Route Origin Authorization

$ rpki-client -vvf rpki.admin.freerangecloud.com/repo/FRC-CA/0/323630323a666564323a373032303a3a2f34342d3438203d3e203339373533.roa
File:                     323630323a666564323a373032303a3a2f34342d3438203d3e203339373533.roa (raw, json)
Hash identifier:          2b2tYkimHY1nKnjyaUKZv3r6yJhF0vREIEiFqDNZudQ=
Subject key identifier:   C5:4B:7D:35:F7:0F:A6:77:25:6C:5A:B6:A0:2C:37:EF:C8:3D:66:57
Certificate issuer:       /CN=fd77f55efe3a93c53ca3dc8a6f8374fe70fec5567dd1e8c855
Certificate serial:       080D3722E3F4786AD716A1B29FB0D8E630975CA9
Authority key identifier: C8:93:5F:DC:A5:02:8A:E8:20:9F:EC:82:AD:8A:E8:CF:B7:C6:E7:76
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/6e5d9611-fd33-488c-9aec-f4df2a25351e/fd77f55efe3a93c53ca3dc8a6f8374fe70fec5567dd1e8c855.cer
Subject info access:      rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/0/323630323a666564323a373032303a3a2f34342d3438203d3e203339373533.roa
Signing time:             Thu 16 Dec 2021 03:26:26 +0000
ROA not before:           Thu 16 Dec 2021 03:21:26 +0000
ROA not after:            Thu 15 Dec 2022 03:26:26 +0000
asID:                     39753
IP address blocks:        2602:fed2:7020::/44 maxlen: 48

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            08:0d:37:22:e3:f4:78:6a:d7:16:a1:b2:9f:b0:d8:e6:30:97:5c:a9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fd77f55efe3a93c53ca3dc8a6f8374fe70fec5567dd1e8c855
        Validity
            Not Before: Dec 16 03:21:26 2021 GMT
            Not After : Dec 15 03:26:26 2022 GMT
        Subject: CN=C54B7D35F70FA677256C5AB6A02C37EFC83D6657
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f4:55:13:01:80:9a:cb:8d:cd:5d:7e:1e:c1:89:
                    ad:ff:aa:91:9a:b1:8d:36:6c:1f:15:b9:98:e8:12:
                    f0:72:22:66:5e:69:bd:cd:b7:c5:bd:85:58:97:e6:
                    77:7b:21:de:9b:53:28:3c:a7:df:9a:20:e7:56:1e:
                    5f:43:9f:44:ff:db:a0:aa:22:49:79:13:c5:21:52:
                    6b:b3:e4:d3:f1:52:b6:48:79:b3:ec:b0:09:68:08:
                    95:4d:93:bd:22:55:7e:16:ed:bb:0d:ee:8d:ee:fc:
                    35:30:93:05:c7:c9:d4:06:b0:5e:53:79:f6:d7:c4:
                    96:43:37:e5:67:28:96:c3:86:55:07:bb:63:be:d7:
                    2b:ae:41:5b:53:f4:40:f6:cc:ed:e6:86:c1:fa:6e:
                    58:c6:30:55:e1:96:f2:dc:3a:a5:f6:97:3c:82:eb:
                    25:d3:b0:81:d8:75:ef:79:63:a2:a9:fc:e9:0a:e4:
                    6b:87:6d:b9:e2:28:9c:d9:54:a1:c0:af:17:d3:a7:
                    d8:7c:f7:d4:86:48:1f:ff:83:a5:e3:fe:ea:2d:4f:
                    ac:a4:a1:f8:43:51:6a:e6:e2:19:9c:de:48:7c:37:
                    9c:1f:3f:e0:11:99:11:04:a7:d2:a7:34:ae:03:ad:
                    f8:86:50:cb:fa:57:fb:8a:32:b7:ee:77:6f:ab:b5:
                    80:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C5:4B:7D:35:F7:0F:A6:77:25:6C:5A:B6:A0:2C:37:EF:C8:3D:66:57
            X509v3 Authority Key Identifier:
                keyid:C8:93:5F:DC:A5:02:8A:E8:20:9F:EC:82:AD:8A:E8:CF:B7:C6:E7:76

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/0/C8935FDCA5028AE8209FEC82AD8AE8CFB7C6E776.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/6e5d9611-fd33-488c-9aec-f4df2a25351e/fd77f55efe3a93c53ca3dc8a6f8374fe70fec5567dd1e8c855.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/0/323630323a666564323a373032303a3a2f34342d3438203d3e203339373533.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fed2:7020::/44

    Signature Algorithm: sha256WithRSAEncryption
         b9:16:17:76:26:83:3c:90:89:de:c1:2c:29:58:bc:47:47:63:
         04:59:29:8f:40:54:58:17:91:3f:2a:17:49:10:6c:d6:02:60:
         e2:cc:28:54:ba:6b:2b:d0:01:2f:96:47:27:0a:6c:8d:ef:c2:
         db:ec:99:ba:f4:46:2d:fb:82:73:08:65:41:13:32:05:48:07:
         a5:f3:4a:08:d3:62:de:f8:40:dc:3a:02:b2:7c:6d:c3:39:c4:
         9b:4e:e5:96:30:15:18:c4:a0:42:96:54:6e:ab:1a:26:a8:d8:
         2f:63:a2:a6:78:ab:e0:8a:51:b0:88:84:10:2d:62:9a:36:5f:
         8e:16:51:bd:60:95:5c:fe:29:bb:98:92:bf:59:50:7b:dc:0a:
         aa:a9:66:21:07:f4:e1:5c:10:20:85:02:6d:db:74:d1:8b:06:
         d8:9f:1b:04:70:d9:4a:b8:e9:1c:45:0e:c5:23:f3:45:ae:75:
         58:b1:bf:81:ef:d5:04:fd:95:82:34:ea:02:d6:e2:8c:60:5b:
         61:83:9e:56:f8:c8:6b:28:26:e8:34:6c:ee:c7:9a:5a:19:8f:
         55:05:ae:f2:f8:e9:e8:32:cc:06:b4:c2:90:9a:56:27:5f:d9:
         7e:24:00:f7:a4:74:74:7a:59:bb:d7:b1:08:98:ee:fb:4e:4f:
         ce:fb:26:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----