Route Origin Authorization

$ rpki-client -vvf rpki.admin.freerangecloud.com/repo/FRC-CA/0/323630323a666564323a373138313a3a2f34382d3438203d3e203533333536.roa
File:                     323630323a666564323a373138313a3a2f34382d3438203d3e203533333536.roa (raw, json)
Hash identifier:          lD60qJi0lR/V1OtfpoFJAna0m8snHH6n1wsY+efc0bM=
Subject key identifier:   A4:5F:F3:71:8C:A5:C1:F7:DA:90:37:60:2B:05:31:4F:90:96:D2:81
Certificate issuer:       /CN=fd77f55efe3a93c53ca3dc8a6f8374fe70fec5567dd1e8c855
Certificate serial:       3A0EA76A2D9FD3F16E4BAEE8D608A82C7DAB6DB1
Authority key identifier: C8:93:5F:DC:A5:02:8A:E8:20:9F:EC:82:AD:8A:E8:CF:B7:C6:E7:76
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/6e5d9611-fd33-488c-9aec-f4df2a25351e/fd77f55efe3a93c53ca3dc8a6f8374fe70fec5567dd1e8c855.cer
Subject info access:      rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/0/323630323a666564323a373138313a3a2f34382d3438203d3e203533333536.roa
Signing time:             Thu 16 Dec 2021 03:26:24 +0000
ROA not before:           Thu 16 Dec 2021 03:21:24 +0000
ROA not after:            Thu 15 Dec 2022 03:26:24 +0000
asID:                     53356
IP address blocks:        2602:fed2:7181::/48 maxlen: 48

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3a:0e:a7:6a:2d:9f:d3:f1:6e:4b:ae:e8:d6:08:a8:2c:7d:ab:6d:b1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fd77f55efe3a93c53ca3dc8a6f8374fe70fec5567dd1e8c855
        Validity
            Not Before: Dec 16 03:21:24 2021 GMT
            Not After : Dec 15 03:26:24 2022 GMT
        Subject: CN=A45FF3718CA5C1F7DA9037602B05314F9096D281
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e3:7f:79:35:f3:8c:a7:e6:d4:5a:ba:14:c3:0f:
                    cf:b2:c0:0c:18:7d:bb:a3:ec:b4:6e:85:b1:f2:1e:
                    a7:4b:3e:55:95:af:f9:d4:9d:77:85:df:31:eb:91:
                    0c:80:d9:3e:07:69:77:6c:15:c0:55:70:66:97:e8:
                    61:b7:9c:53:11:3e:9e:03:b0:cc:07:f1:06:e2:b1:
                    c8:bc:ce:f9:ac:50:1f:1d:db:c7:c3:80:75:8c:86:
                    d7:25:63:9f:14:f8:91:01:0b:c6:09:d6:8f:34:22:
                    23:9b:c6:c4:62:96:6e:89:bc:cd:7a:ad:b1:5e:d1:
                    d9:65:73:c0:04:56:30:ba:64:2b:6b:c5:68:85:58:
                    7d:f1:22:fd:1e:51:f7:51:a4:30:53:3f:83:08:26:
                    74:b9:27:63:6f:1d:2c:37:7e:c9:35:17:fc:69:e4:
                    8b:f7:71:c7:86:2b:5b:46:4f:a6:b3:33:c6:2f:e5:
                    ba:cf:48:9f:f6:6b:df:69:7c:f9:db:90:e7:d1:cf:
                    7b:b3:1a:13:27:ff:88:64:92:c0:e6:cf:db:b2:97:
                    fb:22:c3:a0:c1:ac:69:73:67:f0:10:3c:71:12:06:
                    84:05:ae:53:07:a8:46:1b:b5:20:31:cb:42:41:a1:
                    10:6c:86:22:07:bd:cb:f6:ac:52:b7:c0:c9:4c:cb:
                    72:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A4:5F:F3:71:8C:A5:C1:F7:DA:90:37:60:2B:05:31:4F:90:96:D2:81
            X509v3 Authority Key Identifier:
                keyid:C8:93:5F:DC:A5:02:8A:E8:20:9F:EC:82:AD:8A:E8:CF:B7:C6:E7:76

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/0/C8935FDCA5028AE8209FEC82AD8AE8CFB7C6E776.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/6e5d9611-fd33-488c-9aec-f4df2a25351e/fd77f55efe3a93c53ca3dc8a6f8374fe70fec5567dd1e8c855.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/0/323630323a666564323a373138313a3a2f34382d3438203d3e203533333536.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fed2:7181::/48

    Signature Algorithm: sha256WithRSAEncryption
         01:55:27:82:2c:15:54:37:1c:95:58:4d:3e:6c:dc:d8:d2:98:
         22:98:a6:06:08:87:57:c8:74:bf:a1:0a:4d:59:3e:57:52:ea:
         4d:fa:b2:f9:69:4c:b1:2a:a0:8b:b1:48:94:7c:35:41:85:c7:
         02:d8:f4:81:dc:9a:7a:4a:9c:64:a0:30:4e:5d:a5:16:36:7f:
         d5:9d:54:72:91:0e:14:0a:e2:d9:b3:97:58:99:0a:79:44:da:
         6c:86:80:49:47:f8:5e:85:06:a1:21:cc:8f:e3:7a:a3:38:43:
         c8:60:73:d5:6b:d8:75:a7:8d:81:b8:00:87:8a:76:4a:aa:3e:
         cd:e3:6a:ed:6d:bb:80:1c:b9:74:44:d2:69:8c:9b:3a:65:ba:
         3e:9a:3c:44:cb:e5:57:1c:ce:43:5e:da:54:52:a3:7f:65:24:
         60:2c:dc:36:ca:87:32:04:a9:18:30:67:fa:c1:e4:8c:55:c5:
         1f:6b:bc:aa:91:ff:e7:03:7a:8c:44:76:f1:99:ea:2a:02:94:
         84:81:35:83:1a:70:3d:4c:a4:e8:40:fb:bb:a8:fb:fe:95:ee:
         3b:e9:f2:6b:e6:10:ce:bf:f9:c6:18:37:d3:17:14:38:7c:be:
         8e:4f:e2:22:fb:e8:99:c0:cd:6e:26:2f:12:55:c1:e7:4a:fb:
         eb:73:53:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----