Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/3993f350-b756-4916-8d84-484f025dffcc/0/3138322e3235332e36342e302f32342d3234203d3e203137343531.roa
File:                     3138322e3235332e36342e302f32342d3234203d3e203137343531.roa (raw, json)
Hash identifier:          aNBpp0R8n6t6pAULnN2qBgX1FZyYGvPSfehtRBC7Y40=
Subject key identifier:   0B:5E:29:72:6B:13:30:70:31:12:B0:DE:E5:54:1E:11:08:11:C5:41
Certificate issuer:       /CN=AC555447BA62C39107F16BF572F82A417F728DBF
Certificate serial:       15815449EE81BAEF8EDCBE23FD2D0C4C6EA3D4D2
Authority key identifier: AC:55:54:47:BA:62:C3:91:07:F1:6B:F5:72:F8:2A:41:7F:72:8D:BF
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AC555447BA62C39107F16BF572F82A417F728DBF.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/3993f350-b756-4916-8d84-484f025dffcc/0/3138322e3235332e36342e302f32342d3234203d3e203137343531.roa
Signing time:             Thu 30 Sep 2021 00:00:06 +0000
ROA not before:           Wed 29 Sep 2021 23:55:06 +0000
ROA not after:            Fri 30 Sep 2022 00:00:06 +0000
asID:                     17451
IP address blocks:        182.253.64.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            15:81:54:49:ee:81:ba:ef:8e:dc:be:23:fd:2d:0c:4c:6e:a3:d4:d2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AC555447BA62C39107F16BF572F82A417F728DBF
        Validity
            Not Before: Sep 29 23:55:06 2021 GMT
            Not After : Sep 30 00:00:06 2022 GMT
        Subject: CN=3082010A0282010100CAFD91B49D9921959B34398DFF12F468F163119E5866594EF37AA3080386A5246EAFB9B4748D644B705F8139A93301AB517BACB047A3DD5D629FD8C331223D5222BC2A73969D39682FD3A8B40594562785EF9CC87FC0BC16DF560DCCD2CACAACFE2080C344876D3B102A3C4DC7A0EB4F2729AFC40F6E71E9224E4417942330F7AE07C1A1E00BC5CA31A4133702E31C9EF8CD3292B2D9ADECB3587B43B73D415084B35DD0DC3A48E84B6213C637388E557FCA05542694ECC50479861067D10B6B804BC96153FEA35210F15AF715481FFEA3BCAEBAFBF376BEC45DA7BE6FDFF88438DBB8D6363028D82CD20CA5FD115DF698B78857CA00505242DD6E48CEF1A17B0203010001
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:fd:91:b4:9d:99:21:95:9b:34:39:8d:ff:12:
                    f4:68:f1:63:11:9e:58:66:59:4e:f3:7a:a3:08:03:
                    86:a5:24:6e:af:b9:b4:74:8d:64:4b:70:5f:81:39:
                    a9:33:01:ab:51:7b:ac:b0:47:a3:dd:5d:62:9f:d8:
                    c3:31:22:3d:52:22:bc:2a:73:96:9d:39:68:2f:d3:
                    a8:b4:05:94:56:27:85:ef:9c:c8:7f:c0:bc:16:df:
                    56:0d:cc:d2:ca:ca:ac:fe:20:80:c3:44:87:6d:3b:
                    10:2a:3c:4d:c7:a0:eb:4f:27:29:af:c4:0f:6e:71:
                    e9:22:4e:44:17:94:23:30:f7:ae:07:c1:a1:e0:0b:
                    c5:ca:31:a4:13:37:02:e3:1c:9e:f8:cd:32:92:b2:
                    d9:ad:ec:b3:58:7b:43:b7:3d:41:50:84:b3:5d:d0:
                    dc:3a:48:e8:4b:62:13:c6:37:38:8e:55:7f:ca:05:
                    54:26:94:ec:c5:04:79:86:10:67:d1:0b:6b:80:4b:
                    c9:61:53:fe:a3:52:10:f1:5a:f7:15:48:1f:fe:a3:
                    bc:ae:ba:fb:f3:76:be:c4:5d:a7:be:6f:df:f8:84:
                    38:db:b8:d6:36:30:28:d8:2c:d2:0c:a5:fd:11:5d:
                    f6:98:b7:88:57:ca:00:50:52:42:dd:6e:48:ce:f1:
                    a1:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0B:5E:29:72:6B:13:30:70:31:12:B0:DE:E5:54:1E:11:08:11:C5:41
            X509v3 Authority Key Identifier:
                keyid:AC:55:54:47:BA:62:C3:91:07:F1:6B:F5:72:F8:2A:41:7F:72:8D:BF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/3993f350-b756-4916-8d84-484f025dffcc/0/AC555447BA62C39107F16BF572F82A417F728DBF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AC555447BA62C39107F16BF572F82A417F728DBF.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/3993f350-b756-4916-8d84-484f025dffcc/0/3138322e3235332e36342e302f32342d3234203d3e203137343531.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  182.253.64.0/24

    Signature Algorithm: sha256WithRSAEncryption
         20:66:59:13:c6:68:3e:ce:89:67:ba:d2:01:1c:0b:f8:01:4f:
         5e:26:39:07:8d:b1:34:1b:1c:b3:7f:5e:eb:87:55:3e:31:e7:
         a1:7c:44:33:04:b8:dc:df:c6:9d:37:d0:f2:b9:ba:01:18:5c:
         cb:3c:f6:47:93:cd:ec:9d:63:42:20:9c:e4:1c:fc:00:9e:be:
         38:33:1e:da:fa:b2:db:7d:60:5b:24:58:2d:59:74:69:94:fe:
         8e:ae:da:83:8d:b0:6b:b1:d8:05:bf:e1:aa:de:fc:9c:1b:a2:
         73:a7:c3:c5:e6:58:d0:1e:dd:78:9f:23:10:1b:72:34:3d:5f:
         01:e6:8d:41:14:dc:b0:6d:64:bc:73:8d:90:ff:34:f4:21:29:
         63:c4:8d:3f:16:7c:1f:43:f6:22:a7:11:d9:bb:8d:a9:9b:11:
         85:68:de:62:6c:a0:78:71:23:c3:c2:2f:32:17:7a:f2:56:57:
         f7:fb:ef:70:ed:42:57:8e:17:1f:a5:c6:94:98:95:35:a3:51:
         69:2b:e2:cc:17:c5:8b:2c:52:45:8d:db:fa:90:6a:92:72:aa:
         bf:ba:be:80:60:1d:28:3a:2b:3a:ef:a7:00:90:cb:3f:f3:95:
         2f:53:08:3e:48:da:b7:69:72:ae:e9:41:ff:1a:62:a8:0a:6d:
         02:9f:ed:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----