Route Origin Authorization

$ rpki-client -vvf rpki.admin.freerangecloud.com/repo/FRC-CA/0/323630323a666564323a373331373a3a2f34382d3438203d3e203533333536.roa
File:                     323630323a666564323a373331373a3a2f34382d3438203d3e203533333536.roa (raw, json)
Hash identifier:          HkQgonP7PMaznIik/QgJtBg4mGErtRYxS56KW2K2Ak0=
Subject key identifier:   13:16:59:0E:F9:7E:CF:3C:B9:77:2A:0E:66:E0:37:6F:B7:81:E9:D4
Certificate issuer:       /CN=fd77f55efe3a93c53ca3dc8a6f8374fe70fec5567dd1e8c855
Certificate serial:       43E0EB65FD08664F13D74F63513E08A4AD2AD567
Authority key identifier: C8:93:5F:DC:A5:02:8A:E8:20:9F:EC:82:AD:8A:E8:CF:B7:C6:E7:76
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/6e5d9611-fd33-488c-9aec-f4df2a25351e/fd77f55efe3a93c53ca3dc8a6f8374fe70fec5567dd1e8c855.cer
Subject info access:      rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/0/323630323a666564323a373331373a3a2f34382d3438203d3e203533333536.roa
Signing time:             Thu 16 Dec 2021 03:26:20 +0000
ROA not before:           Thu 16 Dec 2021 03:21:20 +0000
ROA not after:            Thu 15 Dec 2022 03:26:20 +0000
asID:                     53356
IP address blocks:        2602:fed2:7317::/48 maxlen: 48

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            43:e0:eb:65:fd:08:66:4f:13:d7:4f:63:51:3e:08:a4:ad:2a:d5:67
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fd77f55efe3a93c53ca3dc8a6f8374fe70fec5567dd1e8c855
        Validity
            Not Before: Dec 16 03:21:20 2021 GMT
            Not After : Dec 15 03:26:20 2022 GMT
        Subject: CN=1316590EF97ECF3CB9772A0E66E0376FB781E9D4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:e9:47:61:26:7f:7c:86:da:69:37:84:ce:74:
                    00:d5:a0:7c:c6:c8:96:62:c9:0a:41:a9:e8:10:72:
                    05:61:dc:43:18:d7:34:7b:28:e1:b4:59:5e:9d:d8:
                    6e:06:0b:49:b6:58:8c:65:38:a7:80:2a:bb:ce:2f:
                    c3:a4:a7:c8:19:d5:10:c7:c2:3b:80:cc:bd:f5:f2:
                    d1:0b:32:d7:72:64:4f:87:af:41:8d:70:b9:96:0a:
                    cb:48:f1:0b:8f:12:92:fc:1e:4c:2f:24:96:de:41:
                    d7:43:e8:9c:16:2c:b6:bb:47:d5:f0:f9:ed:ec:88:
                    f1:f5:aa:9d:02:b8:37:c0:30:e2:69:f5:ef:9f:55:
                    6b:40:d5:8c:38:2d:f9:72:cb:de:f2:17:2e:58:ba:
                    51:a0:28:87:55:15:24:1a:bb:6c:15:29:7b:f3:e6:
                    bf:91:5a:e3:cb:44:5e:e8:aa:d7:f0:f0:d8:65:b6:
                    10:9b:d9:a4:99:52:15:c7:e8:56:e8:a4:b4:b0:26:
                    4c:de:69:45:5f:17:07:e0:f3:31:af:ee:1d:e8:46:
                    95:e5:65:1d:4b:8d:14:cd:1d:77:57:ab:42:0e:51:
                    46:06:ea:21:40:6c:e6:c7:d5:b9:ab:06:5b:e4:39:
                    29:08:d9:a9:c2:bf:cd:1d:f9:e7:28:8b:95:b4:c5:
                    93:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                13:16:59:0E:F9:7E:CF:3C:B9:77:2A:0E:66:E0:37:6F:B7:81:E9:D4
            X509v3 Authority Key Identifier:
                keyid:C8:93:5F:DC:A5:02:8A:E8:20:9F:EC:82:AD:8A:E8:CF:B7:C6:E7:76

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/0/C8935FDCA5028AE8209FEC82AD8AE8CFB7C6E776.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/6e5d9611-fd33-488c-9aec-f4df2a25351e/fd77f55efe3a93c53ca3dc8a6f8374fe70fec5567dd1e8c855.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/0/323630323a666564323a373331373a3a2f34382d3438203d3e203533333536.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fed2:7317::/48

    Signature Algorithm: sha256WithRSAEncryption
         98:dc:0c:c4:2a:61:72:15:4f:54:22:bd:51:16:3b:82:a2:22:
         ca:03:f6:8d:db:8e:f8:e1:d9:74:14:0c:e3:41:37:c7:9a:3d:
         73:c1:08:78:ad:b8:b7:74:89:84:ed:6c:a2:90:1f:f2:e6:54:
         7d:40:73:87:bf:5b:bc:33:68:7c:39:5c:ee:c8:d8:45:f4:55:
         f1:6a:4a:97:61:a4:8e:b4:c3:ae:83:f7:07:30:70:fe:8a:6f:
         4c:ce:ce:a1:19:8e:06:73:85:36:e6:94:c5:c9:84:df:d8:99:
         57:b8:e4:ba:6d:0f:8f:73:93:5b:a8:24:28:ec:e2:07:21:1f:
         3e:18:1a:a5:10:51:69:3b:7c:c0:19:96:de:b6:70:42:b5:cc:
         69:bc:1a:cc:fd:7f:cf:7b:79:9b:fe:d9:3c:73:f3:cc:fb:22:
         b0:9f:d0:90:16:3e:43:a0:45:b6:9a:88:c9:01:93:c8:0c:ac:
         2c:27:c7:82:c4:a9:a6:51:16:ae:4b:54:fd:6e:53:43:c8:bf:
         c6:0d:1c:1f:da:47:bd:e9:ce:29:a6:47:2b:ae:fa:02:8e:80:
         ee:39:14:f8:30:27:a3:e0:ec:19:09:d0:a8:b0:3f:5c:c0:41:
         04:2d:b4:fb:3d:cf:54:d9:a0:b4:89:42:35:e1:6c:df:a1:cb:
         a4:39:14:f3
-----BEGIN CERTIFICATE-----
MIIFkzCCBHugAwIBAgIUQ+DrZf0IZk8T109jUT4IpK0q1WcwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyZmQ3N2Y1NWVmZTNhOTNjNTNjYTNkYzhhNmY4Mzc0ZmU3
MGZlYzU1NjdkZDFlOGM4NTUwHhcNMjExMjE2MDMyMTIwWhcNMjIxMjE1MDMyNjIw
WjAzMTEwLwYDVQQDEygxMzE2NTkwRUY5N0VDRjNDQjk3NzJBMEU2NkUwMzc2RkI3
ODFFOUQ0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxelHYSZ/fIba
aTeEznQA1aB8xsiWYskKQanoEHIFYdxDGNc0eyjhtFlendhuBgtJtliMZTingCq7
zi/DpKfIGdUQx8I7gMy99fLRCzLXcmRPh69BjXC5lgrLSPELjxKS/B5MLySW3kHX
Q+icFiy2u0fV8Pnt7Ijx9aqdArg3wDDiafXvn1VrQNWMOC35csve8hcuWLpRoCiH
VRUkGrtsFSl78+a/kVrjy0Re6KrX8PDYZbYQm9mkmVIVx+hW6KS0sCZM3mlFXxcH
4PMxr+4d6EaV5WUdS40UzR13V6tCDlFGBuohQGzmx9W5qwZb5DkpCNmpwr/NHfnn
KIuVtMWTxQIDAQABo4ICkzCCAo8wHQYDVR0OBBYEFBMWWQ75fs88uXcqDmbgN2+3
genUMB8GA1UdIwQYMBaAFMiTX9ylAoroIJ/sgq2K6M+3xud2MA4GA1UdDwEB/wQE
AwIHgDBxBgNVHR8EajBoMGagZKBihmByc3luYzovL3Jwa2kuYWRtaW4uZnJlZXJh
bmdlY2xvdWQuY29tL3JlcG8vRlJDLUNBLzAvQzg5MzVGRENBNTAyOEFFODIwOUZF
QzgyQUQ4QUU4Q0ZCN0M2RTc3Ni5jcmwwgfMGCCsGAQUFBwEBBIHmMIHjMIHgBggr
BgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4t
cnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvZjYw
YzlmMzItYTg3Yy00MzM5LWEyZjMtNjI5OWEzYjAyZTI5LzZlNWQ5NjExLWZkMzMt
NDg4Yy05YWVjLWY0ZGYyYTI1MzUxZS9mZDc3ZjU1ZWZlM2E5M2M1M2NhM2RjOGE2
ZjgzNzRmZTcwZmVjNTU2N2RkMWU4Yzg1NS5jZXIwgZUGCCsGAQUFBwELBIGIMIGF
MIGCBggrBgEFBQcwC4Z2cnN5bmM6Ly9ycGtpLmFkbWluLmZyZWVyYW5nZWNsb3Vk
LmNvbS9yZXBvL0ZSQy1DQS8wLzMyMzYzMDMyM2E2NjY1NjQzMjNhMzczMzMxMzcz
YTNhMmYzNDM4MmQzNDM4MjAzZDNlMjAzNTMzMzMzNTM2LnJvYTAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgL+
0nMXMA0GCSqGSIb3DQEBCwUAA4IBAQCY3AzEKmFyFU9UIr1RFjuCoiLKA/aN2474
4dl0FAzjQTfHmj1zwQh4rbi3dImE7WyikB/y5lR9QHOHv1u8M2h8OVzuyNhF9FXx
akqXYaSOtMOug/cHMHD+im9Mzs6hGY4Gc4U25pTFyYTf2JlXuOS6bQ+Pc5NbqCQo
7OIHIR8+GBqlEFFpO3zAGZbetnBCtcxpvBrM/X/Pe3mb/tk8c/PM+yKwn9CQFj5D
oEW2mojJAZPIDKwsJ8eCxKmmURauS1T9blNDyL/GDRwf2ke96c4ppkcrrvoCjoDu
ORT4MCej4OwZCdCosD9cwEEELbT7Pc9U2aC0iUI14WzfocukORTz
-----END CERTIFICATE-----