Route Origin Authorization

$ rpki-client -vvf rpki.admin.freerangecloud.com/repo/FRC-CA/0/3136372e38382e35302e302f32342d3234203d3e203533333536.roa
File:                     3136372e38382e35302e302f32342d3234203d3e203533333536.roa (raw, json)
Hash identifier:          mo557z3SEao7dZMDsVx8PLqDnjZNdN9Gx79hOmclagU=
Subject key identifier:   63:FA:C8:AE:AB:55:E6:FC:06:FF:EE:D2:BA:4F:64:D7:92:82:89:19
Certificate issuer:       /CN=fd77f55efe3a93c53ca3dc8a6f8374fe70fec5567dd1e8c855
Certificate serial:       6BED5C6C317FEACEC4F1880E58936A34496DEBDC
Authority key identifier: C8:93:5F:DC:A5:02:8A:E8:20:9F:EC:82:AD:8A:E8:CF:B7:C6:E7:76
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/6e5d9611-fd33-488c-9aec-f4df2a25351e/fd77f55efe3a93c53ca3dc8a6f8374fe70fec5567dd1e8c855.cer
Subject info access:      rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/0/3136372e38382e35302e302f32342d3234203d3e203533333536.roa
Signing time:             Thu 16 Dec 2021 03:26:24 +0000
ROA not before:           Thu 16 Dec 2021 03:21:24 +0000
ROA not after:            Thu 15 Dec 2022 03:26:24 +0000
asID:                     53356
IP address blocks:        167.88.50.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6b:ed:5c:6c:31:7f:ea:ce:c4:f1:88:0e:58:93:6a:34:49:6d:eb:dc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fd77f55efe3a93c53ca3dc8a6f8374fe70fec5567dd1e8c855
        Validity
            Not Before: Dec 16 03:21:24 2021 GMT
            Not After : Dec 15 03:26:24 2022 GMT
        Subject: CN=63FAC8AEAB55E6FC06FFEED2BA4F64D792828919
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:16:37:11:13:60:6b:d3:64:d6:50:75:21:4c:
                    60:92:c8:0e:2f:2a:50:e3:0d:1e:71:77:13:e6:a4:
                    7e:05:04:8a:d4:be:60:bb:bf:48:fc:c1:01:f3:e5:
                    88:7e:6f:2c:94:1e:70:64:ac:4d:52:4e:5c:3a:69:
                    6b:af:43:d3:ba:0b:b8:61:71:41:ec:13:ab:f1:5f:
                    6a:9a:51:de:94:f6:ad:da:53:a5:e1:f9:02:19:1c:
                    33:9f:2a:bf:07:f4:11:85:76:9c:5a:1f:21:04:7d:
                    2d:2a:c5:64:bf:63:d1:83:80:84:17:d4:fb:bd:2e:
                    95:8d:49:3a:33:5a:95:17:ce:fa:7c:42:73:f6:f7:
                    56:ee:53:ab:32:c0:f3:c3:9f:f6:aa:70:a6:1f:0c:
                    74:16:c0:ea:7e:b6:bf:29:95:08:50:e2:e3:45:cb:
                    72:07:d6:3e:75:75:fc:a9:82:2a:05:32:4d:a7:bc:
                    d5:52:db:d0:78:47:23:50:34:56:21:79:d4:2d:c3:
                    42:3a:12:ba:d1:aa:93:90:a0:7b:ed:11:74:76:30:
                    85:0a:b6:2f:c1:c9:a0:d2:f7:01:6b:2f:e6:b9:07:
                    3e:44:d7:92:f5:d3:a0:86:de:07:bd:d5:b2:85:3d:
                    0d:11:ac:56:2f:ec:79:3d:8e:6b:75:08:87:36:ec:
                    a8:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                63:FA:C8:AE:AB:55:E6:FC:06:FF:EE:D2:BA:4F:64:D7:92:82:89:19
            X509v3 Authority Key Identifier:
                keyid:C8:93:5F:DC:A5:02:8A:E8:20:9F:EC:82:AD:8A:E8:CF:B7:C6:E7:76

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/0/C8935FDCA5028AE8209FEC82AD8AE8CFB7C6E776.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/6e5d9611-fd33-488c-9aec-f4df2a25351e/fd77f55efe3a93c53ca3dc8a6f8374fe70fec5567dd1e8c855.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/0/3136372e38382e35302e302f32342d3234203d3e203533333536.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  167.88.50.0/24

    Signature Algorithm: sha256WithRSAEncryption
         55:a8:67:8d:e2:f0:13:06:74:a7:27:86:a5:7b:0f:be:29:c9:
         e5:43:36:eb:d0:c4:18:7f:c9:a9:49:25:8c:7f:3d:fe:ca:ff:
         9c:23:e7:7b:e5:db:30:3c:4f:33:33:0f:d1:96:e1:4f:7f:4f:
         cf:22:a4:89:90:05:a0:b7:02:a1:9c:d2:ab:98:cb:68:ee:95:
         fd:5b:bc:61:8b:68:83:5c:9d:44:7a:b4:53:32:c8:c9:4f:73:
         70:cd:b1:70:cf:b3:d3:31:52:23:57:e4:a9:e4:5c:05:1a:40:
         6f:1d:2d:7d:6a:e7:9a:2b:64:61:38:5a:26:74:a7:7a:69:be:
         4b:8f:ef:0c:2b:96:cf:63:da:8f:a2:cb:5d:a8:f5:63:3f:cd:
         cf:b9:5e:e8:ab:10:1f:45:12:95:a0:f8:4e:83:38:f5:37:c5:
         1a:9a:7e:15:be:eb:ec:2f:fb:a0:8a:15:51:21:91:2e:3f:4d:
         45:41:32:e7:af:63:33:aa:84:a3:70:bf:15:f1:59:7c:05:a9:
         96:8a:19:41:2d:3d:17:14:02:e4:e2:81:bb:72:1a:8d:b5:b9:
         81:fc:04:a0:65:db:a1:ed:23:b5:9e:71:6c:7b:e4:f7:85:a8:
         3b:f0:d1:84:8e:9f:bb:6c:6c:6f:19:52:2f:30:0b:1e:17:7d:
         15:9d:2d:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----