Route Origin Authorization

$ rpki-client -vvf rpki.admin.freerangecloud.com/repo/FRC-CA/0/323630323a666564323a3365623a3a2f34382d3438203d3e203533333536.roa
File:                     323630323a666564323a3365623a3a2f34382d3438203d3e203533333536.roa (raw, json)
Hash identifier:          po60u5MMh1uqq0Nm9Qf2Lz8nqJZXthtrR5OfmnVSbF4=
Subject key identifier:   8C:69:6E:E1:57:7A:41:70:7B:34:BF:E7:8D:F6:8A:AF:12:2B:29:53
Certificate issuer:       /CN=fd77f55efe3a93c53ca3dc8a6f8374fe70fec5567dd1e8c855
Certificate serial:       32CB774CE88AF6FA81E72D0573434A06E29F5B1B
Authority key identifier: C8:93:5F:DC:A5:02:8A:E8:20:9F:EC:82:AD:8A:E8:CF:B7:C6:E7:76
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/6e5d9611-fd33-488c-9aec-f4df2a25351e/fd77f55efe3a93c53ca3dc8a6f8374fe70fec5567dd1e8c855.cer
Subject info access:      rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/0/323630323a666564323a3365623a3a2f34382d3438203d3e203533333536.roa
Signing time:             Thu 16 Dec 2021 03:26:28 +0000
ROA not before:           Thu 16 Dec 2021 03:21:28 +0000
ROA not after:            Thu 15 Dec 2022 03:26:28 +0000
asID:                     53356
IP address blocks:        2602:fed2:3eb::/48 maxlen: 48
Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            32:cb:77:4c:e8:8a:f6:fa:81:e7:2d:05:73:43:4a:06:e2:9f:5b:1b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fd77f55efe3a93c53ca3dc8a6f8374fe70fec5567dd1e8c855
        Validity
            Not Before: Dec 16 03:21:28 2021 GMT
            Not After : Dec 15 03:26:28 2022 GMT
        Subject: CN=8C696EE1577A41707B34BFE78DF68AAF122B2953
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:eb:38:2a:eb:b2:7f:35:e9:9b:02:fb:cf:54:87:
                    40:a0:da:ab:de:c9:25:4c:d0:ca:d9:b0:36:b9:56:
                    7e:8c:eb:7a:77:18:5d:f4:fc:f4:84:89:f5:9d:b5:
                    76:4e:7b:ee:59:fc:2d:dc:e8:87:8a:c9:87:c3:63:
                    7a:18:35:b1:44:24:65:da:ea:88:b4:47:51:f4:c9:
                    12:f5:84:21:98:02:91:1a:8d:5a:c0:5c:3b:b8:24:
                    f8:fe:fd:76:b3:d7:19:d9:a4:be:f3:ba:e6:39:d6:
                    df:42:ec:0c:e0:17:27:e6:b9:50:02:21:34:07:a0:
                    f5:b9:87:2c:10:20:67:55:12:91:8c:3c:49:88:38:
                    b4:b0:2b:78:ed:7c:4e:3b:86:76:eb:f5:95:29:ac:
                    39:18:67:28:71:f9:50:4e:4d:94:db:cd:a0:7f:d2:
                    f5:91:bc:a4:14:2b:80:59:de:33:c3:a6:28:ed:02:
                    c8:dc:e8:5d:45:b6:fc:f9:e4:72:f7:fa:8f:f2:a0:
                    00:ff:18:09:9b:55:f5:0c:ec:d0:de:67:ca:66:52:
                    c6:21:75:dd:40:9d:c2:05:2e:2d:21:97:bd:2f:21:
                    88:b2:0e:d5:0c:3e:7c:03:a1:32:51:01:d3:1b:01:
                    39:a6:66:bc:bb:b6:e9:d8:51:65:c7:c3:3d:ea:16:
                    37:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8C:69:6E:E1:57:7A:41:70:7B:34:BF:E7:8D:F6:8A:AF:12:2B:29:53
            X509v3 Authority Key Identifier:
                keyid:C8:93:5F:DC:A5:02:8A:E8:20:9F:EC:82:AD:8A:E8:CF:B7:C6:E7:76

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/0/C8935FDCA5028AE8209FEC82AD8AE8CFB7C6E776.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/6e5d9611-fd33-488c-9aec-f4df2a25351e/fd77f55efe3a93c53ca3dc8a6f8374fe70fec5567dd1e8c855.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/0/323630323a666564323a3365623a3a2f34382d3438203d3e203533333536.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fed2:3eb::/48

    Signature Algorithm: sha256WithRSAEncryption
         6d:b7:18:06:10:fc:5d:b7:38:5d:0d:aa:ba:53:0d:23:5c:2a:
         b9:3d:05:a1:d8:16:13:35:6e:f5:cc:1e:da:d5:12:21:9d:de:
         f4:f5:77:60:15:1c:39:e3:55:26:2b:43:86:38:65:ea:d5:51:
         68:01:30:54:6b:d7:d1:ee:67:3b:9a:5b:d1:0c:02:b5:c7:b5:
         83:26:ef:b6:47:3e:37:95:65:d9:f5:2d:84:7a:53:7f:38:58:
         e6:a0:5b:12:41:ec:e9:80:cd:ce:b1:29:a7:e9:53:81:fe:63:
         5e:d7:2d:6f:70:d0:3f:c7:e6:1b:79:cd:33:f0:26:ea:a2:9f:
         01:60:52:af:ca:d8:4b:cc:bb:2b:1e:e5:7e:6b:aa:0e:f4:a0:
         a9:a5:79:c1:83:89:7e:64:f0:81:a8:b2:d9:a6:ff:31:21:de:
         56:f9:66:d3:2a:41:b6:73:21:d3:d5:4d:a8:88:3c:2e:c2:05:
         a0:ec:c2:cc:f4:6e:81:f6:c4:3d:63:cd:ee:8b:d3:4c:8c:c1:
         74:60:0a:b4:3b:10:0c:74:89:64:a4:57:da:e6:88:8b:8d:ff:
         68:89:27:7b:3e:22:20:1d:83:8d:72:15:68:c2:d0:30:86:2e:
         a0:7b:d8:2b:ec:39:32:5d:27:f0:62:ef:ec:70:32:75:7f:6b:
         71:d8:02:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----