Route Origin Authorization

$ rpki-client -vvf rpki.admin.freerangecloud.com/repo/FRC-CA/0/323630323a666564323a33313a3a2f34382d3438203d3e203533333536.roa
File:                     323630323a666564323a33313a3a2f34382d3438203d3e203533333536.roa (raw, json)
Hash identifier:          NBVJUg7+K3dL/IA1b75L3bUWPPBUsj5gnXiZuq1Y/7E=
Subject key identifier:   37:D2:10:EA:71:EE:38:3B:88:23:0F:8A:B9:C8:79:F0:DE:D8:58:E6
Certificate issuer:       /CN=fd77f55efe3a93c53ca3dc8a6f8374fe70fec5567dd1e8c855
Certificate serial:       021466E8274D587012E776000C12D43EB5949D32
Authority key identifier: C8:93:5F:DC:A5:02:8A:E8:20:9F:EC:82:AD:8A:E8:CF:B7:C6:E7:76
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/6e5d9611-fd33-488c-9aec-f4df2a25351e/fd77f55efe3a93c53ca3dc8a6f8374fe70fec5567dd1e8c855.cer
Subject info access:      rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/0/323630323a666564323a33313a3a2f34382d3438203d3e203533333536.roa
Signing time:             Thu 16 Dec 2021 03:26:23 +0000
ROA not before:           Thu 16 Dec 2021 03:21:23 +0000
ROA not after:            Thu 15 Dec 2022 03:26:23 +0000
asID:                     53356
IP address blocks:        2602:fed2:31::/48 maxlen: 48

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            02:14:66:e8:27:4d:58:70:12:e7:76:00:0c:12:d4:3e:b5:94:9d:32
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fd77f55efe3a93c53ca3dc8a6f8374fe70fec5567dd1e8c855
        Validity
            Not Before: Dec 16 03:21:23 2021 GMT
            Not After : Dec 15 03:26:23 2022 GMT
        Subject: CN=37D210EA71EE383B88230F8AB9C879F0DED858E6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:86:de:b7:cd:10:46:b6:1b:70:50:51:4c:1b:
                    f4:9e:4b:78:05:7f:af:0f:9c:d2:5d:86:1d:63:80:
                    e1:e6:c4:f5:f0:7a:ca:4e:38:ea:07:31:08:14:d7:
                    c1:4c:37:4b:11:b1:d3:4a:96:8c:a7:69:fa:eb:95:
                    cb:b9:c1:c8:b4:d2:e3:26:22:6b:ba:af:e5:f2:10:
                    48:35:80:14:b4:4a:1a:1c:6e:b3:28:b0:50:3c:1c:
                    b5:44:fc:f1:94:6e:f4:38:4c:57:16:76:a0:f4:3f:
                    cf:49:24:f1:b8:c7:2c:c9:29:a1:f6:b3:13:c4:5f:
                    d0:bf:cd:6f:9d:c6:fe:56:0d:ed:7b:0d:e5:7d:76:
                    4f:88:4f:f9:ef:62:c3:17:8a:d4:e7:19:c5:1b:56:
                    6a:d3:35:d8:ad:94:0e:87:b8:9f:6f:67:e8:9c:ec:
                    e5:68:7f:02:89:7c:33:fb:6d:a1:6e:57:1c:ec:55:
                    de:60:7b:b7:61:38:12:67:f7:5d:bc:73:bf:48:49:
                    62:6c:8e:91:ce:db:9c:ed:ab:3a:1b:3f:65:72:d4:
                    0b:bd:5b:2c:2f:c0:3d:bb:f1:30:04:e1:80:5d:31:
                    de:97:ef:ac:62:4e:5e:f5:45:86:05:1b:be:0a:71:
                    46:ea:79:66:bc:61:4e:95:28:64:fb:72:d6:35:d0:
                    c9:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                37:D2:10:EA:71:EE:38:3B:88:23:0F:8A:B9:C8:79:F0:DE:D8:58:E6
            X509v3 Authority Key Identifier:
                keyid:C8:93:5F:DC:A5:02:8A:E8:20:9F:EC:82:AD:8A:E8:CF:B7:C6:E7:76

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/0/C8935FDCA5028AE8209FEC82AD8AE8CFB7C6E776.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/6e5d9611-fd33-488c-9aec-f4df2a25351e/fd77f55efe3a93c53ca3dc8a6f8374fe70fec5567dd1e8c855.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/0/323630323a666564323a33313a3a2f34382d3438203d3e203533333536.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fed2:31::/48

    Signature Algorithm: sha256WithRSAEncryption
         13:c8:1a:f2:b9:f3:b5:9c:6e:b5:d6:79:c0:55:bb:a9:63:fc:
         9d:bd:6c:15:22:26:33:19:6d:e3:26:f8:2c:2e:89:cf:ca:71:
         5e:ba:b3:de:d3:a6:b8:98:5b:e4:91:83:59:eb:38:73:a4:e2:
         4a:a7:c4:c7:53:1d:e1:b2:ec:cf:3e:1b:ff:57:b7:04:9e:14:
         f7:40:1d:bf:c6:ee:46:0a:f9:5a:7e:5b:7a:33:41:91:ce:fa:
         ce:c6:58:29:43:61:af:18:87:ad:04:23:f5:c4:6c:10:ee:2a:
         e0:7c:05:16:39:da:e5:58:99:65:04:37:b9:f6:fc:31:ed:ca:
         b2:9a:18:8f:45:9b:94:37:92:03:2e:ef:3a:0b:71:fc:2d:f0:
         0a:e6:ff:5b:2d:4e:a3:61:ad:eb:63:60:d3:9d:09:20:a6:1b:
         a8:03:41:e7:b3:7c:27:fd:d8:89:c1:26:bd:eb:29:63:06:81:
         a9:ec:8a:36:d0:24:7a:59:49:c2:9f:50:54:8c:18:4a:45:04:
         ca:80:04:a8:63:06:c8:c2:1b:1f:b6:f2:6b:a0:6b:a7:71:82:
         87:5c:e4:e5:45:56:e7:c8:15:14:4f:58:57:95:03:d5:78:c1:
         18:a9:74:70:1a:e9:44:bf:9a:ca:1d:05:9c:39:63:d5:08:4a:
         bf:c4:dd:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----