Route Origin Authorization

$ rpki-client -vvf rpki.admin.freerangecloud.com/repo/FRC-CA/0/323630323a666564323a373138653a3a2f34382d3438203d3e203533333536.roa
File:                     323630323a666564323a373138653a3a2f34382d3438203d3e203533333536.roa (raw, json)
Hash identifier:          kIMGU7Qq1+E8AeHW8Q6lFcHzrJSZvDCyy+qXWg8gteo=
Subject key identifier:   A1:92:6D:82:7C:CD:D0:39:79:E5:BD:4B:5E:2B:65:1E:8A:69:E6:DF
Certificate issuer:       /CN=fd77f55efe3a93c53ca3dc8a6f8374fe70fec5567dd1e8c855
Certificate serial:       4D591CE89CD4791EAAFFB77F69571C028E2CF675
Authority key identifier: C8:93:5F:DC:A5:02:8A:E8:20:9F:EC:82:AD:8A:E8:CF:B7:C6:E7:76
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/6e5d9611-fd33-488c-9aec-f4df2a25351e/fd77f55efe3a93c53ca3dc8a6f8374fe70fec5567dd1e8c855.cer
Subject info access:      rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/0/323630323a666564323a373138653a3a2f34382d3438203d3e203533333536.roa
Signing time:             Fri 14 Jan 2022 22:12:27 +0000
ROA not before:           Fri 14 Jan 2022 22:07:27 +0000
ROA not after:            Fri 13 Jan 2023 22:12:27 +0000
asID:                     53356
IP address blocks:        2602:fed2:718e::/48 maxlen: 48

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4d:59:1c:e8:9c:d4:79:1e:aa:ff:b7:7f:69:57:1c:02:8e:2c:f6:75
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fd77f55efe3a93c53ca3dc8a6f8374fe70fec5567dd1e8c855
        Validity
            Not Before: Jan 14 22:07:27 2022 GMT
            Not After : Jan 13 22:12:27 2023 GMT
        Subject: CN=A1926D827CCDD03979E5BD4B5E2B651E8A69E6DF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:19:ad:ab:f2:b9:88:5b:fc:e4:ec:41:dd:3b:
                    1e:cc:86:f4:04:7c:12:2f:f1:bc:b3:bf:0f:f8:b8:
                    f5:0e:f9:34:dd:b0:f1:b1:7b:9a:e5:1f:13:57:8a:
                    97:d6:6f:8d:3c:b6:ab:67:d1:fc:c9:a6:3d:a9:aa:
                    00:4f:28:25:40:3d:a5:4f:98:39:ca:5d:b8:bc:00:
                    44:05:7e:06:9f:11:ae:b0:53:82:57:a2:50:96:3d:
                    82:77:f9:8b:41:56:06:9e:dd:67:fb:6f:03:66:b6:
                    29:f5:76:fe:c5:3a:28:6b:1f:a7:5e:b7:47:0a:eb:
                    d2:65:e8:66:77:c5:3b:78:0e:87:2a:66:b7:1b:4e:
                    5f:60:a7:59:95:56:f6:da:7b:c8:41:74:48:37:21:
                    79:4c:d0:ee:dd:3f:15:d5:b0:53:f2:9d:e2:11:1c:
                    48:ac:03:dc:e4:a2:a4:ef:5c:8e:03:de:2a:19:3d:
                    5c:ab:5a:ab:d9:8f:7c:f8:e5:49:10:4c:02:5b:f1:
                    09:2d:b1:e7:3e:18:80:fd:07:e3:5a:07:ee:21:d2:
                    a2:1d:fb:f7:f8:bd:f2:2a:5a:c0:1d:bb:df:ca:5a:
                    5e:bf:52:87:8e:6c:51:12:63:e6:32:bb:32:ba:3b:
                    88:20:15:4e:2c:d1:9c:ea:80:5a:30:c5:f3:eb:28:
                    f3:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A1:92:6D:82:7C:CD:D0:39:79:E5:BD:4B:5E:2B:65:1E:8A:69:E6:DF
            X509v3 Authority Key Identifier:
                keyid:C8:93:5F:DC:A5:02:8A:E8:20:9F:EC:82:AD:8A:E8:CF:B7:C6:E7:76

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/0/C8935FDCA5028AE8209FEC82AD8AE8CFB7C6E776.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/6e5d9611-fd33-488c-9aec-f4df2a25351e/fd77f55efe3a93c53ca3dc8a6f8374fe70fec5567dd1e8c855.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/0/323630323a666564323a373138653a3a2f34382d3438203d3e203533333536.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fed2:718e::/48

    Signature Algorithm: sha256WithRSAEncryption
         40:7c:4e:dc:fe:21:b7:b3:cc:cf:c9:1b:ff:d1:e0:0a:ba:af:
         25:ea:a6:63:6d:4e:d8:f2:08:e3:b9:6d:1b:d4:c7:e9:31:d3:
         45:d9:87:51:0b:8d:1a:a8:4b:be:0e:44:6e:50:51:0c:2e:48:
         0a:af:a8:2d:6e:58:3f:c0:b0:ce:98:c8:a5:ad:04:71:d9:6b:
         ae:9b:58:71:13:74:f3:2c:27:c0:b2:72:b8:ec:1c:2e:d0:14:
         db:46:62:18:9b:a6:b9:30:6e:7b:b0:c0:cb:3a:9d:d0:a1:2e:
         d0:87:84:c5:9c:ba:ed:4c:9d:91:fd:1b:0e:c7:c1:84:10:51:
         65:89:3f:8c:31:70:a6:c5:6b:79:e8:08:33:07:c5:e9:bd:aa:
         32:89:2f:55:c4:80:fa:9b:76:b9:f0:71:60:f5:7b:4d:5d:94:
         23:57:bd:8c:2a:0c:ac:2e:90:80:da:2b:a8:f2:dc:dd:06:66:
         1d:6b:57:32:c9:bc:84:49:cf:07:9a:70:67:76:56:8e:47:e1:
         1d:18:e4:96:06:53:a1:54:a6:76:bf:b3:0a:58:e4:f0:d9:19:
         7b:a5:5e:07:0d:e8:01:f6:ad:dd:01:ae:06:60:83:63:93:6d:
         67:d3:f6:d1:86:40:ae:14:57:0a:67:81:6a:5e:95:c1:40:07:
         fb:a7:3e:63
-----BEGIN CERTIFICATE-----
MIIFkzCCBHugAwIBAgIUTVkc6JzUeR6q/7d/aVccAo4s9nUwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyZmQ3N2Y1NWVmZTNhOTNjNTNjYTNkYzhhNmY4Mzc0ZmU3
MGZlYzU1NjdkZDFlOGM4NTUwHhcNMjIwMTE0MjIwNzI3WhcNMjMwMTEzMjIxMjI3
WjAzMTEwLwYDVQQDEyhBMTkyNkQ4MjdDQ0REMDM5NzlFNUJENEI1RTJCNjUxRThB
NjlFNkRGMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2hmtq/K5iFv8
5OxB3TsezIb0BHwSL/G8s78P+Lj1Dvk03bDxsXua5R8TV4qX1m+NPLarZ9H8yaY9
qaoATyglQD2lT5g5yl24vABEBX4GnxGusFOCV6JQlj2Cd/mLQVYGnt1n+28DZrYp
9Xb+xTooax+nXrdHCuvSZehmd8U7eA6HKma3G05fYKdZlVb22nvIQXRINyF5TNDu
3T8V1bBT8p3iERxIrAPc5KKk71yOA94qGT1cq1qr2Y98+OVJEEwCW/EJLbHnPhiA
/QfjWgfuIdKiHfv3+L3yKlrAHbvfylpev1KHjmxREmPmMrsyujuIIBVOLNGc6oBa
MMXz6yjzjQIDAQABo4ICkzCCAo8wHQYDVR0OBBYEFKGSbYJ8zdA5eeW9S14rZR6K
aebfMB8GA1UdIwQYMBaAFMiTX9ylAoroIJ/sgq2K6M+3xud2MA4GA1UdDwEB/wQE
AwIHgDBxBgNVHR8EajBoMGagZKBihmByc3luYzovL3Jwa2kuYWRtaW4uZnJlZXJh
bmdlY2xvdWQuY29tL3JlcG8vRlJDLUNBLzAvQzg5MzVGRENBNTAyOEFFODIwOUZF
QzgyQUQ4QUU4Q0ZCN0M2RTc3Ni5jcmwwgfMGCCsGAQUFBwEBBIHmMIHjMIHgBggr
BgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4t
cnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvZjYw
YzlmMzItYTg3Yy00MzM5LWEyZjMtNjI5OWEzYjAyZTI5LzZlNWQ5NjExLWZkMzMt
NDg4Yy05YWVjLWY0ZGYyYTI1MzUxZS9mZDc3ZjU1ZWZlM2E5M2M1M2NhM2RjOGE2
ZjgzNzRmZTcwZmVjNTU2N2RkMWU4Yzg1NS5jZXIwgZUGCCsGAQUFBwELBIGIMIGF
MIGCBggrBgEFBQcwC4Z2cnN5bmM6Ly9ycGtpLmFkbWluLmZyZWVyYW5nZWNsb3Vk
LmNvbS9yZXBvL0ZSQy1DQS8wLzMyMzYzMDMyM2E2NjY1NjQzMjNhMzczMTM4NjUz
YTNhMmYzNDM4MmQzNDM4MjAzZDNlMjAzNTMzMzMzNTM2LnJvYTAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgL+
0nGOMA0GCSqGSIb3DQEBCwUAA4IBAQBAfE7c/iG3s8zPyRv/0eAKuq8l6qZjbU7Y
8gjjuW0b1MfpMdNF2YdRC40aqEu+DkRuUFEMLkgKr6gtblg/wLDOmMilrQRx2Wuu
m1hxE3TzLCfAsnK47Bwu0BTbRmIYm6a5MG57sMDLOp3QoS7Qh4TFnLrtTJ2R/RsO
x8GEEFFliT+MMXCmxWt56AgzB8XpvaoyiS9VxID6m3a58HFg9XtNXZQjV72MKgys
LpCA2iuo8tzdBmYda1cyybyESc8HmnBndlaOR+EdGOSWBlOhVKZ2v7MKWOTw2Rl7
pV4HDegB9q3dAa4GYINjk21n0/bRhkCuFFcKZ4FqXpXBQAf7pz5j
-----END CERTIFICATE-----