Route Origin Authorization

$ rpki-client -vvf rpki.admin.freerangecloud.com/repo/FRC-CA/3/323630323a666531333a3261613a3a2f34382d3438203d3e20333936353033.roa
File:                     323630323a666531333a3261613a3a2f34382d3438203d3e20333936353033.roa (raw, json)
Hash identifier:          zHnuEe97BsUZ2eiT2ZNl0LQfQTje+ltoJVroHL8+8uQ=
Subject key identifier:   6A:20:88:C8:5E:63:B2:E1:49:77:CD:09:E9:DD:4E:28:FD:EE:D5:82
Certificate issuer:       /CN=9ab28fbc8c084d36cd26d308b16702e59e01fcba681bfec9ef
Certificate serial:       5BFB1F01092B134E8405502966CDA44B74048FD2
Authority key identifier: A0:DF:8E:B2:8D:12:F9:CD:F7:A6:8B:3D:C7:A5:65:76:74:8B:2E:54
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8bb7e416-db1b-4221-a6c0-947074a20f8f/9ab28fbc8c084d36cd26d308b16702e59e01fcba681bfec9ef.cer
Subject info access:      rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/3/323630323a666531333a3261613a3a2f34382d3438203d3e20333936353033.roa
Signing time:             Tue 31 Jan 2023 05:31:09 +0000
ROA not before:           Tue 31 Jan 2023 05:26:09 +0000
ROA not after:            Tue 30 Jan 2024 05:31:09 +0000
asID:                     396503
IP address blocks:        2602:fe13:2aa::/48 maxlen: 48

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5b:fb:1f:01:09:2b:13:4e:84:05:50:29:66:cd:a4:4b:74:04:8f:d2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9ab28fbc8c084d36cd26d308b16702e59e01fcba681bfec9ef
        Validity
            Not Before: Jan 31 05:26:09 2023 GMT
            Not After : Jan 30 05:31:09 2024 GMT
        Subject: CN=6A2088C85E63B2E14977CD09E9DD4E28FDEED582
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:de:ab:45:01:f9:a0:22:6f:cc:c1:7f:d1:a2:
                    a5:b8:8b:21:22:fc:8d:da:7f:27:bb:33:54:3c:71:
                    4c:9b:65:e3:8e:7e:b6:ae:74:38:04:0e:ab:ff:af:
                    9a:6b:87:26:cc:69:f7:c5:5b:dd:5e:34:dc:65:e5:
                    ec:53:4a:4d:30:6e:7c:f8:a0:8c:c7:70:cd:7d:98:
                    8a:da:70:a4:02:e4:50:e3:82:7b:d3:76:a9:ef:95:
                    1d:ec:8a:42:b2:2c:65:f6:52:5a:90:0b:7d:a5:67:
                    c6:d9:8c:ff:11:20:ae:57:5f:90:90:1a:c3:79:bc:
                    ac:5a:70:ab:98:9a:73:5d:d8:3a:04:80:31:71:a6:
                    41:78:cc:75:82:35:c8:39:56:f3:8c:80:b5:e9:7c:
                    3f:a6:11:ff:db:41:dc:65:0c:5b:07:01:ef:cd:7b:
                    35:6b:60:4e:a8:3a:71:85:7a:3a:f9:d7:43:d1:79:
                    ee:f7:52:a6:5f:bd:bb:d1:2e:c6:26:93:8a:f6:a5:
                    3d:ad:b7:56:22:e5:0c:6d:e7:d7:d9:85:f7:1c:a1:
                    46:de:d9:cd:ac:90:2d:05:0c:26:fc:a5:13:cd:20:
                    73:5f:a8:b6:ab:10:b4:05:5c:10:2c:ab:4c:81:26:
                    14:c1:5b:63:04:ce:90:c5:8b:58:a1:44:67:6f:5b:
                    39:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6A:20:88:C8:5E:63:B2:E1:49:77:CD:09:E9:DD:4E:28:FD:EE:D5:82
            X509v3 Authority Key Identifier:
                keyid:A0:DF:8E:B2:8D:12:F9:CD:F7:A6:8B:3D:C7:A5:65:76:74:8B:2E:54

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/3/A0DF8EB28D12F9CDF7A68B3DC7A56576748B2E54.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8bb7e416-db1b-4221-a6c0-947074a20f8f/9ab28fbc8c084d36cd26d308b16702e59e01fcba681bfec9ef.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/3/323630323a666531333a3261613a3a2f34382d3438203d3e20333936353033.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fe13:2aa::/48

    Signature Algorithm: sha256WithRSAEncryption
         04:fb:07:c1:49:26:d9:93:8b:24:5a:69:ea:6d:9b:7d:2b:83:
         80:1d:83:ff:9f:1f:7f:3b:7f:53:4e:c3:9f:11:f3:48:09:f2:
         7a:fc:ce:99:f8:a2:51:ac:33:5c:e1:0a:ec:08:01:e1:82:e2:
         0f:bf:20:fb:9d:11:8e:77:22:72:58:9e:a3:37:91:fe:f0:c0:
         dd:fe:d1:e1:33:d2:22:b4:00:14:2c:3b:c0:aa:32:ae:93:9d:
         7e:b8:1c:dd:b7:1b:9e:5e:0f:6c:89:1e:a8:7b:c9:d1:28:50:
         ff:75:07:b8:b0:79:44:d0:2b:68:38:84:16:16:36:1b:65:c3:
         c3:8f:0f:bc:14:78:2c:54:64:87:23:89:84:ff:68:a1:7b:dd:
         ee:1d:56:97:7c:05:bd:91:91:a5:6b:c9:e9:36:f6:a5:cf:85:
         74:46:d9:37:a0:a9:e1:9a:65:c6:e4:f9:a2:45:01:b3:8b:e7:
         99:ce:49:c2:53:5d:ba:49:8d:ff:30:30:82:4c:d8:86:08:be:
         96:b0:34:e5:01:fb:5b:a4:8a:c9:21:ae:6d:c6:a8:aa:c5:0f:
         3d:16:65:20:37:f3:d3:de:e1:9a:b8:31:e3:00:9f:c1:e2:bc:
         30:c1:95:62:8c:0f:e4:c6:d8:9e:76:19:a6:53:7b:be:88:6d:
         e0:e6:06:5f
-----BEGIN CERTIFICATE-----
MIIFkzCCBHugAwIBAgIUW/sfAQkrE06EBVApZs2kS3QEj9IwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyOWFiMjhmYmM4YzA4NGQzNmNkMjZkMzA4YjE2NzAyZTU5
ZTAxZmNiYTY4MWJmZWM5ZWYwHhcNMjMwMTMxMDUyNjA5WhcNMjQwMTMwMDUzMTA5
WjAzMTEwLwYDVQQDEyg2QTIwODhDODVFNjNCMkUxNDk3N0NEMDlFOURENEUyOEZE
RUVENTgyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAut6rRQH5oCJv
zMF/0aKluIshIvyN2n8nuzNUPHFMm2Xjjn62rnQ4BA6r/6+aa4cmzGn3xVvdXjTc
ZeXsU0pNMG58+KCMx3DNfZiK2nCkAuRQ44J703ap75Ud7IpCsixl9lJakAt9pWfG
2Yz/ESCuV1+QkBrDebysWnCrmJpzXdg6BIAxcaZBeMx1gjXIOVbzjIC16Xw/phH/
20HcZQxbBwHvzXs1a2BOqDpxhXo6+ddD0Xnu91KmX7270S7GJpOK9qU9rbdWIuUM
befX2YX3HKFG3tnNrJAtBQwm/KUTzSBzX6i2qxC0BVwQLKtMgSYUwVtjBM6QxYtY
oURnb1s5IQIDAQABo4ICkzCCAo8wHQYDVR0OBBYEFGogiMheY7LhSXfNCendTij9
7tWCMB8GA1UdIwQYMBaAFKDfjrKNEvnN96aLPcelZXZ0iy5UMA4GA1UdDwEB/wQE
AwIHgDBxBgNVHR8EajBoMGagZKBihmByc3luYzovL3Jwa2kuYWRtaW4uZnJlZXJh
bmdlY2xvdWQuY29tL3JlcG8vRlJDLUNBLzMvQTBERjhFQjI4RDEyRjlDREY3QTY4
QjNEQzdBNTY1NzY3NDhCMkU1NC5jcmwwgfMGCCsGAQUFBwEBBIHmMIHjMIHgBggr
BgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4t
cnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvNzZm
ZTExZDQtZDM1Mi00OTk0LThmNmMtZDZjOTFiMGI4NDE1LzhiYjdlNDE2LWRiMWIt
NDIyMS1hNmMwLTk0NzA3NGEyMGY4Zi85YWIyOGZiYzhjMDg0ZDM2Y2QyNmQzMDhi
MTY3MDJlNTllMDFmY2JhNjgxYmZlYzllZi5jZXIwgZUGCCsGAQUFBwELBIGIMIGF
MIGCBggrBgEFBQcwC4Z2cnN5bmM6Ly9ycGtpLmFkbWluLmZyZWVyYW5nZWNsb3Vk
LmNvbS9yZXBvL0ZSQy1DQS8zLzMyMzYzMDMyM2E2NjY1MzEzMzNhMzI2MTYxM2Ez
YTJmMzQzODJkMzQzODIwM2QzZTIwMzMzOTM2MzUzMDMzLnJvYTAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgL+
EwKqMA0GCSqGSIb3DQEBCwUAA4IBAQAE+wfBSSbZk4skWmnqbZt9K4OAHYP/nx9/
O39TTsOfEfNICfJ6/M6Z+KJRrDNc4QrsCAHhguIPvyD7nRGOdyJyWJ6jN5H+8MDd
/tHhM9IitAAULDvAqjKuk51+uBzdtxueXg9siR6oe8nRKFD/dQe4sHlE0CtoOIQW
FjYbZcPDjw+8FHgsVGSHI4mE/2ihe93uHVaXfAW9kZGla8npNvalz4V0Rtk3oKnh
mmXG5PmiRQGzi+eZzknCU126SY3/MDCCTNiGCL6WsDTlAftbpIrJIa5txqiqxQ89
FmUgN/PT3uGauDHjAJ/B4rwwwZVijA/kxtiedhmmU3u+iG3g5gZf
-----END CERTIFICATE-----