Route Origin Authorization

$ rpki-client -vvf rpki.admin.freerangecloud.com/repo/FRC-CA/0/323630323a666564323a373730383a3a2f34382d3438203d3e20323038313838.roa
File:                     323630323a666564323a373730383a3a2f34382d3438203d3e20323038313838.roa (raw, json)
Hash identifier:          uA7OuNAJaX3jWXRTwXljqWThx+M8ruq98YouzpW1TQs=
Subject key identifier:   8F:68:57:B9:89:3C:77:FC:AF:86:DC:A8:FE:97:61:A6:1B:E5:AB:BB
Certificate issuer:       /CN=fd77f55efe3a93c53ca3dc8a6f8374fe70fec5567dd1e8c855
Certificate serial:       64B1BFD699BB547E02693C6269FED62CDAC03DE2
Authority key identifier: C8:93:5F:DC:A5:02:8A:E8:20:9F:EC:82:AD:8A:E8:CF:B7:C6:E7:76
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/6e5d9611-fd33-488c-9aec-f4df2a25351e/fd77f55efe3a93c53ca3dc8a6f8374fe70fec5567dd1e8c855.cer
Subject info access:      rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/0/323630323a666564323a373730383a3a2f34382d3438203d3e20323038313838.roa
Signing time:             Thu 16 Dec 2021 03:26:18 +0000
ROA not before:           Thu 16 Dec 2021 03:21:18 +0000
ROA not after:            Thu 15 Dec 2022 03:26:18 +0000
asID:                     208188
IP address blocks:        2602:fed2:7708::/48 maxlen: 48

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            64:b1:bf:d6:99:bb:54:7e:02:69:3c:62:69:fe:d6:2c:da:c0:3d:e2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fd77f55efe3a93c53ca3dc8a6f8374fe70fec5567dd1e8c855
        Validity
            Not Before: Dec 16 03:21:18 2021 GMT
            Not After : Dec 15 03:26:18 2022 GMT
        Subject: CN=8F6857B9893C77FCAF86DCA8FE9761A61BE5ABBB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:b4:75:4f:c9:ba:f4:ee:72:a4:79:11:b0:b1:
                    4a:57:06:91:82:ab:98:c9:94:78:6a:0f:9f:1e:35:
                    f4:be:8d:0c:a8:19:54:b6:be:e1:f4:70:0e:83:52:
                    8c:e9:cc:08:bc:f2:1a:25:95:28:b7:af:d4:e5:cc:
                    00:21:41:a8:62:6f:0f:30:fc:6d:a9:91:e0:59:73:
                    88:97:17:0b:27:bf:f5:6e:3a:42:c4:af:dd:f2:ba:
                    31:4e:1f:e5:e8:ff:8b:cf:6b:81:90:76:a5:6c:1b:
                    a1:26:b2:e1:88:f4:f0:bc:cd:8a:70:39:ba:42:62:
                    65:62:1e:0a:e9:84:c9:6e:22:63:5b:d6:f8:0c:dd:
                    ca:b4:9b:a2:19:f5:77:e2:9a:7d:d7:ad:e8:31:ca:
                    39:9f:90:8e:66:64:0e:fc:a2:01:8b:a4:2c:24:18:
                    74:a6:94:37:b0:4b:3f:9f:99:ff:5d:32:a6:2d:7e:
                    b1:74:43:7f:8c:0f:fb:80:fe:01:fd:ef:d6:61:87:
                    20:c0:e3:07:07:ba:cd:99:e1:e9:2d:42:1b:3b:86:
                    07:c6:ff:00:2d:27:42:20:58:83:a5:8d:5f:a5:ee:
                    6c:1d:19:3c:0a:fc:98:ef:fc:52:c1:9c:0f:41:9c:
                    90:15:01:6a:60:77:70:06:c3:0a:34:d4:31:f6:72:
                    25:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8F:68:57:B9:89:3C:77:FC:AF:86:DC:A8:FE:97:61:A6:1B:E5:AB:BB
            X509v3 Authority Key Identifier:
                keyid:C8:93:5F:DC:A5:02:8A:E8:20:9F:EC:82:AD:8A:E8:CF:B7:C6:E7:76

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/0/C8935FDCA5028AE8209FEC82AD8AE8CFB7C6E776.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/6e5d9611-fd33-488c-9aec-f4df2a25351e/fd77f55efe3a93c53ca3dc8a6f8374fe70fec5567dd1e8c855.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/0/323630323a666564323a373730383a3a2f34382d3438203d3e20323038313838.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fed2:7708::/48

    Signature Algorithm: sha256WithRSAEncryption
         23:6f:0d:84:09:99:2b:e0:0f:6f:a6:67:27:c4:e0:56:39:ba:
         8e:5f:5f:f7:78:83:99:f5:8e:7f:60:90:43:d0:f0:5a:6c:27:
         65:f7:64:71:9b:c6:80:34:2c:b5:c5:d6:0f:7a:a9:0c:ef:f5:
         cd:1d:ff:d1:6f:6a:7e:f0:ca:ca:a2:60:b0:6d:28:41:72:e6:
         45:ff:b6:1c:d2:b4:df:2e:2a:82:b7:45:58:10:ec:ae:50:2c:
         24:03:3d:dc:8f:a6:77:3c:66:1c:91:b8:b9:b2:ea:fa:ea:d0:
         e2:63:e4:c7:6d:e7:83:62:76:8d:de:2e:dd:e9:19:bc:04:77:
         24:a7:07:54:a8:93:3f:6b:13:cc:34:a4:b5:9a:f3:4e:e2:6d:
         f9:a5:52:10:d1:56:69:92:2b:5e:4d:b1:75:5c:8c:df:ef:5d:
         ae:7b:61:f8:83:00:1e:83:bc:cf:11:03:60:ef:f3:52:8b:f0:
         5c:a0:be:48:3f:e0:3a:7b:50:02:fa:37:6e:c4:4f:de:24:d8:
         37:97:e2:e5:26:3f:45:e2:89:99:df:ea:33:f2:c8:88:ef:de:
         fb:9f:10:03:29:4e:45:31:6a:d9:d0:af:47:ce:11:f6:47:f0:
         09:bf:f9:b2:87:71:7f:be:a5:64:33:a8:31:7c:f0:59:97:1c:
         3c:75:ec:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----