Route Origin Authorization

$ rpki-client -vvf rpki.admin.freerangecloud.com/repo/FRC-CA/3/323630323a666531333a6530303a3a2f34302d3438203d3e203430363736.roa
File:                     323630323a666531333a6530303a3a2f34302d3438203d3e203430363736.roa (raw, json)
Hash identifier:          BqpYdOBk2wbJ2a0PgYEg8IZlbPVWVBVns3oDvdArHV4=
Subject key identifier:   86:50:69:38:63:2B:A8:76:83:CA:48:3F:EB:40:21:DE:FB:3C:54:35
Certificate issuer:       /CN=9ab28fbc8c084d36cd26d308b16702e59e01fcba681bfec9ef
Certificate serial:       466A81BEFAEB8DCD7C16BBB01F8E9BDE7E02D17A
Authority key identifier: A0:DF:8E:B2:8D:12:F9:CD:F7:A6:8B:3D:C7:A5:65:76:74:8B:2E:54
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8bb7e416-db1b-4221-a6c0-947074a20f8f/9ab28fbc8c084d36cd26d308b16702e59e01fcba681bfec9ef.cer
Subject info access:      rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/3/323630323a666531333a6530303a3a2f34302d3438203d3e203430363736.roa
Signing time:             Thu 12 Jan 2023 17:24:14 +0000
ROA not before:           Thu 12 Jan 2023 17:19:14 +0000
ROA not after:            Thu 11 Jan 2024 17:24:14 +0000
asID:                     40676
IP address blocks:        2602:fe13:e00::/40 maxlen: 48

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            46:6a:81:be:fa:eb:8d:cd:7c:16:bb:b0:1f:8e:9b:de:7e:02:d1:7a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9ab28fbc8c084d36cd26d308b16702e59e01fcba681bfec9ef
        Validity
            Not Before: Jan 12 17:19:14 2023 GMT
            Not After : Jan 11 17:24:14 2024 GMT
        Subject: CN=86506938632BA87683CA483FEB4021DEFB3C5435
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:04:db:57:d8:10:f9:08:cd:71:c0:3f:48:9f:
                    e0:16:7e:d7:22:30:c7:0b:0a:e7:37:2f:5a:1d:67:
                    7c:99:5e:8c:a4:82:f2:cc:7b:68:9c:23:b4:f2:fc:
                    75:27:4c:89:c4:13:4d:a6:33:4e:36:f4:6e:1f:48:
                    4f:d5:f3:31:b3:8c:70:40:0c:0d:1a:d7:4d:7b:64:
                    f1:8b:48:58:5a:44:28:7a:d6:46:40:6c:fb:bc:64:
                    9a:88:be:91:b7:fc:cf:a8:04:57:80:21:8a:35:df:
                    84:82:cd:bc:d7:51:a6:24:88:72:1e:89:15:f2:df:
                    52:a9:39:34:c4:5a:a6:72:a6:f4:94:0c:f3:da:2b:
                    20:16:d9:c5:cc:28:be:e1:cc:fd:e2:0c:f2:a8:8a:
                    36:80:48:01:dd:0f:84:e6:2a:51:55:a3:87:bf:1c:
                    d2:57:92:17:50:7b:a0:67:7b:b5:71:e2:45:76:eb:
                    bf:e4:09:e7:f1:d2:4e:6e:ec:76:40:d8:11:c0:43:
                    ab:2f:fd:ef:df:c9:49:29:e1:90:73:fa:f9:0b:0e:
                    7f:7e:2c:60:1b:2f:ee:9e:6a:0c:aa:2a:60:ee:a8:
                    25:3c:46:1b:fa:bc:51:8f:b1:aa:ba:7d:46:d1:4f:
                    f7:84:c1:30:ba:d8:00:0f:af:ae:91:5d:26:51:ad:
                    a9:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                86:50:69:38:63:2B:A8:76:83:CA:48:3F:EB:40:21:DE:FB:3C:54:35
            X509v3 Authority Key Identifier:
                keyid:A0:DF:8E:B2:8D:12:F9:CD:F7:A6:8B:3D:C7:A5:65:76:74:8B:2E:54

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/3/A0DF8EB28D12F9CDF7A68B3DC7A56576748B2E54.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8bb7e416-db1b-4221-a6c0-947074a20f8f/9ab28fbc8c084d36cd26d308b16702e59e01fcba681bfec9ef.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/3/323630323a666531333a6530303a3a2f34302d3438203d3e203430363736.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fe13:e00::/40

    Signature Algorithm: sha256WithRSAEncryption
         91:e9:67:e8:a8:be:d5:7e:f9:44:d9:83:ab:54:9f:b5:bf:13:
         e7:1c:b3:42:0c:6d:7b:bf:c7:84:9f:c0:20:4c:a4:63:b6:06:
         e3:49:63:85:30:ec:4a:fe:19:08:bd:7c:63:44:7e:b6:82:98:
         6c:56:e0:54:cc:3c:57:02:cf:13:08:6b:56:29:05:c7:48:40:
         36:f6:dd:7e:cc:74:4e:5b:80:c1:09:33:d8:f6:c3:22:17:8b:
         14:97:04:01:07:be:62:b5:ce:a3:b7:8d:2f:82:7b:5f:2e:56:
         b9:4a:c7:f6:38:b0:63:4c:06:0a:21:9b:eb:3d:9a:4c:22:08:
         f2:7b:6f:6a:22:0e:b0:ab:eb:8a:34:02:47:96:88:df:03:4b:
         88:25:6c:f9:0f:99:55:60:48:1c:56:29:1d:f2:81:04:f9:f1:
         99:3d:3d:83:08:c5:f0:95:ad:cd:b8:3d:2b:a7:9f:8a:ee:e7:
         1c:78:85:a5:c8:2f:52:98:ad:79:b3:13:5d:38:93:d0:74:ce:
         5e:a1:fb:e2:6e:9f:20:49:83:14:e2:f5:02:fb:01:cf:10:0e:
         57:8f:66:5c:37:b1:c1:97:d3:d6:ad:cc:32:ed:07:9b:7c:b2:
         96:6b:c3:de:c9:7d:be:41:74:5d:cb:6a:46:e2:a9:08:37:f8:
         ea:c6:31:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----