Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/3993f350-b756-4916-8d84-484f025dffcc/0/3138322e3235332e35372e302f32342d3234203d3e203137343531.roa
File:                     3138322e3235332e35372e302f32342d3234203d3e203137343531.roa (raw, json)
Hash identifier:          uXpqBWNso6xs/co5thewnCFeYL5qdqrnyGdk8pDH7Bo=
Subject key identifier:   22:5C:83:AE:27:39:5E:41:C9:D4:0E:14:C3:0D:AB:E4:0A:4E:A9:24
Certificate issuer:       /CN=AC555447BA62C39107F16BF572F82A417F728DBF
Certificate serial:       3C3B032315C316916283BE94F4FA8FCF4EDA1F91
Authority key identifier: AC:55:54:47:BA:62:C3:91:07:F1:6B:F5:72:F8:2A:41:7F:72:8D:BF
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AC555447BA62C39107F16BF572F82A417F728DBF.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/3993f350-b756-4916-8d84-484f025dffcc/0/3138322e3235332e35372e302f32342d3234203d3e203137343531.roa
Signing time:             Thu 30 Sep 2021 00:01:18 +0000
ROA not before:           Wed 29 Sep 2021 23:56:18 +0000
ROA not after:            Fri 30 Sep 2022 00:01:18 +0000
asID:                     17451
IP address blocks:        182.253.57.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3c:3b:03:23:15:c3:16:91:62:83:be:94:f4:fa:8f:cf:4e:da:1f:91
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AC555447BA62C39107F16BF572F82A417F728DBF
        Validity
            Not Before: Sep 29 23:56:18 2021 GMT
            Not After : Sep 30 00:01:18 2022 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ef:be:93:3b:53:1e:59:41:d5:22:5c:e9:a4:0a:
                    fa:6e:11:5c:6c:6c:93:24:7b:68:34:eb:3d:27:68:
                    f6:d2:25:6e:97:fe:e5:bf:80:68:14:72:e5:7c:57:
                    9e:ac:4a:ca:48:15:c5:2c:16:62:37:79:4b:84:55:
                    4f:7c:c0:33:a4:2c:1e:7e:1e:0f:b6:9f:3c:0e:75:
                    22:a3:f5:1b:b1:3c:12:d3:59:ed:f7:6e:5b:ec:ba:
                    b0:e4:ff:1f:dd:9d:f4:68:aa:6b:26:bc:0c:eb:e1:
                    9f:b3:70:14:64:c6:08:34:27:89:f0:56:9c:a3:1b:
                    2e:f7:f5:5d:c1:32:90:4a:37:07:72:e6:8c:2e:67:
                    f3:21:2c:6f:c3:38:e3:71:dc:56:4e:b6:36:35:43:
                    1e:07:b8:3b:49:84:f2:5a:4b:50:19:d3:c4:5a:93:
                    45:4b:36:6c:3c:0e:23:e5:d7:5e:94:b1:b6:56:e3:
                    7a:e4:77:7f:c8:08:c2:1b:59:c4:c9:21:65:ea:ca:
                    5e:c9:80:83:eb:95:1a:d6:cb:ed:3e:03:08:17:67:
                    b1:54:c7:e1:f5:fa:8f:40:3a:3c:b8:50:77:5c:54:
                    77:b3:6f:cc:b2:fc:15:6b:27:c5:35:f9:a2:d3:7b:
                    be:67:d7:8b:83:04:b2:39:9a:05:1a:e5:45:3d:8e:
                    32:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                22:5C:83:AE:27:39:5E:41:C9:D4:0E:14:C3:0D:AB:E4:0A:4E:A9:24
            X509v3 Authority Key Identifier:
                keyid:AC:55:54:47:BA:62:C3:91:07:F1:6B:F5:72:F8:2A:41:7F:72:8D:BF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/3993f350-b756-4916-8d84-484f025dffcc/0/AC555447BA62C39107F16BF572F82A417F728DBF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AC555447BA62C39107F16BF572F82A417F728DBF.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/3993f350-b756-4916-8d84-484f025dffcc/0/3138322e3235332e35372e302f32342d3234203d3e203137343531.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  182.253.57.0/24

    Signature Algorithm: sha256WithRSAEncryption
         25:c5:18:10:0b:23:fc:be:06:93:4a:59:9b:a6:f8:e1:a0:a3:
         77:d7:b5:95:fb:40:87:53:b4:48:8f:82:55:de:e7:50:29:f1:
         cb:5e:ee:c1:80:1d:d0:82:f7:25:cb:87:a5:e1:ca:08:ae:64:
         b0:25:7b:82:6c:01:de:39:ee:f0:24:fb:15:41:9b:88:bf:0b:
         37:9e:db:8d:68:60:90:a9:9c:f6:aa:11:bd:3b:68:75:d1:b5:
         43:99:0b:d8:06:3a:43:c1:96:b6:71:c3:b3:39:94:c8:5b:08:
         6b:9b:75:9f:87:46:50:28:44:fc:6f:35:54:ce:4b:a9:06:e2:
         7d:15:9b:8b:53:fb:d4:e0:e4:91:c0:87:91:6a:06:fe:d6:dc:
         62:eb:b7:2e:e0:4e:64:a3:e2:2b:cf:22:bc:32:c3:36:7d:6c:
         7c:f5:9d:6d:62:fc:b8:39:7c:dc:a7:b8:18:54:ec:51:83:56:
         54:c3:8e:dc:84:0d:44:b2:e3:ba:a4:10:be:7e:88:b0:3f:f1:
         35:82:a4:77:1d:5c:6b:c9:a2:15:bf:46:1f:ab:99:ae:2b:ba:
         e4:75:9d:b0:b6:bb:d1:68:94:06:00:d8:9e:78:cd:1b:aa:41:
         97:8b:96:8f:e0:29:1d:ed:60:75:35:90:cc:e2:55:2b:e8:56:
         ef:ce:42:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----