Route Origin Authorization

$ rpki-client -vvf rpki.admin.freerangecloud.com/repo/FRC-CA/0/323630323a666564323a373730613a3a2f34382d3438203d3e203533333536.roa
File:                     323630323a666564323a373730613a3a2f34382d3438203d3e203533333536.roa (raw, json)
Hash identifier:          bcyqTIGn7+irCAH+AVxvgDvdExWQImWemxpizIDgk4g=
Subject key identifier:   AB:CC:53:01:7E:E1:47:06:E9:37:E1:0A:4E:7B:F9:15:09:12:AF:70
Certificate issuer:       /CN=fd77f55efe3a93c53ca3dc8a6f8374fe70fec5567dd1e8c855
Certificate serial:       37B20BD1DF639CBAF0D55866162505F2771E17A3
Authority key identifier: C8:93:5F:DC:A5:02:8A:E8:20:9F:EC:82:AD:8A:E8:CF:B7:C6:E7:76
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/6e5d9611-fd33-488c-9aec-f4df2a25351e/fd77f55efe3a93c53ca3dc8a6f8374fe70fec5567dd1e8c855.cer
Subject info access:      rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/0/323630323a666564323a373730613a3a2f34382d3438203d3e203533333536.roa
Signing time:             Thu 16 Dec 2021 03:26:24 +0000
ROA not before:           Thu 16 Dec 2021 03:21:24 +0000
ROA not after:            Thu 15 Dec 2022 03:26:24 +0000
asID:                     53356
IP address blocks:        2602:fed2:770a::/48 maxlen: 48

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            37:b2:0b:d1:df:63:9c:ba:f0:d5:58:66:16:25:05:f2:77:1e:17:a3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fd77f55efe3a93c53ca3dc8a6f8374fe70fec5567dd1e8c855
        Validity
            Not Before: Dec 16 03:21:24 2021 GMT
            Not After : Dec 15 03:26:24 2022 GMT
        Subject: CN=ABCC53017EE14706E937E10A4E7BF9150912AF70
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:bd:42:a5:3b:ff:5f:47:5f:d4:02:4d:13:b5:
                    93:65:47:09:bb:f3:77:90:72:cd:00:f0:26:81:d7:
                    72:cb:4b:32:ff:71:42:e6:6d:3a:dd:53:85:d5:cd:
                    3d:63:24:c4:75:9b:40:e7:a3:f7:53:22:bc:9f:3a:
                    e4:6b:62:3e:a7:7a:84:f8:06:e4:c9:78:d3:62:23:
                    aa:f5:3c:ae:f0:a3:e7:a0:a9:7d:16:61:c9:23:8b:
                    0e:aa:7e:03:eb:d7:bc:fb:a4:f6:a9:b0:88:26:53:
                    d3:72:70:50:91:02:d8:3f:d0:95:53:11:19:80:de:
                    70:1e:42:6f:1c:9e:1a:d5:f5:b4:a2:c4:2c:8e:9f:
                    6a:f8:ed:fe:cd:8c:07:f8:1e:a6:0f:02:89:74:f9:
                    b3:77:89:ae:49:19:3a:0b:1f:27:c2:a8:df:09:3e:
                    3f:56:49:64:99:7c:a0:ba:bf:17:7c:81:0d:72:f7:
                    f0:53:87:54:0e:c0:57:54:21:1b:81:eb:61:76:ba:
                    34:07:2f:2a:68:82:80:bf:89:8b:ec:e1:5b:50:75:
                    db:97:24:a0:13:63:54:c1:82:f4:fe:ee:0b:43:db:
                    93:30:7a:6c:cf:eb:7f:91:df:a5:af:3a:07:b4:5b:
                    f7:3e:12:0b:05:30:62:e6:99:93:ba:43:e5:ac:82:
                    c3:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AB:CC:53:01:7E:E1:47:06:E9:37:E1:0A:4E:7B:F9:15:09:12:AF:70
            X509v3 Authority Key Identifier:
                keyid:C8:93:5F:DC:A5:02:8A:E8:20:9F:EC:82:AD:8A:E8:CF:B7:C6:E7:76

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/0/C8935FDCA5028AE8209FEC82AD8AE8CFB7C6E776.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/6e5d9611-fd33-488c-9aec-f4df2a25351e/fd77f55efe3a93c53ca3dc8a6f8374fe70fec5567dd1e8c855.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/0/323630323a666564323a373730613a3a2f34382d3438203d3e203533333536.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fed2:770a::/48

    Signature Algorithm: sha256WithRSAEncryption
         22:34:ce:46:75:29:0c:45:03:53:29:e7:7c:98:d1:81:36:88:
         82:42:b7:cb:8d:b1:44:1a:74:f7:b1:7f:18:a2:23:ec:78:8d:
         9b:4a:dd:5c:d9:63:5f:b7:93:92:9d:a6:cb:4c:ed:0c:51:ab:
         0a:dc:07:9b:d2:c9:3d:9f:70:5c:70:1a:50:50:9e:2a:59:fa:
         04:8e:5a:b7:15:df:90:8a:3d:30:05:c7:d0:7d:39:74:56:5b:
         1a:c8:cd:7b:1c:07:9b:f1:2a:42:b4:e0:67:92:ab:c1:5d:91:
         34:ff:e8:71:a8:92:0b:dc:39:45:9d:88:a3:ca:aa:a7:6e:f7:
         54:66:7e:48:f8:da:a0:eb:5a:da:05:78:26:22:59:2a:57:d1:
         06:10:06:e4:73:60:bb:9e:d2:af:5d:20:6e:e3:34:58:fc:da:
         d2:dd:d6:82:08:15:8a:0b:d3:c7:8b:9b:7a:8b:26:6a:c6:ed:
         91:33:40:ca:be:9b:b6:42:2f:05:ff:0a:f1:82:ad:7a:99:7e:
         97:ea:06:7c:9e:72:bf:04:fd:92:22:bd:61:c3:ae:41:1c:ac:
         23:54:52:a2:df:0f:1e:9b:63:53:f3:47:ff:e8:a3:25:f4:3c:
         8a:9e:61:c4:a2:5b:1f:0c:5f:c5:61:07:f4:45:90:60:24:0a:
         01:7c:fc:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----