Route Origin Authorization

$ rpki-client -vvf rpki.admin.freerangecloud.com/repo/FRC-CA/0/323630323a666564323a31303a3a2f34342d3438203d3e203439343539.roa
File:                     323630323a666564323a31303a3a2f34342d3438203d3e203439343539.roa (raw, json)
Hash identifier:          FPa2NIW8YqSm2VegnRSCWjTuBvIX/mCIXyg+hJndf6c=
Subject key identifier:   A1:DD:9D:7A:55:65:D3:4B:92:FD:85:C2:B5:47:3D:D6:7D:BC:D5:A0
Certificate issuer:       /CN=fd77f55efe3a93c53ca3dc8a6f8374fe70fec5567dd1e8c855
Certificate serial:       6189EED03C26D3F0BCDD4B491C656C6FFE8A4AF2
Authority key identifier: C8:93:5F:DC:A5:02:8A:E8:20:9F:EC:82:AD:8A:E8:CF:B7:C6:E7:76
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/6e5d9611-fd33-488c-9aec-f4df2a25351e/fd77f55efe3a93c53ca3dc8a6f8374fe70fec5567dd1e8c855.cer
Subject info access:      rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/0/323630323a666564323a31303a3a2f34342d3438203d3e203439343539.roa
Signing time:             Thu 16 Dec 2021 03:26:26 +0000
ROA not before:           Thu 16 Dec 2021 03:21:26 +0000
ROA not after:            Thu 15 Dec 2022 03:26:26 +0000
asID:                     49459
IP address blocks:        2602:fed2:10::/44 maxlen: 48

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            61:89:ee:d0:3c:26:d3:f0:bc:dd:4b:49:1c:65:6c:6f:fe:8a:4a:f2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fd77f55efe3a93c53ca3dc8a6f8374fe70fec5567dd1e8c855
        Validity
            Not Before: Dec 16 03:21:26 2021 GMT
            Not After : Dec 15 03:26:26 2022 GMT
        Subject: CN=A1DD9D7A5565D34B92FD85C2B5473DD67DBCD5A0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:08:74:45:79:1c:af:4e:0b:20:ce:35:7e:a7:
                    fc:e4:31:87:80:2b:73:ad:18:a6:af:14:68:bd:26:
                    00:e8:c8:15:1a:90:cc:f9:56:cb:67:ce:78:c7:e9:
                    69:94:c0:42:a2:e3:07:67:6f:2c:2a:4c:05:54:17:
                    f2:58:1a:b8:d4:3f:4a:b4:d9:97:e0:40:28:50:5b:
                    d0:4a:f5:df:70:25:7c:27:1e:63:48:be:3d:59:8a:
                    7c:f9:49:a6:08:04:bb:21:07:8a:8e:18:2a:48:3d:
                    2e:f4:a8:7e:d9:8b:31:fe:08:f2:17:9e:f7:ec:a1:
                    69:1c:59:de:a0:61:31:46:9e:e7:6b:51:b8:6b:08:
                    61:03:fe:17:6f:be:55:ba:a5:95:1e:c9:39:7b:03:
                    bd:d6:8c:6d:36:d1:d7:ca:9c:26:2d:fd:ce:fa:a9:
                    5f:96:87:68:f1:41:7a:ce:aa:2b:05:13:6e:64:18:
                    db:7c:fb:e4:90:e7:fa:ed:06:0d:58:f8:fa:98:55:
                    75:76:c0:d2:98:6a:0f:09:c2:ed:8e:41:f6:6c:b2:
                    4b:bb:92:ee:f5:b1:cd:6b:3b:f7:44:17:44:16:38:
                    05:74:9d:92:65:01:71:6d:86:78:59:c0:73:14:61:
                    20:0c:f4:34:f5:80:fe:56:3f:33:46:a8:aa:d6:12:
                    f8:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A1:DD:9D:7A:55:65:D3:4B:92:FD:85:C2:B5:47:3D:D6:7D:BC:D5:A0
            X509v3 Authority Key Identifier:
                keyid:C8:93:5F:DC:A5:02:8A:E8:20:9F:EC:82:AD:8A:E8:CF:B7:C6:E7:76

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/0/C8935FDCA5028AE8209FEC82AD8AE8CFB7C6E776.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/6e5d9611-fd33-488c-9aec-f4df2a25351e/fd77f55efe3a93c53ca3dc8a6f8374fe70fec5567dd1e8c855.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/0/323630323a666564323a31303a3a2f34342d3438203d3e203439343539.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fed2:10::/44

    Signature Algorithm: sha256WithRSAEncryption
         6b:27:b2:af:bb:99:93:9a:94:08:2d:f3:58:3d:38:15:84:05:
         be:0b:90:c3:41:e0:7c:cf:89:90:7a:2d:1a:8e:b0:75:83:3e:
         91:30:45:c4:ca:fc:c9:ca:d5:59:a9:e4:6e:27:ca:90:d2:30:
         89:e3:51:d4:b3:4a:47:5f:00:df:14:ad:e2:61:ab:fe:76:4b:
         4f:76:ac:27:d0:ab:37:63:5a:7e:dd:f0:4b:2c:ca:d7:58:48:
         d8:2a:9c:3c:69:d4:f0:7f:d1:3e:6a:7d:7b:42:79:7d:b7:3d:
         d6:09:a6:f1:6b:84:8a:6f:eb:97:a7:76:24:f7:3b:71:ba:c0:
         7f:44:41:f2:f9:b5:b3:72:3f:6e:07:e4:ce:87:1a:a1:e4:83:
         8f:01:dd:ef:c7:50:9d:88:57:58:3b:93:d2:8d:4b:ab:e6:60:
         7e:ff:f4:e1:d3:ed:88:db:67:a4:4d:e3:8d:c1:c2:5a:a4:b5:
         03:37:6b:96:dc:7a:0c:b6:be:d6:8c:44:77:3e:74:2d:a1:fa:
         ca:b2:d0:07:59:fc:db:62:bf:59:3c:a7:8c:e6:a6:66:6a:e0:
         cd:b0:92:cf:07:bf:df:0f:c9:96:88:b4:09:fd:6e:55:f9:19:
         cc:ff:06:2f:09:9a:51:09:ee:b2:5a:03:e0:9d:cd:11:d4:90:
         aa:43:b7:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----