Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/3993f350-b756-4916-8d84-484f025dffcc/0/3138322e3235332e38382e302f32332d3233203d3e203137343531.roa
File:                     3138322e3235332e38382e302f32332d3233203d3e203137343531.roa (raw, json)
Hash identifier:          Hd1aWpHFM5z3m1d4oMMoSheFEW65mCLL4ncgpgDsu5s=
Subject key identifier:   BB:7E:62:02:20:A9:83:B3:75:93:CF:14:FF:87:49:0E:FD:0D:0C:D1
Certificate issuer:       /CN=AC555447BA62C39107F16BF572F82A417F728DBF
Certificate serial:       6C7658A3714FF413F75A615CF3A97B47BF60E99D
Authority key identifier: AC:55:54:47:BA:62:C3:91:07:F1:6B:F5:72:F8:2A:41:7F:72:8D:BF
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AC555447BA62C39107F16BF572F82A417F728DBF.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/3993f350-b756-4916-8d84-484f025dffcc/0/3138322e3235332e38382e302f32332d3233203d3e203137343531.roa
Signing time:             Tue 14 Sep 2021 05:55:08 +0000
ROA not before:           Tue 14 Sep 2021 05:50:08 +0000
ROA not after:            Wed 14 Sep 2022 05:55:08 +0000
asID:                     17451
IP address blocks:        182.253.88.0/23 maxlen: 23

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6c:76:58:a3:71:4f:f4:13:f7:5a:61:5c:f3:a9:7b:47:bf:60:e9:9d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AC555447BA62C39107F16BF572F82A417F728DBF
        Validity
            Not Before: Sep 14 05:50:08 2021 GMT
            Not After : Sep 14 05:55:08 2022 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:7e:49:8f:3a:62:d6:ed:67:8e:8a:49:f1:d2:
                    26:d0:7e:0d:90:02:e4:53:ad:94:7f:ec:40:45:51:
                    ab:2e:37:ca:96:78:83:20:3e:3a:ac:9f:fb:16:66:
                    15:46:67:2a:3b:9d:b4:3f:44:ff:50:12:29:b7:db:
                    05:26:a5:fc:75:78:eb:77:21:ab:37:43:3b:1e:f5:
                    ad:90:c9:08:73:14:09:6e:f5:58:42:4e:62:0f:a2:
                    7b:75:3d:81:52:d6:d7:2d:52:3a:86:e9:22:6f:a5:
                    1b:59:52:ee:91:3b:09:12:8c:bd:ca:fd:4f:d4:72:
                    9e:1f:06:fa:c0:67:3a:42:4a:47:01:de:d6:89:7d:
                    61:01:60:00:1b:2b:f7:d0:db:4f:b1:11:0f:31:8a:
                    a4:6f:8d:72:d3:b6:5f:b9:79:a2:85:73:7f:6c:0e:
                    0b:b8:cb:bd:0f:6c:8e:34:17:30:8b:c0:d1:83:22:
                    73:b9:ee:79:da:77:60:9c:40:fe:12:b4:eb:17:e4:
                    12:aa:e5:91:ec:4a:d3:a1:6f:64:d0:f5:2a:df:a9:
                    e6:4e:ec:27:86:a6:37:ca:68:48:22:4d:49:16:9b:
                    27:fa:87:83:be:97:63:d5:9c:b4:1c:1d:34:f6:c0:
                    d8:39:09:3f:b3:f7:a5:f2:40:fb:8e:fc:f2:55:dd:
                    08:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BB:7E:62:02:20:A9:83:B3:75:93:CF:14:FF:87:49:0E:FD:0D:0C:D1
            X509v3 Authority Key Identifier:
                keyid:AC:55:54:47:BA:62:C3:91:07:F1:6B:F5:72:F8:2A:41:7F:72:8D:BF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/3993f350-b756-4916-8d84-484f025dffcc/0/AC555447BA62C39107F16BF572F82A417F728DBF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AC555447BA62C39107F16BF572F82A417F728DBF.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/3993f350-b756-4916-8d84-484f025dffcc/0/3138322e3235332e38382e302f32332d3233203d3e203137343531.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  182.253.88.0/23

    Signature Algorithm: sha256WithRSAEncryption
         5d:b8:e7:e3:4e:d9:80:81:e9:b4:56:07:cf:c8:45:d8:66:77:
         98:1f:ea:49:67:e2:0d:fc:7d:c7:64:9f:b8:74:90:f2:c0:9e:
         4c:24:3c:36:2b:2d:e0:08:06:b6:97:74:86:a8:e4:84:a4:30:
         be:b0:96:71:0c:cb:9b:0d:2b:80:65:1e:e3:57:28:43:ed:e0:
         fe:05:ec:a8:59:70:9a:06:a9:2e:44:ae:9c:00:71:62:cd:a4:
         19:00:6b:ef:57:51:11:be:1b:88:45:9f:09:7a:2f:98:05:e4:
         86:10:03:a2:fd:ae:4e:56:d5:7c:fc:94:30:d7:03:dc:89:93:
         87:fd:25:c1:7c:70:2a:08:2c:82:7b:02:56:a5:91:82:df:94:
         3b:e6:7d:bb:08:a1:c2:6f:9b:b1:95:47:75:2c:b2:f2:14:12:
         b0:b2:1d:68:9b:2d:a4:5e:c7:29:23:75:5b:82:42:e6:84:7b:
         82:d7:ab:9b:dc:4e:52:48:84:ab:79:c6:41:0f:fa:e7:11:cf:
         77:fc:6d:24:5b:f4:5c:be:34:35:5e:82:b9:93:d8:b2:75:9e:
         86:a4:a7:03:32:6e:49:67:f3:1f:0a:ec:aa:41:9d:eb:7c:53:
         9d:7f:20:4b:66:46:1e:b1:e5:e9:47:cf:1e:86:cb:d7:5c:73:
         10:b6:ae:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----