Route Origin Authorization

$ rpki-client -vvf rpki.admin.freerangecloud.com/repo/FRC-CA/0/323630323a666564323a373331633a3a2f34382d3438203d3e203230343733.roa
File:                     323630323a666564323a373331633a3a2f34382d3438203d3e203230343733.roa (raw, json)
Hash identifier:          W/HW/c18l1vTNKR5wtTXQs4Nw8iAayaYtgkcBDguR8Q=
Subject key identifier:   81:FD:93:BF:4F:29:01:D7:13:66:83:3E:C9:E3:59:B0:3B:55:F0:8B
Certificate issuer:       /CN=fd77f55efe3a93c53ca3dc8a6f8374fe70fec5567dd1e8c855
Certificate serial:       465FC610EDAC869B530DF769DF20884E3C34745D
Authority key identifier: C8:93:5F:DC:A5:02:8A:E8:20:9F:EC:82:AD:8A:E8:CF:B7:C6:E7:76
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/6e5d9611-fd33-488c-9aec-f4df2a25351e/fd77f55efe3a93c53ca3dc8a6f8374fe70fec5567dd1e8c855.cer
Subject info access:      rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/0/323630323a666564323a373331633a3a2f34382d3438203d3e203230343733.roa
Signing time:             Thu 16 Dec 2021 03:26:24 +0000
ROA not before:           Thu 16 Dec 2021 03:21:24 +0000
ROA not after:            Thu 15 Dec 2022 03:26:24 +0000
asID:                     20473
IP address blocks:        2602:fed2:731c::/48 maxlen: 48

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            46:5f:c6:10:ed:ac:86:9b:53:0d:f7:69:df:20:88:4e:3c:34:74:5d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fd77f55efe3a93c53ca3dc8a6f8374fe70fec5567dd1e8c855
        Validity
            Not Before: Dec 16 03:21:24 2021 GMT
            Not After : Dec 15 03:26:24 2022 GMT
        Subject: CN=81FD93BF4F2901D71366833EC9E359B03B55F08B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:7e:7e:66:9c:50:ab:d8:ad:e1:3e:76:44:0b:
                    fc:a9:2c:a3:c1:ac:08:60:2e:35:20:4b:50:e8:71:
                    af:c0:c1:2a:0a:bf:19:25:28:99:89:b1:4f:c3:30:
                    7d:57:b6:9d:7a:ab:86:d6:61:74:fe:72:e2:bb:87:
                    27:51:85:f3:2b:60:b7:89:78:18:39:59:6c:f7:4a:
                    b0:22:b8:d3:34:a3:e1:77:03:91:16:ed:9f:e8:81:
                    d1:26:32:63:a4:43:95:a3:e9:10:3b:27:23:9b:78:
                    68:3d:a4:d9:ab:98:18:bd:61:12:6f:13:6f:97:3c:
                    f4:03:74:ad:fb:32:6c:44:b2:03:b6:8f:47:cd:9f:
                    0c:59:d4:26:f8:b6:4d:0e:be:b0:2f:0f:60:a2:51:
                    93:aa:fa:fa:c5:d5:9b:a6:07:43:52:75:b3:f9:18:
                    78:ae:d0:55:e5:15:b9:54:c3:18:6c:33:c3:a2:02:
                    2f:eb:17:a0:92:22:24:ac:52:6f:87:89:d8:85:65:
                    a5:a9:71:50:68:5e:84:6b:03:44:f4:d0:e9:49:82:
                    0f:7f:dc:5c:39:e7:11:5c:19:14:5f:ae:6b:92:88:
                    f2:b3:6a:9f:4d:d7:d7:ec:11:64:15:38:65:90:3b:
                    9c:53:fb:69:90:c9:56:c4:f9:ee:86:cb:cb:20:74:
                    16:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                81:FD:93:BF:4F:29:01:D7:13:66:83:3E:C9:E3:59:B0:3B:55:F0:8B
            X509v3 Authority Key Identifier:
                keyid:C8:93:5F:DC:A5:02:8A:E8:20:9F:EC:82:AD:8A:E8:CF:B7:C6:E7:76

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/0/C8935FDCA5028AE8209FEC82AD8AE8CFB7C6E776.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/6e5d9611-fd33-488c-9aec-f4df2a25351e/fd77f55efe3a93c53ca3dc8a6f8374fe70fec5567dd1e8c855.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/0/323630323a666564323a373331633a3a2f34382d3438203d3e203230343733.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fed2:731c::/48

    Signature Algorithm: sha256WithRSAEncryption
         a5:7a:28:42:07:f9:89:81:4b:a1:96:43:3a:31:f4:0c:ee:b7:
         c0:34:60:04:84:92:09:af:1b:50:87:d5:ce:44:a9:c6:11:18:
         73:cc:37:cf:5e:9a:17:18:9d:99:46:24:bc:92:21:b8:0b:af:
         d1:8e:99:ad:95:56:a1:b7:fd:81:e1:cb:2e:18:41:7c:f3:d4:
         36:2c:b1:84:10:88:3c:a7:1e:90:6f:b8:fe:ea:63:b5:74:24:
         58:d1:59:b6:1a:1b:e8:96:e4:b9:ae:d4:7b:62:0a:bc:93:2a:
         14:cc:1a:7c:31:ec:b3:73:3e:9e:3c:81:10:d7:75:74:01:4f:
         c2:d0:bf:95:f1:de:ce:6b:e2:cf:e4:22:14:18:2c:f9:75:1a:
         6f:2c:26:b8:30:09:88:99:27:f4:aa:4a:e6:7d:a7:4f:26:cc:
         8b:c0:ad:65:96:03:1c:af:72:23:be:b9:83:d6:38:1f:72:e2:
         b7:26:cf:31:6a:58:b9:5a:8a:d6:33:05:80:5a:3b:e3:94:b7:
         eb:5a:d4:bf:83:d0:56:db:a9:0f:5e:1b:46:a9:0b:52:27:09:
         86:05:a3:f2:45:7b:ad:65:d3:45:02:f1:f6:00:d4:40:01:56:
         78:f8:45:d3:25:19:03:38:d4:01:91:73:6d:a2:40:18:20:15:
         1a:f1:23:cc
-----BEGIN CERTIFICATE-----
MIIFkzCCBHugAwIBAgIURl/GEO2shptTDfdp3yCITjw0dF0wDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyZmQ3N2Y1NWVmZTNhOTNjNTNjYTNkYzhhNmY4Mzc0ZmU3
MGZlYzU1NjdkZDFlOGM4NTUwHhcNMjExMjE2MDMyMTI0WhcNMjIxMjE1MDMyNjI0
WjAzMTEwLwYDVQQDEyg4MUZEOTNCRjRGMjkwMUQ3MTM2NjgzM0VDOUUzNTlCMDNC
NTVGMDhCMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzH5+ZpxQq9it
4T52RAv8qSyjwawIYC41IEtQ6HGvwMEqCr8ZJSiZibFPwzB9V7adequG1mF0/nLi
u4cnUYXzK2C3iXgYOVls90qwIrjTNKPhdwORFu2f6IHRJjJjpEOVo+kQOycjm3ho
PaTZq5gYvWESbxNvlzz0A3St+zJsRLIDto9HzZ8MWdQm+LZNDr6wLw9golGTqvr6
xdWbpgdDUnWz+Rh4rtBV5RW5VMMYbDPDogIv6xegkiIkrFJvh4nYhWWlqXFQaF6E
awNE9NDpSYIPf9xcOecRXBkUX65rkojys2qfTdfX7BFkFThlkDucU/tpkMlWxPnu
hsvLIHQWjQIDAQABo4ICkzCCAo8wHQYDVR0OBBYEFIH9k79PKQHXE2aDPsnjWbA7
VfCLMB8GA1UdIwQYMBaAFMiTX9ylAoroIJ/sgq2K6M+3xud2MA4GA1UdDwEB/wQE
AwIHgDBxBgNVHR8EajBoMGagZKBihmByc3luYzovL3Jwa2kuYWRtaW4uZnJlZXJh
bmdlY2xvdWQuY29tL3JlcG8vRlJDLUNBLzAvQzg5MzVGRENBNTAyOEFFODIwOUZF
QzgyQUQ4QUU4Q0ZCN0M2RTc3Ni5jcmwwgfMGCCsGAQUFBwEBBIHmMIHjMIHgBggr
BgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4t
cnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvZjYw
YzlmMzItYTg3Yy00MzM5LWEyZjMtNjI5OWEzYjAyZTI5LzZlNWQ5NjExLWZkMzMt
NDg4Yy05YWVjLWY0ZGYyYTI1MzUxZS9mZDc3ZjU1ZWZlM2E5M2M1M2NhM2RjOGE2
ZjgzNzRmZTcwZmVjNTU2N2RkMWU4Yzg1NS5jZXIwgZUGCCsGAQUFBwELBIGIMIGF
MIGCBggrBgEFBQcwC4Z2cnN5bmM6Ly9ycGtpLmFkbWluLmZyZWVyYW5nZWNsb3Vk
LmNvbS9yZXBvL0ZSQy1DQS8wLzMyMzYzMDMyM2E2NjY1NjQzMjNhMzczMzMxNjMz
YTNhMmYzNDM4MmQzNDM4MjAzZDNlMjAzMjMwMzQzNzMzLnJvYTAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgL+
0nMcMA0GCSqGSIb3DQEBCwUAA4IBAQCleihCB/mJgUuhlkM6MfQM7rfANGAEhJIJ
rxtQh9XORKnGERhzzDfPXpoXGJ2ZRiS8kiG4C6/RjpmtlVaht/2B4csuGEF889Q2
LLGEEIg8px6Qb7j+6mO1dCRY0Vm2GhvoluS5rtR7Ygq8kyoUzBp8Meyzcz6ePIEQ
13V0AU/C0L+V8d7Oa+LP5CIUGCz5dRpvLCa4MAmImSf0qkrmfadPJsyLwK1llgMc
r3IjvrmD1jgfcuK3Js8xali5WorWMwWAWjvjlLfrWtS/g9BW26kPXhtGqQtSJwmG
BaPyRXutZdNFAvH2ANRAAVZ4+EXTJRkDONQBkXNtokAYIBUa8SPM
-----END CERTIFICATE-----