Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/3993f350-b756-4916-8d84-484f025dffcc/0/3230322e3136392e35352e302f32342d3234203d3e203137343531.roa
File:                     3230322e3136392e35352e302f32342d3234203d3e203137343531.roa (raw, json)
Hash identifier:          Xo085Ho4oMWxQRl6+GF4gpike53tTIrBT1c77niwp3k=
Subject key identifier:   E3:9C:81:6C:80:12:03:F8:7A:58:27:9F:8D:79:23:29:DE:C2:98:97
Certificate issuer:       /CN=AC555447BA62C39107F16BF572F82A417F728DBF
Certificate serial:       09AA651F621D78BA834706689742047F3B88FC75
Authority key identifier: AC:55:54:47:BA:62:C3:91:07:F1:6B:F5:72:F8:2A:41:7F:72:8D:BF
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AC555447BA62C39107F16BF572F82A417F728DBF.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/3993f350-b756-4916-8d84-484f025dffcc/0/3230322e3136392e35352e302f32342d3234203d3e203137343531.roa
Signing time:             Thu 30 Sep 2021 00:01:20 +0000
ROA not before:           Wed 29 Sep 2021 23:56:20 +0000
ROA not after:            Fri 30 Sep 2022 00:01:20 +0000
asID:                     17451
IP address blocks:        202.169.55.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            09:aa:65:1f:62:1d:78:ba:83:47:06:68:97:42:04:7f:3b:88:fc:75
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AC555447BA62C39107F16BF572F82A417F728DBF
        Validity
            Not Before: Sep 29 23:56:20 2021 GMT
            Not After : Sep 30 00:01:20 2022 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:92:91:05:b5:46:22:d2:da:19:7f:4c:0b:ff:
                    09:69:bf:fe:d8:e5:12:35:23:e0:0f:47:17:96:2b:
                    72:5e:86:6e:0f:45:b5:dc:57:dc:55:d2:3f:83:e7:
                    00:30:ff:d4:1b:e3:d0:1d:57:7c:cb:28:60:e6:96:
                    ef:86:b4:d1:0a:68:6a:73:13:9f:9c:a7:23:c9:80:
                    54:2d:cb:d6:b5:5e:c1:28:9c:3c:49:d9:dc:b0:cb:
                    b6:89:35:b7:49:19:0c:a5:78:99:58:5a:02:46:e7:
                    93:47:90:ab:cc:d4:60:97:2e:4c:6b:19:e5:2f:8e:
                    67:fb:a2:c0:96:be:f5:ec:00:81:1e:0f:44:36:3d:
                    40:52:e9:70:11:aa:20:67:24:fa:d4:6f:bc:4e:75:
                    24:40:93:fd:45:f6:75:7d:5f:15:c0:ba:c6:14:a8:
                    54:a2:fb:2a:13:98:0d:1b:3c:e9:fb:47:e1:33:eb:
                    0d:51:f5:e6:e3:43:5a:2d:5c:93:e8:ec:6e:ca:e3:
                    91:6e:b8:e5:09:ff:79:a9:82:ad:95:31:6a:67:7f:
                    f0:f8:00:63:7e:0a:f8:f6:41:20:02:6c:d9:06:61:
                    7f:27:29:14:a7:1b:f6:06:66:fa:ab:71:b8:a3:31:
                    88:4c:87:d7:21:ba:93:10:12:40:71:a0:3c:49:f2:
                    75:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E3:9C:81:6C:80:12:03:F8:7A:58:27:9F:8D:79:23:29:DE:C2:98:97
            X509v3 Authority Key Identifier:
                keyid:AC:55:54:47:BA:62:C3:91:07:F1:6B:F5:72:F8:2A:41:7F:72:8D:BF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/3993f350-b756-4916-8d84-484f025dffcc/0/AC555447BA62C39107F16BF572F82A417F728DBF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AC555447BA62C39107F16BF572F82A417F728DBF.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/3993f350-b756-4916-8d84-484f025dffcc/0/3230322e3136392e35352e302f32342d3234203d3e203137343531.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  202.169.55.0/24

    Signature Algorithm: sha256WithRSAEncryption
         84:df:8a:59:ce:b3:ef:0b:57:64:6d:c8:1c:b7:fa:b7:7e:a8:
         f8:f0:e6:72:3e:10:89:ec:66:ae:17:2b:1f:36:1c:35:f2:59:
         ef:30:97:e3:f9:1f:37:8c:73:42:f8:d9:cb:6a:ff:35:ba:d6:
         df:44:58:c1:9b:00:3e:d1:88:40:8c:d6:be:b9:b5:f7:f8:59:
         2d:63:03:4b:52:22:c0:cf:3f:f1:43:7b:1c:84:83:c6:6f:64:
         4b:25:1e:f7:91:9e:f0:ae:56:f5:77:53:f7:81:27:79:52:88:
         b9:e6:ce:c2:6b:7c:0c:5e:8e:a1:37:bc:a4:70:1a:b0:75:e2:
         f9:82:ad:c7:86:47:08:50:df:34:6e:2a:6c:1c:b1:c9:22:9c:
         02:03:e6:7a:bc:07:8e:cc:c5:89:c1:58:12:23:fb:c6:85:72:
         93:6a:59:07:11:82:87:e2:c6:35:14:05:17:17:6b:6f:8c:52:
         0e:2a:a7:f3:00:12:eb:79:47:50:82:4f:06:1d:35:f2:c2:b7:
         a8:0a:86:f7:f9:a7:2d:14:fa:b3:4e:5b:47:82:84:81:5b:f5:
         7c:ed:df:8a:62:d9:eb:90:ca:ba:6d:fe:11:05:ee:9a:97:b7:
         a8:5a:05:02:37:c9:ca:9d:55:c7:d4:a3:76:52:41:cc:6d:2a:
         1f:df:44:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----