Route Origin Authorization

$ rpki-client -vvf rpki.admin.freerangecloud.com/repo/FRC-CA/0/323630323a666564323a373138393a3a2f34382d3438203d3e203533333536.roa
File:                     323630323a666564323a373138393a3a2f34382d3438203d3e203533333536.roa (raw, json)
Hash identifier:          d/CsOLUtnB1khYMTUEHNgQG8NWPbn8p87PqHjzjPhzA=
Subject key identifier:   84:0E:78:20:F5:58:F7:21:4C:9F:0E:05:1A:C1:11:EF:1C:D5:16:B5
Certificate issuer:       /CN=fd77f55efe3a93c53ca3dc8a6f8374fe70fec5567dd1e8c855
Certificate serial:       346863A8812CCFAB1B464C10FD8B10F8DBA0FE65
Authority key identifier: C8:93:5F:DC:A5:02:8A:E8:20:9F:EC:82:AD:8A:E8:CF:B7:C6:E7:76
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/6e5d9611-fd33-488c-9aec-f4df2a25351e/fd77f55efe3a93c53ca3dc8a6f8374fe70fec5567dd1e8c855.cer
Subject info access:      rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/0/323630323a666564323a373138393a3a2f34382d3438203d3e203533333536.roa
Signing time:             Thu 16 Dec 2021 03:26:31 +0000
ROA not before:           Thu 16 Dec 2021 03:21:31 +0000
ROA not after:            Thu 15 Dec 2022 03:26:31 +0000
asID:                     53356
IP address blocks:        2602:fed2:7189::/48 maxlen: 48

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            34:68:63:a8:81:2c:cf:ab:1b:46:4c:10:fd:8b:10:f8:db:a0:fe:65
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fd77f55efe3a93c53ca3dc8a6f8374fe70fec5567dd1e8c855
        Validity
            Not Before: Dec 16 03:21:31 2021 GMT
            Not After : Dec 15 03:26:31 2022 GMT
        Subject: CN=840E7820F558F7214C9F0E051AC111EF1CD516B5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:32:56:17:e2:19:0b:a1:8f:d7:cc:74:dc:a1:
                    12:49:8b:d0:21:9b:5c:0a:eb:73:c9:ae:3e:7c:c7:
                    10:f4:d7:83:fd:f3:79:f5:4c:42:3b:ef:e3:ae:10:
                    17:7d:f8:17:82:26:d7:11:44:42:c7:a2:0e:bb:2e:
                    92:67:af:8b:00:86:4a:5a:5f:87:ca:84:4f:85:1a:
                    f1:c3:be:f3:13:fd:18:26:08:84:57:ba:be:0e:df:
                    60:cd:ab:01:cf:75:b4:27:b6:83:4a:16:2e:2b:fb:
                    87:be:24:5f:1b:2e:40:47:bf:62:c4:f8:c9:5c:32:
                    e4:db:2e:e8:d5:26:d9:22:08:19:ad:c7:53:e9:15:
                    74:55:01:ae:a0:a3:22:26:6f:90:70:07:3f:2d:9a:
                    d8:c0:7a:5b:99:ac:17:61:6c:75:7a:af:ce:3a:08:
                    51:f1:0d:71:33:88:56:47:d7:a3:06:c9:ea:73:fc:
                    1f:b8:9d:bd:66:bb:85:2b:78:a0:eb:30:e6:92:0f:
                    f7:94:63:95:16:5c:e2:fd:5f:39:af:1c:6a:ac:28:
                    c4:73:fa:9c:8c:eb:da:a4:7d:8c:ea:79:e6:82:bc:
                    cc:89:b7:19:9a:17:04:37:0f:41:08:91:92:57:5f:
                    7a:81:20:3f:5c:55:84:d2:a2:86:a0:02:55:b2:8c:
                    a2:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                84:0E:78:20:F5:58:F7:21:4C:9F:0E:05:1A:C1:11:EF:1C:D5:16:B5
            X509v3 Authority Key Identifier:
                keyid:C8:93:5F:DC:A5:02:8A:E8:20:9F:EC:82:AD:8A:E8:CF:B7:C6:E7:76

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/0/C8935FDCA5028AE8209FEC82AD8AE8CFB7C6E776.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/6e5d9611-fd33-488c-9aec-f4df2a25351e/fd77f55efe3a93c53ca3dc8a6f8374fe70fec5567dd1e8c855.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/0/323630323a666564323a373138393a3a2f34382d3438203d3e203533333536.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fed2:7189::/48

    Signature Algorithm: sha256WithRSAEncryption
         bd:58:b1:48:af:72:6c:fc:77:d7:d4:69:34:dd:3b:8b:e4:73:
         ab:c4:d4:69:7e:29:71:64:59:53:a8:76:2e:e8:51:da:01:56:
         6b:da:2f:f3:f6:95:6d:04:03:7f:7f:1d:15:84:d7:38:50:56:
         47:ff:64:e0:9c:74:84:fb:03:b6:44:79:5b:16:ff:88:ca:30:
         5f:2b:99:72:ea:df:d0:15:51:ac:31:fb:d2:f6:87:98:3d:15:
         9b:25:63:41:e2:27:a2:6b:1f:5a:07:11:eb:45:55:26:3a:61:
         28:7b:34:02:97:88:e8:5a:85:3e:27:46:27:77:bf:81:06:2a:
         3b:9a:78:7e:67:84:f7:5e:a7:c9:40:c3:19:b9:54:70:f7:c9:
         31:f8:59:42:e6:e1:8f:e1:9a:7c:2c:be:0f:c6:85:6c:5a:58:
         5a:9c:e9:da:f6:cc:81:47:69:a8:85:09:2b:22:69:dc:f8:f7:
         aa:6d:ca:96:a4:0a:52:8f:ad:26:9e:89:62:c7:e9:a2:66:39:
         cb:ff:1d:13:12:1c:75:1e:02:30:b4:c4:cd:56:08:0e:97:5f:
         89:c9:63:d3:9b:ef:e3:89:76:33:09:6c:6b:8a:fb:06:47:db:
         92:f6:27:81:92:46:e7:74:88:d7:e0:f5:5d:f4:d6:2d:17:f6:
         0a:7a:dc:4f
-----BEGIN CERTIFICATE-----
MIIFkzCCBHugAwIBAgIUNGhjqIEsz6sbRkwQ/YsQ+Nug/mUwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyZmQ3N2Y1NWVmZTNhOTNjNTNjYTNkYzhhNmY4Mzc0ZmU3
MGZlYzU1NjdkZDFlOGM4NTUwHhcNMjExMjE2MDMyMTMxWhcNMjIxMjE1MDMyNjMx
WjAzMTEwLwYDVQQDEyg4NDBFNzgyMEY1NThGNzIxNEM5RjBFMDUxQUMxMTFFRjFD
RDUxNkI1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqzJWF+IZC6GP
18x03KESSYvQIZtcCutzya4+fMcQ9NeD/fN59UxCO+/jrhAXffgXgibXEURCx6IO
uy6SZ6+LAIZKWl+HyoRPhRrxw77zE/0YJgiEV7q+Dt9gzasBz3W0J7aDShYuK/uH
viRfGy5AR79ixPjJXDLk2y7o1SbZIggZrcdT6RV0VQGuoKMiJm+QcAc/LZrYwHpb
mawXYWx1eq/OOghR8Q1xM4hWR9ejBsnqc/wfuJ29ZruFK3ig6zDmkg/3lGOVFlzi
/V85rxxqrCjEc/qcjOvapH2M6nnmgrzMibcZmhcENw9BCJGSV196gSA/XFWE0qKG
oAJVsoyi3wIDAQABo4ICkzCCAo8wHQYDVR0OBBYEFIQOeCD1WPchTJ8OBRrBEe8c
1Ra1MB8GA1UdIwQYMBaAFMiTX9ylAoroIJ/sgq2K6M+3xud2MA4GA1UdDwEB/wQE
AwIHgDBxBgNVHR8EajBoMGagZKBihmByc3luYzovL3Jwa2kuYWRtaW4uZnJlZXJh
bmdlY2xvdWQuY29tL3JlcG8vRlJDLUNBLzAvQzg5MzVGRENBNTAyOEFFODIwOUZF
QzgyQUQ4QUU4Q0ZCN0M2RTc3Ni5jcmwwgfMGCCsGAQUFBwEBBIHmMIHjMIHgBggr
BgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4t
cnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvZjYw
YzlmMzItYTg3Yy00MzM5LWEyZjMtNjI5OWEzYjAyZTI5LzZlNWQ5NjExLWZkMzMt
NDg4Yy05YWVjLWY0ZGYyYTI1MzUxZS9mZDc3ZjU1ZWZlM2E5M2M1M2NhM2RjOGE2
ZjgzNzRmZTcwZmVjNTU2N2RkMWU4Yzg1NS5jZXIwgZUGCCsGAQUFBwELBIGIMIGF
MIGCBggrBgEFBQcwC4Z2cnN5bmM6Ly9ycGtpLmFkbWluLmZyZWVyYW5nZWNsb3Vk
LmNvbS9yZXBvL0ZSQy1DQS8wLzMyMzYzMDMyM2E2NjY1NjQzMjNhMzczMTM4Mzkz
YTNhMmYzNDM4MmQzNDM4MjAzZDNlMjAzNTMzMzMzNTM2LnJvYTAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgL+
0nGJMA0GCSqGSIb3DQEBCwUAA4IBAQC9WLFIr3Js/HfX1Gk03TuL5HOrxNRpfilx
ZFlTqHYu6FHaAVZr2i/z9pVtBAN/fx0VhNc4UFZH/2TgnHSE+wO2RHlbFv+IyjBf
K5ly6t/QFVGsMfvS9oeYPRWbJWNB4ieiax9aBxHrRVUmOmEoezQCl4joWoU+J0Yn
d7+BBio7mnh+Z4T3XqfJQMMZuVRw98kx+FlC5uGP4Zp8LL4PxoVsWlhanOna9syB
R2mohQkrImnc+PeqbcqWpApSj60mnolix+miZjnL/x0TEhx1HgIwtMTNVggOl1+J
yWPTm+/jiXYzCWxrivsGR9uS9ieBkkbndIjX4PVd9NYtF/YKetxP
-----END CERTIFICATE-----