Route Origin Authorization

$ rpki-client -vvf rpki.admin.freerangecloud.com/repo/FRC-CA/0/323630323a666564323a373138323a3a2f34382d3438203d3e203533333536.roa
File:                     323630323a666564323a373138323a3a2f34382d3438203d3e203533333536.roa (raw, json)
Hash identifier:          6mN7M0WqzGM4F0deRiN9g9dJBP0KMQl1tppNB//XX60=
Subject key identifier:   FC:5B:FC:7D:8D:41:97:00:C4:D3:66:54:24:0C:F8:78:3D:23:24:85
Certificate issuer:       /CN=fd77f55efe3a93c53ca3dc8a6f8374fe70fec5567dd1e8c855
Certificate serial:       0C7993647093502CA4DCB88495DF222696A4AA44
Authority key identifier: C8:93:5F:DC:A5:02:8A:E8:20:9F:EC:82:AD:8A:E8:CF:B7:C6:E7:76
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/6e5d9611-fd33-488c-9aec-f4df2a25351e/fd77f55efe3a93c53ca3dc8a6f8374fe70fec5567dd1e8c855.cer
Subject info access:      rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/0/323630323a666564323a373138323a3a2f34382d3438203d3e203533333536.roa
Signing time:             Mon 27 Dec 2021 03:48:58 +0000
ROA not before:           Mon 27 Dec 2021 03:43:58 +0000
ROA not after:            Mon 26 Dec 2022 03:48:58 +0000
asID:                     53356
IP address blocks:        2602:fed2:7182::/48 maxlen: 48

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0c:79:93:64:70:93:50:2c:a4:dc:b8:84:95:df:22:26:96:a4:aa:44
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fd77f55efe3a93c53ca3dc8a6f8374fe70fec5567dd1e8c855
        Validity
            Not Before: Dec 27 03:43:58 2021 GMT
            Not After : Dec 26 03:48:58 2022 GMT
        Subject: CN=FC5BFC7D8D419700C4D36654240CF8783D232485
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:f0:da:33:c8:5f:22:c9:7b:80:2d:26:84:30:
                    19:f0:0a:01:20:30:a2:f2:b9:e8:52:ba:8e:7b:9c:
                    19:c1:c1:92:0a:37:fd:10:ec:73:90:aa:3f:d5:a6:
                    06:33:7e:c1:8a:38:ed:18:82:26:52:47:00:54:5c:
                    42:53:ee:e3:05:dd:c9:72:3c:87:16:bc:74:01:c2:
                    2a:be:c1:a1:1d:38:0e:0b:96:f3:3b:9a:a3:0b:10:
                    87:c8:ed:3b:4a:fd:8a:d3:94:c5:e4:f0:96:0f:9f:
                    26:c3:85:68:fe:6d:72:a0:12:61:5d:98:82:c2:be:
                    f7:28:ce:18:2b:40:0d:0a:1a:f2:21:5e:69:59:2a:
                    f8:44:47:68:e5:7f:31:cf:74:07:da:ee:66:4e:4d:
                    7b:4f:1f:85:6c:6c:6a:9b:bf:c3:4d:13:d7:c3:9b:
                    5a:08:eb:53:7a:e2:e8:93:9c:39:70:f5:95:db:b3:
                    c2:0a:4d:df:0c:b7:f0:ed:91:1e:08:b1:1a:28:11:
                    8f:ba:68:4d:f9:95:52:59:0e:57:46:1f:3b:81:94:
                    b6:f1:84:67:32:ee:56:9c:fe:57:9f:02:72:2e:f4:
                    65:ec:b9:57:19:b0:09:82:33:71:4e:4b:a1:fb:c1:
                    ff:5f:a4:2d:04:7d:b7:47:23:6b:ec:c7:3d:ea:85:
                    f4:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FC:5B:FC:7D:8D:41:97:00:C4:D3:66:54:24:0C:F8:78:3D:23:24:85
            X509v3 Authority Key Identifier:
                keyid:C8:93:5F:DC:A5:02:8A:E8:20:9F:EC:82:AD:8A:E8:CF:B7:C6:E7:76

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/0/C8935FDCA5028AE8209FEC82AD8AE8CFB7C6E776.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/6e5d9611-fd33-488c-9aec-f4df2a25351e/fd77f55efe3a93c53ca3dc8a6f8374fe70fec5567dd1e8c855.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/0/323630323a666564323a373138323a3a2f34382d3438203d3e203533333536.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fed2:7182::/48

    Signature Algorithm: sha256WithRSAEncryption
         5f:f0:1c:7c:88:8f:32:03:9b:8e:51:dd:df:46:31:00:8c:f1:
         83:c3:19:f4:2a:1a:cf:4f:46:f6:d7:f4:e5:c5:db:70:7b:04:
         9b:33:75:24:c9:cb:3e:85:15:1c:73:4e:a4:61:33:a6:19:dd:
         ab:8c:aa:91:ef:d3:12:d1:39:e7:51:bf:e4:a9:5b:2a:dc:32:
         44:74:f4:cc:a0:e8:ac:a5:34:d5:90:4c:0d:0f:a2:24:b9:1d:
         f7:d4:12:73:b5:99:f2:a6:dd:e8:05:49:2d:c6:8a:8f:c2:04:
         14:65:60:49:ce:80:f0:f8:13:bf:42:9b:aa:c3:1c:46:95:5d:
         4a:b2:2e:68:d6:4e:f6:3d:cb:14:9d:42:73:c4:b2:35:e6:6d:
         7d:d8:1b:0e:ff:82:3b:3f:af:b8:4f:b0:67:0b:7d:75:84:da:
         a9:1f:d7:45:30:63:57:a6:12:e6:a9:7c:73:ba:a0:09:b8:89:
         2b:a0:cb:d2:8f:37:88:dd:98:af:a8:4c:ec:10:05:e7:ff:3d:
         b0:16:6c:ac:44:98:f9:d3:bb:2c:e9:6e:42:47:88:03:ba:92:
         74:1c:86:b0:22:91:a7:78:1a:60:3e:d5:18:0f:ef:19:43:fb:
         2c:98:6c:97:77:81:a7:8f:cf:ff:17:8d:fb:d8:41:fd:c9:97:
         13:7e:8a:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----