Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/3993f350-b756-4916-8d84-484f025dffcc/0/3138322e3235332e35322e302f32342d3234203d3e203137343531.roa
File:                     3138322e3235332e35322e302f32342d3234203d3e203137343531.roa (raw, json)
Hash identifier:          bABaL0U9yRWw1DqA75aKalX+3swiuFpHM8jxEkLnnfA=
Subject key identifier:   C1:41:DB:34:5E:BE:62:CA:86:B7:85:2A:2B:3D:B7:AD:CC:E7:4F:6D
Certificate issuer:       /CN=AC555447BA62C39107F16BF572F82A417F728DBF
Certificate serial:       48781BEE334BAD16F45660AA1E850F33F199F0D6
Authority key identifier: AC:55:54:47:BA:62:C3:91:07:F1:6B:F5:72:F8:2A:41:7F:72:8D:BF
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AC555447BA62C39107F16BF572F82A417F728DBF.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/3993f350-b756-4916-8d84-484f025dffcc/0/3138322e3235332e35322e302f32342d3234203d3e203137343531.roa
Signing time:             Thu 30 Sep 2021 00:00:21 +0000
ROA not before:           Wed 29 Sep 2021 23:55:21 +0000
ROA not after:            Fri 30 Sep 2022 00:00:21 +0000
asID:                     17451
IP address blocks:        182.253.52.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            48:78:1b:ee:33:4b:ad:16:f4:56:60:aa:1e:85:0f:33:f1:99:f0:d6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AC555447BA62C39107F16BF572F82A417F728DBF
        Validity
            Not Before: Sep 29 23:55:21 2021 GMT
            Not After : Sep 30 00:00:21 2022 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:f9:e2:4b:f1:d4:53:9a:c7:bf:a3:a3:49:b5:
                    75:19:00:67:9d:ab:ce:a2:5b:a7:94:0f:87:89:fc:
                    e7:f4:80:45:03:89:e3:33:2f:e0:cf:44:1b:49:d1:
                    66:04:65:56:5e:7e:af:67:ad:cc:43:b8:0c:6a:10:
                    26:74:b3:d3:f6:e8:ee:05:f7:1e:2c:f5:5c:7b:f4:
                    71:14:dc:54:d8:6c:ee:2d:35:3e:90:9d:4a:ec:b6:
                    88:e3:a2:8c:87:56:f7:5b:e7:5b:39:fc:68:c6:20:
                    f6:78:50:81:a9:6e:f9:c3:dc:d2:f0:42:af:99:ea:
                    c8:38:29:c3:27:60:63:41:e1:ad:87:cb:c2:43:43:
                    e2:65:9b:05:f5:e9:51:91:6a:25:cd:9d:53:32:4c:
                    20:20:89:b2:85:17:fd:ce:20:cb:b1:2e:85:db:dd:
                    24:47:3f:e1:a4:12:84:53:dc:66:fc:35:75:6a:0f:
                    5c:a7:a9:c6:42:42:71:96:d9:9b:48:99:16:c3:0f:
                    57:9f:59:08:8b:70:75:b4:0b:2d:ff:5e:6f:de:ea:
                    1e:5d:28:a6:42:a3:ba:c1:d0:89:bd:53:9e:62:13:
                    5c:18:c8:7c:d1:0d:67:c3:6e:ba:9f:b2:73:ff:87:
                    d2:b4:07:48:47:bc:f6:ec:01:c2:1e:d8:10:cc:6d:
                    8f:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C1:41:DB:34:5E:BE:62:CA:86:B7:85:2A:2B:3D:B7:AD:CC:E7:4F:6D
            X509v3 Authority Key Identifier:
                keyid:AC:55:54:47:BA:62:C3:91:07:F1:6B:F5:72:F8:2A:41:7F:72:8D:BF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/3993f350-b756-4916-8d84-484f025dffcc/0/AC555447BA62C39107F16BF572F82A417F728DBF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AC555447BA62C39107F16BF572F82A417F728DBF.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/3993f350-b756-4916-8d84-484f025dffcc/0/3138322e3235332e35322e302f32342d3234203d3e203137343531.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  182.253.52.0/24

    Signature Algorithm: sha256WithRSAEncryption
         9c:37:ea:8b:5b:d1:2c:c7:a8:9e:5a:fb:c5:b7:5b:7b:0c:aa:
         12:81:a1:36:55:e5:c7:09:f1:67:93:4f:0d:29:1c:4c:38:93:
         76:2b:b5:bc:21:b3:1e:35:47:3f:2b:a0:ae:1e:fa:78:cf:c0:
         cf:f3:92:df:ee:75:e2:9e:37:8e:65:60:30:14:56:e5:83:17:
         91:a7:e7:5a:9e:ab:d5:8d:44:eb:78:6d:26:1f:c9:50:74:f1:
         d7:dd:0c:f7:25:18:21:b6:f9:5a:aa:b4:07:29:c1:c2:58:46:
         bd:9c:70:b6:b1:4e:b2:e9:12:9d:e5:d1:d7:a0:08:86:21:c6:
         4a:ff:29:6b:f4:8a:b5:6a:39:0c:2a:e5:bd:89:26:4b:72:24:
         62:c2:3f:91:a6:cf:76:a0:68:a7:5a:5f:4c:b4:f3:3b:43:8c:
         6e:81:11:4b:64:4f:22:82:23:59:2a:cb:c0:bb:39:a4:69:8b:
         b1:d7:5f:b6:8c:96:b5:d8:56:1b:4c:a7:f5:33:9a:83:94:eb:
         5c:d0:71:8a:b2:d1:71:20:a2:a9:f0:a6:e4:ca:01:eb:ed:89:
         0e:fb:7f:79:c4:62:a0:bf:67:26:89:b1:11:21:ea:9a:19:62:
         99:09:da:43:74:4f:98:b4:90:81:59:39:a8:ac:09:4a:5a:c4:
         5b:10:78:dc
-----BEGIN CERTIFICATE-----
MIIHJDCCBgygAwIBAgIUSHgb7jNLrRb0VmCqHoUPM/GZ8NYwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQUM1NTU0NDdCQTYyQzM5MTA3RjE2QkY1NzJGODJBNDE3
RjcyOERCRjAeFw0yMTA5MjkyMzU1MjFaFw0yMjA5MzAwMDAwMjFaMIICLTGCAikw
ggIlBgNVBAMTggIcMzA4MjAxMEEwMjgyMDEwMTAwRDRGOUUyNEJGMUQ0NTM5QUM3
QkZBM0EzNDlCNTc1MTkwMDY3OURBQkNFQTI1QkE3OTQwRjg3ODlGQ0U3RjQ4MDQ1
MDM4OUUzMzMyRkUwQ0Y0NDFCNDlEMTY2MDQ2NTU2NUU3RUFGNjdBRENDNDNCODBD
NkExMDI2NzRCM0QzRjZFOEVFMDVGNzFFMkNGNTVDN0JGNDcxMTREQzU0RDg2Q0VF
MkQzNTNFOTA5RDRBRUNCNjg4RTNBMjhDODc1NkY3NUJFNzVCMzlGQzY4QzYyMEY2
Nzg1MDgxQTk2RUY5QzNEQ0QyRjA0MkFGOTlFQUM4MzgyOUMzMjc2MDYzNDFFMUFE
ODdDQkMyNDM0M0UyNjU5QjA1RjVFOTUxOTE2QTI1Q0Q5RDUzMzI0QzIwMjA4OUIy
ODUxN0ZEQ0UyMENCQjEyRTg1REJERDI0NDczRkUxQTQxMjg0NTNEQzY2RkMzNTc1
NkEwRjVDQTdBOUM2NDI0MjcxOTZEOTlCNDg5OTE2QzMwRjU3OUY1OTA4OEI3MDc1
QjQwQjJERkY1RTZGREVFQTFFNUQyOEE2NDJBM0JBQzFEMDg5QkQ1MzlFNjIxMzVD
MThDODdDRDEwRDY3QzM2RUJBOUZCMjczRkY4N0QyQjQwNzQ4NDdCQ0Y2RUMwMUMy
MUVEODEwQ0M2RDhGRUIwMjAzMDEwMDAxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8A
MIIBCgKCAQEA1PniS/HUU5rHv6OjSbV1GQBnnavOolunlA+Hifzn9IBFA4njMy/g
z0QbSdFmBGVWXn6vZ63MQ7gMahAmdLPT9ujuBfceLPVce/RxFNxU2GzuLTU+kJ1K
7LaI46KMh1b3W+dbOfxoxiD2eFCBqW75w9zS8EKvmerIOCnDJ2BjQeGth8vCQ0Pi
ZZsF9elRkWolzZ1TMkwgIImyhRf9ziDLsS6F290kRz/hpBKEU9xm/DV1ag9cp6nG
QkJxltmbSJkWww9Xn1kIi3B1tAst/15v3uoeXSimQqO6wdCJvVOeYhNcGMh80Q1n
w266n7Jz/4fStAdIR7z27AHCHtgQzG2P6wIDAQABo4ICMjCCAi4wHQYDVR0OBBYE
FMFB2zRevmLKhreFKis9t63M509tMB8GA1UdIwQYMBaAFKxVVEe6YsORB/Fr9XL4
KkF/co2/MA4GA1UdDwEB/wQEAwIHgDCBhQYDVR0fBH4wfDB6oHigdoZ0cnN5bmM6
Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMzk5M2YzNTAtYjc1Ni00OTE2LThk
ODQtNDg0ZjAyNWRmZmNjLzAvQUM1NTU0NDdCQTYyQzM5MTA3RjE2QkY1NzJGODJB
NDE3RjcyOERCRi5jcmwwdAYIKwYBBQUHAQEEaDBmMGQGCCsGAQUFBzAChlhyc3lu
YzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9JRE5JQy1JRC8yL0FDNTU1NDQ3
QkE2MkMzOTEwN0YxNkJGNTcyRjgyQTQxN0Y3MjhEQkYuY2VyMIGiBggrBgEFBQcB
CwSBlTCBkjCBjwYIKwYBBQUHMAuGgYJyc3luYzovL3JlcG8tcnBraS5pZG5pYy5u
ZXQvcmVwby8zOTkzZjM1MC1iNzU2LTQ5MTYtOGQ4NC00ODRmMDI1ZGZmY2MvMC8z
MTM4MzIyZTMyMzUzMzJlMzUzMjJlMzAyZjMyMzQyZDMyMzQyMDNkM2UyMDMxMzcz
NDM1MzEucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcB
Af8EEDAOMAwEAgABMAYDBAC2/TQwDQYJKoZIhvcNAQELBQADggEBAJw36otb0SzH
qJ5a+8W3W3sMqhKBoTZV5ccJ8WeTTw0pHEw4k3Yrtbwhsx41Rz8roK4e+njPwM/z
kt/udeKeN45lYDAUVuWDF5Gn51qeq9WNROt4bSYfyVB08dfdDPclGCG2+VqqtAcp
wcJYRr2ccLaxTrLpEp3l0degCIYhxkr/KWv0irVqOQwq5b2JJktyJGLCP5Gmz3ag
aKdaX0y08ztDjG6BEUtkTyKCI1kqy8C7OaRpi7HXX7aMlrXYVhtMp/UzmoOU61zQ
cYqy0XEgoqnwpuTKAevtiQ77f3nEYqC/ZyaJsREh6poZYpkJ2kN0T5i0kIFZOais
CUpaxFsQeNw=
-----END CERTIFICATE-----