Route Origin Authorization

$ rpki-client -vvf rpki.admin.freerangecloud.com/repo/FRC-CA/0/323630323a666564323a373730303a3a2f34382d3438203d3e203338313739.roa
File:                     323630323a666564323a373730303a3a2f34382d3438203d3e203338313739.roa (raw, json)
Hash identifier:          pG23DzvYGlZ4fccPzLWrw3Uv5IhRVBW/uVc5wf23CVM=
Subject key identifier:   8A:40:AF:8C:97:64:A9:E5:3A:1A:D9:9B:3A:5D:95:B6:0C:4A:F0:0F
Certificate issuer:       /CN=fd77f55efe3a93c53ca3dc8a6f8374fe70fec5567dd1e8c855
Certificate serial:       5EE814B49AD3C3ACF0C761A2343845F6EB50A900
Authority key identifier: C8:93:5F:DC:A5:02:8A:E8:20:9F:EC:82:AD:8A:E8:CF:B7:C6:E7:76
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/6e5d9611-fd33-488c-9aec-f4df2a25351e/fd77f55efe3a93c53ca3dc8a6f8374fe70fec5567dd1e8c855.cer
Subject info access:      rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/0/323630323a666564323a373730303a3a2f34382d3438203d3e203338313739.roa
Signing time:             Thu 16 Dec 2021 03:26:19 +0000
ROA not before:           Thu 16 Dec 2021 03:21:19 +0000
ROA not after:            Thu 15 Dec 2022 03:26:19 +0000
asID:                     38179
IP address blocks:        2602:fed2:7700::/48 maxlen: 48

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5e:e8:14:b4:9a:d3:c3:ac:f0:c7:61:a2:34:38:45:f6:eb:50:a9:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fd77f55efe3a93c53ca3dc8a6f8374fe70fec5567dd1e8c855
        Validity
            Not Before: Dec 16 03:21:19 2021 GMT
            Not After : Dec 15 03:26:19 2022 GMT
        Subject: CN=8A40AF8C9764A9E53A1AD99B3A5D95B60C4AF00F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:d0:db:70:18:45:fd:47:4c:98:2f:01:a2:d0:
                    29:fa:eb:26:91:4b:d1:81:8e:c1:09:9e:77:21:8c:
                    c8:79:67:67:a4:5e:41:d9:3a:43:96:4a:85:67:27:
                    9a:c8:c0:75:38:08:40:bd:21:8a:2b:d5:cf:da:42:
                    50:66:b2:0a:af:26:79:ce:4f:4b:70:23:8e:f1:31:
                    2e:83:61:5d:53:1a:93:89:38:9f:3b:5e:e3:2f:99:
                    95:3d:09:1c:65:b6:1a:9c:dd:ab:b3:cb:9f:58:62:
                    41:55:96:0d:39:f2:c6:58:fa:8c:eb:d9:67:54:8c:
                    16:b8:ab:e0:b9:db:2e:68:3f:b5:6a:d2:5c:4a:09:
                    f9:d0:67:24:99:0f:e4:61:21:ad:b5:57:90:f0:f6:
                    f4:40:1a:89:8b:df:3e:fb:5d:d6:31:39:59:78:dd:
                    53:0f:eb:99:a5:87:f2:c7:a4:54:d1:9e:96:b8:dd:
                    88:3a:43:ef:21:2d:76:43:35:ec:9f:e2:fe:cf:69:
                    f6:cd:5b:46:5e:74:49:17:da:47:20:64:0a:fc:1f:
                    01:7c:4f:26:3b:56:b3:03:be:60:8e:ae:18:8d:e8:
                    14:9a:f4:0b:82:d2:81:89:ec:08:f6:08:28:d0:d7:
                    b1:a9:f5:af:f0:57:a4:a8:52:2f:e7:32:50:1f:2e:
                    b8:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8A:40:AF:8C:97:64:A9:E5:3A:1A:D9:9B:3A:5D:95:B6:0C:4A:F0:0F
            X509v3 Authority Key Identifier:
                keyid:C8:93:5F:DC:A5:02:8A:E8:20:9F:EC:82:AD:8A:E8:CF:B7:C6:E7:76

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/0/C8935FDCA5028AE8209FEC82AD8AE8CFB7C6E776.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/6e5d9611-fd33-488c-9aec-f4df2a25351e/fd77f55efe3a93c53ca3dc8a6f8374fe70fec5567dd1e8c855.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/0/323630323a666564323a373730303a3a2f34382d3438203d3e203338313739.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fed2:7700::/48

    Signature Algorithm: sha256WithRSAEncryption
         20:5e:25:23:21:af:e7:f7:46:93:20:b4:6b:76:85:0e:e1:6e:
         c1:0c:82:66:3f:cd:cc:ad:d3:de:dd:a9:f0:72:f8:ba:e0:f9:
         64:1f:6f:15:2d:ec:a4:90:51:bf:bf:d6:be:01:10:3f:8e:43:
         db:2f:8c:88:84:aa:b2:fd:ed:bf:5f:eb:7b:36:33:09:c4:5f:
         09:37:0a:a3:f9:5b:35:e4:75:c5:85:ee:5e:9e:27:e5:ca:3d:
         9d:d5:ef:21:44:15:d9:61:c1:bd:af:df:21:a5:1d:99:e9:21:
         e4:fa:9b:23:97:48:ed:34:e1:5a:1e:c5:61:3f:f5:79:76:52:
         19:7b:cf:9a:64:e9:93:ad:b2:5a:71:11:cc:d1:ad:4d:16:56:
         8a:d4:01:e1:76:21:01:89:e8:19:36:88:5d:6a:01:1d:a6:af:
         87:b2:8c:ac:08:e7:ba:48:58:5d:29:7e:0d:2d:8c:86:8e:de:
         df:32:1d:e3:21:5c:65:a7:9c:81:bb:73:70:a7:de:a8:8a:eb:
         7b:00:a4:0d:ca:b8:bf:46:07:d6:03:10:b6:66:ef:c2:5e:ed:
         35:38:15:c6:21:60:1b:70:cb:6c:50:ab:71:26:4f:9d:e6:86:
         09:a6:08:6d:79:ac:85:6f:1b:05:3a:e9:9f:50:3b:9f:87:3c:
         27:1f:6a:46
-----BEGIN CERTIFICATE-----
MIIFkzCCBHugAwIBAgIUXugUtJrTw6zwx2GiNDhF9utQqQAwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyZmQ3N2Y1NWVmZTNhOTNjNTNjYTNkYzhhNmY4Mzc0ZmU3
MGZlYzU1NjdkZDFlOGM4NTUwHhcNMjExMjE2MDMyMTE5WhcNMjIxMjE1MDMyNjE5
WjAzMTEwLwYDVQQDEyg4QTQwQUY4Qzk3NjRBOUU1M0ExQUQ5OUIzQTVEOTVCNjBD
NEFGMDBGMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxdDbcBhF/UdM
mC8BotAp+usmkUvRgY7BCZ53IYzIeWdnpF5B2TpDlkqFZyeayMB1OAhAvSGKK9XP
2kJQZrIKryZ5zk9LcCOO8TEug2FdUxqTiTifO17jL5mVPQkcZbYanN2rs8ufWGJB
VZYNOfLGWPqM69lnVIwWuKvgudsuaD+1atJcSgn50GckmQ/kYSGttVeQ8Pb0QBqJ
i98++13WMTlZeN1TD+uZpYfyx6RU0Z6WuN2IOkPvIS12QzXsn+L+z2n2zVtGXnRJ
F9pHIGQK/B8BfE8mO1azA75gjq4YjegUmvQLgtKBiewI9ggo0NexqfWv8FekqFIv
5zJQHy64TwIDAQABo4ICkzCCAo8wHQYDVR0OBBYEFIpAr4yXZKnlOhrZmzpdlbYM
SvAPMB8GA1UdIwQYMBaAFMiTX9ylAoroIJ/sgq2K6M+3xud2MA4GA1UdDwEB/wQE
AwIHgDBxBgNVHR8EajBoMGagZKBihmByc3luYzovL3Jwa2kuYWRtaW4uZnJlZXJh
bmdlY2xvdWQuY29tL3JlcG8vRlJDLUNBLzAvQzg5MzVGRENBNTAyOEFFODIwOUZF
QzgyQUQ4QUU4Q0ZCN0M2RTc3Ni5jcmwwgfMGCCsGAQUFBwEBBIHmMIHjMIHgBggr
BgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4t
cnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvZjYw
YzlmMzItYTg3Yy00MzM5LWEyZjMtNjI5OWEzYjAyZTI5LzZlNWQ5NjExLWZkMzMt
NDg4Yy05YWVjLWY0ZGYyYTI1MzUxZS9mZDc3ZjU1ZWZlM2E5M2M1M2NhM2RjOGE2
ZjgzNzRmZTcwZmVjNTU2N2RkMWU4Yzg1NS5jZXIwgZUGCCsGAQUFBwELBIGIMIGF
MIGCBggrBgEFBQcwC4Z2cnN5bmM6Ly9ycGtpLmFkbWluLmZyZWVyYW5nZWNsb3Vk
LmNvbS9yZXBvL0ZSQy1DQS8wLzMyMzYzMDMyM2E2NjY1NjQzMjNhMzczNzMwMzAz
YTNhMmYzNDM4MmQzNDM4MjAzZDNlMjAzMzM4MzEzNzM5LnJvYTAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgL+
0ncAMA0GCSqGSIb3DQEBCwUAA4IBAQAgXiUjIa/n90aTILRrdoUO4W7BDIJmP83M
rdPe3anwcvi64PlkH28VLeykkFG/v9a+ARA/jkPbL4yIhKqy/e2/X+t7NjMJxF8J
Nwqj+Vs15HXFhe5eniflyj2d1e8hRBXZYcG9r98hpR2Z6SHk+psjl0jtNOFaHsVh
P/V5dlIZe8+aZOmTrbJacRHM0a1NFlaK1AHhdiEBiegZNohdagEdpq+HsoysCOe6
SFhdKX4NLYyGjt7fMh3jIVxlp5yBu3Nwp96oiut7AKQNyri/RgfWAxC2Zu/CXu01
OBXGIWAbcMtsUKtxJk+d5oYJpghteayFbxsFOumfUDufhzwnH2pG
-----END CERTIFICATE-----