Route Origin Authorization

$ rpki-client -vvf rpki.admin.freerangecloud.com/repo/FRC-CA/0/323630323a666564323a373132343a3a2f34382d3438203d3e203531363439.roa
File:                     323630323a666564323a373132343a3a2f34382d3438203d3e203531363439.roa (raw, json)
Hash identifier:          FX6Tdb9Sxj4oP8pT6gtW+CRAfZVH4QY4NGW8pjkVZnY=
Subject key identifier:   77:8B:61:E2:E1:35:ED:3A:43:C3:3D:A3:38:FF:66:B9:E5:5D:7C:67
Certificate issuer:       /CN=fd77f55efe3a93c53ca3dc8a6f8374fe70fec5567dd1e8c855
Certificate serial:       1DB4C4C1619E67EB3E267479FB4939F37A5978B7
Authority key identifier: C8:93:5F:DC:A5:02:8A:E8:20:9F:EC:82:AD:8A:E8:CF:B7:C6:E7:76
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/6e5d9611-fd33-488c-9aec-f4df2a25351e/fd77f55efe3a93c53ca3dc8a6f8374fe70fec5567dd1e8c855.cer
Subject info access:      rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/0/323630323a666564323a373132343a3a2f34382d3438203d3e203531363439.roa
Signing time:             Thu 16 Dec 2021 03:26:24 +0000
ROA not before:           Thu 16 Dec 2021 03:21:24 +0000
ROA not after:            Thu 15 Dec 2022 03:26:24 +0000
asID:                     51649
IP address blocks:        2602:fed2:7124::/48 maxlen: 48

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1d:b4:c4:c1:61:9e:67:eb:3e:26:74:79:fb:49:39:f3:7a:59:78:b7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fd77f55efe3a93c53ca3dc8a6f8374fe70fec5567dd1e8c855
        Validity
            Not Before: Dec 16 03:21:24 2021 GMT
            Not After : Dec 15 03:26:24 2022 GMT
        Subject: CN=778B61E2E135ED3A43C33DA338FF66B9E55D7C67
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:df:02:60:54:f2:36:70:b8:e9:48:d3:b1:a9:
                    e4:2e:2e:3c:45:3e:6f:40:23:c3:19:73:ce:15:5b:
                    ef:b7:4a:be:ab:3e:26:ac:bb:5d:11:88:95:9f:92:
                    9f:a0:d0:b7:3f:42:b0:eb:e0:92:bc:d4:fe:d2:eb:
                    72:7b:96:04:6c:fd:bc:a9:56:9f:4a:1d:a8:86:46:
                    33:04:e3:cd:a1:98:d7:36:51:a5:11:68:86:da:31:
                    38:76:48:85:c5:cb:87:90:f2:46:a9:31:69:c2:e9:
                    0a:8f:42:d1:27:de:88:ad:16:42:fe:96:f0:93:06:
                    7c:b3:33:c8:67:be:9f:80:6e:13:29:29:c0:56:f0:
                    39:67:d6:a5:bb:60:fd:ce:9f:ad:e5:5b:46:36:3e:
                    83:6d:02:3b:3d:62:88:6e:1a:3d:43:1f:38:bd:07:
                    b6:7f:0c:9a:b0:66:42:97:94:78:52:69:e8:07:59:
                    48:ce:20:fd:c7:dc:4c:e8:90:31:98:bd:5b:d3:c8:
                    69:84:50:78:a9:29:c5:40:b1:cd:cc:c6:1e:b0:51:
                    58:16:60:04:cc:61:8d:1f:c8:98:9d:ca:de:17:9d:
                    5f:6a:e1:66:3c:12:4d:23:a4:ba:57:fd:3b:5d:e0:
                    06:9a:91:8a:3d:a6:06:58:dd:09:de:eb:b8:8f:1f:
                    cf:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                77:8B:61:E2:E1:35:ED:3A:43:C3:3D:A3:38:FF:66:B9:E5:5D:7C:67
            X509v3 Authority Key Identifier:
                keyid:C8:93:5F:DC:A5:02:8A:E8:20:9F:EC:82:AD:8A:E8:CF:B7:C6:E7:76

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/0/C8935FDCA5028AE8209FEC82AD8AE8CFB7C6E776.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/6e5d9611-fd33-488c-9aec-f4df2a25351e/fd77f55efe3a93c53ca3dc8a6f8374fe70fec5567dd1e8c855.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/0/323630323a666564323a373132343a3a2f34382d3438203d3e203531363439.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fed2:7124::/48

    Signature Algorithm: sha256WithRSAEncryption
         94:0b:d6:56:e9:2b:bd:80:fe:85:2d:e1:31:d6:e9:2b:67:6c:
         e1:9c:3b:5e:52:90:3a:89:c2:7d:3a:ce:88:d7:df:f1:f2:33:
         22:24:68:bc:8f:ba:0e:d9:bb:ad:d1:45:b9:88:a2:21:63:0c:
         42:78:4e:7d:d7:c0:b7:0f:a8:ae:8a:12:09:19:23:8d:7e:3e:
         05:87:e4:15:3c:f9:03:9c:ad:1e:6d:48:4b:b6:79:b8:4e:88:
         76:3d:b9:5e:a9:3e:5f:26:5b:31:0e:64:43:f7:3b:20:e5:6f:
         b9:3a:f0:28:99:e0:6d:6e:70:31:9e:81:28:36:66:f3:63:9c:
         0b:0a:e8:68:74:d2:81:1e:be:a2:21:62:0d:5c:1c:78:e8:6c:
         56:07:88:66:e1:63:2d:9d:bd:0c:19:00:ef:d5:f2:67:fd:84:
         2b:a2:58:d9:e3:d3:4d:fe:8b:87:3d:9b:30:c5:a2:93:04:05:
         23:4e:a4:6d:84:47:e6:24:51:50:4b:38:00:95:a7:07:cc:06:
         9f:4c:60:32:ea:d7:c0:36:20:88:a4:9f:a6:0d:e9:70:73:39:
         f0:30:98:9b:16:1d:03:50:25:e1:c4:de:14:8e:72:47:43:5d:
         b5:2e:69:41:bc:f1:f6:b0:79:51:0a:3f:54:7f:14:b0:f1:dd:
         87:96:e8:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----