Route Origin Authorization

$ rpki-client -vvf rpki.admin.freerangecloud.com/repo/FRC-CA/0/32332e3132392e33322e302f32342d3234203d3e203533333536.roa
File:                     32332e3132392e33322e302f32342d3234203d3e203533333536.roa (raw, json)
Hash identifier:          OrNGeg0qUl2J9IvrJ6fed4jXnLYvsnybJGoWnAF+m2M=
Subject key identifier:   A8:40:AA:A0:B3:FB:B5:0A:DB:0A:BF:6E:8F:09:7A:26:B3:6C:38:98
Certificate issuer:       /CN=fd77f55efe3a93c53ca3dc8a6f8374fe70fec5567dd1e8c855
Certificate serial:       2C3133E6D2CAF3C5F459998316C69C1BC14EDBB9
Authority key identifier: C8:93:5F:DC:A5:02:8A:E8:20:9F:EC:82:AD:8A:E8:CF:B7:C6:E7:76
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/6e5d9611-fd33-488c-9aec-f4df2a25351e/fd77f55efe3a93c53ca3dc8a6f8374fe70fec5567dd1e8c855.cer
Subject info access:      rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/0/32332e3132392e33322e302f32342d3234203d3e203533333536.roa
Signing time:             Thu 16 Dec 2021 03:26:30 +0000
ROA not before:           Thu 16 Dec 2021 03:21:30 +0000
ROA not after:            Thu 15 Dec 2022 03:26:30 +0000
asID:                     53356
IP address blocks:        23.129.32.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2c:31:33:e6:d2:ca:f3:c5:f4:59:99:83:16:c6:9c:1b:c1:4e:db:b9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fd77f55efe3a93c53ca3dc8a6f8374fe70fec5567dd1e8c855
        Validity
            Not Before: Dec 16 03:21:30 2021 GMT
            Not After : Dec 15 03:26:30 2022 GMT
        Subject: CN=A840AAA0B3FBB50ADB0ABF6E8F097A26B36C3898
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:bc:3f:61:64:74:03:7e:80:77:f9:2e:15:94:
                    b2:01:f1:8a:7d:b8:eb:9c:48:21:56:2a:cf:ac:ff:
                    99:c0:f0:d0:53:4b:bd:03:99:b7:df:a9:7a:49:14:
                    7b:d4:bf:b1:24:24:a5:53:b3:db:22:e5:42:11:57:
                    bf:e6:3a:35:f2:9d:27:38:6e:30:fa:68:b2:98:ee:
                    5d:45:cd:84:f9:49:1d:c2:44:38:0a:6a:b8:c0:74:
                    e3:c1:dc:18:98:2a:7e:3b:04:1f:26:c6:fc:a2:d3:
                    11:37:13:19:41:5c:30:6d:cc:b7:8d:32:75:2c:c2:
                    cf:94:ac:bc:04:be:a6:60:8b:98:c0:86:5b:1a:9d:
                    61:71:0b:23:10:61:6b:a6:d5:df:09:d9:37:25:dc:
                    74:c8:77:f6:8b:86:ac:b3:e5:0d:cb:d9:a0:1e:e7:
                    83:2c:b2:f1:30:60:73:ae:61:fc:87:5b:f7:6b:6e:
                    cf:aa:d9:b6:e4:a7:7a:4e:50:f9:6d:9f:22:70:5d:
                    74:47:94:09:0a:d9:e6:19:f1:0e:7a:48:7b:c3:6d:
                    e7:71:05:f1:11:5d:03:32:7a:d7:2c:c2:00:24:48:
                    0f:36:c6:10:c6:b5:bc:58:37:93:a4:7c:40:f2:27:
                    91:12:3a:96:94:f8:72:3f:f2:5b:6c:ee:e9:d4:91:
                    a4:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A8:40:AA:A0:B3:FB:B5:0A:DB:0A:BF:6E:8F:09:7A:26:B3:6C:38:98
            X509v3 Authority Key Identifier:
                keyid:C8:93:5F:DC:A5:02:8A:E8:20:9F:EC:82:AD:8A:E8:CF:B7:C6:E7:76

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/0/C8935FDCA5028AE8209FEC82AD8AE8CFB7C6E776.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/6e5d9611-fd33-488c-9aec-f4df2a25351e/fd77f55efe3a93c53ca3dc8a6f8374fe70fec5567dd1e8c855.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/0/32332e3132392e33322e302f32342d3234203d3e203533333536.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.129.32.0/24

    Signature Algorithm: sha256WithRSAEncryption
         75:72:63:16:1b:14:20:bb:c4:73:fc:a0:d2:98:91:4d:11:cc:
         fe:f6:3b:81:bd:ac:e6:82:02:80:c9:b4:a0:bc:4f:f5:4d:9c:
         3a:93:20:28:2f:04:38:45:41:a4:1d:8d:09:ef:36:b1:7a:b1:
         23:19:08:e1:07:f3:74:a0:70:76:6c:85:82:43:ac:b1:6c:81:
         d0:84:54:86:c3:ff:88:9f:34:f4:4c:4a:0a:1e:9a:69:b5:f5:
         38:bc:b1:87:44:8f:99:02:49:7a:7f:4c:7c:b1:68:c7:1c:0c:
         5c:17:8f:1d:96:f5:1a:7e:d1:2c:09:73:90:e7:8f:c6:e4:51:
         15:e0:16:53:13:05:ed:f5:93:2d:05:89:8b:83:dd:8c:ad:18:
         fa:80:d8:ea:3d:26:a3:e4:c8:1c:f3:80:26:54:12:5e:77:38:
         28:d3:46:c0:93:9e:99:05:be:75:a5:69:0d:6e:8e:01:33:4b:
         76:e9:dd:b1:3a:5b:d4:a6:62:d1:9a:81:b0:c1:b0:a6:60:5a:
         0e:c8:8e:8d:3e:28:c7:5f:18:33:b6:9d:c8:f3:a1:44:e6:05:
         fe:3f:4b:b2:3b:2a:7a:3a:af:86:3d:02:40:f9:4a:77:70:e6:
         4d:8d:e0:05:78:12:2b:38:8d:10:e3:ed:4e:25:da:4a:0b:5c:
         68:95:58:9e
-----BEGIN CERTIFICATE-----
MIIFgzCCBGugAwIBAgIULDEz5tLK88X0WZmDFsacG8FO27kwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyZmQ3N2Y1NWVmZTNhOTNjNTNjYTNkYzhhNmY4Mzc0ZmU3
MGZlYzU1NjdkZDFlOGM4NTUwHhcNMjExMjE2MDMyMTMwWhcNMjIxMjE1MDMyNjMw
WjAzMTEwLwYDVQQDEyhBODQwQUFBMEIzRkJCNTBBREIwQUJGNkU4RjA5N0EyNkIz
NkMzODk4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAubw/YWR0A36A
d/kuFZSyAfGKfbjrnEghVirPrP+ZwPDQU0u9A5m336l6SRR71L+xJCSlU7PbIuVC
EVe/5jo18p0nOG4w+miymO5dRc2E+UkdwkQ4Cmq4wHTjwdwYmCp+OwQfJsb8otMR
NxMZQVwwbcy3jTJ1LMLPlKy8BL6mYIuYwIZbGp1hcQsjEGFrptXfCdk3Jdx0yHf2
i4ass+UNy9mgHueDLLLxMGBzrmH8h1v3a27Pqtm25Kd6TlD5bZ8icF10R5QJCtnm
GfEOekh7w23ncQXxEV0DMnrXLMIAJEgPNsYQxrW8WDeTpHxA8ieREjqWlPhyP/Jb
bO7p1JGkPwIDAQABo4ICgzCCAn8wHQYDVR0OBBYEFKhAqqCz+7UK2wq/bo8Jeiaz
bDiYMB8GA1UdIwQYMBaAFMiTX9ylAoroIJ/sgq2K6M+3xud2MA4GA1UdDwEB/wQE
AwIHgDBxBgNVHR8EajBoMGagZKBihmByc3luYzovL3Jwa2kuYWRtaW4uZnJlZXJh
bmdlY2xvdWQuY29tL3JlcG8vRlJDLUNBLzAvQzg5MzVGRENBNTAyOEFFODIwOUZF
QzgyQUQ4QUU4Q0ZCN0M2RTc3Ni5jcmwwgfMGCCsGAQUFBwEBBIHmMIHjMIHgBggr
BgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4t
cnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvZjYw
YzlmMzItYTg3Yy00MzM5LWEyZjMtNjI5OWEzYjAyZTI5LzZlNWQ5NjExLWZkMzMt
NDg4Yy05YWVjLWY0ZGYyYTI1MzUxZS9mZDc3ZjU1ZWZlM2E5M2M1M2NhM2RjOGE2
ZjgzNzRmZTcwZmVjNTU2N2RkMWU4Yzg1NS5jZXIwgYgGCCsGAQUFBwELBHwwejB4
BggrBgEFBQcwC4ZscnN5bmM6Ly9ycGtpLmFkbWluLmZyZWVyYW5nZWNsb3VkLmNv
bS9yZXBvL0ZSQy1DQS8wLzMyMzMyZTMxMzIzOTJlMzMzMjJlMzAyZjMyMzQyZDMy
MzQyMDNkM2UyMDM1MzMzMzM1MzYucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUH
DgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAAXgSAwDQYJKoZIhvcNAQEL
BQADggEBAHVyYxYbFCC7xHP8oNKYkU0RzP72O4G9rOaCAoDJtKC8T/VNnDqTICgv
BDhFQaQdjQnvNrF6sSMZCOEH83SgcHZshYJDrLFsgdCEVIbD/4ifNPRMSgoemmm1
9Ti8sYdEj5kCSXp/THyxaMccDFwXjx2W9Rp+0SwJc5Dnj8bkURXgFlMTBe31ky0F
iYuD3YytGPqA2Oo9JqPkyBzzgCZUEl53OCjTRsCTnpkFvnWlaQ1ujgEzS3bp3bE6
W9SmYtGagbDBsKZgWg7Ijo0+KMdfGDO2ncjzoUTmBf4/S7I7Kno6r4Y9AkD5Sndw
5k2N4AV4Eis4jRDj7U4l2koLXGiVWJ4=
-----END CERTIFICATE-----