Route Origin Authorization

$ rpki-client -vvf rpki.admin.freerangecloud.com/repo/FRC-CA/0/323630323a666564323a373132363a3a2f34382d3438203d3e20333938333235.roa
File:                     323630323a666564323a373132363a3a2f34382d3438203d3e20333938333235.roa (raw, json)
Hash identifier:          dryp3NOHo5Dyzol7po7lkDZpyOKJgbOeV1d+LTeVwGc=
Subject key identifier:   C5:98:6B:E6:3E:F9:9F:E2:4A:AB:66:5B:C8:31:92:B6:BF:FF:62:70
Certificate issuer:       /CN=fd77f55efe3a93c53ca3dc8a6f8374fe70fec5567dd1e8c855
Certificate serial:       77C1E7E624A00B81BFED8438F87654B40614D60B
Authority key identifier: C8:93:5F:DC:A5:02:8A:E8:20:9F:EC:82:AD:8A:E8:CF:B7:C6:E7:76
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/6e5d9611-fd33-488c-9aec-f4df2a25351e/fd77f55efe3a93c53ca3dc8a6f8374fe70fec5567dd1e8c855.cer
Subject info access:      rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/0/323630323a666564323a373132363a3a2f34382d3438203d3e20333938333235.roa
Signing time:             Thu 16 Dec 2021 03:26:22 +0000
ROA not before:           Thu 16 Dec 2021 03:21:22 +0000
ROA not after:            Thu 15 Dec 2022 03:26:22 +0000
asID:                     398325
IP address blocks:        2602:fed2:7126::/48 maxlen: 48

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            77:c1:e7:e6:24:a0:0b:81:bf:ed:84:38:f8:76:54:b4:06:14:d6:0b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fd77f55efe3a93c53ca3dc8a6f8374fe70fec5567dd1e8c855
        Validity
            Not Before: Dec 16 03:21:22 2021 GMT
            Not After : Dec 15 03:26:22 2022 GMT
        Subject: CN=C5986BE63EF99FE24AAB665BC83192B6BFFF6270
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:01:a8:47:cc:52:85:9f:f3:c3:f6:68:b8:ab:
                    55:f9:dc:12:b2:29:fb:78:30:f2:7d:0c:9f:4f:f0:
                    da:c9:b3:db:ec:26:f9:8f:a4:4a:ce:af:5a:69:e9:
                    e8:69:e7:27:11:14:d6:67:3a:8b:d7:38:ce:3d:96:
                    68:3d:52:6c:3f:84:89:b8:6f:f7:e2:da:bc:dc:31:
                    f3:40:2f:e7:b8:6a:74:7f:07:24:32:d8:c6:a2:5c:
                    73:0b:d6:f7:5b:42:1a:3e:b6:07:0f:b8:8c:64:c2:
                    6c:e7:80:c5:a3:ea:1a:ba:13:5a:09:20:0e:3e:e6:
                    74:e8:46:64:5b:8c:84:0b:23:e9:17:a8:0c:6d:98:
                    3e:ef:fa:2e:42:cd:e6:8c:b9:96:d8:3c:70:53:50:
                    3c:ea:b1:90:c5:b6:60:de:56:8b:a0:24:a3:bf:5a:
                    75:10:55:47:a8:84:15:ef:cf:22:9f:61:2d:ac:cc:
                    27:60:15:42:c6:ae:2c:70:67:00:8c:a3:bd:60:88:
                    3c:55:15:98:b2:88:f4:bf:58:31:24:f0:b6:d0:60:
                    04:2f:57:73:f8:08:6e:ea:0c:30:b7:42:b3:77:4c:
                    96:34:54:88:f9:f5:ae:da:e7:9c:2f:29:57:b6:d5:
                    ae:d8:ea:82:83:02:74:73:a3:9c:06:0b:e3:c4:3e:
                    6c:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C5:98:6B:E6:3E:F9:9F:E2:4A:AB:66:5B:C8:31:92:B6:BF:FF:62:70
            X509v3 Authority Key Identifier:
                keyid:C8:93:5F:DC:A5:02:8A:E8:20:9F:EC:82:AD:8A:E8:CF:B7:C6:E7:76

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/0/C8935FDCA5028AE8209FEC82AD8AE8CFB7C6E776.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/6e5d9611-fd33-488c-9aec-f4df2a25351e/fd77f55efe3a93c53ca3dc8a6f8374fe70fec5567dd1e8c855.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/0/323630323a666564323a373132363a3a2f34382d3438203d3e20333938333235.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fed2:7126::/48

    Signature Algorithm: sha256WithRSAEncryption
         2e:3c:97:e3:aa:2e:e8:7e:2f:f9:53:c3:c3:39:96:7f:9a:f4:
         18:09:72:41:91:5d:80:3e:0b:3a:47:36:46:c4:a5:cf:f0:b6:
         10:e3:4a:96:b2:1d:ee:05:e9:d2:ad:03:b6:a1:13:43:bc:f9:
         1f:bb:81:8e:5e:c0:c8:76:bc:12:4c:75:9e:40:f3:e0:b6:37:
         82:a8:69:eb:72:01:2c:8a:66:10:b1:bf:ab:07:19:15:00:35:
         87:d7:32:64:6c:57:ff:6a:c9:39:ff:ad:42:16:b7:39:7d:50:
         b5:89:ea:f2:45:ba:bf:96:2d:5f:0a:cc:28:38:9b:9a:85:a4:
         6d:ee:e0:ad:1d:65:ae:06:ba:32:1e:c4:7b:f2:f6:6c:f8:42:
         bb:0a:14:ed:45:6b:c0:ab:89:e0:5f:26:9b:5a:6f:05:7a:ab:
         ba:f4:09:44:fe:55:98:67:aa:ac:96:7d:7a:36:10:fe:ae:81:
         1c:08:81:36:b4:a0:d2:2b:86:a7:5b:c7:85:e0:49:5e:6f:0b:
         5e:6c:fd:ec:13:a9:39:f1:07:09:e9:33:9e:96:6a:04:4b:72:
         a8:c2:04:1a:69:2b:79:8a:56:6b:2b:a5:8d:13:79:02:9e:38:
         a0:9c:d0:b9:9d:68:2f:a2:42:b1:8e:87:d0:95:45:7b:a8:61:
         75:d2:a2:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----