Route Origin Authorization

$ rpki-client -vvf rpki.admin.freerangecloud.com/repo/FRC-CA/0/323630323a666564323a6665303a3a2f34342d3435203d3e203533333536.roa
File:                     323630323a666564323a6665303a3a2f34342d3435203d3e203533333536.roa (raw, json)
Hash identifier:          /HYq/FanGwAdxjbO+eVdUZLq7xebxuGDxRpllD77yTA=
Subject key identifier:   47:4D:9B:72:58:64:B8:78:05:08:D7:40:BE:35:11:BF:A6:0D:B2:6A
Certificate issuer:       /CN=fd77f55efe3a93c53ca3dc8a6f8374fe70fec5567dd1e8c855
Certificate serial:       05AFCD93E5E42AA10E3937E0FF4EB78636B38DC9
Authority key identifier: C8:93:5F:DC:A5:02:8A:E8:20:9F:EC:82:AD:8A:E8:CF:B7:C6:E7:76
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/6e5d9611-fd33-488c-9aec-f4df2a25351e/fd77f55efe3a93c53ca3dc8a6f8374fe70fec5567dd1e8c855.cer
Subject info access:      rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/0/323630323a666564323a6665303a3a2f34342d3435203d3e203533333536.roa
Signing time:             Thu 16 Dec 2021 03:26:29 +0000
ROA not before:           Thu 16 Dec 2021 03:21:29 +0000
ROA not after:            Thu 15 Dec 2022 03:26:29 +0000
asID:                     53356
IP address blocks:        2602:fed2:fe0::/44 maxlen: 45

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            05:af:cd:93:e5:e4:2a:a1:0e:39:37:e0:ff:4e:b7:86:36:b3:8d:c9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fd77f55efe3a93c53ca3dc8a6f8374fe70fec5567dd1e8c855
        Validity
            Not Before: Dec 16 03:21:29 2021 GMT
            Not After : Dec 15 03:26:29 2022 GMT
        Subject: CN=474D9B725864B8780508D740BE3511BFA60DB26A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:5c:c6:30:37:99:4e:58:95:ad:b0:d5:14:1a:
                    c2:2b:e1:d1:7d:ba:8c:43:9f:c8:81:19:a2:c5:71:
                    af:d2:6d:73:50:ad:e8:6e:10:2e:e4:3a:66:f9:b7:
                    e0:46:81:5b:e3:2c:70:1f:78:66:f8:02:88:d9:61:
                    48:f4:78:1c:1f:d0:c2:21:c2:25:69:3f:c4:5c:30:
                    17:a0:6a:30:0f:8f:18:52:46:cb:58:85:7c:97:1e:
                    00:aa:6a:0f:00:74:8a:f6:6f:3e:6d:f1:0b:bf:73:
                    bd:63:ae:51:be:ed:2b:f2:d6:03:46:aa:19:ac:55:
                    08:d6:46:3c:92:e6:80:45:3b:d2:f5:52:bf:01:98:
                    b9:8a:e7:fc:d1:ae:43:e1:4c:a6:5c:d6:50:87:3f:
                    b9:56:60:fd:4e:28:a3:ff:28:09:73:75:b0:36:1b:
                    6a:91:0b:91:cc:bd:d4:1d:89:4f:d8:e2:84:3f:c3:
                    25:9d:6e:d6:53:88:69:8d:c3:20:8c:2c:c3:ee:ce:
                    a4:49:8d:85:97:8c:92:8f:b7:bc:4e:dd:28:98:4a:
                    87:40:5e:0a:f7:b8:a6:41:cc:43:e4:71:0f:02:ec:
                    a1:ab:1b:6e:df:f1:f4:f7:00:75:72:29:0a:56:e6:
                    11:82:02:3f:1b:70:31:6c:92:2f:41:f5:c9:89:9f:
                    a8:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                47:4D:9B:72:58:64:B8:78:05:08:D7:40:BE:35:11:BF:A6:0D:B2:6A
            X509v3 Authority Key Identifier:
                keyid:C8:93:5F:DC:A5:02:8A:E8:20:9F:EC:82:AD:8A:E8:CF:B7:C6:E7:76

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/0/C8935FDCA5028AE8209FEC82AD8AE8CFB7C6E776.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/6e5d9611-fd33-488c-9aec-f4df2a25351e/fd77f55efe3a93c53ca3dc8a6f8374fe70fec5567dd1e8c855.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/0/323630323a666564323a6665303a3a2f34342d3435203d3e203533333536.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fed2:fe0::/44

    Signature Algorithm: sha256WithRSAEncryption
         ad:2f:4a:47:4f:80:18:06:0e:24:6f:d6:db:bc:ae:24:60:a7:
         bd:00:c6:66:c1:f7:9e:00:3c:7d:31:bc:61:60:44:1c:fb:2a:
         71:73:b3:57:7d:94:b4:06:fd:26:9a:b7:9a:4f:6f:43:a4:14:
         a1:89:60:65:b1:8c:4e:0e:d7:f8:8f:ec:ab:50:3b:25:5d:45:
         a7:7b:42:b3:b9:be:83:2d:ca:4d:e0:e4:f7:9d:42:0d:8c:4b:
         b0:9a:e7:08:f0:12:f6:66:ee:dd:1e:eb:a4:62:83:19:89:69:
         da:fd:ce:2d:a6:1c:59:0d:da:87:0a:6e:e1:53:de:ec:80:6f:
         a6:b2:2d:cf:8a:d5:93:27:bc:4c:f8:c2:d8:d0:c7:f6:d6:c3:
         97:b0:3f:2f:61:75:df:c3:e3:15:6f:ac:f9:81:e0:e2:8f:7f:
         38:6a:76:2d:e4:18:f9:e3:6b:f6:f2:bc:8a:9a:b1:0c:e2:bd:
         a7:3e:1e:ba:b4:1c:09:13:61:55:78:cb:52:f5:97:9e:17:01:
         c0:6b:f3:bb:a0:db:bd:69:7a:3f:7e:be:62:19:64:bc:ef:13:
         7c:7d:84:0c:ab:d2:00:ab:76:8c:58:e7:16:43:93:49:84:2f:
         b3:22:2d:e3:ae:54:7a:e1:20:63:23:c4:a6:ae:a0:a2:d2:a2:
         fa:f4:1a:8a
-----BEGIN CERTIFICATE-----
MIIFkTCCBHmgAwIBAgIUBa/Nk+XkKqEOOTfg/063hjazjckwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyZmQ3N2Y1NWVmZTNhOTNjNTNjYTNkYzhhNmY4Mzc0ZmU3
MGZlYzU1NjdkZDFlOGM4NTUwHhcNMjExMjE2MDMyMTI5WhcNMjIxMjE1MDMyNjI5
WjAzMTEwLwYDVQQDEyg0NzREOUI3MjU4NjRCODc4MDUwOEQ3NDBCRTM1MTFCRkE2
MERCMjZBMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2lzGMDeZTliV
rbDVFBrCK+HRfbqMQ5/IgRmixXGv0m1zUK3obhAu5Dpm+bfgRoFb4yxwH3hm+AKI
2WFI9HgcH9DCIcIlaT/EXDAXoGowD48YUkbLWIV8lx4AqmoPAHSK9m8+bfELv3O9
Y65Rvu0r8tYDRqoZrFUI1kY8kuaARTvS9VK/AZi5iuf80a5D4UymXNZQhz+5VmD9
Tiij/ygJc3WwNhtqkQuRzL3UHYlP2OKEP8MlnW7WU4hpjcMgjCzD7s6kSY2Fl4yS
j7e8Tt0omEqHQF4K97imQcxD5HEPAuyhqxtu3/H09wB1cikKVuYRggI/G3AxbJIv
QfXJiZ+o4wIDAQABo4ICkTCCAo0wHQYDVR0OBBYEFEdNm3JYZLh4BQjXQL41Eb+m
DbJqMB8GA1UdIwQYMBaAFMiTX9ylAoroIJ/sgq2K6M+3xud2MA4GA1UdDwEB/wQE
AwIHgDBxBgNVHR8EajBoMGagZKBihmByc3luYzovL3Jwa2kuYWRtaW4uZnJlZXJh
bmdlY2xvdWQuY29tL3JlcG8vRlJDLUNBLzAvQzg5MzVGRENBNTAyOEFFODIwOUZF
QzgyQUQ4QUU4Q0ZCN0M2RTc3Ni5jcmwwgfMGCCsGAQUFBwEBBIHmMIHjMIHgBggr
BgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4t
cnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvZjYw
YzlmMzItYTg3Yy00MzM5LWEyZjMtNjI5OWEzYjAyZTI5LzZlNWQ5NjExLWZkMzMt
NDg4Yy05YWVjLWY0ZGYyYTI1MzUxZS9mZDc3ZjU1ZWZlM2E5M2M1M2NhM2RjOGE2
ZjgzNzRmZTcwZmVjNTU2N2RkMWU4Yzg1NS5jZXIwgZMGCCsGAQUFBwELBIGGMIGD
MIGABggrBgEFBQcwC4Z0cnN5bmM6Ly9ycGtpLmFkbWluLmZyZWVyYW5nZWNsb3Vk
LmNvbS9yZXBvL0ZSQy1DQS8wLzMyMzYzMDMyM2E2NjY1NjQzMjNhNjY2NTMwM2Ez
YTJmMzQzNDJkMzQzNTIwM2QzZTIwMzUzMzMzMzUzNi5yb2EwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAiBggrBgEFBQcBBwEB/wQTMBEwDwQCAAIwCQMHBCYC/tIP
4DANBgkqhkiG9w0BAQsFAAOCAQEArS9KR0+AGAYOJG/W27yuJGCnvQDGZsH3ngA8
fTG8YWBEHPsqcXOzV32UtAb9Jpq3mk9vQ6QUoYlgZbGMTg7X+I/sq1A7JV1Fp3tC
s7m+gy3KTeDk951CDYxLsJrnCPAS9mbu3R7rpGKDGYlp2v3OLaYcWQ3ahwpu4VPe
7IBvprItz4rVkye8TPjC2NDH9tbDl7A/L2F138PjFW+s+YHg4o9/OGp2LeQY+eNr
9vK8ipqxDOK9pz4eurQcCRNhVXjLUvWXnhcBwGvzu6DbvWl6P36+YhlkvO8TfH2E
DKvSAKt2jFjnFkOTSYQvsyIt465UeuEgYyPEpq6gotKi+vQaig==
-----END CERTIFICATE-----