Route Origin Authorization

$ rpki-client -vvf rpki.admin.freerangecloud.com/repo/FRC-CA/0/323630323a666564323a373330383a3a2f34382d3438203d3e203136333930.roa
File:                     323630323a666564323a373330383a3a2f34382d3438203d3e203136333930.roa (raw, json)
Hash identifier:          DFSwIrcP7Ek2N2sE5QFq3MSKkXYUEYYjv3YBMxOjCMk=
Subject key identifier:   61:AD:E2:AB:FA:43:BB:DC:F3:9B:CE:13:81:74:D8:39:3F:4C:5A:C4
Certificate issuer:       /CN=fd77f55efe3a93c53ca3dc8a6f8374fe70fec5567dd1e8c855
Certificate serial:       6C80CE5B4938AC9822F4E5E9014B91F6DF46816A
Authority key identifier: C8:93:5F:DC:A5:02:8A:E8:20:9F:EC:82:AD:8A:E8:CF:B7:C6:E7:76
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/6e5d9611-fd33-488c-9aec-f4df2a25351e/fd77f55efe3a93c53ca3dc8a6f8374fe70fec5567dd1e8c855.cer
Subject info access:      rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/0/323630323a666564323a373330383a3a2f34382d3438203d3e203136333930.roa
Signing time:             Thu 16 Dec 2021 03:26:28 +0000
ROA not before:           Thu 16 Dec 2021 03:21:28 +0000
ROA not after:            Thu 15 Dec 2022 03:26:28 +0000
asID:                     16390
IP address blocks:        2602:fed2:7308::/48 maxlen: 48

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6c:80:ce:5b:49:38:ac:98:22:f4:e5:e9:01:4b:91:f6:df:46:81:6a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fd77f55efe3a93c53ca3dc8a6f8374fe70fec5567dd1e8c855
        Validity
            Not Before: Dec 16 03:21:28 2021 GMT
            Not After : Dec 15 03:26:28 2022 GMT
        Subject: CN=61ADE2ABFA43BBDCF39BCE138174D8393F4C5AC4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:4a:94:04:f1:fb:d7:a4:46:87:22:7b:ed:db:
                    cf:bd:a0:c3:6c:53:23:ab:d3:57:3a:f2:39:7c:e7:
                    07:a2:01:d1:09:12:5d:57:55:30:b1:67:9b:63:32:
                    14:bd:4d:00:f3:9e:2a:0a:7c:d6:03:0b:2d:94:6d:
                    a7:93:4d:09:df:b8:69:2f:42:bc:32:01:61:1d:3b:
                    fa:1e:30:d9:5c:ac:42:6a:0f:99:a9:7d:30:6d:51:
                    6e:83:c7:5c:8a:7b:74:6d:02:dd:61:46:3c:91:6e:
                    c0:be:8b:72:9c:09:31:0e:74:b9:b2:72:23:7d:e5:
                    9e:a9:2a:d8:e5:31:6f:ed:32:38:64:3a:3e:8e:2f:
                    ad:a0:02:5e:63:06:93:48:d6:40:d3:2d:40:99:e0:
                    a4:d8:ac:e7:0d:75:37:c6:84:73:21:5e:19:5d:39:
                    8d:a4:cf:5b:c1:37:15:25:86:ac:d5:8c:38:ad:e9:
                    3a:cc:be:02:8d:99:85:5c:40:6c:55:5d:3d:1d:4c:
                    57:48:b9:8e:4c:f0:72:c7:d4:7e:79:db:23:55:02:
                    90:19:97:82:4d:71:64:6d:c5:56:02:83:76:cb:00:
                    1f:19:cb:8f:ac:eb:e7:7f:73:9c:de:6d:0f:19:8e:
                    bc:80:79:14:c1:48:7d:97:68:44:b1:17:8a:9f:89:
                    f0:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                61:AD:E2:AB:FA:43:BB:DC:F3:9B:CE:13:81:74:D8:39:3F:4C:5A:C4
            X509v3 Authority Key Identifier:
                keyid:C8:93:5F:DC:A5:02:8A:E8:20:9F:EC:82:AD:8A:E8:CF:B7:C6:E7:76

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/0/C8935FDCA5028AE8209FEC82AD8AE8CFB7C6E776.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/6e5d9611-fd33-488c-9aec-f4df2a25351e/fd77f55efe3a93c53ca3dc8a6f8374fe70fec5567dd1e8c855.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/0/323630323a666564323a373330383a3a2f34382d3438203d3e203136333930.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fed2:7308::/48

    Signature Algorithm: sha256WithRSAEncryption
         01:65:2d:ac:f0:69:a2:ba:4d:9e:8a:27:50:2f:0e:0e:49:2c:
         bb:bf:13:b1:b8:f5:46:80:72:4b:e1:89:82:d3:d5:92:3a:ac:
         03:59:02:9e:89:2b:b6:9f:26:46:4e:d0:44:61:fb:52:58:7d:
         a7:46:3e:c2:e9:d1:b1:4c:b2:59:79:e4:95:f8:7a:4b:6f:1d:
         0e:b5:46:eb:72:3e:79:07:a4:d7:4c:8e:3a:09:02:92:4e:8d:
         23:7a:72:75:54:97:90:eb:fe:bf:59:2f:a0:b2:03:12:45:a6:
         37:e8:f8:fd:2d:d1:e3:80:26:c8:95:fa:ed:bc:6e:3f:4c:66:
         90:cf:94:62:95:e4:c3:80:51:b5:e7:3e:12:38:5e:62:3f:2c:
         58:d1:6f:74:4f:ca:64:24:02:d7:14:93:2e:5e:d1:01:09:34:
         9f:d7:5b:f3:4e:92:c8:12:64:d9:5e:9e:ec:07:4b:3c:01:18:
         94:9a:0d:12:fe:66:76:b3:aa:fd:2c:78:ed:97:7c:72:1a:28:
         bc:7d:10:cc:e9:72:3f:f9:a0:48:a0:d4:5f:8b:7e:aa:db:d7:
         3a:52:f7:9c:2f:df:d5:28:04:e4:2b:09:0c:e6:a2:61:e9:14:
         78:ca:fa:8f:e0:be:dc:33:71:b2:2c:6e:f9:ec:31:6c:a9:21:
         c7:87:23:fc
-----BEGIN CERTIFICATE-----
MIIFkzCCBHugAwIBAgIUbIDOW0k4rJgi9OXpAUuR9t9GgWowDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyZmQ3N2Y1NWVmZTNhOTNjNTNjYTNkYzhhNmY4Mzc0ZmU3
MGZlYzU1NjdkZDFlOGM4NTUwHhcNMjExMjE2MDMyMTI4WhcNMjIxMjE1MDMyNjI4
WjAzMTEwLwYDVQQDEyg2MUFERTJBQkZBNDNCQkRDRjM5QkNFMTM4MTc0RDgzOTNG
NEM1QUM0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvkqUBPH716RG
hyJ77dvPvaDDbFMjq9NXOvI5fOcHogHRCRJdV1UwsWebYzIUvU0A854qCnzWAwst
lG2nk00J37hpL0K8MgFhHTv6HjDZXKxCag+ZqX0wbVFug8dcint0bQLdYUY8kW7A
votynAkxDnS5snIjfeWeqSrY5TFv7TI4ZDo+ji+toAJeYwaTSNZA0y1AmeCk2Kzn
DXU3xoRzIV4ZXTmNpM9bwTcVJYas1Yw4rek6zL4CjZmFXEBsVV09HUxXSLmOTPBy
x9R+edsjVQKQGZeCTXFkbcVWAoN2ywAfGcuPrOvnf3Oc3m0PGY68gHkUwUh9l2hE
sReKn4nwUwIDAQABo4ICkzCCAo8wHQYDVR0OBBYEFGGt4qv6Q7vc85vOE4F02Dk/
TFrEMB8GA1UdIwQYMBaAFMiTX9ylAoroIJ/sgq2K6M+3xud2MA4GA1UdDwEB/wQE
AwIHgDBxBgNVHR8EajBoMGagZKBihmByc3luYzovL3Jwa2kuYWRtaW4uZnJlZXJh
bmdlY2xvdWQuY29tL3JlcG8vRlJDLUNBLzAvQzg5MzVGRENBNTAyOEFFODIwOUZF
QzgyQUQ4QUU4Q0ZCN0M2RTc3Ni5jcmwwgfMGCCsGAQUFBwEBBIHmMIHjMIHgBggr
BgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4t
cnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvZjYw
YzlmMzItYTg3Yy00MzM5LWEyZjMtNjI5OWEzYjAyZTI5LzZlNWQ5NjExLWZkMzMt
NDg4Yy05YWVjLWY0ZGYyYTI1MzUxZS9mZDc3ZjU1ZWZlM2E5M2M1M2NhM2RjOGE2
ZjgzNzRmZTcwZmVjNTU2N2RkMWU4Yzg1NS5jZXIwgZUGCCsGAQUFBwELBIGIMIGF
MIGCBggrBgEFBQcwC4Z2cnN5bmM6Ly9ycGtpLmFkbWluLmZyZWVyYW5nZWNsb3Vk
LmNvbS9yZXBvL0ZSQy1DQS8wLzMyMzYzMDMyM2E2NjY1NjQzMjNhMzczMzMwMzgz
YTNhMmYzNDM4MmQzNDM4MjAzZDNlMjAzMTM2MzMzOTMwLnJvYTAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgL+
0nMIMA0GCSqGSIb3DQEBCwUAA4IBAQABZS2s8Gmiuk2eiidQLw4OSSy7vxOxuPVG
gHJL4YmC09WSOqwDWQKeiSu2nyZGTtBEYftSWH2nRj7C6dGxTLJZeeSV+HpLbx0O
tUbrcj55B6TXTI46CQKSTo0jenJ1VJeQ6/6/WS+gsgMSRaY36Pj9LdHjgCbIlfrt
vG4/TGaQz5RileTDgFG15z4SOF5iPyxY0W90T8pkJALXFJMuXtEBCTSf11vzTpLI
EmTZXp7sB0s8ARiUmg0S/mZ2s6r9LHjtl3xyGii8fRDM6XI/+aBIoNRfi36q29c6
UvecL9/VKATkKwkM5qJh6RR4yvqP4L7cM3GyLG757DFsqSHHhyP8
-----END CERTIFICATE-----