Route Origin Authorization

$ rpki-client -vvf rpki.admin.freerangecloud.com/repo/FRC-CA/0/323630323a666564323a373131613a3a2f34382d3438203d3e203630323436.roa
File:                     323630323a666564323a373131613a3a2f34382d3438203d3e203630323436.roa (raw, json)
Hash identifier:          /HkW6zwbA6kvME5xGASGm/5v9bovDxTjmiRUdkQd4nQ=
Subject key identifier:   71:5E:D7:BB:65:12:D3:4C:B8:E5:9A:2A:EE:8D:44:82:DD:4E:B2:6E
Certificate issuer:       /CN=fd77f55efe3a93c53ca3dc8a6f8374fe70fec5567dd1e8c855
Certificate serial:       24CB63E2D103AC19B6883FC5F5A4FD94CDD4F7F8
Authority key identifier: C8:93:5F:DC:A5:02:8A:E8:20:9F:EC:82:AD:8A:E8:CF:B7:C6:E7:76
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/6e5d9611-fd33-488c-9aec-f4df2a25351e/fd77f55efe3a93c53ca3dc8a6f8374fe70fec5567dd1e8c855.cer
Subject info access:      rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/0/323630323a666564323a373131613a3a2f34382d3438203d3e203630323436.roa
Signing time:             Thu 16 Dec 2021 03:26:28 +0000
ROA not before:           Thu 16 Dec 2021 03:21:28 +0000
ROA not after:            Thu 15 Dec 2022 03:26:28 +0000
asID:                     60246
IP address blocks:        2602:fed2:711a::/48 maxlen: 48

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            24:cb:63:e2:d1:03:ac:19:b6:88:3f:c5:f5:a4:fd:94:cd:d4:f7:f8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fd77f55efe3a93c53ca3dc8a6f8374fe70fec5567dd1e8c855
        Validity
            Not Before: Dec 16 03:21:28 2021 GMT
            Not After : Dec 15 03:26:28 2022 GMT
        Subject: CN=715ED7BB6512D34CB8E59A2AEE8D4482DD4EB26E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:f7:53:3d:4d:4d:1f:e5:04:f5:3a:dd:9e:74:
                    05:13:4d:8a:7b:3c:67:3f:ad:49:4d:46:7e:5d:ca:
                    e1:d0:19:52:99:f8:40:9a:b0:88:6e:7e:b8:40:f0:
                    3b:f7:3e:f2:95:b8:18:23:a7:9f:d2:ff:39:d9:ea:
                    52:76:92:bd:02:f6:2a:58:62:d3:f3:cc:3b:6d:8b:
                    ae:70:cf:07:a6:5d:2e:71:bd:e6:81:07:01:ed:1b:
                    c3:b1:04:3e:cf:d6:e7:d0:10:71:72:83:9a:10:20:
                    ad:e8:78:6b:ca:04:31:b9:ae:3f:b9:f6:6c:54:7c:
                    63:fa:84:c0:c0:13:cb:c1:1d:88:09:e5:2f:6a:af:
                    19:33:b8:55:58:95:cd:cc:d8:69:86:ad:33:e6:95:
                    56:2f:bc:95:c9:7f:65:b9:12:eb:bb:6c:73:ea:99:
                    0b:c9:72:45:3a:f5:8b:60:64:18:32:35:92:58:59:
                    e9:cd:0b:f0:7a:52:bf:3f:f5:50:99:44:0d:fd:87:
                    96:8d:f8:49:3d:0f:86:19:56:2b:5e:2e:ca:6b:cb:
                    2f:a5:86:19:c0:64:c2:bb:b8:0b:b6:bd:0c:10:82:
                    16:22:d6:08:58:b7:f3:fb:cd:4b:30:ae:1c:a0:48:
                    3f:f8:b0:c3:b8:8f:f8:88:cd:41:d0:75:3b:22:91:
                    48:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                71:5E:D7:BB:65:12:D3:4C:B8:E5:9A:2A:EE:8D:44:82:DD:4E:B2:6E
            X509v3 Authority Key Identifier:
                keyid:C8:93:5F:DC:A5:02:8A:E8:20:9F:EC:82:AD:8A:E8:CF:B7:C6:E7:76

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/0/C8935FDCA5028AE8209FEC82AD8AE8CFB7C6E776.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/6e5d9611-fd33-488c-9aec-f4df2a25351e/fd77f55efe3a93c53ca3dc8a6f8374fe70fec5567dd1e8c855.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/0/323630323a666564323a373131613a3a2f34382d3438203d3e203630323436.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fed2:711a::/48

    Signature Algorithm: sha256WithRSAEncryption
         14:5c:15:7e:eb:93:fc:ec:80:4b:29:6e:e3:d9:9a:0b:02:1a:
         c3:06:07:eb:18:50:04:8c:af:cb:74:d5:d8:16:2c:41:6a:b1:
         9a:29:d3:dc:5f:c6:80:4d:0b:56:e2:a7:12:40:5f:32:51:28:
         2f:96:b5:10:43:1c:cd:82:bd:e0:4d:44:99:d9:c5:ba:e1:eb:
         c5:b7:81:ab:e9:46:3b:7c:88:e4:00:f2:73:fb:4c:c8:2e:be:
         b8:c5:93:f6:38:43:92:df:f3:0e:b1:ce:32:3e:23:5d:c4:4e:
         29:71:23:14:8e:80:96:71:ae:77:86:1c:39:ad:f8:e8:e7:44:
         7b:e5:d1:e5:f7:82:5a:09:de:da:aa:7e:21:91:43:cb:03:39:
         71:6c:73:2d:2a:a1:e7:a3:2b:dc:e5:2b:c7:dd:d3:05:ec:e7:
         58:f1:44:88:4c:e8:a1:86:c0:a0:5e:f7:bc:c1:02:4e:a5:87:
         6e:42:da:5f:13:65:d8:e9:2c:ca:aa:1b:ae:c2:0e:47:cd:95:
         35:34:07:ab:b8:43:82:b3:e1:c0:ca:19:89:7a:26:c6:8b:05:
         3a:8b:73:50:35:7e:c2:31:25:bc:74:d8:da:d7:5a:9f:03:7c:
         a3:06:93:c7:4d:03:60:79:57:64:76:01:5c:b0:09:06:e4:d0:
         e0:53:ab:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----