Route Origin Authorization

$ rpki-client -vvf rpki.admin.freerangecloud.com/repo/FRC-CA/0/323630323a666564323a373330383a3a2f34382d3438203d3e203233343730.roa
File:                     323630323a666564323a373330383a3a2f34382d3438203d3e203233343730.roa (raw, json)
Hash identifier:          R/NsMCJXH1QNi+oPheGyMYnpAzAZ5VjuqgVY29ymcyM=
Subject key identifier:   DA:D4:83:65:7A:56:AC:EC:88:C3:4B:71:12:F2:36:B6:86:61:C1:7D
Certificate issuer:       /CN=fd77f55efe3a93c53ca3dc8a6f8374fe70fec5567dd1e8c855
Certificate serial:       4407E31087BA605E5B001621FEFC39576D5BC08C
Authority key identifier: C8:93:5F:DC:A5:02:8A:E8:20:9F:EC:82:AD:8A:E8:CF:B7:C6:E7:76
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/6e5d9611-fd33-488c-9aec-f4df2a25351e/fd77f55efe3a93c53ca3dc8a6f8374fe70fec5567dd1e8c855.cer
Subject info access:      rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/0/323630323a666564323a373330383a3a2f34382d3438203d3e203233343730.roa
Signing time:             Thu 16 Dec 2021 03:26:22 +0000
ROA not before:           Thu 16 Dec 2021 03:21:22 +0000
ROA not after:            Thu 15 Dec 2022 03:26:22 +0000
asID:                     23470
IP address blocks:        2602:fed2:7308::/48 maxlen: 48

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            44:07:e3:10:87:ba:60:5e:5b:00:16:21:fe:fc:39:57:6d:5b:c0:8c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fd77f55efe3a93c53ca3dc8a6f8374fe70fec5567dd1e8c855
        Validity
            Not Before: Dec 16 03:21:22 2021 GMT
            Not After : Dec 15 03:26:22 2022 GMT
        Subject: CN=DAD483657A56ACEC88C34B7112F236B68661C17D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:13:ef:2e:eb:2d:fc:14:b9:53:07:55:b1:e6:
                    94:d6:b2:ef:5d:9e:d1:d4:8c:f5:23:cb:e0:b1:e7:
                    77:6a:04:c5:0b:a8:af:e0:da:b6:1d:a7:21:26:62:
                    ce:c4:6a:20:da:34:50:3a:c6:08:2a:36:29:ad:16:
                    72:a4:5f:77:49:0d:05:15:51:50:bb:72:65:af:7c:
                    d3:7a:ae:3f:94:23:32:11:d4:74:62:f4:38:ef:21:
                    61:20:9c:09:47:43:6c:27:58:ec:cb:f7:e1:e2:c8:
                    52:a6:05:d4:7d:71:57:12:09:1f:47:ef:fb:86:b5:
                    89:75:bb:28:85:4d:64:10:4a:89:18:00:04:76:2b:
                    6a:a5:df:a5:45:b9:f8:16:1c:ef:51:8b:7c:85:6e:
                    21:8b:58:5a:34:59:f5:5a:60:fe:4e:ba:d6:1d:7c:
                    fa:0f:7c:da:29:b2:e9:fa:5d:04:0d:3f:54:f1:a5:
                    0a:48:e4:14:9d:c5:a9:49:d5:d2:12:af:36:3a:76:
                    f1:01:a3:d8:6e:4f:00:69:6e:fc:cb:94:26:9b:73:
                    6d:60:ac:ba:b8:c5:ac:5a:44:3e:00:61:bc:82:64:
                    cc:65:33:ce:ac:80:0c:13:8e:1f:5f:2a:c6:19:4e:
                    37:c5:79:67:90:fc:a7:40:92:62:20:b9:5d:58:c4:
                    58:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DA:D4:83:65:7A:56:AC:EC:88:C3:4B:71:12:F2:36:B6:86:61:C1:7D
            X509v3 Authority Key Identifier:
                keyid:C8:93:5F:DC:A5:02:8A:E8:20:9F:EC:82:AD:8A:E8:CF:B7:C6:E7:76

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/0/C8935FDCA5028AE8209FEC82AD8AE8CFB7C6E776.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/6e5d9611-fd33-488c-9aec-f4df2a25351e/fd77f55efe3a93c53ca3dc8a6f8374fe70fec5567dd1e8c855.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/0/323630323a666564323a373330383a3a2f34382d3438203d3e203233343730.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fed2:7308::/48

    Signature Algorithm: sha256WithRSAEncryption
         8c:91:e5:85:bf:d3:38:75:1f:84:33:27:53:4d:2b:f4:24:73:
         6e:2a:eb:f6:36:87:3a:cc:c1:32:2e:02:e0:2c:03:c6:e9:5c:
         21:9e:2c:24:e4:29:45:13:74:14:c8:99:ef:a3:31:49:0a:42:
         1b:9b:f6:77:ef:9c:c0:48:96:81:67:0a:9b:91:dc:27:3b:56:
         59:83:ee:d1:bd:89:78:7d:37:99:c5:e0:c3:b7:26:2f:2c:34:
         0e:bd:b1:32:8d:6f:85:f7:cc:f0:46:e8:70:43:c7:31:38:e5:
         4c:d7:22:85:8f:e8:15:9d:34:1b:8c:b9:4b:01:17:17:ca:c5:
         70:0c:7c:39:17:02:6d:cd:cc:a2:e6:c4:33:cc:d8:1e:8e:cd:
         01:28:a8:71:21:28:62:7c:8e:92:6e:6b:d9:ba:b0:39:08:55:
         86:f3:e6:27:c1:0d:61:48:0b:26:d1:b0:b1:24:d0:7b:ac:88:
         7e:44:5e:ad:ac:0f:54:a3:94:6a:f3:b5:b4:d3:7c:d3:5c:65:
         32:44:ef:32:d3:61:fe:fa:a6:83:3d:ab:1d:9f:53:8c:6e:96:
         dd:5b:fd:4e:43:34:16:25:2d:92:e5:12:aa:ed:68:a3:67:42:
         c3:4e:72:29:d0:74:49:21:5c:08:a7:fb:83:a5:c7:ed:20:72:
         bd:58:18:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----