Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/3993f350-b756-4916-8d84-484f025dffcc/0/3138322e3235332e37352e302f32342d3234203d3e203137343531.roa
File:                     3138322e3235332e37352e302f32342d3234203d3e203137343531.roa (raw, json)
Hash identifier:          OMMSgbK2vprkHTiv3eguwBYjtJYZUU2/eRXruT/tKQc=
Subject key identifier:   99:D4:51:BE:D6:30:E6:B0:AB:37:12:B6:70:DB:09:5D:43:88:38:2F
Certificate issuer:       /CN=AC555447BA62C39107F16BF572F82A417F728DBF
Certificate serial:       7BE5C156B470FB87972A332A7D2CF07569C3A0A9
Authority key identifier: AC:55:54:47:BA:62:C3:91:07:F1:6B:F5:72:F8:2A:41:7F:72:8D:BF
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AC555447BA62C39107F16BF572F82A417F728DBF.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/3993f350-b756-4916-8d84-484f025dffcc/0/3138322e3235332e37352e302f32342d3234203d3e203137343531.roa
Signing time:             Thu 30 Sep 2021 00:00:40 +0000
ROA not before:           Wed 29 Sep 2021 23:55:40 +0000
ROA not after:            Fri 30 Sep 2022 00:00:40 +0000
asID:                     17451
IP address blocks:        182.253.75.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7b:e5:c1:56:b4:70:fb:87:97:2a:33:2a:7d:2c:f0:75:69:c3:a0:a9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AC555447BA62C39107F16BF572F82A417F728DBF
        Validity
            Not Before: Sep 29 23:55:40 2021 GMT
            Not After : Sep 30 00:00:40 2022 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:ca:ce:fb:c1:e1:4e:94:e4:31:c0:06:81:6c:
                    04:10:37:95:4e:5f:f5:f7:a2:65:2e:0c:74:e2:98:
                    ea:8f:91:52:33:82:f8:ca:f1:c9:36:5e:dc:73:0b:
                    80:a9:57:57:77:41:92:70:98:e4:3a:d6:95:36:f0:
                    97:5b:34:ba:7d:e1:6c:1e:06:14:1c:7e:65:65:e3:
                    4f:e0:56:6f:fe:f8:27:fc:1c:20:86:39:96:be:5d:
                    6c:cc:cd:cf:e8:8d:10:55:4d:ae:9c:45:6f:26:e5:
                    0e:f2:65:e2:8b:04:b8:09:b1:63:f4:fc:a4:d4:f4:
                    4d:bb:58:d4:66:aa:9f:e6:5c:e9:a6:a4:c6:37:7e:
                    f9:8f:0a:4f:58:8b:37:c4:e0:16:d7:dc:da:08:9f:
                    9c:50:ba:74:07:7b:d5:25:d1:87:e8:40:19:5d:5d:
                    39:35:74:bc:8e:7b:45:96:66:7e:da:8a:e1:d1:00:
                    d2:a7:40:cf:05:21:31:a9:25:55:5d:9b:eb:22:65:
                    de:2e:fb:41:03:85:a6:dd:94:ea:f6:ae:d0:09:77:
                    50:be:78:19:d4:b7:dd:8a:70:9e:7c:34:42:26:c7:
                    8b:34:2e:09:01:7b:c1:4d:16:13:24:4e:5a:41:a5:
                    a1:3f:81:1d:bb:cb:3b:0e:49:4b:b8:04:e7:47:b4:
                    07:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                99:D4:51:BE:D6:30:E6:B0:AB:37:12:B6:70:DB:09:5D:43:88:38:2F
            X509v3 Authority Key Identifier:
                keyid:AC:55:54:47:BA:62:C3:91:07:F1:6B:F5:72:F8:2A:41:7F:72:8D:BF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/3993f350-b756-4916-8d84-484f025dffcc/0/AC555447BA62C39107F16BF572F82A417F728DBF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AC555447BA62C39107F16BF572F82A417F728DBF.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/3993f350-b756-4916-8d84-484f025dffcc/0/3138322e3235332e37352e302f32342d3234203d3e203137343531.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  182.253.75.0/24

    Signature Algorithm: sha256WithRSAEncryption
         91:c6:7d:f6:80:84:80:b8:81:5b:c6:f4:21:23:29:55:56:02:
         d6:b0:d6:b0:9a:ff:e4:ad:fa:09:d1:01:36:fa:2b:fd:5f:fb:
         bc:2a:f3:a1:e2:fe:d0:9c:cc:28:c2:56:4b:79:40:23:a2:05:
         77:60:45:f6:94:0d:ac:8e:88:84:37:ca:1f:18:70:06:b8:1a:
         5b:72:7b:ff:1f:b2:82:a5:4d:39:5c:18:86:e1:f2:47:8b:28:
         01:9c:22:57:eb:3d:54:ba:8e:bb:02:00:91:1f:ff:bd:7c:06:
         64:ff:d2:d7:c6:b5:23:a0:e4:0e:97:7a:8b:b7:23:69:6c:01:
         b4:09:67:da:82:98:a2:26:d4:df:a3:9e:7b:32:6a:7b:1b:5e:
         b8:83:3d:49:f2:95:46:06:57:c7:5b:3c:e5:41:04:85:5a:53:
         50:60:dd:fe:b4:45:49:ad:a4:57:2a:78:58:c1:07:11:90:9e:
         53:73:bc:51:7a:f7:9f:67:18:8d:9c:69:1f:d1:61:dd:38:86:
         c1:c0:2c:53:05:f5:1d:37:8e:5a:89:50:b4:95:de:3c:5a:5e:
         b6:26:85:04:3f:54:fc:90:c8:e0:2a:96:ac:59:e6:1e:ce:0d:
         a8:4c:64:65:f1:48:0b:9f:6a:64:52:93:5d:da:30:57:dc:72:
         e0:d1:95:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----