Route Origin Authorization

$ rpki-client -vvf rpki.admin.freerangecloud.com/repo/FRC-CA/0/323630323a666564323a373330613a3a2f34382d3438203d3e203533333536.roa
File:                     323630323a666564323a373330613a3a2f34382d3438203d3e203533333536.roa (raw, json)
Hash identifier:          zvmh64ornFwmJPvVBTrM7HsoV9RY1oUO6rBwTa5iHoA=
Subject key identifier:   67:91:03:42:63:CF:2D:53:B6:F1:9C:D2:93:75:76:35:34:D3:BD:CB
Certificate issuer:       /CN=fd77f55efe3a93c53ca3dc8a6f8374fe70fec5567dd1e8c855
Certificate serial:       58FBB5083618E10C7BA5FABC72DA57122C53FF7C
Authority key identifier: C8:93:5F:DC:A5:02:8A:E8:20:9F:EC:82:AD:8A:E8:CF:B7:C6:E7:76
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/6e5d9611-fd33-488c-9aec-f4df2a25351e/fd77f55efe3a93c53ca3dc8a6f8374fe70fec5567dd1e8c855.cer
Subject info access:      rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/0/323630323a666564323a373330613a3a2f34382d3438203d3e203533333536.roa
Signing time:             Thu 16 Dec 2021 03:26:21 +0000
ROA not before:           Thu 16 Dec 2021 03:21:21 +0000
ROA not after:            Thu 15 Dec 2022 03:26:21 +0000
asID:                     53356
IP address blocks:        2602:fed2:730a::/48 maxlen: 48

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            58:fb:b5:08:36:18:e1:0c:7b:a5:fa:bc:72:da:57:12:2c:53:ff:7c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fd77f55efe3a93c53ca3dc8a6f8374fe70fec5567dd1e8c855
        Validity
            Not Before: Dec 16 03:21:21 2021 GMT
            Not After : Dec 15 03:26:21 2022 GMT
        Subject: CN=6791034263CF2D53B6F19CD29375763534D3BDCB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:32:5c:e8:5b:36:5b:3f:02:d0:6b:4f:c3:7a:
                    17:37:3e:6d:6d:b2:d5:0d:09:67:fc:5b:cd:e4:3b:
                    f5:a0:1b:82:6f:a6:35:93:82:4d:fe:18:ca:25:90:
                    20:c2:65:68:88:ec:5e:93:03:1c:69:8a:f5:fb:1c:
                    f6:ba:6a:e4:e0:f7:17:2f:5c:c7:92:28:e0:1b:69:
                    29:a4:c0:9c:5c:79:df:de:7f:49:dc:2b:e8:7f:eb:
                    4b:ec:61:30:0b:63:15:d1:d2:30:4f:31:1a:00:fb:
                    39:3e:f4:ef:ed:f6:5d:d8:44:5d:8e:c2:cd:4a:4f:
                    dd:b7:e6:3e:f0:61:4e:fb:03:8e:43:83:ff:34:69:
                    43:2e:9f:5a:70:7f:84:46:e0:ee:24:fd:90:01:d4:
                    cf:dd:48:89:de:83:40:34:c9:d7:a8:da:a3:0f:10:
                    86:ca:04:71:89:ce:43:f0:79:38:4b:62:4b:d1:12:
                    f5:c6:5f:cc:fb:01:a5:45:8b:dd:17:36:4e:a9:84:
                    13:d1:4c:e0:4a:9f:f3:5c:6f:ac:73:1a:a8:85:76:
                    0c:c4:93:6c:4d:72:2a:fa:2c:a4:f9:ca:9b:5a:27:
                    e0:bf:2a:1c:3d:5f:b1:6e:5e:fe:d4:93:da:79:f6:
                    fa:de:6d:2d:cd:a9:b7:e2:7f:08:8e:bd:39:d8:de:
                    5f:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                67:91:03:42:63:CF:2D:53:B6:F1:9C:D2:93:75:76:35:34:D3:BD:CB
            X509v3 Authority Key Identifier:
                keyid:C8:93:5F:DC:A5:02:8A:E8:20:9F:EC:82:AD:8A:E8:CF:B7:C6:E7:76

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/0/C8935FDCA5028AE8209FEC82AD8AE8CFB7C6E776.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/6e5d9611-fd33-488c-9aec-f4df2a25351e/fd77f55efe3a93c53ca3dc8a6f8374fe70fec5567dd1e8c855.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/0/323630323a666564323a373330613a3a2f34382d3438203d3e203533333536.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fed2:730a::/48

    Signature Algorithm: sha256WithRSAEncryption
         40:aa:2b:4f:e5:5f:71:01:f5:10:83:af:9c:9b:cd:b4:f8:0a:
         8b:df:e0:c7:34:e5:f7:e2:3c:63:93:2d:ca:5b:65:2c:ce:ae:
         f4:fb:84:12:14:7e:63:5c:d2:ea:5c:a9:a0:3c:b0:c5:2e:be:
         c4:66:ef:46:67:22:a6:e2:90:88:50:d9:0d:f5:14:27:01:32:
         65:50:b1:f0:2f:b0:eb:16:a9:72:9f:21:6f:a6:5c:7d:71:56:
         e7:10:e0:41:a5:6e:42:d7:11:ee:f3:df:4d:ec:9b:33:db:09:
         ee:4f:ea:31:3a:ea:c8:d5:e0:6b:5d:4e:8d:60:91:75:9b:56:
         f2:88:05:87:c1:47:29:65:e6:f8:18:80:51:b7:30:51:40:9a:
         3d:2d:09:b8:93:2e:00:4f:86:01:f4:be:a4:9e:63:12:f5:92:
         c9:5c:b4:df:e2:f3:fa:f3:8b:9a:68:ea:72:7f:f8:d9:40:02:
         dc:af:ed:d6:12:2a:c6:88:a9:9a:13:4d:29:2e:68:72:04:93:
         23:8e:4c:f9:c9:69:a2:73:9f:1e:b6:cb:e1:a8:51:5b:d0:15:
         dd:05:e5:89:8e:fd:7f:92:0e:80:ba:96:07:8a:a5:cf:99:f0:
         75:c4:e5:61:ae:7a:e3:83:9b:58:fa:91:60:4d:17:6c:cb:ae:
         9e:3e:af:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----