:27:0d:5a:87:8c:4c:35:b2:cf:0f:
                    2f:2d:be:52:a2:3c:68:0d:6f:cf:6c:e2:90:2f:8a:
                    81:39:48:f4:d4:af:09:93:48:8a:81:23:7e:5c:79:
                    d1:c5:59:c2:a5:51:90:f8:b9:69:81:75:1f:31:7b:
                    b9:c8:38:dd:2c:48:9a:3f:eb:e7:6f:81:cc:a9:51:
                    e7:db:ba:78:22:29:b9:5c:ba:22:d3:05:02:15:54:
                    78:d5:1a:a1:5f:bc:63:4a:d0:39:ae:53:7f:83:71:
                    30:54:6c:79:fc:01:da:4d:0f:10:8e:4a:9f:47:97:
                    34:5c:56:f9:e0:87:78:99:cb:0f:8d:c7:91:81:3a:
                    40:15:a1:c9:90:d2:c5:26:67:0b:92:cd:af:6f:d3:
                    4c:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CC:0B:82:85:33:97:E2:19:0B:EB:9C:2B:75:AC:E2:15:81:C7:4B:84
            X509v3 Authority Key Identifier:
                keyid:AC:55:54:47:BA:62:C3:91:07:F1:6B:F5:72:F8:2A:41:7F:72:8D:BF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/3993f350-b756-4916-8d84-484f025dffcc/0/AC555447BA62C39107F16BF572F82A417F728DBF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AC555447BA62C39107F16BF572F82A417F728DBF.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/3993f350-b756-4916-8d84-484f025dffcc/0/3138322e3235332e34382e302f32342d3234203d3e203137343531.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  182.253.48.0/24

    Signature Algorithm: sha256WithRSAEncryption
         83:fd:90:a4:da:ee:d6:b6:7b:50:78:da:87:07:b9:df:e4:7e:
         9c:40:df:d5:9c:6b:eb:bf:16:fd:cd:3d:6e:43:37:69:79:45:
         3d:21:cc:8e:b4:71:fa:1b:c2:f2:fd:f0:a5:e1:7b:47:78:64:
         3a:66:7a:b2:e4:b4:7a:f5:e2:ee:e9:76:58:1b:80:f4:53:92:
         2c:cf:a0:3a:f8:8a:b3:4f:61:9c:dc:ec:89:d3:70:a4:aa:de:
         b3:07:aa:61:8d:4b:16:52:4a:13:b3:f1:37:db:1e:c9:e5:63:
         02:18:4f:b7:6b:8c:4d:b2:5a:cc:41:c3:71:18:3b:54:ae:d6:
         8e:33:0d:c1:d8:68:45:9a:92:5c:c0:30:54:95:6a:ee:1c:8c:
         35:dd:a5:da:16:46:3c:b6:12:84:54:82:0e:da:5f:99:52:3c:
         9f:fd:fd:23:dd:96:e5:fd:61:4c:4e:0a:14:b4:2a:d3:42:68:
         fb:ab:ab:fb:82:70:07:cf:85:4d:e2:db:89:35:9a:14:8b:9a:
         ef:f6:d3:56:6f:8f:d5:78:eb:91:77:ee:01:08:67:2f:68:a1:
         dd:07:93:ab:af:81:b2:38:10:e3:39:4e:ed:e7:87:cf:e7:84:
         53:44:32:77:d0:34:a8:76:34:05:15:35:43:57:2b:b1:ea:4e:
         db:5d:09:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----