Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/3993f350-b756-4916-8d84-484f025dffcc/0/3138322e3235332e39372e302f32342d3234203d3e203137343531.roa
File:                     3138322e3235332e39372e302f32342d3234203d3e203137343531.roa (raw, json)
Hash identifier:          YfDjMuKvCFVBqqbFBKylgtS1rPb2JhrCo6xYCc7NdMQ=
Subject key identifier:   7C:B5:FB:A3:82:9F:1E:5C:2A:A2:61:AC:C9:3A:63:36:9F:8E:BD:B6
Certificate issuer:       /CN=AC555447BA62C39107F16BF572F82A417F728DBF
Certificate serial:       277496A9F3B4021229E607B0A6880B8C5AA524AF
Authority key identifier: AC:55:54:47:BA:62:C3:91:07:F1:6B:F5:72:F8:2A:41:7F:72:8D:BF
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AC555447BA62C39107F16BF572F82A417F728DBF.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/3993f350-b756-4916-8d84-484f025dffcc/0/3138322e3235332e39372e302f32342d3234203d3e203137343531.roa
Signing time:             Thu 30 Sep 2021 00:00:12 +0000
ROA not before:           Wed 29 Sep 2021 23:55:12 +0000
ROA not after:            Fri 30 Sep 2022 00:00:12 +0000
asID:                     17451
IP address blocks:        182.253.97.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            27:74:96:a9:f3:b4:02:12:29:e6:07:b0:a6:88:0b:8c:5a:a5:24:af
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AC555447BA62C39107F16BF572F82A417F728DBF
        Validity
            Not Before: Sep 29 23:55:12 2021 GMT
            Not After : Sep 30 00:00:12 2022 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:5e:e6:31:e6:51:87:8b:dc:08:f4:10:7a:a2:
                    67:d9:88:28:38:99:02:d4:23:68:12:00:85:b5:fe:
                    1b:3e:ff:bb:46:d7:26:b7:0c:a4:d5:da:c1:1e:9e:
                    14:c4:7c:6f:52:23:81:18:4c:01:7e:d5:1f:80:0b:
                    79:8b:49:12:28:91:4a:bd:43:40:7f:51:80:eb:ef:
                    2a:04:49:67:a0:02:54:45:02:55:3e:01:fa:62:eb:
                    b2:60:8d:ce:5b:84:fa:8b:fd:7a:62:42:85:1c:27:
                    f5:6f:e3:2f:f8:ce:58:57:49:70:aa:15:c1:fb:7b:
                    de:d7:cf:4a:ab:7d:3a:72:da:1d:d7:7c:81:73:61:
                    43:f7:9d:be:06:55:83:93:ed:c2:b1:28:57:e3:46:
                    3f:13:29:5e:02:38:e6:a8:24:17:25:b8:bb:5d:23:
                    ed:d6:11:5f:ab:77:d0:f3:43:28:14:64:84:b2:fd:
                    0c:c9:97:b3:aa:1e:23:22:9e:fa:02:d7:7d:15:c7:
                    0d:da:d3:5c:e6:a2:03:e0:44:ce:3d:6f:4b:0d:da:
                    4f:53:53:e5:3e:e2:03:b9:fd:4d:a1:64:5d:70:f4:
                    ea:35:96:e3:11:8a:35:fc:96:f6:f8:57:1b:09:9c:
                    bf:6d:cf:26:51:eb:bb:2b:51:62:19:46:5f:63:27:
                    ac:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7C:B5:FB:A3:82:9F:1E:5C:2A:A2:61:AC:C9:3A:63:36:9F:8E:BD:B6
            X509v3 Authority Key Identifier:
                keyid:AC:55:54:47:BA:62:C3:91:07:F1:6B:F5:72:F8:2A:41:7F:72:8D:BF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/3993f350-b756-4916-8d84-484f025dffcc/0/AC555447BA62C39107F16BF572F82A417F728DBF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AC555447BA62C39107F16BF572F82A417F728DBF.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/3993f350-b756-4916-8d84-484f025dffcc/0/3138322e3235332e39372e302f32342d3234203d3e203137343531.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  182.253.97.0/24

    Signature Algorithm: sha256WithRSAEncryption
         98:47:27:50:b3:47:dc:76:e1:6b:46:f7:76:a6:e2:5b:cd:b7:
         20:56:40:6b:d9:91:bf:0c:a3:31:21:7e:3f:31:7f:20:c9:2c:
         4d:93:6a:c7:5c:3a:6a:b9:fe:94:dc:ae:3b:7b:b2:a0:27:b8:
         a9:37:62:88:2a:1b:03:5d:e2:c9:51:45:5b:52:ac:d6:48:9f:
         d2:ad:ee:4d:e4:60:08:3a:99:3e:21:5a:32:f5:3c:32:65:bb:
         f5:a6:c0:2e:27:9e:d5:8c:0b:4c:5e:9c:db:7d:49:32:38:41:
         5f:be:96:8a:40:4a:14:01:f0:a3:a7:df:2a:c3:fb:f2:7b:2a:
         4e:59:1a:05:04:a3:8e:5e:e7:c6:78:69:f2:da:18:9e:22:68:
         a4:62:58:48:4e:33:ce:a0:85:62:38:87:c5:3e:7c:22:30:13:
         37:ba:bf:71:fb:e7:9c:61:e7:64:3e:2f:3e:f7:bc:d9:50:08:
         8f:88:c8:b1:53:0a:07:e8:da:2c:2e:78:5d:9e:ae:1d:18:82:
         59:a8:d3:5a:53:9c:4c:76:e9:44:20:e4:47:18:a9:6a:a8:9a:
         a5:89:4c:e9:73:4f:08:7f:5b:2d:b7:fc:d7:77:8c:eb:60:cb:
         91:27:0c:f8:bc:31:de:cc:91:c4:12:4b:69:47:02:c0:7c:8b:
         c9:f2:ed:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----