Route Origin Authorization

$ rpki-client -vvf rpki.admin.freerangecloud.com/repo/FRC-CA/0/323630323a666564323a373132313a3a2f34382d3438203d3e203533333536.roa
File:                     323630323a666564323a373132313a3a2f34382d3438203d3e203533333536.roa (raw, json)
Hash identifier:          C/szrC7xSnh2aa10VRMsJdTfV3oyomwfubSP+PGc9fg=
Subject key identifier:   06:91:A4:C8:41:90:E1:0E:70:77:C3:DF:A8:DC:F2:9D:85:AB:7E:A0
Certificate issuer:       /CN=fd77f55efe3a93c53ca3dc8a6f8374fe70fec5567dd1e8c855
Certificate serial:       5EA1AD6DC6D63F600FBCA471567DA4860102310D
Authority key identifier: C8:93:5F:DC:A5:02:8A:E8:20:9F:EC:82:AD:8A:E8:CF:B7:C6:E7:76
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/6e5d9611-fd33-488c-9aec-f4df2a25351e/fd77f55efe3a93c53ca3dc8a6f8374fe70fec5567dd1e8c855.cer
Subject info access:      rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/0/323630323a666564323a373132313a3a2f34382d3438203d3e203533333536.roa
Signing time:             Thu 16 Dec 2021 03:26:25 +0000
ROA not before:           Thu 16 Dec 2021 03:21:25 +0000
ROA not after:            Thu 15 Dec 2022 03:26:25 +0000
asID:                     53356
IP address blocks:        2602:fed2:7121::/48 maxlen: 48

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5e:a1:ad:6d:c6:d6:3f:60:0f:bc:a4:71:56:7d:a4:86:01:02:31:0d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fd77f55efe3a93c53ca3dc8a6f8374fe70fec5567dd1e8c855
        Validity
            Not Before: Dec 16 03:21:25 2021 GMT
            Not After : Dec 15 03:26:25 2022 GMT
        Subject: CN=0691A4C84190E10E7077C3DFA8DCF29D85AB7EA0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:38:08:73:a9:0a:e1:e9:a3:13:e8:86:b6:25:
                    17:c7:99:d6:ca:38:08:17:b1:05:67:25:10:d1:4f:
                    c4:ea:72:ac:92:c3:01:9b:dc:97:3c:cb:58:b9:e4:
                    47:5e:fa:93:37:45:f1:00:51:0c:29:fe:41:36:e3:
                    5d:6d:de:a5:68:c6:7a:b1:eb:95:9e:88:bd:df:9a:
                    75:d5:09:33:31:26:f0:77:b6:bd:ff:7e:a4:e6:ab:
                    6d:d3:33:b5:d9:94:99:e2:d5:99:37:20:01:a0:c4:
                    09:60:f0:7b:73:75:56:1a:04:1b:90:8a:19:47:b4:
                    78:e8:7d:a9:a7:fb:bd:d4:8e:e5:1a:e1:35:4a:01:
                    95:37:18:55:6b:74:4a:20:02:9f:d9:a7:6a:09:38:
                    ae:0f:89:e4:f5:31:8e:98:a0:29:a8:07:6b:39:2b:
                    ce:28:87:d9:19:39:7b:42:32:2a:7a:81:39:98:3b:
                    1f:0c:44:2f:a0:9f:7d:83:0d:09:c9:08:c6:5d:89:
                    08:82:73:30:f2:cf:3e:0c:70:9d:ec:69:78:5c:cb:
                    e8:43:56:f5:45:6f:56:04:5a:6f:0a:86:f5:c5:12:
                    3b:f4:96:08:ad:2f:8a:e3:cd:a2:6d:92:2c:2e:f0:
                    f5:6d:cb:15:5d:dc:02:f2:f5:b8:f6:bf:e7:b4:2a:
                    68:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                06:91:A4:C8:41:90:E1:0E:70:77:C3:DF:A8:DC:F2:9D:85:AB:7E:A0
            X509v3 Authority Key Identifier:
                keyid:C8:93:5F:DC:A5:02:8A:E8:20:9F:EC:82:AD:8A:E8:CF:B7:C6:E7:76

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/0/C8935FDCA5028AE8209FEC82AD8AE8CFB7C6E776.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/6e5d9611-fd33-488c-9aec-f4df2a25351e/fd77f55efe3a93c53ca3dc8a6f8374fe70fec5567dd1e8c855.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/0/323630323a666564323a373132313a3a2f34382d3438203d3e203533333536.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fed2:7121::/48

    Signature Algorithm: sha256WithRSAEncryption
         30:77:92:1d:99:cd:2f:75:8b:0b:65:01:19:fd:21:68:1d:2c:
         30:79:13:fc:d8:17:c0:80:36:1f:fd:f4:f6:36:0c:40:91:c6:
         55:51:42:fa:b1:38:49:9f:d1:b9:4b:e1:a1:cc:d3:2e:b6:41:
         40:09:9e:fb:d8:a2:77:d1:88:51:85:db:b0:49:c5:48:3a:83:
         c8:ce:6e:84:49:03:09:23:8a:64:13:a7:00:9f:a3:73:cb:4a:
         f6:23:6c:c9:33:24:0c:6a:b0:19:96:5d:6d:ac:8f:7e:ae:65:
         f7:56:ac:19:01:dd:0e:96:6f:28:4e:ff:6b:1e:21:69:54:9d:
         76:bc:b7:c5:17:f9:1b:27:05:ca:7b:f5:75:cd:00:59:dc:c2:
         a6:4e:73:76:0b:0a:cf:3a:27:1f:a1:44:73:65:80:61:5c:76:
         52:f2:78:62:a8:e3:6f:21:a0:33:5e:ca:bb:1d:bb:89:ea:eb:
         3b:91:18:c3:2b:24:66:64:8f:88:96:81:e4:38:6a:e7:a5:49:
         90:65:85:07:ea:be:08:d4:76:90:bd:10:14:33:e3:80:8a:c8:
         28:ae:26:bf:fc:f8:1a:b8:0e:58:a7:09:7d:ca:14:09:ea:58:
         18:ee:4d:96:bf:f3:b9:6e:06:d4:25:8e:44:9f:db:16:0f:2e:
         28:e7:9d:3f
-----BEGIN CERTIFICATE-----
MIIFkzCCBHugAwIBAgIUXqGtbcbWP2APvKRxVn2khgECMQ0wDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyZmQ3N2Y1NWVmZTNhOTNjNTNjYTNkYzhhNmY4Mzc0ZmU3
MGZlYzU1NjdkZDFlOGM4NTUwHhcNMjExMjE2MDMyMTI1WhcNMjIxMjE1MDMyNjI1
WjAzMTEwLwYDVQQDEygwNjkxQTRDODQxOTBFMTBFNzA3N0MzREZBOERDRjI5RDg1
QUI3RUEwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArjgIc6kK4emj
E+iGtiUXx5nWyjgIF7EFZyUQ0U/E6nKsksMBm9yXPMtYueRHXvqTN0XxAFEMKf5B
NuNdbd6laMZ6seuVnoi935p11QkzMSbwd7a9/36k5qtt0zO12ZSZ4tWZNyABoMQJ
YPB7c3VWGgQbkIoZR7R46H2pp/u91I7lGuE1SgGVNxhVa3RKIAKf2adqCTiuD4nk
9TGOmKApqAdrOSvOKIfZGTl7QjIqeoE5mDsfDEQvoJ99gw0JyQjGXYkIgnMw8s8+
DHCd7Gl4XMvoQ1b1RW9WBFpvCob1xRI79JYIrS+K482ibZIsLvD1bcsVXdwC8vW4
9r/ntCpodwIDAQABo4ICkzCCAo8wHQYDVR0OBBYEFAaRpMhBkOEOcHfD36jc8p2F
q36gMB8GA1UdIwQYMBaAFMiTX9ylAoroIJ/sgq2K6M+3xud2MA4GA1UdDwEB/wQE
AwIHgDBxBgNVHR8EajBoMGagZKBihmByc3luYzovL3Jwa2kuYWRtaW4uZnJlZXJh
bmdlY2xvdWQuY29tL3JlcG8vRlJDLUNBLzAvQzg5MzVGRENBNTAyOEFFODIwOUZF
QzgyQUQ4QUU4Q0ZCN0M2RTc3Ni5jcmwwgfMGCCsGAQUFBwEBBIHmMIHjMIHgBggr
BgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4t
cnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvZjYw
YzlmMzItYTg3Yy00MzM5LWEyZjMtNjI5OWEzYjAyZTI5LzZlNWQ5NjExLWZkMzMt
NDg4Yy05YWVjLWY0ZGYyYTI1MzUxZS9mZDc3ZjU1ZWZlM2E5M2M1M2NhM2RjOGE2
ZjgzNzRmZTcwZmVjNTU2N2RkMWU4Yzg1NS5jZXIwgZUGCCsGAQUFBwELBIGIMIGF
MIGCBggrBgEFBQcwC4Z2cnN5bmM6Ly9ycGtpLmFkbWluLmZyZWVyYW5nZWNsb3Vk
LmNvbS9yZXBvL0ZSQy1DQS8wLzMyMzYzMDMyM2E2NjY1NjQzMjNhMzczMTMyMzEz
YTNhMmYzNDM4MmQzNDM4MjAzZDNlMjAzNTMzMzMzNTM2LnJvYTAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgL+
0nEhMA0GCSqGSIb3DQEBCwUAA4IBAQAwd5Idmc0vdYsLZQEZ/SFoHSwweRP82BfA
gDYf/fT2NgxAkcZVUUL6sThJn9G5S+GhzNMutkFACZ772KJ30YhRhduwScVIOoPI
zm6ESQMJI4pkE6cAn6Nzy0r2I2zJMyQMarAZll1trI9+rmX3VqwZAd0Olm8oTv9r
HiFpVJ12vLfFF/kbJwXKe/V1zQBZ3MKmTnN2CwrPOicfoURzZYBhXHZS8nhiqONv
IaAzXsq7HbuJ6us7kRjDKyRmZI+IloHkOGrnpUmQZYUH6r4I1HaQvRAUM+OAisgo
ria//PgauA5Ypwl9yhQJ6lgY7k2Wv/O5bgbUJY5En9sWDy4o550/
-----END CERTIFICATE-----