Route Origin Authorization

$ rpki-client -vvf rpki.admin.freerangecloud.com/repo/FRC-CA/0/323630323a666564323a33313a3a2f34382d3438203d3e203439313334.roa
File:                     323630323a666564323a33313a3a2f34382d3438203d3e203439313334.roa (raw, json)
Hash identifier:          +cOzoix2/+TThUx6ZtDhvJ92hvNUqQS/6X4V7iOTF1w=
Subject key identifier:   1F:44:19:CD:23:0A:63:27:67:E8:74:5A:5D:B2:E3:E2:88:F7:62:31
Certificate issuer:       /CN=fd77f55efe3a93c53ca3dc8a6f8374fe70fec5567dd1e8c855
Certificate serial:       1C3A372199A912EB0C4FDB37F5D18DFAEDD572BE
Authority key identifier: C8:93:5F:DC:A5:02:8A:E8:20:9F:EC:82:AD:8A:E8:CF:B7:C6:E7:76
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/6e5d9611-fd33-488c-9aec-f4df2a25351e/fd77f55efe3a93c53ca3dc8a6f8374fe70fec5567dd1e8c855.cer
Subject info access:      rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/0/323630323a666564323a33313a3a2f34382d3438203d3e203439313334.roa
Signing time:             Thu 16 Dec 2021 03:26:20 +0000
ROA not before:           Thu 16 Dec 2021 03:21:20 +0000
ROA not after:            Thu 15 Dec 2022 03:26:20 +0000
asID:                     49134
IP address blocks:        2602:fed2:31::/48 maxlen: 48

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1c:3a:37:21:99:a9:12:eb:0c:4f:db:37:f5:d1:8d:fa:ed:d5:72:be
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fd77f55efe3a93c53ca3dc8a6f8374fe70fec5567dd1e8c855
        Validity
            Not Before: Dec 16 03:21:20 2021 GMT
            Not After : Dec 15 03:26:20 2022 GMT
        Subject: CN=1F4419CD230A632767E8745A5DB2E3E288F76231
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:fc:8b:da:46:63:7f:97:46:09:e5:4e:3f:58:
                    69:ee:97:c7:00:b6:c5:3c:68:17:73:d1:26:9e:b8:
                    53:73:48:07:70:d8:25:f7:6c:98:08:3f:61:0e:fd:
                    1b:47:fd:cb:50:76:4a:29:03:c9:8c:b5:ce:57:4b:
                    ec:b4:c5:6f:e6:e6:21:37:39:08:4e:84:35:ef:4d:
                    58:b4:8a:ce:36:c5:1b:41:c0:74:4e:27:4d:96:c6:
                    5c:07:97:e4:7a:5e:42:aa:4e:0b:40:d2:e4:fe:03:
                    e5:fb:d8:bb:a8:9b:77:e0:6e:ea:3a:13:1a:e5:88:
                    bd:1d:2f:15:ac:0d:ba:f7:82:9a:6a:0c:1d:35:7a:
                    10:9f:aa:a0:51:6e:e3:0c:33:39:08:6d:84:72:7d:
                    f5:31:4d:18:34:7d:02:9d:f6:0c:db:9f:cd:9f:76:
                    70:0a:f5:a5:80:03:79:7b:50:63:23:7b:90:a1:19:
                    e1:6e:91:87:62:4c:35:89:95:5b:6c:a2:04:1d:47:
                    5a:22:47:3c:96:00:59:43:f9:ce:1b:1c:47:2d:fd:
                    28:4b:b7:25:f6:ca:bf:c0:6c:8a:bc:aa:d7:4a:fd:
                    14:d8:bf:f6:1f:a6:91:7f:47:30:61:a8:e6:bc:44:
                    a4:90:81:66:02:b7:b9:1c:c5:8c:f3:73:e1:38:65:
                    c8:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1F:44:19:CD:23:0A:63:27:67:E8:74:5A:5D:B2:E3:E2:88:F7:62:31
            X509v3 Authority Key Identifier:
                keyid:C8:93:5F:DC:A5:02:8A:E8:20:9F:EC:82:AD:8A:E8:CF:B7:C6:E7:76

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/0/C8935FDCA5028AE8209FEC82AD8AE8CFB7C6E776.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/6e5d9611-fd33-488c-9aec-f4df2a25351e/fd77f55efe3a93c53ca3dc8a6f8374fe70fec5567dd1e8c855.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/0/323630323a666564323a33313a3a2f34382d3438203d3e203439313334.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fed2:31::/48

    Signature Algorithm: sha256WithRSAEncryption
         8d:2b:0f:39:08:51:72:6f:57:db:02:10:9e:d3:06:18:6f:4e:
         3f:ed:6c:b8:a1:3b:a9:88:15:15:2d:5b:2c:27:77:ce:ce:fd:
         eb:32:f1:4d:93:9c:6f:e2:09:f5:54:75:6d:5c:1e:55:c5:b6:
         75:a9:45:37:11:50:35:75:bd:54:db:1a:d7:2a:6e:49:77:74:
         bb:2e:30:f3:c6:d7:09:b6:2f:0d:bb:26:e3:19:46:d0:a2:cc:
         db:b1:9a:09:e9:fc:da:a8:bb:1a:b0:69:4d:20:ad:bc:09:c7:
         b9:78:c1:a4:f0:b1:44:6a:f8:91:70:d9:ff:6c:f6:1a:37:49:
         b7:24:ae:c9:8b:23:31:d0:3f:a5:67:4f:0e:43:72:bd:bc:d8:
         5a:ad:b5:9f:1c:60:7f:7d:b6:4f:ed:52:5c:b4:a7:99:63:76:
         a8:d5:11:62:31:42:60:62:c2:48:ba:0a:4a:39:f4:56:ec:0d:
         7a:aa:22:e0:b0:83:d5:5f:6c:ae:0b:08:b1:b6:46:7b:2f:cd:
         57:d1:24:77:5e:eb:d4:53:d2:0c:c9:cd:85:56:b2:6c:2b:0a:
         a1:82:af:a5:cd:fc:2a:50:e7:a4:69:3a:a2:ba:86:97:a0:87:
         f3:08:2f:8f:c4:c2:ca:9a:1e:dc:00:c9:ac:ab:06:9e:aa:29:
         88:0e:7c:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----