Route Origin Authorization

$ rpki-client -vvf rpki.admin.freerangecloud.com/repo/FRC-CA/0/323630323a666564323a373331623a3a2f34382d3438203d3e20313432363335.roa
File:                     323630323a666564323a373331623a3a2f34382d3438203d3e20313432363335.roa (raw, json)
Hash identifier:          ngZ0eWIxqDZC2b7xrZN+aO1/JYIbDU4Opra+0JY9kQE=
Subject key identifier:   24:0F:F4:86:B0:25:6B:DE:AF:CB:39:0A:42:3F:CA:DE:18:69:7F:D7
Certificate issuer:       /CN=fd77f55efe3a93c53ca3dc8a6f8374fe70fec5567dd1e8c855
Certificate serial:       52E74758F573A7B3F9714D70EB6C26867F4F8198
Authority key identifier: C8:93:5F:DC:A5:02:8A:E8:20:9F:EC:82:AD:8A:E8:CF:B7:C6:E7:76
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/6e5d9611-fd33-488c-9aec-f4df2a25351e/fd77f55efe3a93c53ca3dc8a6f8374fe70fec5567dd1e8c855.cer
Subject info access:      rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/0/323630323a666564323a373331623a3a2f34382d3438203d3e20313432363335.roa
Signing time:             Thu 16 Dec 2021 03:26:18 +0000
ROA not before:           Thu 16 Dec 2021 03:21:18 +0000
ROA not after:            Thu 15 Dec 2022 03:26:18 +0000
asID:                     142635
IP address blocks:        2602:fed2:731b::/48 maxlen: 48

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            52:e7:47:58:f5:73:a7:b3:f9:71:4d:70:eb:6c:26:86:7f:4f:81:98
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fd77f55efe3a93c53ca3dc8a6f8374fe70fec5567dd1e8c855
        Validity
            Not Before: Dec 16 03:21:18 2021 GMT
            Not After : Dec 15 03:26:18 2022 GMT
        Subject: CN=240FF486B0256BDEAFCB390A423FCADE18697FD7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:56:63:75:dc:c8:fc:01:7e:f4:a9:5c:a3:ee:
                    cd:ea:76:cd:6d:89:eb:4a:99:cb:aa:4e:cc:5d:49:
                    fa:7e:85:56:69:81:d0:06:0d:fb:da:5a:19:58:c6:
                    46:64:cc:27:f1:ad:81:f4:11:72:24:51:47:1c:1a:
                    00:d1:24:73:9d:90:2d:28:7c:1c:a2:59:92:e7:0b:
                    f8:e4:0d:72:01:f0:84:c4:7f:08:ee:b3:ff:26:51:
                    e1:6c:28:5b:23:e3:40:79:86:e1:e0:70:8b:f0:72:
                    33:ae:11:9e:8e:c5:ca:ee:1e:e7:9c:c0:d9:fa:5f:
                    c7:cc:7b:15:61:86:26:43:7e:6c:e3:e0:16:87:00:
                    63:4c:59:fb:a9:a6:46:98:d9:93:1a:14:3e:03:da:
                    e7:e8:be:d0:68:eb:09:9a:20:0f:6e:15:3d:d5:92:
                    d3:98:30:6b:fa:10:66:6b:6d:fc:0f:97:39:b3:7d:
                    84:0b:25:8a:16:a4:0c:9d:a0:a0:2d:1b:ae:1d:84:
                    bd:19:04:a5:fb:b2:20:f5:34:82:7b:e1:d8:e3:fa:
                    fd:d7:fe:9c:a6:5e:ea:70:08:f7:3a:01:52:dc:2c:
                    f3:49:61:1b:20:be:a4:c9:dd:9f:8f:6b:5d:f1:2d:
                    44:7d:e1:df:6e:20:56:0b:37:14:1e:90:43:c6:1a:
                    3d:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                24:0F:F4:86:B0:25:6B:DE:AF:CB:39:0A:42:3F:CA:DE:18:69:7F:D7
            X509v3 Authority Key Identifier:
                keyid:C8:93:5F:DC:A5:02:8A:E8:20:9F:EC:82:AD:8A:E8:CF:B7:C6:E7:76

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/0/C8935FDCA5028AE8209FEC82AD8AE8CFB7C6E776.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/6e5d9611-fd33-488c-9aec-f4df2a25351e/fd77f55efe3a93c53ca3dc8a6f8374fe70fec5567dd1e8c855.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/0/323630323a666564323a373331623a3a2f34382d3438203d3e20313432363335.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fed2:731b::/48

    Signature Algorithm: sha256WithRSAEncryption
         71:0c:d8:46:0c:f3:d0:8d:2a:d9:48:78:bb:59:a7:ce:ec:cc:
         8a:7b:a5:67:1c:38:cd:9b:2c:8d:fd:75:87:89:7f:4a:0e:01:
         b5:53:2d:f3:dc:e6:bc:73:42:f3:67:ba:0a:24:97:0b:96:f1:
         61:1e:6c:77:e0:5d:0d:90:1f:c2:37:b2:3b:7d:4b:57:5a:2d:
         09:62:cd:56:71:0b:04:39:45:d2:8b:ff:a5:c0:b8:2e:fc:a5:
         ba:f2:73:a5:18:ad:f2:8c:12:53:64:43:b5:15:94:6f:71:c3:
         b9:2e:85:bf:65:40:49:17:8c:f2:60:bf:33:ae:9f:b4:ed:08:
         5c:ad:78:98:02:0b:83:d2:ee:ed:23:9c:73:d8:84:0d:7a:5a:
         6b:36:fc:f3:3f:47:32:fc:3a:92:88:e9:f3:96:ce:db:af:77:
         e6:7d:f9:88:ca:12:0f:37:e9:74:5e:99:80:85:41:50:1d:72:
         2d:1e:21:ca:20:cf:bc:f5:79:c6:de:77:ae:9d:e8:ea:9e:9a:
         af:79:ab:51:74:75:53:13:a4:de:c5:28:15:fb:35:6a:91:10:
         bd:7a:6c:32:a8:82:6f:7a:bb:39:13:66:27:e4:ef:c4:dc:10:
         3f:b0:b0:78:3a:30:22:96:3e:47:11:22:b9:63:51:46:67:10:
         76:5a:7a:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----