Route Origin Authorization

$ rpki-client -vvf rpki.admin.freerangecloud.com/repo/FRC-CA/0/323630323a666564323a373730363a3a2f34382d3438203d3e203533333536.roa
File:                     323630323a666564323a373730363a3a2f34382d3438203d3e203533333536.roa (raw, json)
Hash identifier:          jRtuZQxDrNmwZ/8d6/Z0cx4cpjlyERNOq2lE1LSqEkc=
Subject key identifier:   81:4E:40:AC:73:36:DC:65:8F:4F:79:0F:A1:26:37:10:51:35:07:CE
Certificate issuer:       /CN=fd77f55efe3a93c53ca3dc8a6f8374fe70fec5567dd1e8c855
Certificate serial:       7A48336A294DFA7CD920D1D8C735FB27D7428CD5
Authority key identifier: C8:93:5F:DC:A5:02:8A:E8:20:9F:EC:82:AD:8A:E8:CF:B7:C6:E7:76
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/6e5d9611-fd33-488c-9aec-f4df2a25351e/fd77f55efe3a93c53ca3dc8a6f8374fe70fec5567dd1e8c855.cer
Subject info access:      rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/0/323630323a666564323a373730363a3a2f34382d3438203d3e203533333536.roa
Signing time:             Thu 16 Dec 2021 03:26:29 +0000
ROA not before:           Thu 16 Dec 2021 03:21:29 +0000
ROA not after:            Thu 15 Dec 2022 03:26:29 +0000
asID:                     53356
IP address blocks:        2602:fed2:7706::/48 maxlen: 48

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7a:48:33:6a:29:4d:fa:7c:d9:20:d1:d8:c7:35:fb:27:d7:42:8c:d5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fd77f55efe3a93c53ca3dc8a6f8374fe70fec5567dd1e8c855
        Validity
            Not Before: Dec 16 03:21:29 2021 GMT
            Not After : Dec 15 03:26:29 2022 GMT
        Subject: CN=814E40AC7336DC658F4F790FA1263710513507CE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:ed:07:10:69:79:8d:7e:92:e3:db:50:fe:97:
                    fe:22:c5:ad:1d:a9:2e:cd:6f:ee:db:b4:88:ed:45:
                    eb:2e:ee:4e:11:9c:2b:af:02:14:a7:ca:9c:c3:77:
                    f9:5b:53:8c:cc:9e:6d:12:b5:9b:61:7e:16:30:32:
                    6a:3f:4e:a5:0b:cc:58:d1:c9:fd:83:92:b7:23:ff:
                    bb:ca:29:94:85:1f:c2:51:c6:04:1b:39:e0:da:3f:
                    41:83:4a:c5:c9:0b:ea:a3:c9:0e:d8:fc:30:39:aa:
                    64:16:67:36:2c:75:ed:fa:0c:93:7a:4f:dd:93:6e:
                    d3:a7:ca:26:86:28:e9:b9:6f:85:06:82:df:27:ff:
                    70:19:d2:75:24:16:57:a5:58:63:3f:5a:d5:23:5b:
                    b9:46:99:af:6d:2c:02:2e:72:0b:b2:0e:80:41:8d:
                    49:9f:79:96:f9:4a:19:8e:2e:24:38:7c:ed:1c:0e:
                    b4:1b:e7:be:82:eb:8d:aa:bf:e6:60:c5:92:b5:7a:
                    df:82:2b:f8:db:39:1a:5c:87:d6:cf:44:0d:42:26:
                    57:48:67:2e:19:7d:bc:d0:0d:24:0e:be:fb:27:f2:
                    fa:7e:0c:30:36:64:63:69:4d:36:16:4d:fb:30:2b:
                    ec:1d:bf:c1:75:48:8f:39:57:32:f6:6e:5e:f0:7d:
                    8d:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                81:4E:40:AC:73:36:DC:65:8F:4F:79:0F:A1:26:37:10:51:35:07:CE
            X509v3 Authority Key Identifier:
                keyid:C8:93:5F:DC:A5:02:8A:E8:20:9F:EC:82:AD:8A:E8:CF:B7:C6:E7:76

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/0/C8935FDCA5028AE8209FEC82AD8AE8CFB7C6E776.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/6e5d9611-fd33-488c-9aec-f4df2a25351e/fd77f55efe3a93c53ca3dc8a6f8374fe70fec5567dd1e8c855.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/0/323630323a666564323a373730363a3a2f34382d3438203d3e203533333536.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fed2:7706::/48

    Signature Algorithm: sha256WithRSAEncryption
         0b:9f:29:5f:a3:a5:62:48:aa:54:d5:cf:c0:dc:e1:b1:e1:37:
         f7:be:80:f4:a2:64:f1:30:0a:58:45:c8:05:2e:a1:52:13:50:
         07:b6:a2:75:00:6a:a0:75:81:e2:a3:9b:3e:bc:25:8d:a3:1f:
         88:f8:e7:7f:d9:f2:38:a0:8a:20:7c:1d:2e:ca:33:13:86:67:
         1c:69:81:57:4a:11:72:73:f7:88:28:22:17:6b:63:7f:ca:13:
         c9:38:eb:e8:1c:85:c3:f4:93:16:89:33:34:31:5f:d5:34:52:
         36:d1:42:59:62:6a:90:2d:ca:67:a7:db:02:62:61:cc:40:44:
         19:45:0b:7c:99:6d:78:3f:be:43:ef:82:55:79:df:40:ed:85:
         07:fb:c2:36:26:e0:ca:aa:84:01:cb:75:36:5f:4b:f5:20:37:
         0f:f8:7e:02:ab:2f:fb:f3:09:1b:f7:10:f8:d7:ab:bc:9c:15:
         a1:95:ba:c8:4a:95:bd:df:8c:ef:67:2a:a1:4b:9e:dc:d3:f3:
         3b:b9:3b:88:66:7e:c0:df:0d:5d:37:01:19:ea:51:fc:53:22:
         57:af:08:27:59:92:13:3f:22:b1:53:60:b7:91:42:aa:e3:62:
         c8:a4:e9:ef:4c:ba:20:97:69:95:b0:55:2a:f3:06:4e:97:41:
         05:54:9d:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----