Route Origin Authorization

$ rpki-client -vvf rpki.admin.freerangecloud.com/repo/FRC-CA/0/323630323a666564323a6664303a3a2f34342d3438203d3e203439313334.roa
File:                     323630323a666564323a6664303a3a2f34342d3438203d3e203439313334.roa (raw, json)
Hash identifier:          lzdO4FsAavRhUZrlJw8pqswuyf3984GtdeFFCHB6Bas=
Subject key identifier:   05:D5:4A:CF:38:B3:E9:E8:4B:8A:D7:1D:9B:75:62:09:4C:2A:CB:92
Certificate issuer:       /CN=fd77f55efe3a93c53ca3dc8a6f8374fe70fec5567dd1e8c855
Certificate serial:       5431D3A6FE06A931049E69A85EE883D5F59961FA
Authority key identifier: C8:93:5F:DC:A5:02:8A:E8:20:9F:EC:82:AD:8A:E8:CF:B7:C6:E7:76
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/6e5d9611-fd33-488c-9aec-f4df2a25351e/fd77f55efe3a93c53ca3dc8a6f8374fe70fec5567dd1e8c855.cer
Subject info access:      rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/0/323630323a666564323a6664303a3a2f34342d3438203d3e203439313334.roa
Signing time:             Thu 16 Dec 2021 03:26:23 +0000
ROA not before:           Thu 16 Dec 2021 03:21:23 +0000
ROA not after:            Thu 15 Dec 2022 03:26:23 +0000
asID:                     49134
IP address blocks:        2602:fed2:fd0::/44 maxlen: 48

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            54:31:d3:a6:fe:06:a9:31:04:9e:69:a8:5e:e8:83:d5:f5:99:61:fa
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fd77f55efe3a93c53ca3dc8a6f8374fe70fec5567dd1e8c855
        Validity
            Not Before: Dec 16 03:21:23 2021 GMT
            Not After : Dec 15 03:26:23 2022 GMT
        Subject: CN=05D54ACF38B3E9E84B8AD71D9B7562094C2ACB92
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:4e:35:4c:da:e1:cf:11:e4:9f:7b:1c:00:de:
                    b6:91:f3:d0:40:c4:f1:9b:04:9d:2b:45:9f:e7:2c:
                    1a:d3:09:55:55:a8:b5:f7:b7:66:cf:37:2d:1c:be:
                    15:05:f8:8b:9f:c5:c9:18:0e:ed:49:c4:9a:f4:76:
                    10:9c:6a:17:4c:db:8a:81:72:5a:96:ea:27:1e:cc:
                    77:bf:ef:c7:1d:63:36:7c:6a:b0:2e:5a:f8:7f:6e:
                    9e:02:92:7d:dc:35:be:62:df:6f:2e:b0:be:ce:c6:
                    55:83:d3:02:8f:f5:8e:c7:ca:10:89:0a:75:b3:54:
                    42:06:f8:c8:04:44:3e:98:59:aa:c6:6e:b4:57:92:
                    23:f4:1f:4c:4e:08:67:f5:42:a3:53:d8:17:45:7e:
                    fe:ac:c7:ed:ae:89:f4:91:33:67:76:64:46:ae:20:
                    cf:b6:d3:9b:a6:03:33:21:c5:04:a8:05:c2:c5:89:
                    5b:d3:85:c4:ee:f4:8f:e5:d8:e6:8a:67:8b:d3:a4:
                    1e:57:e6:5b:3b:af:ac:04:47:3a:f8:cc:55:ce:84:
                    89:81:1b:b6:98:64:48:09:8a:f6:01:3f:88:c6:50:
                    f2:9b:f0:8f:18:94:09:8a:e3:5b:3c:35:a0:a9:72:
                    e6:48:c3:bc:11:0f:71:1b:37:e4:1e:8c:00:37:9e:
                    f9:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                05:D5:4A:CF:38:B3:E9:E8:4B:8A:D7:1D:9B:75:62:09:4C:2A:CB:92
            X509v3 Authority Key Identifier:
                keyid:C8:93:5F:DC:A5:02:8A:E8:20:9F:EC:82:AD:8A:E8:CF:B7:C6:E7:76

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/0/C8935FDCA5028AE8209FEC82AD8AE8CFB7C6E776.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/6e5d9611-fd33-488c-9aec-f4df2a25351e/fd77f55efe3a93c53ca3dc8a6f8374fe70fec5567dd1e8c855.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/0/323630323a666564323a6664303a3a2f34342d3438203d3e203439313334.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fed2:fd0::/44

    Signature Algorithm: sha256WithRSAEncryption
         33:e6:86:9d:d0:b9:11:ee:c4:64:84:1b:7b:e1:91:5b:e8:59:
         83:30:c8:c2:d0:d2:08:0c:8e:bb:b6:9a:3b:3f:c0:dd:69:eb:
         13:6c:d9:e3:a6:55:6f:23:fa:37:ae:25:3a:40:37:7a:8f:9f:
         04:4e:81:4d:89:85:cc:8d:02:3e:59:87:13:eb:67:99:3a:a4:
         18:2c:76:7b:e7:61:88:5b:dc:f2:53:b6:d1:a9:74:1a:6a:07:
         59:dc:a1:53:77:c1:37:97:22:60:6a:a6:bb:36:2b:45:02:b9:
         51:f1:b6:ef:2e:1f:00:d6:9a:1b:5f:ed:27:a6:6d:f6:1b:93:
         8c:94:98:ec:69:e6:28:5e:f5:c7:9f:59:8e:3c:57:14:bf:6d:
         8c:35:b5:1d:fc:40:7f:5f:31:f4:63:f8:2b:48:47:7a:7d:84:
         de:f9:67:aa:b6:ce:1a:08:3a:2e:3d:69:52:66:7a:88:01:7d:
         d4:d8:93:8d:c7:2c:1f:c8:2f:4f:12:35:e1:e6:6b:aa:4e:db:
         e7:c2:b3:ce:c9:98:d8:33:26:98:3a:8f:ba:54:6e:04:e9:8e:
         97:3f:b9:44:5b:86:ed:5b:eb:1e:af:ec:52:1f:ee:24:04:4d:
         61:43:3a:73:fb:bb:a1:9c:ab:6c:40:ab:4f:ff:68:dc:80:b9:
         82:20:39:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----