Route Origin Authorization

$ rpki-client -vvf rpki.admin.freerangecloud.com/repo/FRC-CA/0/323630323a666564323a373330353a3a2f34382d3438203d3e203533333536.roa
File:                     323630323a666564323a373330353a3a2f34382d3438203d3e203533333536.roa (raw, json)
Hash identifier:          KH9ahXfh0Enh6A56VaOK0hPWZyodogWpdQ3DCvJyor4=
Subject key identifier:   D8:00:90:13:16:9E:B1:93:4F:68:AA:03:CF:D2:7A:D3:C5:C7:4D:F2
Certificate issuer:       /CN=fd77f55efe3a93c53ca3dc8a6f8374fe70fec5567dd1e8c855
Certificate serial:       586B0D49AEA994C29CFF1EE91487CF955DA513B1
Authority key identifier: C8:93:5F:DC:A5:02:8A:E8:20:9F:EC:82:AD:8A:E8:CF:B7:C6:E7:76
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/6e5d9611-fd33-488c-9aec-f4df2a25351e/fd77f55efe3a93c53ca3dc8a6f8374fe70fec5567dd1e8c855.cer
Subject info access:      rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/0/323630323a666564323a373330353a3a2f34382d3438203d3e203533333536.roa
Signing time:             Thu 16 Dec 2021 03:26:24 +0000
ROA not before:           Thu 16 Dec 2021 03:21:24 +0000
ROA not after:            Thu 15 Dec 2022 03:26:24 +0000
asID:                     53356
IP address blocks:        2602:fed2:7305::/48 maxlen: 48

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            58:6b:0d:49:ae:a9:94:c2:9c:ff:1e:e9:14:87:cf:95:5d:a5:13:b1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fd77f55efe3a93c53ca3dc8a6f8374fe70fec5567dd1e8c855
        Validity
            Not Before: Dec 16 03:21:24 2021 GMT
            Not After : Dec 15 03:26:24 2022 GMT
        Subject: CN=D8009013169EB1934F68AA03CFD27AD3C5C74DF2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:a5:ae:93:3f:0f:96:24:ae:1b:06:45:e3:66:
                    bc:ec:88:13:55:36:27:33:e5:dc:d0:ee:9a:7e:45:
                    b3:86:8e:43:53:bc:10:92:3f:ec:5e:14:f6:2f:08:
                    b6:ad:96:a3:b3:72:43:0e:97:84:a8:e1:ca:0b:a4:
                    99:dd:b4:34:0b:cc:6a:f1:0a:dc:b6:b4:a1:63:99:
                    a9:f9:5d:f2:30:73:63:1e:4b:54:b2:33:81:08:6a:
                    fd:f6:e3:22:3e:cc:0a:3a:bc:1d:09:26:00:74:dc:
                    2c:5a:f4:58:b7:25:f0:cf:16:3b:48:a3:83:90:b5:
                    29:9e:2a:80:86:cd:94:93:cd:1d:85:74:b7:7d:76:
                    d4:75:2d:ff:62:63:df:c4:c9:e9:59:c7:16:92:01:
                    62:ad:d3:4d:5a:de:b9:c2:ec:80:01:bd:ba:10:ad:
                    64:a9:b6:b6:b6:05:1f:a4:dc:47:eb:48:79:f4:5b:
                    10:d9:89:4e:22:ad:71:3f:81:90:17:c4:f0:0d:a1:
                    e6:f6:8b:17:12:56:7b:e7:51:63:90:5a:93:ad:ce:
                    c2:a8:4a:17:68:c0:b2:0b:af:c3:3a:ef:e4:25:0d:
                    bc:21:df:50:6f:78:ee:14:01:83:a6:19:47:2b:c4:
                    58:be:ce:70:8e:41:f5:77:de:21:b2:a8:eb:3e:3e:
                    16:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D8:00:90:13:16:9E:B1:93:4F:68:AA:03:CF:D2:7A:D3:C5:C7:4D:F2
            X509v3 Authority Key Identifier:
                keyid:C8:93:5F:DC:A5:02:8A:E8:20:9F:EC:82:AD:8A:E8:CF:B7:C6:E7:76

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/0/C8935FDCA5028AE8209FEC82AD8AE8CFB7C6E776.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/6e5d9611-fd33-488c-9aec-f4df2a25351e/fd77f55efe3a93c53ca3dc8a6f8374fe70fec5567dd1e8c855.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/0/323630323a666564323a373330353a3a2f34382d3438203d3e203533333536.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fed2:7305::/48

    Signature Algorithm: sha256WithRSAEncryption
         13:3e:fd:38:d0:c6:a7:d9:7d:37:4a:ae:60:d2:fc:73:b2:9d:
         34:5a:e9:04:85:ab:a0:39:90:53:41:b1:df:8f:94:dc:11:41:
         d9:a4:1e:b4:ff:e5:da:90:f2:17:a7:83:b9:28:b4:08:2b:18:
         c9:4e:6d:b8:e5:61:9b:45:96:3e:89:7b:2d:ec:e7:62:2a:3c:
         0e:fd:6f:f6:e2:2d:87:f5:ef:2b:f0:4a:39:28:b7:86:1a:86:
         f9:2c:b8:02:90:59:1c:c0:22:49:7d:be:da:d6:b3:ac:12:c7:
         18:2f:e6:f5:95:11:85:bf:da:df:73:05:9d:48:19:7a:99:42:
         c2:c6:d9:f1:18:8f:db:25:1d:40:4d:89:14:15:81:ee:73:e3:
         80:17:a0:95:da:00:09:03:34:e8:16:ba:a7:3e:68:40:9c:6b:
         8d:e4:3b:f5:6a:96:9c:c2:c8:9a:fc:74:93:ba:97:2a:85:7e:
         1e:3a:08:71:8f:3b:02:43:e5:6d:ff:25:7e:54:03:a7:21:94:
         11:6a:34:2d:81:6a:83:91:7f:60:f0:76:10:fa:2c:79:96:11:
         04:71:36:3e:95:00:ef:c6:fd:02:35:7c:e4:05:7b:68:b5:f9:
         04:4a:e4:05:df:ef:ce:10:ca:7b:d8:75:8a:5e:74:68:9a:52:
         3e:d0:7e:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----