Route Origin Authorization

$ rpki-client -vvf rpki.admin.freerangecloud.com/repo/FRC-CA/0/323630323a666564323a373330663a3a2f34382d3438203d3e203533333536.roa
File:                     323630323a666564323a373330663a3a2f34382d3438203d3e203533333536.roa (raw, json)
Hash identifier:          2z0+2TZGp0Pug8QEkmY/4U6ODc9X0wOrKXOeyHyMGxE=
Subject key identifier:   44:74:7C:95:75:B2:A7:DC:B6:79:04:16:59:8D:35:31:57:72:40:6F
Certificate issuer:       /CN=fd77f55efe3a93c53ca3dc8a6f8374fe70fec5567dd1e8c855
Certificate serial:       1C1BBDBE8ECAB8E2F3C41D8CE64AD91A95A3915C
Authority key identifier: C8:93:5F:DC:A5:02:8A:E8:20:9F:EC:82:AD:8A:E8:CF:B7:C6:E7:76
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/6e5d9611-fd33-488c-9aec-f4df2a25351e/fd77f55efe3a93c53ca3dc8a6f8374fe70fec5567dd1e8c855.cer
Subject info access:      rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/0/323630323a666564323a373330663a3a2f34382d3438203d3e203533333536.roa
Signing time:             Thu 16 Dec 2021 03:26:29 +0000
ROA not before:           Thu 16 Dec 2021 03:21:29 +0000
ROA not after:            Thu 15 Dec 2022 03:26:29 +0000
asID:                     53356
IP address blocks:        2602:fed2:730f::/48 maxlen: 48

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1c:1b:bd:be:8e:ca:b8:e2:f3:c4:1d:8c:e6:4a:d9:1a:95:a3:91:5c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fd77f55efe3a93c53ca3dc8a6f8374fe70fec5567dd1e8c855
        Validity
            Not Before: Dec 16 03:21:29 2021 GMT
            Not After : Dec 15 03:26:29 2022 GMT
        Subject: CN=44747C9575B2A7DCB6790416598D35315772406F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:d0:a6:8c:6b:b9:75:47:4a:33:0d:3a:f9:fe:
                    91:d7:15:62:88:83:d6:a0:8a:32:1d:bb:06:83:85:
                    ac:4d:de:8b:f5:6c:1b:0a:bb:84:2e:92:30:f1:f9:
                    9a:b4:4b:ee:05:03:6e:01:b1:89:e5:6b:0c:a6:77:
                    41:7e:c8:fe:67:a3:6b:04:ec:51:42:a2:19:d7:94:
                    bf:ce:b7:73:7a:fc:cf:28:60:f1:f2:15:17:29:20:
                    62:9e:a0:12:7c:d1:56:dc:e5:68:be:ed:91:e7:ae:
                    85:93:c0:0e:a9:09:75:5e:3f:dd:93:4d:bb:31:36:
                    03:ae:66:68:7b:b7:5e:c5:5a:17:2b:95:0f:96:d7:
                    a6:ec:24:c8:a3:ab:e4:27:28:d4:53:96:eb:a6:3d:
                    ff:89:10:b9:92:c1:97:1b:23:ce:f1:10:f5:60:5f:
                    eb:e6:2d:2f:e9:34:43:00:97:b5:e5:e2:2a:e3:f4:
                    c1:8e:74:83:70:59:28:be:43:99:00:ed:a8:b6:74:
                    80:78:64:c1:2c:87:ed:4a:e5:88:8f:6c:c9:60:29:
                    d0:5c:29:d6:6b:fe:d3:e9:7b:a2:10:8c:9e:7d:70:
                    20:4c:8c:ee:db:b6:38:d5:5c:f3:c4:52:87:38:d2:
                    6a:25:ba:62:31:28:a8:72:b7:aa:dc:7f:5c:27:0a:
                    3c:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                44:74:7C:95:75:B2:A7:DC:B6:79:04:16:59:8D:35:31:57:72:40:6F
            X509v3 Authority Key Identifier:
                keyid:C8:93:5F:DC:A5:02:8A:E8:20:9F:EC:82:AD:8A:E8:CF:B7:C6:E7:76

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/0/C8935FDCA5028AE8209FEC82AD8AE8CFB7C6E776.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/6e5d9611-fd33-488c-9aec-f4df2a25351e/fd77f55efe3a93c53ca3dc8a6f8374fe70fec5567dd1e8c855.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/0/323630323a666564323a373330663a3a2f34382d3438203d3e203533333536.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fed2:730f::/48

    Signature Algorithm: sha256WithRSAEncryption
         8d:4b:de:a0:6b:9b:e3:ad:36:9a:4f:97:a2:95:c0:97:6e:6b:
         97:ac:87:02:d6:c5:b2:97:92:29:36:88:24:dc:06:42:36:7f:
         87:14:1b:51:2d:6a:6b:e5:7d:d1:7d:6c:7f:86:c7:3c:0b:31:
         2d:e3:c4:82:4f:4a:d8:03:9c:d4:6d:55:1e:f3:6f:77:4d:80:
         ee:70:6f:55:f6:19:4d:59:53:da:05:33:de:b3:58:7f:7a:6f:
         9f:46:de:67:f5:8a:b4:18:1f:da:ee:41:07:28:c3:be:33:48:
         58:d8:51:f4:15:5f:7c:7f:03:83:e5:e4:7d:ef:ef:ac:56:1f:
         c6:8a:c6:43:46:36:d4:0c:4b:07:d1:cc:58:0f:0e:19:1e:9a:
         7e:3f:cb:e4:59:a6:a4:b8:5a:ab:93:5b:27:44:7e:69:5e:e3:
         97:d8:7e:27:2b:78:bd:24:b3:b4:bd:b7:df:7d:0d:80:9b:d5:
         97:6c:eb:46:90:42:04:08:ac:e6:53:48:e9:49:db:1c:f2:69:
         c1:ef:7e:f9:6f:7d:f6:76:4d:76:92:5d:af:96:d9:ae:32:b0:
         1b:f6:ba:48:86:70:ff:f2:5d:d5:8e:fc:5f:79:c0:ff:6f:20:
         43:92:3d:f1:4c:b4:20:04:4a:a0:17:f2:ad:b2:88:fb:31:48:
         6e:40:8f:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----