Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/3993f350-b756-4916-8d84-484f025dffcc/0/3138322e3235332e36382e302f32342d3234203d3e203137343531.roa
File:                     3138322e3235332e36382e302f32342d3234203d3e203137343531.roa (raw, json)
Hash identifier:          FMiPkmrUczgRSLmh3rr/890BGrYcOkvoWHCrJCm2w1g=
Subject key identifier:   18:43:F1:25:9A:3E:F1:FD:31:42:A0:44:63:5D:51:79:A5:EC:C1:93
Certificate issuer:       /CN=AC555447BA62C39107F16BF572F82A417F728DBF
Certificate serial:       4E28784ABC76B6C2D439934AD40CB7009E6F155A
Authority key identifier: AC:55:54:47:BA:62:C3:91:07:F1:6B:F5:72:F8:2A:41:7F:72:8D:BF
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AC555447BA62C39107F16BF572F82A417F728DBF.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/3993f350-b756-4916-8d84-484f025dffcc/0/3138322e3235332e36382e302f32342d3234203d3e203137343531.roa
Signing time:             Thu 30 Sep 2021 00:00:57 +0000
ROA not before:           Wed 29 Sep 2021 23:55:57 +0000
ROA not after:            Fri 30 Sep 2022 00:00:57 +0000
asID:                     17451
IP address blocks:        182.253.68.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4e:28:78:4a:bc:76:b6:c2:d4:39:93:4a:d4:0c:b7:00:9e:6f:15:5a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AC555447BA62C39107F16BF572F82A417F728DBF
        Validity
            Not Before: Sep 29 23:55:57 2021 GMT
            Not After : Sep 30 00:00:57 2022 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f3:6e:15:95:5d:84:7a:ea:8c:ea:96:7f:84:23:
                    c4:01:eb:79:b3:1c:3f:22:e8:12:fb:d8:cf:a0:eb:
                    f9:7e:f1:c0:8d:c7:bd:3c:33:41:f5:2e:06:c8:75:
                    f7:94:4c:c3:18:d4:bf:ac:f5:28:17:42:a6:00:47:
                    42:90:e9:a0:db:e2:af:84:15:ed:6b:0b:14:cd:9b:
                    39:92:d0:93:8f:27:24:75:93:87:76:a6:ce:05:7e:
                    e7:e9:d2:ff:6e:22:cd:49:57:b7:44:57:7b:d3:37:
                    32:67:f1:54:8b:7f:80:f1:47:57:c7:2e:c7:19:4e:
                    e5:6b:e5:42:58:50:83:7e:0f:00:2a:03:c0:f6:d2:
                    1f:e5:1e:87:1c:37:0c:1c:be:0e:80:38:68:8e:44:
                    fe:45:a9:cd:0f:d4:94:10:1a:c7:d4:95:b0:2a:2e:
                    d1:23:d2:96:f9:1a:65:be:da:e0:af:28:74:5b:02:
                    64:76:b2:69:fe:01:cf:53:69:a0:ef:64:8a:7d:b0:
                    8e:4d:d4:e5:ec:94:c9:8e:1a:bb:a0:ed:db:f1:4d:
                    4e:cb:88:a5:dc:73:46:6f:e4:6a:ab:10:a8:80:ad:
                    6e:2f:31:61:d5:d6:45:86:62:81:18:66:76:d6:78:
                    39:6f:db:c9:f6:fe:e2:ea:3b:d3:c7:84:f8:6c:cf:
                    a1:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                18:43:F1:25:9A:3E:F1:FD:31:42:A0:44:63:5D:51:79:A5:EC:C1:93
            X509v3 Authority Key Identifier:
                keyid:AC:55:54:47:BA:62:C3:91:07:F1:6B:F5:72:F8:2A:41:7F:72:8D:BF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/3993f350-b756-4916-8d84-484f025dffcc/0/AC555447BA62C39107F16BF572F82A417F728DBF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AC555447BA62C39107F16BF572F82A417F728DBF.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/3993f350-b756-4916-8d84-484f025dffcc/0/3138322e3235332e36382e302f32342d3234203d3e203137343531.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  182.253.68.0/24

    Signature Algorithm: sha256WithRSAEncryption
         8a:49:e2:1c:17:8f:c0:97:26:ab:d5:3f:12:ce:24:df:90:0d:
         89:d2:69:14:43:3a:04:7f:8b:86:af:77:e8:99:1d:66:85:f0:
         61:65:07:b0:93:31:08:86:11:56:e4:d1:6e:4c:8a:e2:16:4e:
         e7:64:a2:c1:ce:76:41:b0:bd:a3:96:54:8a:60:4c:ab:73:e9:
         4b:01:45:ef:a4:7f:47:5e:7d:45:8b:5b:ac:db:9a:c1:e2:d9:
         93:93:3c:68:6f:1e:1e:93:82:f5:5c:08:0f:fb:68:3d:c3:f4:
         ef:4b:ae:79:25:bb:d6:ea:19:0f:2c:f8:c7:6e:0d:bb:73:ba:
         d6:67:1b:ac:2c:07:56:ac:0d:f8:ec:c2:be:28:77:23:76:a1:
         3c:a7:4a:84:46:10:55:e5:41:b4:02:65:1e:34:42:84:2b:2d:
         3a:4b:b3:70:ca:e6:d2:06:09:f8:79:53:93:e7:1b:e0:4d:4f:
         78:73:ed:63:b0:ce:65:fc:f9:eb:7a:73:15:de:46:19:de:92:
         46:63:cd:59:17:e0:21:1b:f6:a8:c9:72:26:b4:ac:a2:83:b1:
         8c:77:00:df:a4:a9:f1:c3:e6:b9:ba:e3:1a:84:23:b7:a0:1d:
         3e:60:c1:f9:92:c6:7b:12:d2:21:54:32:3b:09:2f:ca:4e:18:
         20:61:81:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----