Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/4bdb1e0a-a4ec-49db-be89-8d7e7fc2c227/0/3131322e3231352e3235352e302f32342d3234203d3e203137383835.roa
File:                     3131322e3231352e3235352e302f32342d3234203d3e203137383835.roa (raw, json)
Hash identifier:          ggn8wsRDxnWaZ762L48LPoEV7SESSjo4mSzDoXDl4os=
Subject key identifier:   22:72:4E:7C:D1:95:B6:02:11:F7:90:48:9C:51:41:B6:C0:62:E4:2F
Certificate issuer:       /CN=B493A5CEBF09E10BC35D9AC2211DAFD2095687DA
Certificate serial:       44CE3A8D7516A3209A0B73D1DC236A2F1DDC7463
Authority key identifier: B4:93:A5:CE:BF:09:E1:0B:C3:5D:9A:C2:21:1D:AF:D2:09:56:87:DA
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B493A5CEBF09E10BC35D9AC2211DAFD2095687DA.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/4bdb1e0a-a4ec-49db-be89-8d7e7fc2c227/0/3131322e3231352e3235352e302f32342d3234203d3e203137383835.roa
Signing time:             Fri 16 Jul 2021 01:46:51 +0000
ROA not before:           Fri 16 Jul 2021 01:41:51 +0000
ROA not after:            Sat 16 Jul 2022 01:46:51 +0000
asID:                     17885
IP address blocks:        112.215.255.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            44:ce:3a:8d:75:16:a3:20:9a:0b:73:d1:dc:23:6a:2f:1d:dc:74:63
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B493A5CEBF09E10BC35D9AC2211DAFD2095687DA
        Validity
            Not Before: Jul 16 01:41:51 2021 GMT
            Not After : Jul 16 01:46:51 2022 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:5d:10:01:3c:bb:e4:ab:ce:07:1a:6c:10:20:
                    fe:fd:80:06:fd:e6:1e:83:6f:cd:99:0f:bf:15:95:
                    22:cc:49:cf:1c:d0:3f:db:94:73:6e:32:c1:55:87:
                    e2:b4:65:6f:0f:67:99:0d:8b:06:42:21:a7:6f:70:
                    7b:a6:29:3f:df:fe:53:1f:c4:41:68:c3:f3:44:f0:
                    46:29:3e:23:2f:9b:e2:ee:ce:e6:1c:ff:98:67:ca:
                    6e:a0:56:64:a0:0d:c1:b3:5b:68:fa:ec:5e:ed:c1:
                    19:78:36:59:39:6c:d7:a9:ef:68:69:9a:eb:ee:cd:
                    dd:bd:07:c6:3d:fe:34:52:40:36:53:2d:60:2f:23:
                    2c:24:70:a5:10:78:33:f2:8d:0a:be:55:f2:9d:18:
                    f8:10:7b:d3:60:70:42:74:97:75:1d:e7:b3:f3:c9:
                    99:8a:a4:72:3c:14:36:32:b6:6d:ed:19:49:4f:ab:
                    f1:69:43:43:c9:b4:e0:93:2d:12:c3:f5:21:ab:92:
                    ca:5f:d5:ac:e4:34:6d:a3:ad:38:6e:3e:63:52:5e:
                    4f:5e:84:9d:35:28:7d:87:3a:ca:88:10:25:dc:66:
                    c6:5a:f2:93:bb:cf:1f:7e:8e:d9:19:18:e9:86:d7:
                    c0:81:d3:a7:1c:84:b9:ce:e9:98:70:78:53:3a:1b:
                    cb:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                22:72:4E:7C:D1:95:B6:02:11:F7:90:48:9C:51:41:B6:C0:62:E4:2F
            X509v3 Authority Key Identifier:
                keyid:B4:93:A5:CE:BF:09:E1:0B:C3:5D:9A:C2:21:1D:AF:D2:09:56:87:DA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/4bdb1e0a-a4ec-49db-be89-8d7e7fc2c227/0/B493A5CEBF09E10BC35D9AC2211DAFD2095687DA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B493A5CEBF09E10BC35D9AC2211DAFD2095687DA.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/4bdb1e0a-a4ec-49db-be89-8d7e7fc2c227/0/3131322e3231352e3235352e302f32342d3234203d3e203137383835.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  112.215.255.0/24

    Signature Algorithm: sha256WithRSAEncryption
         64:60:13:ae:98:2a:b8:1a:07:7d:06:73:49:c2:ae:52:e3:f0:
         27:47:ab:9a:a5:4a:6f:c8:ca:98:f0:d8:5a:18:d4:b6:e2:1e:
         fb:68:cc:25:13:e0:96:81:c7:e3:ba:35:8f:36:fa:d3:01:d6:
         55:b4:93:61:b3:bf:9b:37:e6:f1:44:bd:79:fe:36:ec:0f:23:
         bb:ef:6f:70:4f:13:99:6d:dc:b4:9a:ec:1e:27:83:de:90:ec:
         c3:94:c1:dc:7a:99:33:c2:ed:19:b7:52:fa:d5:37:2d:44:1d:
         70:f2:79:3d:e1:c3:d2:b3:a9:4c:a5:19:f8:24:2c:a8:0f:43:
         2a:20:0a:f3:01:99:57:4d:62:e5:ff:04:2c:83:27:bf:09:9e:
         0c:21:29:dd:8d:30:43:ac:49:5b:2f:21:f7:ee:a7:cb:38:f3:
         e4:95:34:70:f8:f9:84:91:8d:11:4c:27:91:8e:b6:f3:ca:86:
         6b:82:6b:af:76:4e:38:98:59:1b:9f:1b:4b:22:4c:63:d4:cb:
         9c:32:5d:51:fb:fc:bb:00:8d:75:3e:e8:b1:16:1e:12:aa:c7:
         27:f8:70:3a:05:61:e2:d5:c7:a3:7e:09:19:70:c2:20:10:74:
         03:be:78:3e:b2:4e:7e:2d:86:cf:87:18:dc:cf:27:86:a5:ad:
         17:23:37:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----