Route Origin Authorization

$ rpki-client -vvf rpki.admin.freerangecloud.com/repo/FRC-CA/0/323630323a666564323a6662303a3a2f34342d3436203d3e203533333536.roa
File:                     323630323a666564323a6662303a3a2f34342d3436203d3e203533333536.roa (raw, json)
Hash identifier:          SYq+aOLgAMiLUSjTeHSC+eiRsjR3hkQQtkztroBuNgI=
Subject key identifier:   D0:88:0C:9A:E3:08:E4:EE:9A:30:21:52:F8:F1:4C:E2:77:16:B1:5E
Certificate issuer:       /CN=fd77f55efe3a93c53ca3dc8a6f8374fe70fec5567dd1e8c855
Certificate serial:       4F3E093382697290CB79F37B55061A831AD95583
Authority key identifier: C8:93:5F:DC:A5:02:8A:E8:20:9F:EC:82:AD:8A:E8:CF:B7:C6:E7:76
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/6e5d9611-fd33-488c-9aec-f4df2a25351e/fd77f55efe3a93c53ca3dc8a6f8374fe70fec5567dd1e8c855.cer
Subject info access:      rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/0/323630323a666564323a6662303a3a2f34342d3436203d3e203533333536.roa
Signing time:             Thu 16 Dec 2021 03:26:23 +0000
ROA not before:           Thu 16 Dec 2021 03:21:23 +0000
ROA not after:            Thu 15 Dec 2022 03:26:23 +0000
asID:                     53356
IP address blocks:        2602:fed2:fb0::/44 maxlen: 46

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4f:3e:09:33:82:69:72:90:cb:79:f3:7b:55:06:1a:83:1a:d9:55:83
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fd77f55efe3a93c53ca3dc8a6f8374fe70fec5567dd1e8c855
        Validity
            Not Before: Dec 16 03:21:23 2021 GMT
            Not After : Dec 15 03:26:23 2022 GMT
        Subject: CN=D0880C9AE308E4EE9A302152F8F14CE27716B15E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ff:1f:2c:8a:19:66:5a:a0:73:12:83:e6:84:bb:
                    da:49:b6:25:3d:29:34:39:c1:cf:a8:3d:46:b3:aa:
                    45:64:6c:27:3d:3d:fd:61:03:39:6c:a0:5c:aa:07:
                    92:cd:b8:be:f0:5d:d5:0e:55:4e:3f:75:c0:2c:df:
                    3a:b3:41:88:37:51:cb:f0:1f:29:64:cf:bf:c3:73:
                    cd:7e:df:89:4a:ef:f7:3d:88:b1:43:23:99:cf:ba:
                    d2:86:4c:c4:24:a4:a7:c3:55:f4:60:33:45:39:cf:
                    2c:af:6f:a5:70:d4:5a:90:d9:95:60:af:c2:8c:89:
                    b3:59:92:2f:c5:8b:e6:f4:44:cd:29:cd:4d:2e:28:
                    38:6d:be:9c:7a:f0:ac:76:7e:3f:5e:5c:94:73:92:
                    2f:ce:3d:1f:e8:35:c3:74:34:73:a0:70:20:2f:ad:
                    7e:d3:a0:7c:58:1f:30:af:2f:9d:6c:39:10:9e:97:
                    51:a3:d4:3b:25:75:fa:2d:43:34:8d:75:65:1b:88:
                    6f:c5:cc:51:40:a9:da:ee:2f:13:c8:f8:f0:ce:b7:
                    0f:94:d7:d7:5f:76:e5:4c:f6:86:ac:0d:0b:a1:29:
                    97:88:86:33:6f:7b:bb:32:97:f7:b2:ee:cb:d6:e2:
                    f9:4b:92:a8:aa:7b:0a:6f:a0:da:9b:1d:4d:0e:b7:
                    03:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D0:88:0C:9A:E3:08:E4:EE:9A:30:21:52:F8:F1:4C:E2:77:16:B1:5E
            X509v3 Authority Key Identifier:
                keyid:C8:93:5F:DC:A5:02:8A:E8:20:9F:EC:82:AD:8A:E8:CF:B7:C6:E7:76

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/0/C8935FDCA5028AE8209FEC82AD8AE8CFB7C6E776.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/6e5d9611-fd33-488c-9aec-f4df2a25351e/fd77f55efe3a93c53ca3dc8a6f8374fe70fec5567dd1e8c855.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/0/323630323a666564323a6662303a3a2f34342d3436203d3e203533333536.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fed2:fb0::/44

    Signature Algorithm: sha256WithRSAEncryption
         ac:72:53:eb:89:4a:e2:6e:ff:7e:3d:6d:c3:7d:7c:17:c8:e1:
         04:4c:c0:b7:77:4d:de:4b:4b:68:c6:90:15:9e:74:a1:97:15:
         75:cd:3c:b1:8c:00:52:22:31:9c:28:fc:03:2c:23:2e:b3:5f:
         05:b4:91:1f:9b:26:29:19:0e:0e:79:e0:0a:c9:6e:86:f0:98:
         17:65:b8:0e:bf:52:fc:dd:68:00:d6:d5:18:b2:1b:dc:34:01:
         ee:f0:d5:c0:37:4d:71:b4:15:ad:37:43:29:33:f7:ce:cd:ec:
         15:22:b0:7a:a0:06:95:82:c6:3b:b2:15:7b:2c:f0:92:87:f7:
         b8:a5:2b:87:34:26:86:ae:2c:01:bd:b9:e1:3a:f8:f1:5e:3d:
         b5:92:d0:77:b3:fd:2c:55:ab:be:88:52:62:1c:0b:d0:e8:11:
         a9:6c:83:64:c3:c0:9b:75:ac:61:c8:2b:e0:ec:67:8e:b1:7f:
         27:d3:73:5e:8c:5d:0d:7a:99:02:a6:cf:5d:9e:e6:04:1c:36:
         48:46:d5:cd:e2:78:0d:f7:b7:6c:33:fb:f4:69:ed:71:14:6d:
         6a:00:e1:58:78:c1:60:92:f6:fc:05:e7:c3:de:eb:40:0d:4e:
         d8:a3:ec:05:4c:88:9f:8f:c0:df:c6:6c:bd:b6:39:11:1e:a4:
         5e:30:fa:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----