Route Origin Authorization

$ rpki-client -vvf rpki.admin.freerangecloud.com/repo/FRC-CA/0/323630323a666564323a373132393a3a2f34382d3438203d3e203533333536.roa
File:                     323630323a666564323a373132393a3a2f34382d3438203d3e203533333536.roa (raw, json)
Hash identifier:          6Aaxj4k3KqhBbL5DXBMkeJGScjOxewFms8Qt7gJul+w=
Subject key identifier:   DB:BE:21:DA:09:66:15:27:97:2C:C5:26:D8:AE:7E:C5:DD:FF:12:C4
Certificate issuer:       /CN=fd77f55efe3a93c53ca3dc8a6f8374fe70fec5567dd1e8c855
Certificate serial:       4E3F9B3ADF4E21947B98C0764EBE4C7CBFBC45C9
Authority key identifier: C8:93:5F:DC:A5:02:8A:E8:20:9F:EC:82:AD:8A:E8:CF:B7:C6:E7:76
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/6e5d9611-fd33-488c-9aec-f4df2a25351e/fd77f55efe3a93c53ca3dc8a6f8374fe70fec5567dd1e8c855.cer
Subject info access:      rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/0/323630323a666564323a373132393a3a2f34382d3438203d3e203533333536.roa
Signing time:             Thu 16 Dec 2021 03:26:30 +0000
ROA not before:           Thu 16 Dec 2021 03:21:30 +0000
ROA not after:            Thu 15 Dec 2022 03:26:30 +0000
asID:                     53356
IP address blocks:        2602:fed2:7129::/48 maxlen: 48

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4e:3f:9b:3a:df:4e:21:94:7b:98:c0:76:4e:be:4c:7c:bf:bc:45:c9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fd77f55efe3a93c53ca3dc8a6f8374fe70fec5567dd1e8c855
        Validity
            Not Before: Dec 16 03:21:30 2021 GMT
            Not After : Dec 15 03:26:30 2022 GMT
        Subject: CN=DBBE21DA09661527972CC526D8AE7EC5DDFF12C4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:eb:7e:ac:dd:e3:ae:63:0b:32:17:1c:b5:93:19:
                    be:34:9c:6a:c7:d3:54:07:bf:cb:ec:29:5b:64:13:
                    ab:f4:11:f8:90:9c:fa:ae:5b:7e:83:25:90:ce:39:
                    c5:fb:ff:63:61:a2:c6:85:4d:d1:13:db:9e:4a:bd:
                    bf:d5:8c:33:5c:9d:da:3c:43:9f:ac:31:d5:31:27:
                    b2:e9:70:71:6d:b4:5a:11:12:c5:73:8c:28:2f:3a:
                    94:ed:36:1e:f2:f1:a7:ed:d2:22:84:0f:52:c3:e2:
                    45:10:5c:c1:50:c9:f1:53:4d:82:1f:64:c0:69:3e:
                    03:82:48:e6:3d:2d:36:80:a1:cc:2c:36:26:b0:d2:
                    cc:12:0b:9e:fc:8c:3e:00:55:9f:03:e7:d9:d3:e3:
                    20:b4:33:a5:f2:68:c1:35:db:77:a1:ec:83:21:3d:
                    82:11:94:12:16:f7:5c:a3:c2:7f:fb:b9:89:dd:4b:
                    3a:21:19:4d:2f:73:db:fe:56:0d:3d:ec:ae:10:15:
                    5c:0e:28:dc:54:f0:09:0b:de:73:8a:a6:3f:06:35:
                    30:91:72:9e:0e:39:3e:e7:60:98:bb:ec:04:dd:57:
                    54:8f:dc:6d:14:36:e0:f4:73:88:31:4d:ec:aa:89:
                    b3:61:7c:b9:68:55:5b:d6:8b:66:87:97:1c:23:cb:
                    45:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DB:BE:21:DA:09:66:15:27:97:2C:C5:26:D8:AE:7E:C5:DD:FF:12:C4
            X509v3 Authority Key Identifier:
                keyid:C8:93:5F:DC:A5:02:8A:E8:20:9F:EC:82:AD:8A:E8:CF:B7:C6:E7:76

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/0/C8935FDCA5028AE8209FEC82AD8AE8CFB7C6E776.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/6e5d9611-fd33-488c-9aec-f4df2a25351e/fd77f55efe3a93c53ca3dc8a6f8374fe70fec5567dd1e8c855.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/0/323630323a666564323a373132393a3a2f34382d3438203d3e203533333536.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fed2:7129::/48

    Signature Algorithm: sha256WithRSAEncryption
         19:29:42:9b:9e:6d:12:7f:b0:19:90:15:b3:00:6b:49:f3:96:
         10:bc:99:a5:91:6d:ad:d7:07:ed:f3:1f:51:b8:95:00:eb:ae:
         6a:32:c7:03:5f:bd:cf:4c:8c:97:4c:90:c9:1e:be:09:63:c3:
         e8:04:1f:ed:88:8f:44:8c:b9:8b:ce:99:44:12:ee:d4:60:84:
         5a:b6:59:db:bc:a7:31:63:88:ab:d2:39:8e:d6:6c:c8:a0:7c:
         8b:5c:9e:15:35:a7:b2:38:2b:28:e2:8d:c8:7a:d2:ac:77:e3:
         23:02:3b:ad:1f:4e:7f:23:39:25:e9:50:d6:b6:9d:55:b8:79:
         85:75:7a:30:88:00:fb:a7:b3:b2:d0:e9:31:43:65:7c:0d:46:
         ae:3c:ef:30:22:2e:66:df:77:9e:17:28:fb:a7:df:40:b0:50:
         b6:03:71:1a:8b:9e:bf:f9:df:c4:1a:53:f9:5f:79:c9:92:59:
         68:aa:4a:20:92:c2:0d:a4:e5:09:c6:87:18:e1:21:ad:9e:fd:
         9e:7e:0c:ac:9d:c8:10:ff:3e:9b:73:cd:87:cc:f7:7c:6c:ba:
         08:1d:66:f9:4e:44:0b:ae:73:fa:9d:e4:45:df:c7:fc:29:cf:
         34:73:79:65:3e:b0:87:ba:fb:14:f9:29:e1:b5:96:7b:d8:dd:
         6a:1e:9b:a1
-----BEGIN CERTIFICATE-----
MIIFkzCCBHugAwIBAgIUTj+bOt9OIZR7mMB2Tr5MfL+8RckwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyZmQ3N2Y1NWVmZTNhOTNjNTNjYTNkYzhhNmY4Mzc0ZmU3
MGZlYzU1NjdkZDFlOGM4NTUwHhcNMjExMjE2MDMyMTMwWhcNMjIxMjE1MDMyNjMw
WjAzMTEwLwYDVQQDEyhEQkJFMjFEQTA5NjYxNTI3OTcyQ0M1MjZEOEFFN0VDNURE
RkYxMkM0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA636s3eOuYwsy
Fxy1kxm+NJxqx9NUB7/L7ClbZBOr9BH4kJz6rlt+gyWQzjnF+/9jYaLGhU3RE9ue
Sr2/1YwzXJ3aPEOfrDHVMSey6XBxbbRaERLFc4woLzqU7TYe8vGn7dIihA9Sw+JF
EFzBUMnxU02CH2TAaT4DgkjmPS02gKHMLDYmsNLMEgue/Iw+AFWfA+fZ0+MgtDOl
8mjBNdt3oeyDIT2CEZQSFvdco8J/+7mJ3Us6IRlNL3Pb/lYNPeyuEBVcDijcVPAJ
C95ziqY/BjUwkXKeDjk+52CYu+wE3VdUj9xtFDbg9HOIMU3sqomzYXy5aFVb1otm
h5ccI8tFxQIDAQABo4ICkzCCAo8wHQYDVR0OBBYEFNu+IdoJZhUnlyzFJtiufsXd
/xLEMB8GA1UdIwQYMBaAFMiTX9ylAoroIJ/sgq2K6M+3xud2MA4GA1UdDwEB/wQE
AwIHgDBxBgNVHR8EajBoMGagZKBihmByc3luYzovL3Jwa2kuYWRtaW4uZnJlZXJh
bmdlY2xvdWQuY29tL3JlcG8vRlJDLUNBLzAvQzg5MzVGRENBNTAyOEFFODIwOUZF
QzgyQUQ4QUU4Q0ZCN0M2RTc3Ni5jcmwwgfMGCCsGAQUFBwEBBIHmMIHjMIHgBggr
BgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4t
cnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvZjYw
YzlmMzItYTg3Yy00MzM5LWEyZjMtNjI5OWEzYjAyZTI5LzZlNWQ5NjExLWZkMzMt
NDg4Yy05YWVjLWY0ZGYyYTI1MzUxZS9mZDc3ZjU1ZWZlM2E5M2M1M2NhM2RjOGE2
ZjgzNzRmZTcwZmVjNTU2N2RkMWU4Yzg1NS5jZXIwgZUGCCsGAQUFBwELBIGIMIGF
MIGCBggrBgEFBQcwC4Z2cnN5bmM6Ly9ycGtpLmFkbWluLmZyZWVyYW5nZWNsb3Vk
LmNvbS9yZXBvL0ZSQy1DQS8wLzMyMzYzMDMyM2E2NjY1NjQzMjNhMzczMTMyMzkz
YTNhMmYzNDM4MmQzNDM4MjAzZDNlMjAzNTMzMzMzNTM2LnJvYTAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgL+
0nEpMA0GCSqGSIb3DQEBCwUAA4IBAQAZKUKbnm0Sf7AZkBWzAGtJ85YQvJmlkW2t
1wft8x9RuJUA665qMscDX73PTIyXTJDJHr4JY8PoBB/tiI9EjLmLzplEEu7UYIRa
tlnbvKcxY4ir0jmO1mzIoHyLXJ4VNaeyOCso4o3IetKsd+MjAjutH05/Izkl6VDW
tp1VuHmFdXowiAD7p7Oy0OkxQ2V8DUauPO8wIi5m33eeFyj7p99AsFC2A3Eai56/
+d/EGlP5X3nJklloqkogksINpOUJxocY4SGtnv2efgysncgQ/z6bc82HzPd8bLoI
HWb5TkQLrnP6neRF38f8Kc80c3llPrCHuvsU+SnhtZZ72N1qHpuh
-----END CERTIFICATE-----