Route Origin Authorization

$ rpki-client -vvf rpki.admin.freerangecloud.com/repo/FRC-CA/0/323630323a666564323a373131623a3a2f34382d3438203d3e20323130373135.roa
File:                     323630323a666564323a373131623a3a2f34382d3438203d3e20323130373135.roa (raw, json)
Hash identifier:          gwP1hMH5SWtRlMMC6fvpnO4m3Kp+3BjHbkfwQ8JNNwA=
Subject key identifier:   A5:F6:E1:9C:69:A8:07:E0:83:DA:76:87:C6:83:C7:44:83:2D:92:D2
Certificate issuer:       /CN=fd77f55efe3a93c53ca3dc8a6f8374fe70fec5567dd1e8c855
Certificate serial:       525A42437E8AF58EC46E99FC24AE38B8AA41DE99
Authority key identifier: C8:93:5F:DC:A5:02:8A:E8:20:9F:EC:82:AD:8A:E8:CF:B7:C6:E7:76
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/6e5d9611-fd33-488c-9aec-f4df2a25351e/fd77f55efe3a93c53ca3dc8a6f8374fe70fec5567dd1e8c855.cer
Subject info access:      rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/0/323630323a666564323a373131623a3a2f34382d3438203d3e20323130373135.roa
Signing time:             Sun 30 Jan 2022 17:56:52 +0000
ROA not before:           Sun 30 Jan 2022 17:51:52 +0000
ROA not after:            Sun 29 Jan 2023 17:56:52 +0000
asID:                     210715
IP address blocks:        2602:fed2:711b::/48 maxlen: 48

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            52:5a:42:43:7e:8a:f5:8e:c4:6e:99:fc:24:ae:38:b8:aa:41:de:99
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fd77f55efe3a93c53ca3dc8a6f8374fe70fec5567dd1e8c855
        Validity
            Not Before: Jan 30 17:51:52 2022 GMT
            Not After : Jan 29 17:56:52 2023 GMT
        Subject: CN=A5F6E19C69A807E083DA7687C683C744832D92D2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:de:5a:fa:de:9f:26:65:54:8a:ae:3d:77:36:
                    8c:4c:69:1d:0a:da:72:01:1f:12:92:f9:2e:44:b0:
                    a4:8d:30:f2:b1:40:44:0d:9f:2b:06:89:c7:4a:4d:
                    17:85:bd:21:16:95:04:f4:2f:da:1c:72:f7:3a:b3:
                    58:fe:d4:b9:ff:30:51:52:c1:bd:6a:e9:a6:b2:9f:
                    c7:28:2e:0a:4f:e6:95:b4:8d:1c:35:8e:a9:b0:69:
                    64:b2:97:46:47:e4:a9:38:63:9a:a9:78:2d:86:f2:
                    86:64:ea:b4:3a:60:0c:44:71:33:70:28:22:24:24:
                    74:e9:28:41:a5:05:ab:08:40:0e:02:05:77:cc:61:
                    70:81:09:b3:79:50:46:94:20:59:d3:39:ac:eb:88:
                    a5:d7:41:a5:0b:35:71:01:47:88:dd:b9:58:f0:48:
                    64:71:cc:45:60:5c:b5:1d:c8:70:bb:1c:a1:b5:dd:
                    9c:5d:f8:7c:d6:cb:4d:05:a0:fa:74:ab:90:14:6f:
                    6b:95:f8:fe:45:a7:de:b4:14:2f:14:75:16:72:8e:
                    f6:13:4d:97:9b:2e:64:1a:b3:29:43:13:f3:6d:8d:
                    4b:1c:c6:ef:47:f1:9c:c9:8f:52:e7:49:1a:4c:41:
                    de:a0:ab:0a:49:a7:eb:9f:57:f5:ba:cc:55:67:8d:
                    4d:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A5:F6:E1:9C:69:A8:07:E0:83:DA:76:87:C6:83:C7:44:83:2D:92:D2
            X509v3 Authority Key Identifier:
                keyid:C8:93:5F:DC:A5:02:8A:E8:20:9F:EC:82:AD:8A:E8:CF:B7:C6:E7:76

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/0/C8935FDCA5028AE8209FEC82AD8AE8CFB7C6E776.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/6e5d9611-fd33-488c-9aec-f4df2a25351e/fd77f55efe3a93c53ca3dc8a6f8374fe70fec5567dd1e8c855.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/0/323630323a666564323a373131623a3a2f34382d3438203d3e20323130373135.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fed2:711b::/48

    Signature Algorithm: sha256WithRSAEncryption
         31:17:f9:18:b8:0d:08:35:23:ce:33:43:a3:a5:83:eb:dc:a0:
         e1:be:6a:fe:2d:de:8d:74:86:dc:80:85:c8:29:ad:e4:96:5a:
         8c:b2:3a:b7:bd:29:65:ea:d9:f7:7b:2a:fc:30:38:ec:83:34:
         64:81:7e:f1:90:17:cd:e7:39:69:01:fc:b5:63:87:0e:0b:d2:
         59:80:1c:8d:85:47:91:49:c8:bb:bc:36:ce:d1:e0:31:e4:27:
         e7:00:53:4b:be:08:68:40:96:30:d4:7c:fd:21:1d:89:8e:09:
         69:80:59:53:f8:6b:06:6d:76:a7:bf:6d:32:20:7d:a6:67:6d:
         90:7e:ef:86:fd:9d:da:44:5b:e1:e0:42:1a:9e:0e:68:9e:a2:
         7d:2d:6b:88:0c:98:4d:43:bb:51:78:10:c9:c4:b5:ae:3e:97:
         2b:d7:ff:57:cb:b8:6a:33:11:b0:0c:f4:96:43:b6:e2:a2:77:
         ed:4d:b8:9a:43:5e:6e:7a:4a:29:8d:36:98:29:26:e3:26:56:
         63:fe:ed:76:e2:a9:b3:8b:22:68:7a:f5:72:5d:d9:91:71:73:
         60:97:ea:d7:e9:d5:9d:e9:db:29:5b:93:46:8d:f7:10:00:f0:
         38:0b:cb:d6:94:86:2a:2d:6f:6b:55:13:9a:81:fc:33:d9:08:
         1c:d3:90:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----