Route Origin Authorization

$ rpki-client -vvf rpki.admin.freerangecloud.com/repo/FRC-CA/0/323630323a666564323a373033313a3a2f34382d3438203d3e20333339373438.roa
File:                     323630323a666564323a373033313a3a2f34382d3438203d3e20333339373438.roa (raw, json)
Hash identifier:          9M1g8FVgs570ubUHvH5aKgP06SAtiPhizxR9IHaJOJs=
Subject key identifier:   E5:8B:25:56:7A:72:FE:BA:DD:C1:74:2F:7B:EC:ED:9F:45:D8:9D:52
Certificate issuer:       /CN=fd77f55efe3a93c53ca3dc8a6f8374fe70fec5567dd1e8c855
Certificate serial:       33172AA49D156999EBB64DE1FDA9CE4073196148
Authority key identifier: C8:93:5F:DC:A5:02:8A:E8:20:9F:EC:82:AD:8A:E8:CF:B7:C6:E7:76
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/6e5d9611-fd33-488c-9aec-f4df2a25351e/fd77f55efe3a93c53ca3dc8a6f8374fe70fec5567dd1e8c855.cer
Subject info access:      rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/0/323630323a666564323a373033313a3a2f34382d3438203d3e20333339373438.roa
Signing time:             Wed 22 Dec 2021 02:34:46 +0000
ROA not before:           Wed 22 Dec 2021 02:29:46 +0000
ROA not after:            Wed 21 Dec 2022 02:34:46 +0000
asID:                     339748
IP address blocks:        2602:fed2:7031::/48 maxlen: 48

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            33:17:2a:a4:9d:15:69:99:eb:b6:4d:e1:fd:a9:ce:40:73:19:61:48
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fd77f55efe3a93c53ca3dc8a6f8374fe70fec5567dd1e8c855
        Validity
            Not Before: Dec 22 02:29:46 2021 GMT
            Not After : Dec 21 02:34:46 2022 GMT
        Subject: CN=E58B25567A72FEBADDC1742F7BECED9F45D89D52
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ef:71:f9:e7:49:58:4c:ec:99:66:54:28:a1:9d:
                    3c:51:b0:c0:4c:70:99:f5:92:ed:da:77:dc:70:96:
                    0b:eb:ba:51:21:81:6a:c7:29:27:e0:09:4c:27:bd:
                    68:5c:71:33:61:75:7a:c7:6a:8f:a4:f8:32:e5:9c:
                    a0:d8:d2:08:0e:4a:8d:59:22:ad:7a:4b:04:53:b8:
                    c9:7b:ad:6c:36:5c:71:e2:b9:a5:89:16:4a:fa:13:
                    4c:a9:79:2b:ba:89:1f:d3:e3:15:4a:6b:55:7e:c1:
                    d1:39:3a:8e:bb:a4:c1:4d:5e:e6:00:d9:86:a2:0a:
                    9b:32:8d:c1:62:0e:d9:9c:13:77:05:6d:c1:04:4a:
                    3d:88:9f:2e:35:2a:6e:88:94:a6:4e:dd:16:5f:06:
                    8d:ed:7c:3c:ee:a2:30:e0:fe:21:30:5c:6a:6b:98:
                    3a:13:7b:ac:f5:37:0b:4a:cb:4e:8d:aa:e4:22:11:
                    a8:11:6e:c2:a3:46:74:71:bd:6c:c2:ad:b2:47:3e:
                    17:fe:3f:05:ae:2f:24:17:28:57:4f:cb:16:9b:42:
                    94:0f:ea:08:f5:e0:5f:86:86:38:fd:1f:51:0b:8b:
                    40:71:66:7e:28:a7:35:aa:da:9b:09:39:dd:5c:8c:
                    fc:09:e3:f0:4f:07:46:7f:e7:04:04:e4:9f:08:b8:
                    b6:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E5:8B:25:56:7A:72:FE:BA:DD:C1:74:2F:7B:EC:ED:9F:45:D8:9D:52
            X509v3 Authority Key Identifier:
                keyid:C8:93:5F:DC:A5:02:8A:E8:20:9F:EC:82:AD:8A:E8:CF:B7:C6:E7:76

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/0/C8935FDCA5028AE8209FEC82AD8AE8CFB7C6E776.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/6e5d9611-fd33-488c-9aec-f4df2a25351e/fd77f55efe3a93c53ca3dc8a6f8374fe70fec5567dd1e8c855.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/0/323630323a666564323a373033313a3a2f34382d3438203d3e20333339373438.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fed2:7031::/48

    Signature Algorithm: sha256WithRSAEncryption
         90:42:6d:50:17:a0:61:35:21:6f:ee:e7:1b:89:cb:16:0e:85:
         ca:5b:6c:95:a9:4e:b6:24:7f:2c:af:a5:5a:e4:3f:7c:c9:27:
         18:ba:a3:62:4d:24:87:a4:90:6f:88:ae:87:b5:06:2d:15:a0:
         32:9b:09:9b:ae:59:38:46:89:b4:c4:67:97:8d:39:6b:4a:c1:
         59:96:40:0f:55:b6:f4:5f:b3:b7:03:f6:60:9d:15:ae:7e:a1:
         e1:13:f2:dd:16:d1:59:cc:c3:d4:61:47:01:5c:6e:cd:94:4d:
         78:a5:6d:24:15:09:08:ae:c6:b0:96:b5:c0:47:e7:b1:ff:e1:
         1b:a3:6c:58:7a:92:2d:ca:c2:9f:03:bf:85:01:34:78:24:32:
         ee:19:43:8b:2b:26:2b:90:fa:41:3e:8d:05:32:f7:01:a6:ae:
         b7:c9:52:97:8c:7e:53:a5:73:2f:68:5c:7b:8e:4d:36:8a:21:
         10:e1:cb:78:e1:ad:24:a0:ab:70:82:6b:cb:5b:04:e4:50:ff:
         97:f5:68:76:04:8f:e5:ca:c6:40:44:2f:9b:07:73:ae:53:48:
         6d:8d:73:4a:c2:e0:d9:4c:10:3f:a8:ef:bb:c4:d5:c7:98:2d:
         d1:9b:73:60:87:66:2b:ba:1b:45:27:e7:f8:8f:a8:a2:c3:9f:
         a2:2a:b9:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----