Route Origin Authorization

$ rpki-client -vvf rpki.admin.freerangecloud.com/repo/FRC-CA/3/323630323a666531333a3830333a3a2f34382d3438203d3e203533333536.roa
File:                     323630323a666531333a3830333a3a2f34382d3438203d3e203533333536.roa (raw, json)
Hash identifier:          eCkJ0Wv2ZFi9rMy3ffInXRb3CpemsnVDXX3YfPU8tnA=
Subject key identifier:   9F:FA:C1:12:44:B6:E6:D9:E6:53:D5:E9:AB:40:A6:F5:C8:6D:8C:7D
Certificate issuer:       /CN=9ab28fbc8c084d36cd26d308b16702e59e01fcba681bfec9ef
Certificate serial:       1C6A7798551C585ED95ADE69FDC823E2E7677411
Authority key identifier: A0:DF:8E:B2:8D:12:F9:CD:F7:A6:8B:3D:C7:A5:65:76:74:8B:2E:54
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8bb7e416-db1b-4221-a6c0-947074a20f8f/9ab28fbc8c084d36cd26d308b16702e59e01fcba681bfec9ef.cer
Subject info access:      rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/3/323630323a666531333a3830333a3a2f34382d3438203d3e203533333536.roa
Signing time:             Thu 16 Dec 2021 03:26:31 +0000
ROA not before:           Thu 16 Dec 2021 03:21:31 +0000
ROA not after:            Thu 15 Dec 2022 03:26:31 +0000
asID:                     53356
IP address blocks:        2602:fe13:803::/48 maxlen: 48

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1c:6a:77:98:55:1c:58:5e:d9:5a:de:69:fd:c8:23:e2:e7:67:74:11
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9ab28fbc8c084d36cd26d308b16702e59e01fcba681bfec9ef
        Validity
            Not Before: Dec 16 03:21:31 2021 GMT
            Not After : Dec 15 03:26:31 2022 GMT
        Subject: CN=9FFAC11244B6E6D9E653D5E9AB40A6F5C86D8C7D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:37:fa:53:a8:67:49:9a:6d:3d:a6:81:1e:75:
                    fd:c1:ad:22:5d:e5:e2:f5:16:b6:63:f6:07:00:fe:
                    49:00:fb:5f:a3:40:b4:ec:8b:d0:87:c7:01:c0:74:
                    8b:04:19:eb:4a:a0:6d:bb:d8:dc:b4:d6:48:75:d8:
                    1c:07:41:de:f4:fd:73:df:24:21:9c:d1:68:39:0f:
                    6c:26:fa:ef:be:3c:71:2d:b4:2c:18:13:22:92:a9:
                    43:ec:57:c9:21:8d:00:52:6b:4b:22:fb:03:4b:39:
                    b3:2b:61:79:e3:b2:ac:5b:0a:e0:ae:b0:8c:97:6c:
                    d1:50:ad:37:5d:00:4f:85:b9:d0:0b:5a:86:48:36:
                    f8:4e:a8:07:f0:66:d7:08:c5:03:59:ff:58:18:5c:
                    d1:5e:4e:b2:7c:c9:d7:8f:c5:ec:2d:72:bb:15:4a:
                    cd:87:4d:58:55:8d:3a:c2:ea:30:e2:f4:7f:b7:fb:
                    a0:77:92:6d:17:ce:c1:de:ce:9a:b1:42:94:af:fe:
                    d3:0d:e5:09:e8:38:88:f4:ed:50:2d:58:42:e0:8f:
                    6b:06:80:3b:99:60:2d:df:6e:93:97:ec:e5:44:88:
                    ef:23:ba:3c:9d:78:0e:82:56:3f:9f:b7:72:5e:da:
                    ad:9d:f2:e8:f6:28:d6:d7:c8:f3:a3:f5:77:dd:c0:
                    21:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9F:FA:C1:12:44:B6:E6:D9:E6:53:D5:E9:AB:40:A6:F5:C8:6D:8C:7D
            X509v3 Authority Key Identifier:
                keyid:A0:DF:8E:B2:8D:12:F9:CD:F7:A6:8B:3D:C7:A5:65:76:74:8B:2E:54

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/3/A0DF8EB28D12F9CDF7A68B3DC7A56576748B2E54.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8bb7e416-db1b-4221-a6c0-947074a20f8f/9ab28fbc8c084d36cd26d308b16702e59e01fcba681bfec9ef.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/3/323630323a666531333a3830333a3a2f34382d3438203d3e203533333536.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fe13:803::/48

    Signature Algorithm: sha256WithRSAEncryption
         86:5e:a0:2e:0f:2b:20:82:57:60:4c:28:b0:10:5c:7e:cf:2f:
         28:69:62:18:10:fd:f3:67:cf:de:28:60:6a:a6:8d:84:36:b4:
         8d:8e:03:c9:d1:3e:8a:44:b5:bd:17:29:dd:74:f0:e9:bf:4a:
         80:26:f1:74:5a:d2:20:13:70:8f:b9:9c:fc:12:0f:90:08:0c:
         90:82:a7:0f:80:a8:74:7f:2a:ba:9f:fc:f8:a9:24:4e:bd:52:
         de:1b:c6:41:c4:b5:d9:ba:b0:32:1d:90:b8:bc:bc:14:77:dc:
         31:05:a3:9c:4b:aa:c0:e3:56:fd:72:04:9b:2e:e4:2a:9d:54:
         e8:13:f7:19:79:8e:70:cc:a1:d2:a5:af:5c:33:a7:ba:a1:34:
         16:ab:65:74:a1:53:98:f9:32:84:44:33:cd:8c:55:df:5f:27:
         24:9d:74:66:ea:30:93:76:d0:14:c3:5b:86:c0:d9:b4:ae:7c:
         38:cc:23:50:33:33:7e:65:60:5e:94:bc:30:a4:06:4b:59:d3:
         b7:ce:dd:2c:98:73:15:02:6f:a5:aa:6b:c2:d7:41:fe:32:2a:
         49:3d:64:de:51:e4:a2:f1:f8:e7:49:30:3f:74:38:38:88:d5:
         44:27:16:fc:aa:56:cf:e9:8b:75:05:21:e4:9f:cf:8c:38:e7:
         8f:f4:c3:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----