Route Origin Authorization

$ rpki-client -vvf rpki.admin.freerangecloud.com/repo/FRC-CA/0/323630323a666564323a3365633a3a2f34382d3438203d3e203533333536.roa
File:                     323630323a666564323a3365633a3a2f34382d3438203d3e203533333536.roa (raw, json)
Hash identifier:          NK66gVJo607aT2dt2ZhNQb6zf2EdDsXzpiZN5SsISvs=
Subject key identifier:   81:51:91:5A:B2:A6:20:13:74:F4:61:A1:DD:B5:F4:71:9F:B0:6C:AE
Certificate issuer:       /CN=fd77f55efe3a93c53ca3dc8a6f8374fe70fec5567dd1e8c855
Certificate serial:       53DAE83C58C6ADD648FB9896F52EE795BF9EF6DC
Authority key identifier: C8:93:5F:DC:A5:02:8A:E8:20:9F:EC:82:AD:8A:E8:CF:B7:C6:E7:76
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/6e5d9611-fd33-488c-9aec-f4df2a25351e/fd77f55efe3a93c53ca3dc8a6f8374fe70fec5567dd1e8c855.cer
Subject info access:      rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/0/323630323a666564323a3365633a3a2f34382d3438203d3e203533333536.roa
Signing time:             Thu 16 Dec 2021 03:26:30 +0000
ROA not before:           Thu 16 Dec 2021 03:21:30 +0000
ROA not after:            Thu 15 Dec 2022 03:26:30 +0000
asID:                     53356
IP address blocks:        2602:fed2:3ec::/48 maxlen: 48
Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            53:da:e8:3c:58:c6:ad:d6:48:fb:98:96:f5:2e:e7:95:bf:9e:f6:dc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fd77f55efe3a93c53ca3dc8a6f8374fe70fec5567dd1e8c855
        Validity
            Not Before: Dec 16 03:21:30 2021 GMT
            Not After : Dec 15 03:26:30 2022 GMT
        Subject: CN=8151915AB2A6201374F461A1DDB5F4719FB06CAE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:6f:2d:ab:ae:98:fe:a1:d3:1d:8f:7c:dc:dc:
                    37:f0:c1:74:cc:43:21:7c:e3:bc:87:b1:18:c2:9b:
                    0d:6e:db:a0:7f:aa:24:a0:a0:9d:51:34:bb:65:bb:
                    f3:6c:4a:c4:fa:80:fa:54:14:76:24:a4:89:88:77:
                    b1:f5:3f:22:15:69:19:ef:16:76:3a:75:0a:b3:5e:
                    70:f7:fa:72:83:89:a7:3f:80:72:ef:94:90:fe:ec:
                    22:27:13:af:1c:96:48:ef:81:57:43:ea:35:e3:c9:
                    68:38:c5:df:81:7f:9e:21:2b:c2:01:2a:9c:d8:1d:
                    b0:6c:97:51:1e:b3:3f:2b:1e:0b:4d:01:46:36:81:
                    98:fe:de:ed:b2:0e:e1:68:ab:62:b7:43:66:60:57:
                    f0:24:27:50:22:3c:55:b7:aa:7d:33:0d:e5:1d:ad:
                    57:d0:21:77:7a:94:e9:3e:90:f0:a6:4c:cb:a2:fd:
                    d5:3b:b4:a2:c9:f1:2f:c2:c2:33:2a:d3:27:74:79:
                    da:4f:db:58:2c:e9:5a:d1:ae:0c:76:c6:cf:26:75:
                    95:83:4b:c2:7c:b8:89:c6:db:a7:1d:6e:3f:7f:b7:
                    f8:f1:08:9d:52:79:a7:94:4e:76:73:47:88:8d:94:
                    c0:07:60:c1:2f:9c:76:fa:5c:0f:be:70:6b:61:ca:
                    81:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                81:51:91:5A:B2:A6:20:13:74:F4:61:A1:DD:B5:F4:71:9F:B0:6C:AE
            X509v3 Authority Key Identifier:
                keyid:C8:93:5F:DC:A5:02:8A:E8:20:9F:EC:82:AD:8A:E8:CF:B7:C6:E7:76

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/0/C8935FDCA5028AE8209FEC82AD8AE8CFB7C6E776.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/6e5d9611-fd33-488c-9aec-f4df2a25351e/fd77f55efe3a93c53ca3dc8a6f8374fe70fec5567dd1e8c855.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/0/323630323a666564323a3365633a3a2f34382d3438203d3e203533333536.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fed2:3ec::/48

    Signature Algorithm: sha256WithRSAEncryption
         1a:1e:7c:6f:0a:64:d0:c2:93:32:98:da:1b:5f:dd:70:09:06:
         7e:62:92:e7:e1:24:b4:4e:67:5c:0e:39:cd:8a:81:3a:16:2d:
         2b:c0:28:56:a0:35:f7:e4:f9:84:58:24:33:cf:11:f1:5b:1e:
         80:84:75:3f:40:84:8e:ff:7c:06:bb:56:db:04:a6:55:23:95:
         2f:3a:e7:69:d6:33:6e:c0:d3:35:12:5b:60:f5:fd:a3:06:2a:
         b2:03:68:f1:45:85:d4:8b:73:7d:40:35:9a:9a:df:f7:42:04:
         3d:01:95:ff:bd:9e:6e:25:52:fb:d2:7b:16:e7:b2:d2:c2:3e:
         db:4a:cf:88:da:8c:40:a8:a8:4d:30:21:18:ab:c3:4a:a5:87:
         42:f5:b0:aa:0c:86:ae:c8:8f:23:f4:ac:cd:d2:7b:17:4b:29:
         74:b4:ae:02:a7:60:1b:fd:eb:49:86:41:0b:a6:be:32:ab:11:
         5e:7d:1a:fe:ba:94:de:fd:25:4c:cf:a4:3e:cd:e5:31:34:fb:
         fb:fc:24:33:33:f3:ea:f9:1b:32:78:61:90:f1:5c:87:31:58:
         63:8b:5e:c1:7c:b9:19:b9:5e:1e:10:15:be:64:68:d9:38:51:
         ba:2a:74:98:2e:b3:ca:49:5e:69:6b:67:36:77:4f:ba:91:c9:
         7d:b0:3f:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----