Route Origin Authorization

$ rpki-client -vvf rpki.admin.freerangecloud.com/repo/FRC-CA/0/3136372e38382e35302e302f32342d3234203d3e2038313030.roa
File:                     3136372e38382e35302e302f32342d3234203d3e2038313030.roa (raw, json)
Hash identifier:          M1+w4rg6V1FkNy0sf7gVnp65bFYUDvdgMgvMNWOuuGE=
Subject key identifier:   85:21:9F:F5:9B:1E:71:E4:04:F0:67:A8:93:E2:B9:03:D3:ED:D2:44
Certificate issuer:       /CN=fd77f55efe3a93c53ca3dc8a6f8374fe70fec5567dd1e8c855
Certificate serial:       4C08F05A62598CD0C455BDA2B7B0E83A3CC27258
Authority key identifier: C8:93:5F:DC:A5:02:8A:E8:20:9F:EC:82:AD:8A:E8:CF:B7:C6:E7:76
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/6e5d9611-fd33-488c-9aec-f4df2a25351e/fd77f55efe3a93c53ca3dc8a6f8374fe70fec5567dd1e8c855.cer
Subject info access:      rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/0/3136372e38382e35302e302f32342d3234203d3e2038313030.roa
Signing time:             Thu 16 Dec 2021 03:26:28 +0000
ROA not before:           Thu 16 Dec 2021 03:21:28 +0000
ROA not after:            Thu 15 Dec 2022 03:26:28 +0000
asID:                     8100
IP address blocks:        167.88.50.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4c:08:f0:5a:62:59:8c:d0:c4:55:bd:a2:b7:b0:e8:3a:3c:c2:72:58
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fd77f55efe3a93c53ca3dc8a6f8374fe70fec5567dd1e8c855
        Validity
            Not Before: Dec 16 03:21:28 2021 GMT
            Not After : Dec 15 03:26:28 2022 GMT
        Subject: CN=85219FF59B1E71E404F067A893E2B903D3EDD244
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:bf:3f:ae:33:ae:65:1c:36:13:f9:64:98:c7:
                    c2:07:a7:52:17:9a:01:c3:f3:15:d6:70:90:d2:bf:
                    fb:be:e1:bd:ef:ae:0e:aa:bc:b6:12:1b:44:80:02:
                    b7:17:38:ae:7c:63:e4:15:bd:e4:55:4f:e9:ec:e1:
                    22:2b:1f:be:c0:cc:8a:d1:8c:b7:6f:f8:ff:0e:de:
                    d7:b8:35:b8:63:f6:d4:a1:ac:bd:d2:52:f8:70:69:
                    d2:1b:0a:6c:06:6d:72:00:2a:2d:39:10:03:4b:a4:
                    11:ba:4d:d2:3c:52:be:57:c9:8f:9c:bd:a3:fe:90:
                    3a:11:b8:1b:eb:4f:82:8d:e2:82:32:74:26:ba:ae:
                    a2:a1:a1:4c:38:01:26:b3:13:14:99:f0:e1:37:99:
                    90:54:de:42:a5:0b:79:f0:ca:83:2a:a9:c9:04:03:
                    97:91:03:53:8f:31:5b:00:a9:a8:2f:fd:88:92:63:
                    cc:7a:a6:0a:f7:bd:6f:fa:c3:55:eb:28:8b:39:65:
                    7e:01:6d:e8:e9:cc:6a:ff:91:39:3c:45:db:1b:20:
                    b7:0e:cd:cd:35:07:fb:06:95:2e:9d:05:1d:7f:39:
                    db:ec:f1:a9:46:38:80:7c:89:1e:62:b1:b6:d2:7e:
                    01:f3:33:85:81:d9:cf:91:0b:b0:16:cb:88:7e:d5:
                    ee:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                85:21:9F:F5:9B:1E:71:E4:04:F0:67:A8:93:E2:B9:03:D3:ED:D2:44
            X509v3 Authority Key Identifier:
                keyid:C8:93:5F:DC:A5:02:8A:E8:20:9F:EC:82:AD:8A:E8:CF:B7:C6:E7:76

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/0/C8935FDCA5028AE8209FEC82AD8AE8CFB7C6E776.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/6e5d9611-fd33-488c-9aec-f4df2a25351e/fd77f55efe3a93c53ca3dc8a6f8374fe70fec5567dd1e8c855.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/0/3136372e38382e35302e302f32342d3234203d3e2038313030.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  167.88.50.0/24

    Signature Algorithm: sha256WithRSAEncryption
         04:5a:e9:b6:bf:30:98:66:6f:3b:9f:c5:98:65:d3:c9:fa:18:
         5a:5b:94:28:a5:0d:56:35:51:41:2a:0e:ee:c7:52:93:80:00:
         1b:67:34:c6:33:08:1b:bf:c8:02:f7:40:7d:71:e4:4f:e7:f2:
         ae:ba:8a:7e:c4:ec:fe:54:76:15:6e:a9:84:5e:c8:80:94:ab:
         a3:c7:78:b7:be:65:18:9a:4d:d0:3c:66:92:ee:d0:d8:89:82:
         ff:2b:a0:6a:60:c8:b2:be:24:cb:20:38:01:0f:68:fd:ad:63:
         ac:c9:84:ee:8d:58:4e:96:2c:62:96:9c:d0:16:8c:26:42:7f:
         04:14:f1:60:77:a8:ae:d1:1d:9c:1c:b1:1a:72:7d:3b:72:58:
         8e:4c:45:08:92:69:0f:0a:59:3d:47:3b:da:3a:2b:86:36:c8:
         5f:e5:cb:8d:8a:f7:87:c6:b5:74:b5:b6:3c:49:59:2c:ee:98:
         54:9a:f2:4a:b8:91:5a:80:f4:28:c8:ff:54:17:db:b1:dd:78:
         0d:d5:e6:cf:90:e4:0a:8c:25:ae:15:02:66:8f:4f:43:24:54:
         a6:fa:86:a4:9a:62:6e:7c:63:41:5f:e0:85:73:3d:83:da:51:
         fc:aa:9e:5c:b9:fa:44:3b:4f:7d:48:af:34:c1:76:94:ce:57:
         24:41:96:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----