Route Origin Authorization

$ rpki-client -vvf rpki.admin.freerangecloud.com/repo/FRC-CA/0/323630323a666564323a373331313a3a2f34382d3438203d3e203533333536.roa
File:                     323630323a666564323a373331313a3a2f34382d3438203d3e203533333536.roa (raw, json)
Hash identifier:          /yWEWkOl78hakjaU5Ti3kJX4YTpKRT3gkgqitnwYhBE=
Subject key identifier:   F9:32:2D:70:E9:5D:E8:C5:0C:3D:C5:3D:3B:BE:9D:F7:A6:60:24:31
Certificate issuer:       /CN=fd77f55efe3a93c53ca3dc8a6f8374fe70fec5567dd1e8c855
Certificate serial:       4D0A63EED33547D812872361E66E91A3950B7805
Authority key identifier: C8:93:5F:DC:A5:02:8A:E8:20:9F:EC:82:AD:8A:E8:CF:B7:C6:E7:76
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/6e5d9611-fd33-488c-9aec-f4df2a25351e/fd77f55efe3a93c53ca3dc8a6f8374fe70fec5567dd1e8c855.cer
Subject info access:      rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/0/323630323a666564323a373331313a3a2f34382d3438203d3e203533333536.roa
Signing time:             Thu 16 Dec 2021 03:26:19 +0000
ROA not before:           Thu 16 Dec 2021 03:21:19 +0000
ROA not after:            Thu 15 Dec 2022 03:26:19 +0000
asID:                     53356
IP address blocks:        2602:fed2:7311::/48 maxlen: 48

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4d:0a:63:ee:d3:35:47:d8:12:87:23:61:e6:6e:91:a3:95:0b:78:05
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fd77f55efe3a93c53ca3dc8a6f8374fe70fec5567dd1e8c855
        Validity
            Not Before: Dec 16 03:21:19 2021 GMT
            Not After : Dec 15 03:26:19 2022 GMT
        Subject: CN=F9322D70E95DE8C50C3DC53D3BBE9DF7A6602431
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:5e:90:f1:e1:b1:76:aa:f5:22:6c:98:78:14:
                    26:a4:9e:8c:9c:a0:92:ef:42:d2:a9:fb:76:a1:5f:
                    22:6a:14:09:01:39:3c:f0:78:58:87:3d:55:21:ce:
                    78:a7:de:19:23:11:14:8f:4f:61:a3:3a:61:ee:ca:
                    64:e0:fe:e6:70:4c:9f:5e:27:ef:e0:3a:df:50:4a:
                    fa:8c:a2:fc:15:e7:a9:86:7f:f4:80:02:c6:ca:db:
                    02:aa:2e:9d:33:f2:57:e5:a1:07:4b:68:ee:0c:88:
                    13:c9:da:ec:27:30:40:53:82:d4:0d:3f:73:98:80:
                    dc:8a:04:16:fa:af:2b:c6:32:ca:06:00:fa:9d:b3:
                    06:27:60:fd:f1:c8:e7:56:6c:58:bd:af:a3:ca:30:
                    da:aa:01:72:d3:f9:f9:f8:bc:f5:3e:3e:dc:44:91:
                    b9:63:2c:d4:49:a1:de:88:6b:6c:70:9a:d7:cd:ed:
                    ec:78:41:1c:26:70:7a:75:d7:24:bd:7c:e0:c7:41:
                    bd:1f:88:ca:7e:1b:ae:95:0e:89:6f:78:31:cd:5f:
                    68:42:ee:7b:a9:4a:7b:b8:37:ee:16:88:dd:2a:8c:
                    9d:91:29:ce:4b:f2:50:a8:cf:1e:2a:ce:8e:ec:ab:
                    28:60:ad:d0:7b:15:ff:c5:c9:c5:fb:be:28:1a:39:
                    4b:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F9:32:2D:70:E9:5D:E8:C5:0C:3D:C5:3D:3B:BE:9D:F7:A6:60:24:31
            X509v3 Authority Key Identifier:
                keyid:C8:93:5F:DC:A5:02:8A:E8:20:9F:EC:82:AD:8A:E8:CF:B7:C6:E7:76

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/0/C8935FDCA5028AE8209FEC82AD8AE8CFB7C6E776.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/6e5d9611-fd33-488c-9aec-f4df2a25351e/fd77f55efe3a93c53ca3dc8a6f8374fe70fec5567dd1e8c855.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/0/323630323a666564323a373331313a3a2f34382d3438203d3e203533333536.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fed2:7311::/48

    Signature Algorithm: sha256WithRSAEncryption
         2e:25:2f:db:4a:a8:3a:01:fe:c4:af:e1:4b:70:21:ad:ea:50:
         f2:de:2f:1e:8c:2a:81:ff:19:47:90:69:10:7f:b0:e3:87:49:
         87:53:b5:07:1b:62:2f:6f:59:e3:8d:a9:35:28:07:d0:6f:0f:
         6b:c1:b3:3e:cf:fb:fc:35:e6:39:4c:05:4b:d4:cf:4f:e7:d0:
         4d:a1:50:d0:91:a5:16:53:5f:df:2a:8e:5b:de:5e:1b:fc:39:
         18:10:cc:2f:6f:5c:6a:a8:f5:3c:c1:7e:98:4b:80:82:18:83:
         c2:a4:08:9d:cf:fb:68:01:5e:47:10:3d:29:48:67:5f:f5:1c:
         2d:df:22:f1:59:d7:3d:14:02:e0:1a:94:c8:ab:55:e3:b1:34:
         aa:41:ce:69:3e:7d:8f:3f:dc:09:ed:cb:8e:48:66:5f:75:95:
         7c:b0:69:7a:38:4e:69:e7:f8:f3:73:6c:29:46:c8:7a:7f:bf:
         d9:57:5f:96:80:ad:5a:00:70:b2:0f:d0:f2:6a:46:4f:48:09:
         f4:e0:1c:86:d3:35:dd:96:ea:d9:ed:d9:40:e6:3e:12:7e:51:
         9e:68:fa:24:43:92:64:90:ca:3c:4a:1d:3e:a2:d5:d6:c8:90:
         6c:52:9f:51:91:7f:e5:d9:02:d3:4b:77:21:96:27:80:ba:f0:
         09:6b:b2:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----