Route Origin Authorization

$ rpki-client -vvf rpki.admin.freerangecloud.com/repo/FRC-CA/3/323630323a666531333a6663303a3a2f34382d3438203d3e203533333536.roa
File:                     323630323a666531333a6663303a3a2f34382d3438203d3e203533333536.roa (raw, json)
Hash identifier:          +T9tVIIi8Wkn576S9wWFVRIZbi6asacmmqS1xt/U2FE=
Subject key identifier:   90:1E:35:CA:3A:90:E1:AA:A6:F5:20:74:28:F4:39:DC:7E:12:97:25
Certificate issuer:       /CN=9ab28fbc8c084d36cd26d308b16702e59e01fcba681bfec9ef
Certificate serial:       2AA67C5BBD72EDDB2E5C66F1401C4EABFDD86CBB
Authority key identifier: A0:DF:8E:B2:8D:12:F9:CD:F7:A6:8B:3D:C7:A5:65:76:74:8B:2E:54
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8bb7e416-db1b-4221-a6c0-947074a20f8f/9ab28fbc8c084d36cd26d308b16702e59e01fcba681bfec9ef.cer
Subject info access:      rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/3/323630323a666531333a6663303a3a2f34382d3438203d3e203533333536.roa
Signing time:             Thu 13 Oct 2022 01:48:08 +0000
ROA not before:           Thu 13 Oct 2022 01:43:08 +0000
ROA not after:            Thu 12 Oct 2023 01:48:08 +0000
asID:                     53356
IP address blocks:        2602:fe13:fc0::/48 maxlen: 48

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2a:a6:7c:5b:bd:72:ed:db:2e:5c:66:f1:40:1c:4e:ab:fd:d8:6c:bb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9ab28fbc8c084d36cd26d308b16702e59e01fcba681bfec9ef
        Validity
            Not Before: Oct 13 01:43:08 2022 GMT
            Not After : Oct 12 01:48:08 2023 GMT
        Subject: CN=901E35CA3A90E1AAA6F5207428F439DC7E129725
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e3:fb:da:23:b7:16:71:6b:18:97:46:bd:bb:0f:
                    ac:d6:72:2f:e6:43:21:70:a3:77:2b:02:a4:65:7b:
                    65:4a:2a:7b:d9:87:f3:92:16:17:66:76:9d:17:7c:
                    67:db:c6:a3:39:75:f0:91:31:53:02:b4:13:70:29:
                    42:06:e9:d9:8b:c8:c1:56:de:8e:db:8e:1a:b4:94:
                    03:04:aa:df:3c:97:9a:d9:02:7e:6f:92:db:34:a8:
                    b3:3d:84:3d:9f:6f:20:49:a4:c6:4c:8c:24:ce:63:
                    9f:88:c4:65:70:eb:32:67:cd:15:f2:cc:a0:a5:82:
                    a4:0f:56:67:27:e6:94:f5:55:20:2e:88:c1:82:11:
                    ee:e6:b3:54:96:0c:2b:02:a5:12:57:8a:12:10:dc:
                    8b:96:5b:25:47:85:91:da:c0:62:1e:58:bb:f0:34:
                    89:8d:c3:21:d1:da:1f:95:bb:6e:c1:13:ce:35:c5:
                    28:69:a9:96:b6:52:4b:99:f0:15:62:08:89:f8:0b:
                    fb:70:92:5e:22:75:b3:1f:b8:7d:89:b5:80:e7:31:
                    bd:ed:ed:de:f2:f6:6f:b3:2c:24:96:33:b9:a3:55:
                    47:d4:d4:59:50:ba:f2:30:a7:8f:da:df:48:fc:40:
                    40:32:fa:90:95:98:ec:a8:41:13:f6:c8:88:71:be:
                    0e:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                90:1E:35:CA:3A:90:E1:AA:A6:F5:20:74:28:F4:39:DC:7E:12:97:25
            X509v3 Authority Key Identifier:
                keyid:A0:DF:8E:B2:8D:12:F9:CD:F7:A6:8B:3D:C7:A5:65:76:74:8B:2E:54

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/3/A0DF8EB28D12F9CDF7A68B3DC7A56576748B2E54.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8bb7e416-db1b-4221-a6c0-947074a20f8f/9ab28fbc8c084d36cd26d308b16702e59e01fcba681bfec9ef.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/3/323630323a666531333a6663303a3a2f34382d3438203d3e203533333536.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fe13:fc0::/48

    Signature Algorithm: sha256WithRSAEncryption
         b1:23:a0:a1:d1:e6:02:6c:a1:8b:90:7d:9b:1f:4e:cf:0c:33:
         f6:cf:c4:67:b8:39:34:30:8b:cd:8c:ce:cc:92:f8:22:73:87:
         3e:7e:a5:37:10:8e:a8:9b:06:94:4a:f2:ce:ca:36:d0:0c:89:
         01:b5:52:c5:c7:d2:ae:ef:b2:23:c2:a2:c9:27:df:7e:9b:95:
         c0:a4:19:9a:9d:4b:86:07:1e:ad:c3:eb:24:47:b3:31:2c:84:
         6b:61:e0:b1:94:11:26:75:fd:2b:fb:ca:de:62:3a:39:29:9b:
         ef:d6:e5:8b:77:bd:d1:0a:b6:87:da:70:6b:35:4e:f8:17:57:
         03:94:4d:d3:b6:d6:a6:50:eb:fa:62:5c:33:22:55:66:4d:ab:
         5d:28:94:9d:d0:66:6a:db:ee:f2:d0:e9:56:10:a7:2f:ea:44:
         97:72:e1:9c:14:e6:62:b4:1c:a0:59:c4:46:c1:05:81:b5:0c:
         5a:9b:20:65:8f:01:ce:98:9b:49:a4:41:46:01:b2:af:11:f1:
         d5:f9:42:62:65:32:13:9f:a7:88:6c:33:59:91:4e:aa:e8:3a:
         da:79:f8:3c:92:1f:1c:d1:d1:1c:85:24:0e:da:c8:ee:eb:20:
         e2:fa:94:91:12:60:ea:0b:3d:e3:7b:8f:9e:9e:b0:bb:49:07:
         4b:a0:15:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----