Route Origin Authorization

$ rpki-client -vvf rpki.admin.freerangecloud.com/repo/FRC-CA/0/323630323a666564323a373131303a3a2f34382d3438203d3e20313339363737.roa
File:                     323630323a666564323a373131303a3a2f34382d3438203d3e20313339363737.roa (raw, json)
Hash identifier:          b49YFUwKx7sB+7r4ejAyM5fXsad6Rfn5iXJNQVIIKRg=
Subject key identifier:   33:07:EC:F5:F7:B1:64:57:9B:0B:A8:90:30:8D:3F:D9:40:57:90:90
Certificate issuer:       /CN=fd77f55efe3a93c53ca3dc8a6f8374fe70fec5567dd1e8c855
Certificate serial:       5CE6BB3E048F2543DFE75AF3B53FBD540057B241
Authority key identifier: C8:93:5F:DC:A5:02:8A:E8:20:9F:EC:82:AD:8A:E8:CF:B7:C6:E7:76
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/6e5d9611-fd33-488c-9aec-f4df2a25351e/fd77f55efe3a93c53ca3dc8a6f8374fe70fec5567dd1e8c855.cer
Subject info access:      rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/0/323630323a666564323a373131303a3a2f34382d3438203d3e20313339363737.roa
Signing time:             Thu 16 Dec 2021 03:26:19 +0000
ROA not before:           Thu 16 Dec 2021 03:21:19 +0000
ROA not after:            Thu 15 Dec 2022 03:26:19 +0000
asID:                     139677
IP address blocks:        2602:fed2:7110::/48 maxlen: 48

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5c:e6:bb:3e:04:8f:25:43:df:e7:5a:f3:b5:3f:bd:54:00:57:b2:41
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fd77f55efe3a93c53ca3dc8a6f8374fe70fec5567dd1e8c855
        Validity
            Not Before: Dec 16 03:21:19 2021 GMT
            Not After : Dec 15 03:26:19 2022 GMT
        Subject: CN=3307ECF5F7B164579B0BA890308D3FD940579090
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:90:a5:37:80:df:b1:25:a9:91:c1:53:0d:47:
                    56:af:70:ad:63:f2:6a:2a:80:07:35:64:87:63:8b:
                    47:91:39:9c:71:65:ea:d7:99:8b:e8:07:db:d7:74:
                    26:ef:09:e1:1f:e7:63:eb:b1:f7:75:b4:ea:d0:5d:
                    00:90:cd:91:4d:af:0b:af:8e:77:cd:b1:2f:b4:06:
                    3b:82:fc:99:67:28:44:ff:f9:11:cd:30:e2:20:5d:
                    c9:9e:69:d4:3b:e2:b3:1b:00:b4:db:e0:10:1c:ed:
                    42:64:1c:5a:4c:05:20:fb:32:31:ae:41:a6:bb:0f:
                    01:f4:b4:53:d0:f9:c7:e2:03:b8:6b:ca:3d:2d:b4:
                    58:90:c0:dc:f3:23:b7:31:14:d1:0c:b1:8e:06:4e:
                    a8:15:47:22:2b:af:a6:ab:59:74:17:28:fc:f6:cd:
                    ae:8f:e1:68:37:51:a5:31:eb:89:30:33:02:14:69:
                    6c:34:dd:30:51:a4:17:98:f5:59:9e:06:9a:e4:a8:
                    3c:5c:22:ef:47:a6:c2:b3:24:20:0d:b0:78:6f:dc:
                    02:cc:bf:9c:67:a2:99:4b:85:48:bd:38:94:cf:38:
                    17:46:26:75:93:ac:a3:d1:2b:e4:f6:f7:8a:6f:72:
                    80:8d:8a:9f:24:84:2f:0b:db:6b:d0:30:b9:f5:96:
                    b9:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                33:07:EC:F5:F7:B1:64:57:9B:0B:A8:90:30:8D:3F:D9:40:57:90:90
            X509v3 Authority Key Identifier:
                keyid:C8:93:5F:DC:A5:02:8A:E8:20:9F:EC:82:AD:8A:E8:CF:B7:C6:E7:76

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/0/C8935FDCA5028AE8209FEC82AD8AE8CFB7C6E776.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/6e5d9611-fd33-488c-9aec-f4df2a25351e/fd77f55efe3a93c53ca3dc8a6f8374fe70fec5567dd1e8c855.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/0/323630323a666564323a373131303a3a2f34382d3438203d3e20313339363737.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fed2:7110::/48

    Signature Algorithm: sha256WithRSAEncryption
         b7:cd:8d:58:bf:05:17:cb:5f:05:c2:73:b8:f6:44:4c:11:1e:
         a4:6e:6b:b0:95:25:0b:8e:99:c1:64:28:f1:98:ab:88:b0:17:
         68:97:40:b3:a1:87:fc:b0:b4:f4:f4:ca:84:5e:0c:77:05:4b:
         f0:7c:82:b6:a7:9f:06:1b:5f:41:d6:1d:8c:c2:68:d0:58:5b:
         9c:0f:d1:f0:56:94:43:5b:80:47:37:82:fd:3c:e8:a6:81:35:
         95:91:d3:44:82:41:2d:82:b3:d1:39:a3:a1:7d:b3:19:da:f9:
         3b:aa:d2:6b:1d:64:63:cc:70:9c:af:32:d5:cf:c8:0e:2d:45:
         ab:8a:4e:98:0b:7c:29:28:07:65:42:98:95:f4:d8:66:f5:ed:
         25:c2:95:c1:08:42:36:dc:a6:5f:40:45:d7:1d:ee:b7:13:30:
         58:df:46:78:13:de:71:49:0d:36:37:d9:9b:09:90:41:8a:c2:
         c7:83:67:b5:5c:ef:0f:30:a0:be:7a:fa:65:34:e6:e4:3c:c7:
         99:c9:9c:07:2a:22:a3:06:16:af:01:76:09:42:f5:f4:fb:bf:
         cb:1e:cd:d5:a0:a9:44:50:82:86:12:75:4f:88:1f:16:83:0b:
         11:02:da:38:ba:6a:d6:4a:0f:a0:01:9b:97:ee:3d:0c:72:83:
         e0:e1:e8:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----