Route Origin Authorization

$ rpki-client -vvf rpki.admin.freerangecloud.com/repo/FRC-CA/0/323630323a666564323a373132373a3a2f34382d3438203d3e20323132313132.roa
File:                     323630323a666564323a373132373a3a2f34382d3438203d3e20323132313132.roa (raw, json)
Hash identifier:          k2boCuv7/rzZCbzLYQOlGc46HfR02nmFjZzTPMB4qp8=
Subject key identifier:   9E:0B:52:81:56:64:2B:8D:78:8A:55:12:A3:C2:C3:C7:02:A9:FF:13
Certificate issuer:       /CN=fd77f55efe3a93c53ca3dc8a6f8374fe70fec5567dd1e8c855
Certificate serial:       030854A94815014101E1250854CAA12C1B3A6100
Authority key identifier: C8:93:5F:DC:A5:02:8A:E8:20:9F:EC:82:AD:8A:E8:CF:B7:C6:E7:76
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/6e5d9611-fd33-488c-9aec-f4df2a25351e/fd77f55efe3a93c53ca3dc8a6f8374fe70fec5567dd1e8c855.cer
Subject info access:      rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/0/323630323a666564323a373132373a3a2f34382d3438203d3e20323132313132.roa
Signing time:             Thu 16 Dec 2021 03:26:30 +0000
ROA not before:           Thu 16 Dec 2021 03:21:30 +0000
ROA not after:            Thu 15 Dec 2022 03:26:30 +0000
asID:                     212112
IP address blocks:        2602:fed2:7127::/48 maxlen: 48

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            03:08:54:a9:48:15:01:41:01:e1:25:08:54:ca:a1:2c:1b:3a:61:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fd77f55efe3a93c53ca3dc8a6f8374fe70fec5567dd1e8c855
        Validity
            Not Before: Dec 16 03:21:30 2021 GMT
            Not After : Dec 15 03:26:30 2022 GMT
        Subject: CN=9E0B528156642B8D788A5512A3C2C3C702A9FF13
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:db:95:4c:1c:ee:6c:93:f8:fe:19:0c:21:a8:
                    7c:6e:99:9b:80:20:77:22:e1:94:bc:15:af:0b:90:
                    43:4e:c0:05:0f:9a:54:ff:99:91:7c:b8:01:10:94:
                    72:e3:c1:62:76:a0:dd:e5:ec:e9:b5:80:19:5f:fc:
                    26:45:0c:b1:44:f1:e2:6e:2e:f2:1b:49:d0:23:a8:
                    88:8c:15:7c:de:7c:f3:53:cf:ec:9b:fc:0f:66:a7:
                    bb:4a:b2:49:67:f0:fe:c3:5a:43:d6:7a:d1:9b:9a:
                    42:f5:12:19:09:0a:00:2b:36:b6:53:91:1e:4f:2e:
                    92:40:04:ea:38:cf:74:bf:33:6c:df:55:cd:ac:40:
                    b1:98:6b:14:78:60:70:df:8b:9b:37:07:6b:36:05:
                    60:96:2e:33:26:41:3f:be:74:73:a8:12:17:99:51:
                    31:a3:fa:a8:95:c2:c7:35:30:6b:87:4e:3c:2b:2f:
                    2a:4b:4f:da:aa:c9:56:fe:13:dd:e9:7a:cd:45:b1:
                    ae:c1:49:ba:ff:e4:87:34:a3:0e:07:44:f6:6e:d7:
                    1d:c9:67:f9:27:49:97:2c:28:a2:d7:69:c8:9c:8a:
                    e3:8b:46:eb:ad:21:0c:63:d9:8f:72:77:d1:3c:b4:
                    fb:31:de:38:0b:40:95:e8:de:10:ff:21:61:b6:77:
                    b8:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9E:0B:52:81:56:64:2B:8D:78:8A:55:12:A3:C2:C3:C7:02:A9:FF:13
            X509v3 Authority Key Identifier:
                keyid:C8:93:5F:DC:A5:02:8A:E8:20:9F:EC:82:AD:8A:E8:CF:B7:C6:E7:76

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/0/C8935FDCA5028AE8209FEC82AD8AE8CFB7C6E776.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/6e5d9611-fd33-488c-9aec-f4df2a25351e/fd77f55efe3a93c53ca3dc8a6f8374fe70fec5567dd1e8c855.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/0/323630323a666564323a373132373a3a2f34382d3438203d3e20323132313132.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fed2:7127::/48

    Signature Algorithm: sha256WithRSAEncryption
         bf:1d:ba:8b:81:0c:22:1b:6d:ff:5e:c6:55:99:50:c0:21:0d:
         81:8c:2b:b5:07:ef:94:ca:97:72:e0:ec:c4:b6:a3:ac:e4:d3:
         87:2a:98:5a:ec:84:fc:4a:3f:e2:95:cd:fb:77:83:48:0f:40:
         ad:61:28:f4:3f:fa:4c:b5:30:64:6a:51:c3:b3:3a:76:ba:fd:
         25:93:6e:78:3e:6b:a2:c5:c6:07:38:0c:56:0b:15:f4:cd:97:
         28:5e:c8:7a:12:7a:cd:a4:dd:65:ef:e4:b7:43:cb:44:16:8f:
         eb:6b:5b:ec:0b:87:11:4a:47:48:87:6b:25:a9:35:40:f9:d7:
         b5:d2:6e:fb:7d:57:24:d8:1d:a0:f4:23:54:90:67:33:bc:7c:
         22:c7:b7:42:ab:81:af:0c:6a:a0:fa:09:ae:8a:f1:b9:05:a6:
         ea:8c:5f:a1:60:06:8d:89:51:7e:1b:a4:6c:62:46:6a:cb:35:
         e3:3f:c3:65:ab:73:25:76:f9:a6:72:f5:66:3b:03:a7:12:06:
         91:1a:73:77:d0:22:e8:92:2c:13:d3:01:b9:2f:38:a1:2d:17:
         eb:3f:3b:4d:47:f8:3f:7f:84:b5:c1:55:9f:05:33:33:7d:1b:
         20:7d:be:fe:e0:57:f0:23:d6:b4:02:38:6d:5f:d6:ec:20:b6:
         19:3e:9d:d8
-----BEGIN CERTIFICATE-----
MIIFlTCCBH2gAwIBAgIUAwhUqUgVAUEB4SUIVMqhLBs6YQAwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyZmQ3N2Y1NWVmZTNhOTNjNTNjYTNkYzhhNmY4Mzc0ZmU3
MGZlYzU1NjdkZDFlOGM4NTUwHhcNMjExMjE2MDMyMTMwWhcNMjIxMjE1MDMyNjMw
WjAzMTEwLwYDVQQDEyg5RTBCNTI4MTU2NjQyQjhENzg4QTU1MTJBM0MyQzNDNzAy
QTlGRjEzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0tuVTBzubJP4
/hkMIah8bpmbgCB3IuGUvBWvC5BDTsAFD5pU/5mRfLgBEJRy48FidqDd5ezptYAZ
X/wmRQyxRPHibi7yG0nQI6iIjBV83nzzU8/sm/wPZqe7SrJJZ/D+w1pD1nrRm5pC
9RIZCQoAKza2U5EeTy6SQATqOM90vzNs31XNrECxmGsUeGBw34ubNwdrNgVgli4z
JkE/vnRzqBIXmVExo/qolcLHNTBrh048Ky8qS0/aqslW/hPd6XrNRbGuwUm6/+SH
NKMOB0T2btcdyWf5J0mXLCii12nInIrji0brrSEMY9mPcnfRPLT7Md44C0CV6N4Q
/yFhtne48wIDAQABo4IClTCCApEwHQYDVR0OBBYEFJ4LUoFWZCuNeIpVEqPCw8cC
qf8TMB8GA1UdIwQYMBaAFMiTX9ylAoroIJ/sgq2K6M+3xud2MA4GA1UdDwEB/wQE
AwIHgDBxBgNVHR8EajBoMGagZKBihmByc3luYzovL3Jwa2kuYWRtaW4uZnJlZXJh
bmdlY2xvdWQuY29tL3JlcG8vRlJDLUNBLzAvQzg5MzVGRENBNTAyOEFFODIwOUZF
QzgyQUQ4QUU4Q0ZCN0M2RTc3Ni5jcmwwgfMGCCsGAQUFBwEBBIHmMIHjMIHgBggr
BgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4t
cnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvZjYw
YzlmMzItYTg3Yy00MzM5LWEyZjMtNjI5OWEzYjAyZTI5LzZlNWQ5NjExLWZkMzMt
NDg4Yy05YWVjLWY0ZGYyYTI1MzUxZS9mZDc3ZjU1ZWZlM2E5M2M1M2NhM2RjOGE2
ZjgzNzRmZTcwZmVjNTU2N2RkMWU4Yzg1NS5jZXIwgZcGCCsGAQUFBwELBIGKMIGH
MIGEBggrBgEFBQcwC4Z4cnN5bmM6Ly9ycGtpLmFkbWluLmZyZWVyYW5nZWNsb3Vk
LmNvbS9yZXBvL0ZSQy1DQS8wLzMyMzYzMDMyM2E2NjY1NjQzMjNhMzczMTMyMzcz
YTNhMmYzNDM4MmQzNDM4MjAzZDNlMjAzMjMxMzIzMTMxMzIucm9hMBgGA1UdIAEB
/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgACMAkDBwAm
Av7ScScwDQYJKoZIhvcNAQELBQADggEBAL8duouBDCIbbf9exlWZUMAhDYGMK7UH
75TKl3Lg7MS2o6zk04cqmFrshPxKP+KVzft3g0gPQK1hKPQ/+ky1MGRqUcOzOna6
/SWTbng+a6LFxgc4DFYLFfTNlyheyHoSes2k3WXv5LdDy0QWj+trW+wLhxFKR0iH
ayWpNUD517XSbvt9VyTYHaD0I1SQZzO8fCLHt0Krga8MaqD6Ca6K8bkFpuqMX6Fg
Bo2JUX4bpGxiRmrLNeM/w2WrcyV2+aZy9WY7A6cSBpEac3fQIuiSLBPTAbkvOKEt
F+s/O01H+D9/hLXBVZ8FMzN9GyB9vv7gV/Aj1rQCOG1f1uwgthk+ndg=
-----END CERTIFICATE-----