Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/3993f350-b756-4916-8d84-484f025dffcc/0/3138322e3235332e39322e302f32342d3234203d3e203137343531.roa
File:                     3138322e3235332e39322e302f32342d3234203d3e203137343531.roa (raw, json)
Hash identifier:          O/qUTB4hDMhU+qflCSlI6usf41/+hPVYrtFEALLEFJI=
Subject key identifier:   A7:7E:78:7F:AD:AF:10:72:A1:83:98:CE:C0:67:EF:2A:1B:C6:F8:48
Certificate issuer:       /CN=AC555447BA62C39107F16BF572F82A417F728DBF
Certificate serial:       499A766B63631B7E9F517096154F7E6E04962B63
Authority key identifier: AC:55:54:47:BA:62:C3:91:07:F1:6B:F5:72:F8:2A:41:7F:72:8D:BF
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AC555447BA62C39107F16BF572F82A417F728DBF.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/3993f350-b756-4916-8d84-484f025dffcc/0/3138322e3235332e39322e302f32342d3234203d3e203137343531.roa
Signing time:             Thu 30 Sep 2021 00:00:43 +0000
ROA not before:           Wed 29 Sep 2021 23:55:43 +0000
ROA not after:            Fri 30 Sep 2022 00:00:43 +0000
asID:                     17451
IP address blocks:        182.253.92.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            49:9a:76:6b:63:63:1b:7e:9f:51:70:96:15:4f:7e:6e:04:96:2b:63
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AC555447BA62C39107F16BF572F82A417F728DBF
        Validity
            Not Before: Sep 29 23:55:43 2021 GMT
            Not After : Sep 30 00:00:43 2022 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:ce:7c:c2:c9:5e:51:e4:c2:12:7b:a3:f7:e6:
                    53:99:4f:8a:2b:b4:6d:5f:19:50:e5:b9:72:44:8f:
                    93:1c:a2:0f:7c:c9:27:21:a0:a9:91:02:3e:97:65:
                    83:7a:99:95:fb:32:2e:db:86:e7:a6:e0:9a:00:91:
                    c6:a5:93:a6:42:6b:a5:8c:dd:94:bf:e2:15:85:5b:
                    8f:cb:d1:8f:19:a1:dd:7c:67:8a:1d:4b:ba:da:67:
                    16:67:b7:55:9f:5b:91:20:06:e2:be:1f:d9:c0:f2:
                    37:f6:89:89:d3:48:23:96:8b:f4:2c:9c:f4:e2:a4:
                    17:de:03:62:50:cb:90:ed:ff:12:da:eb:b2:6a:e3:
                    07:cd:91:3f:1f:fe:c5:a7:04:96:72:70:07:67:4e:
                    a7:6f:1b:34:82:e2:91:7f:12:12:48:8d:34:65:8a:
                    55:e7:53:d2:22:08:6a:7a:8d:38:1e:f3:fc:00:10:
                    04:59:a5:46:0c:c7:ce:df:8a:59:33:42:24:79:55:
                    a4:c5:f1:b1:f9:28:2e:91:82:83:9f:7d:c0:66:52:
                    8a:69:2b:41:e4:e5:6b:8a:8e:76:a0:30:95:4b:1d:
                    a2:3d:70:24:76:37:ed:11:66:52:da:bf:65:70:82:
                    38:46:0e:ee:44:1b:cb:d1:7a:28:50:fb:3c:ee:aa:
                    f2:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A7:7E:78:7F:AD:AF:10:72:A1:83:98:CE:C0:67:EF:2A:1B:C6:F8:48
            X509v3 Authority Key Identifier:
                keyid:AC:55:54:47:BA:62:C3:91:07:F1:6B:F5:72:F8:2A:41:7F:72:8D:BF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/3993f350-b756-4916-8d84-484f025dffcc/0/AC555447BA62C39107F16BF572F82A417F728DBF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AC555447BA62C39107F16BF572F82A417F728DBF.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/3993f350-b756-4916-8d84-484f025dffcc/0/3138322e3235332e39322e302f32342d3234203d3e203137343531.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  182.253.92.0/24

    Signature Algorithm: sha256WithRSAEncryption
         8e:37:7b:c5:a7:92:9b:a8:1d:60:89:1e:2c:35:15:a2:ad:c6:
         2f:c5:d3:92:b8:2c:c4:c0:dd:03:b5:69:6e:37:fd:20:3e:45:
         51:ad:98:84:a0:e4:a7:6c:4e:31:ed:c8:60:44:4a:70:12:46:
         1f:86:ac:59:93:ac:7a:72:de:93:d2:6c:25:d4:1b:03:99:21:
         8e:98:46:08:50:ce:04:ae:2d:18:23:db:ae:de:12:54:55:8a:
         b6:36:85:b0:d5:18:64:2c:18:c4:f3:27:85:d8:95:57:ee:23:
         44:7b:35:0d:d0:67:63:d1:0c:fb:5d:16:49:90:fb:33:d7:8e:
         d0:2d:5f:e5:ef:b9:09:2a:25:73:47:1c:7a:86:13:8e:67:15:
         4f:6f:78:f5:08:1a:ef:5e:b4:59:b2:de:fb:15:df:72:ce:34:
         f1:c6:35:d2:92:01:46:12:a1:7d:b5:bb:a0:9d:6a:f1:be:10:
         dc:72:28:e8:be:21:f9:26:1e:84:3b:80:8c:33:b5:eb:03:da:
         64:43:e0:5d:83:4f:7f:70:1b:9a:22:4e:ba:8c:91:1b:ce:aa:
         9b:00:03:10:ce:c3:7a:bc:78:e9:7a:86:fe:43:d2:2f:26:8f:
         83:71:59:2e:b5:5f:3b:1b:8f:01:61:7a:bf:df:68:47:f5:3e:
         19:21:3e:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----