Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/3993f350-b756-4916-8d84-484f025dffcc/0/3138322e3235332e352e302f32342d3234203d3e203137343531.roa
File:                     3138322e3235332e352e302f32342d3234203d3e203137343531.roa (raw, json)
Hash identifier:          9xrw6yyg45cqC8hh5Pa/+Hpou+RKM8H56Alcnit1e5w=
Subject key identifier:   4C:62:39:4E:FC:67:A2:EF:21:FB:42:3A:A2:95:2F:DA:09:1B:6F:9E
Certificate issuer:       /CN=AC555447BA62C39107F16BF572F82A417F728DBF
Certificate serial:       0C0A9BF4E24AEDE97D24BA3E6B734B2F7A91CC90
Authority key identifier: AC:55:54:47:BA:62:C3:91:07:F1:6B:F5:72:F8:2A:41:7F:72:8D:BF
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AC555447BA62C39107F16BF572F82A417F728DBF.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/3993f350-b756-4916-8d84-484f025dffcc/0/3138322e3235332e352e302f32342d3234203d3e203137343531.roa
Signing time:             Thu 30 Sep 2021 00:01:04 +0000
ROA not before:           Wed 29 Sep 2021 23:56:04 +0000
ROA not after:            Fri 30 Sep 2022 00:01:04 +0000
asID:                     17451
IP address blocks:        182.253.5.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0c:0a:9b:f4:e2:4a:ed:e9:7d:24:ba:3e:6b:73:4b:2f:7a:91:cc:90
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AC555447BA62C39107F16BF572F82A417F728DBF
        Validity
            Not Before: Sep 29 23:56:04 2021 GMT
            Not After : Sep 30 00:01:04 2022 GMT
        Subject: CN=3082010A0282010100ABF22EE67CF5D47FE2A95222C25D36A88E168A6B0BA7806213FEA82E847CC6A58F6693400A0B3F37CFBF232437717BD77DC9C0698CAB17D18F886618715E387A84EECA9102BFC00C2E0EF655FECDD4FB8A2906D1C6ECCDBD3BE34C539C1B79F8C21C3DE6114D79EF2E65DCBDD173A9511267622CF570B18651EFB0E6164BB7992F4D3687407BF0F24DDD64056FB8064D5ACCCF3CDAD886539D5B73A252E71F2925EDCADD29ABE8C6D447FA6C8993D175B65018DFF2F87D918998A77830440DE5518CC3B77F100A63FA6D0D62377F20131D875C61F7197882B7C9552734B14AC027DA2BD165F5089D6AB4850708973FC11EC9892DCF786F160586630D648A329B0203010001
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:f2:2e:e6:7c:f5:d4:7f:e2:a9:52:22:c2:5d:
                    36:a8:8e:16:8a:6b:0b:a7:80:62:13:fe:a8:2e:84:
                    7c:c6:a5:8f:66:93:40:0a:0b:3f:37:cf:bf:23:24:
                    37:71:7b:d7:7d:c9:c0:69:8c:ab:17:d1:8f:88:66:
                    18:71:5e:38:7a:84:ee:ca:91:02:bf:c0:0c:2e:0e:
                    f6:55:fe:cd:d4:fb:8a:29:06:d1:c6:ec:cd:bd:3b:
                    e3:4c:53:9c:1b:79:f8:c2:1c:3d:e6:11:4d:79:ef:
                    2e:65:dc:bd:d1:73:a9:51:12:67:62:2c:f5:70:b1:
                    86:51:ef:b0:e6:16:4b:b7:99:2f:4d:36:87:40:7b:
                    f0:f2:4d:dd:64:05:6f:b8:06:4d:5a:cc:cf:3c:da:
                    d8:86:53:9d:5b:73:a2:52:e7:1f:29:25:ed:ca:dd:
                    29:ab:e8:c6:d4:47:fa:6c:89:93:d1:75:b6:50:18:
                    df:f2:f8:7d:91:89:98:a7:78:30:44:0d:e5:51:8c:
                    c3:b7:7f:10:0a:63:fa:6d:0d:62:37:7f:20:13:1d:
                    87:5c:61:f7:19:78:82:b7:c9:55:27:34:b1:4a:c0:
                    27:da:2b:d1:65:f5:08:9d:6a:b4:85:07:08:97:3f:
                    c1:1e:c9:89:2d:cf:78:6f:16:05:86:63:0d:64:8a:
                    32:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4C:62:39:4E:FC:67:A2:EF:21:FB:42:3A:A2:95:2F:DA:09:1B:6F:9E
            X509v3 Authority Key Identifier:
                keyid:AC:55:54:47:BA:62:C3:91:07:F1:6B:F5:72:F8:2A:41:7F:72:8D:BF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/3993f350-b756-4916-8d84-484f025dffcc/0/AC555447BA62C39107F16BF572F82A417F728DBF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AC555447BA62C39107F16BF572F82A417F728DBF.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/3993f350-b756-4916-8d84-484f025dffcc/0/3138322e3235332e352e302f32342d3234203d3e203137343531.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  182.253.5.0/24

    Signature Algorithm: sha256WithRSAEncryption
         74:ef:1d:04:ab:7b:b4:18:7a:ab:61:a5:a2:3e:a3:c4:51:40:
         36:d1:1b:39:6e:86:8b:88:1a:3e:57:46:b6:0b:ea:5c:7a:58:
         b0:84:8b:4c:87:66:f7:38:93:a4:89:3d:7e:f7:9f:af:fb:37:
         2c:61:be:0c:6d:cf:68:c0:99:3e:d7:88:ac:be:d9:61:ac:d0:
         dc:39:82:66:3e:4f:d2:7c:3d:c7:d1:3d:55:0c:c4:82:4e:a3:
         36:0c:78:14:37:35:20:e2:70:e6:45:30:40:21:7c:38:df:ee:
         ae:a4:ad:ba:d8:b1:b1:a9:64:ee:5b:45:45:9a:37:bb:4a:7a:
         18:ad:3e:b4:79:84:eb:67:50:22:19:46:2b:81:53:2b:3f:67:
         ef:6d:97:96:29:93:84:83:4c:29:4d:6b:5b:cf:a6:88:42:ff:
         be:b3:a7:da:e8:23:c4:b3:70:fa:6a:41:d5:e4:54:e8:c4:14:
         3c:db:6a:c1:c2:1d:f7:a2:f3:04:74:ee:d3:37:0c:65:33:f9:
         50:28:e7:11:6a:78:c4:ad:d9:92:0b:e3:b7:c1:36:76:0c:c6:
         4f:9b:10:ee:5e:1a:b9:4b:4a:7e:82:ec:b9:2c:07:fd:58:77:
         24:63:b5:c0:58:4b:ce:e5:53:62:56:f8:7b:00:1e:39:d1:c4:
         58:a8:8e:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----