Route Origin Authorization

$ rpki-client -vvf rpki.admin.freerangecloud.com/repo/FRC-CA/0/323630323a666564323a373331363a3a2f34382d3438203d3e203533333536.roa
File:                     323630323a666564323a373331363a3a2f34382d3438203d3e203533333536.roa (raw, json)
Hash identifier:          +1rnwWX7jZaAjJzlxG81aT6YfQ+rz1uPzSwzq76VZ1A=
Subject key identifier:   0C:97:A1:BC:4D:F8:10:72:86:46:6C:22:5D:3C:A1:8F:01:80:27:1B
Certificate issuer:       /CN=fd77f55efe3a93c53ca3dc8a6f8374fe70fec5567dd1e8c855
Certificate serial:       2468A0C68E7DC1F0E8784729C18BB9A5E96753A5
Authority key identifier: C8:93:5F:DC:A5:02:8A:E8:20:9F:EC:82:AD:8A:E8:CF:B7:C6:E7:76
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/6e5d9611-fd33-488c-9aec-f4df2a25351e/fd77f55efe3a93c53ca3dc8a6f8374fe70fec5567dd1e8c855.cer
Subject info access:      rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/0/323630323a666564323a373331363a3a2f34382d3438203d3e203533333536.roa
Signing time:             Thu 16 Dec 2021 03:26:24 +0000
ROA not before:           Thu 16 Dec 2021 03:21:24 +0000
ROA not after:            Thu 15 Dec 2022 03:26:24 +0000
asID:                     53356
IP address blocks:        2602:fed2:7316::/48 maxlen: 48

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            24:68:a0:c6:8e:7d:c1:f0:e8:78:47:29:c1:8b:b9:a5:e9:67:53:a5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fd77f55efe3a93c53ca3dc8a6f8374fe70fec5567dd1e8c855
        Validity
            Not Before: Dec 16 03:21:24 2021 GMT
            Not After : Dec 15 03:26:24 2022 GMT
        Subject: CN=0C97A1BC4DF8107286466C225D3CA18F0180271B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:04:bb:64:4c:f9:47:9c:17:dd:e2:2b:5f:e7:
                    b2:ba:fe:72:66:67:84:e3:0e:d9:ea:b6:70:13:2f:
                    2f:18:6a:b8:03:e1:0d:fe:69:82:47:62:61:19:7c:
                    c7:0d:6a:70:42:ed:0a:5a:34:5d:37:3c:c2:59:68:
                    f4:0a:77:e4:1a:2d:3f:74:bf:de:e2:b7:f0:dc:d9:
                    c4:56:20:4b:4d:b8:fc:dc:83:1c:4a:22:fb:23:1d:
                    a8:14:f6:58:9e:5f:e3:17:4b:e0:2f:7d:d8:53:23:
                    e8:60:02:82:16:25:52:f7:51:1c:da:4b:fd:22:ef:
                    e0:e2:87:00:9c:32:3b:ad:11:9f:4f:50:49:6c:af:
                    68:32:c0:52:30:d7:1f:e4:c7:93:80:fc:5e:35:d8:
                    52:f7:14:9b:91:58:13:7b:c6:df:3d:89:30:f5:4e:
                    70:cd:9e:a2:70:0a:ce:35:08:8f:b6:b8:be:67:8f:
                    67:88:d9:af:22:60:1e:1d:6f:71:fc:d4:4d:a4:1c:
                    95:9b:1c:2b:38:f5:f4:62:05:82:63:41:f5:c5:c8:
                    4e:50:52:d3:64:22:94:22:de:8b:e8:aa:90:48:03:
                    70:9b:9a:77:91:0a:20:65:54:58:5d:25:1f:40:28:
                    0d:59:6a:4e:49:d0:41:9f:dc:e5:64:aa:88:7d:5a:
                    83:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0C:97:A1:BC:4D:F8:10:72:86:46:6C:22:5D:3C:A1:8F:01:80:27:1B
            X509v3 Authority Key Identifier:
                keyid:C8:93:5F:DC:A5:02:8A:E8:20:9F:EC:82:AD:8A:E8:CF:B7:C6:E7:76

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/0/C8935FDCA5028AE8209FEC82AD8AE8CFB7C6E776.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/6e5d9611-fd33-488c-9aec-f4df2a25351e/fd77f55efe3a93c53ca3dc8a6f8374fe70fec5567dd1e8c855.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/0/323630323a666564323a373331363a3a2f34382d3438203d3e203533333536.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fed2:7316::/48

    Signature Algorithm: sha256WithRSAEncryption
         7d:ef:22:fc:47:9d:c2:f1:61:88:b1:a9:c5:7b:94:29:45:ec:
         fc:5a:bc:8a:36:a7:28:49:b6:85:89:e0:8f:41:89:bd:fd:58:
         18:50:50:32:00:61:48:69:c8:1c:41:ff:5c:73:f9:49:0d:65:
         72:a7:b2:c6:17:06:48:97:e3:eb:91:a2:0a:25:b8:f7:65:40:
         4d:24:f4:54:53:63:f7:41:69:59:fb:92:ab:01:19:2b:a4:b6:
         4d:86:47:22:e3:d8:ea:87:03:a2:83:45:e7:b2:db:69:65:f7:
         4f:52:8c:46:67:1d:7a:17:71:98:23:37:3e:9d:8e:72:b3:1b:
         eb:98:65:46:6e:af:c7:f8:2c:56:e6:bd:48:3a:22:67:3a:a3:
         47:f8:c1:24:33:8f:ab:35:3a:bf:93:aa:60:f7:fb:e0:e8:85:
         f7:4e:3f:ee:50:92:30:3e:fb:42:d3:f9:a3:52:be:ad:ae:34:
         34:e2:e0:91:98:8e:51:16:d6:2c:b1:d5:d5:96:f0:d1:dd:b0:
         be:3b:fb:65:fa:b4:c4:88:c3:01:8b:d2:4f:04:85:91:e5:f8:
         d0:3e:28:3c:8d:f1:22:e3:60:da:2c:51:64:e2:5c:52:9f:1e:
         af:73:64:13:83:d9:f2:c8:e4:60:23:2f:f4:d1:0d:30:5c:90:
         62:0f:b2:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----