Route Origin Authorization

$ rpki-client -vvf rpki.admin.freerangecloud.com/repo/FRC-CA/0/323630323a666564323a373730653a3a2f34382d3438203d3e203533333536.roa
File:                     323630323a666564323a373730653a3a2f34382d3438203d3e203533333536.roa (raw, json)
Hash identifier:          xFwj/FoJcIp4GjTc9+GZta9lZmHK7Adi8k0lwvzeosc=
Subject key identifier:   34:63:EA:A4:F4:4C:FD:AE:5B:21:10:66:DB:49:1B:2C:93:E3:B1:A0
Certificate issuer:       /CN=fd77f55efe3a93c53ca3dc8a6f8374fe70fec5567dd1e8c855
Certificate serial:       56106A7E4AA1FECA81C3FAE201D2D8F2310D079E
Authority key identifier: C8:93:5F:DC:A5:02:8A:E8:20:9F:EC:82:AD:8A:E8:CF:B7:C6:E7:76
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/6e5d9611-fd33-488c-9aec-f4df2a25351e/fd77f55efe3a93c53ca3dc8a6f8374fe70fec5567dd1e8c855.cer
Subject info access:      rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/0/323630323a666564323a373730653a3a2f34382d3438203d3e203533333536.roa
Signing time:             Thu 16 Dec 2021 03:26:26 +0000
ROA not before:           Thu 16 Dec 2021 03:21:26 +0000
ROA not after:            Thu 15 Dec 2022 03:26:26 +0000
asID:                     53356
IP address blocks:        2602:fed2:770e::/48 maxlen: 48

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            56:10:6a:7e:4a:a1:fe:ca:81:c3:fa:e2:01:d2:d8:f2:31:0d:07:9e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fd77f55efe3a93c53ca3dc8a6f8374fe70fec5567dd1e8c855
        Validity
            Not Before: Dec 16 03:21:26 2021 GMT
            Not After : Dec 15 03:26:26 2022 GMT
        Subject: CN=3463EAA4F44CFDAE5B211066DB491B2C93E3B1A0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:e1:d2:5d:af:5c:34:6a:2c:71:4c:07:d2:4a:
                    c1:56:2d:72:bb:4b:13:cc:14:fb:fa:fa:d2:54:eb:
                    ce:e1:62:39:3c:cd:a0:79:0c:97:17:21:c2:e1:cb:
                    9c:a0:40:e0:0c:74:b8:23:98:7a:3e:41:2e:49:08:
                    97:5e:63:f0:47:fd:ae:7a:7a:bb:ca:8d:7f:e6:f8:
                    1e:73:02:d7:6e:05:a9:62:59:74:9b:e3:60:32:b1:
                    72:a2:71:4b:5d:0d:4f:4e:41:0d:51:d1:8c:33:5a:
                    9b:ea:6c:26:a0:f8:28:7c:e4:96:f1:d9:54:10:56:
                    1e:83:93:13:3b:39:36:db:13:7f:b4:90:63:e6:f3:
                    fe:d3:55:88:0b:88:33:cd:21:7c:36:ca:2b:fe:df:
                    95:2d:fa:25:06:30:8c:7a:97:87:3f:3f:d4:07:1d:
                    75:81:38:90:ad:11:d7:cd:f9:3a:75:9d:a4:62:b3:
                    10:0b:4d:b8:ea:f3:d1:5f:46:e0:e7:16:27:e4:ba:
                    21:4b:2b:fb:07:8c:79:87:a7:1c:e5:34:e7:9e:15:
                    4c:8e:6e:4e:06:5c:7f:f4:24:84:33:4e:59:79:78:
                    72:79:14:9c:dc:c9:19:5f:76:8b:4c:32:99:23:3c:
                    19:7f:10:b8:38:c1:ac:d5:6a:ea:b6:c3:12:35:79:
                    0d:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                34:63:EA:A4:F4:4C:FD:AE:5B:21:10:66:DB:49:1B:2C:93:E3:B1:A0
            X509v3 Authority Key Identifier:
                keyid:C8:93:5F:DC:A5:02:8A:E8:20:9F:EC:82:AD:8A:E8:CF:B7:C6:E7:76

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/0/C8935FDCA5028AE8209FEC82AD8AE8CFB7C6E776.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/6e5d9611-fd33-488c-9aec-f4df2a25351e/fd77f55efe3a93c53ca3dc8a6f8374fe70fec5567dd1e8c855.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/0/323630323a666564323a373730653a3a2f34382d3438203d3e203533333536.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fed2:770e::/48

    Signature Algorithm: sha256WithRSAEncryption
         be:83:1c:96:21:fa:95:9c:e4:51:bd:29:92:8d:35:db:e7:5b:
         b7:0b:6f:df:d0:d1:0c:b3:44:b6:3e:5c:9b:74:4a:06:e5:85:
         be:0c:59:5a:36:d3:9c:22:d8:6c:00:78:d2:26:25:be:84:38:
         ad:4d:a7:f7:ec:42:ea:0b:d1:fb:f8:da:88:5b:ff:bb:dc:b6:
         9c:7e:67:cf:74:c1:66:3e:64:41:c8:83:d8:3c:68:44:7a:f5:
         e8:f3:db:07:0b:01:45:d5:49:60:dc:8c:da:c0:f1:b0:b2:e4:
         68:55:6c:cb:ac:dc:17:14:68:b3:42:10:12:cc:9e:d0:a7:a2:
         17:a5:4a:41:95:f2:dc:6b:34:fe:01:23:c5:d4:a8:18:85:b9:
         3d:81:6e:b2:07:2a:be:08:29:84:3e:16:04:e6:d5:64:2c:b1:
         19:80:fc:b4:c7:d0:53:3a:6e:24:ba:f6:4b:cb:1e:e6:1b:fd:
         1d:3c:6d:d3:ed:bf:28:50:6f:39:5f:f0:e3:0f:04:09:c6:88:
         67:7d:75:ad:a2:1f:7c:5c:08:40:af:80:e0:40:a7:a1:1d:70:
         84:f2:a3:4a:ad:26:bc:57:2c:a6:51:56:ca:a7:18:1a:ea:4e:
         23:20:e7:4c:8f:93:6a:7d:a7:8e:1d:ca:71:b9:2c:7c:04:a1:
         7c:e1:2a:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----