Route Origin Authorization

$ rpki-client -vvf rpki.admin.freerangecloud.com/repo/FRC-CA/3/323630323a666531333a6664303a3a2f34342d3434203d3e20333936353033.roa
File:                     323630323a666531333a6664303a3a2f34342d3434203d3e20333936353033.roa (raw, json)
Hash identifier:          GxcVDI3otglOxCAbWsZMIB1UtYYiCS+XGiYTQ2p/Eko=
Subject key identifier:   81:29:4A:EA:F5:B3:40:C6:2E:D2:EC:92:6A:B7:34:B0:C6:A7:62:2B
Certificate issuer:       /CN=9ab28fbc8c084d36cd26d308b16702e59e01fcba681bfec9ef
Certificate serial:       3173D83C8870D440AFA3822E6C437AC64E86DC88
Authority key identifier: A0:DF:8E:B2:8D:12:F9:CD:F7:A6:8B:3D:C7:A5:65:76:74:8B:2E:54
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8bb7e416-db1b-4221-a6c0-947074a20f8f/9ab28fbc8c084d36cd26d308b16702e59e01fcba681bfec9ef.cer
Subject info access:      rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/3/323630323a666531333a6664303a3a2f34342d3434203d3e20333936353033.roa
Signing time:             Thu 24 Nov 2022 04:07:38 +0000
ROA not before:           Thu 24 Nov 2022 04:02:38 +0000
ROA not after:            Thu 23 Nov 2023 04:07:38 +0000
asID:                     396503
IP address blocks:        2602:fe13:fd0::/44 maxlen: 44

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            31:73:d8:3c:88:70:d4:40:af:a3:82:2e:6c:43:7a:c6:4e:86:dc:88
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9ab28fbc8c084d36cd26d308b16702e59e01fcba681bfec9ef
        Validity
            Not Before: Nov 24 04:02:38 2022 GMT
            Not After : Nov 23 04:07:38 2023 GMT
        Subject: CN=81294AEAF5B340C62ED2EC926AB734B0C6A7622B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:06:f0:de:05:98:fd:44:a9:b5:68:70:c3:69:
                    35:1e:20:29:41:63:99:92:7e:b5:4e:70:a1:70:b3:
                    10:9b:d6:d5:17:70:c3:4b:75:e6:6d:df:08:4d:3f:
                    72:c0:2c:36:72:60:71:8d:9d:c2:43:ca:40:6d:ad:
                    ec:aa:cc:22:dc:b8:49:df:95:5c:19:7b:26:67:c6:
                    45:78:cb:52:d0:73:e7:ca:c3:71:57:3e:12:43:c0:
                    94:cb:5e:e5:b6:14:e1:8b:c8:17:32:37:73:b0:c0:
                    85:0c:4a:4c:3f:71:13:3a:06:6e:d9:74:cd:e1:36:
                    fa:6a:45:99:2c:fa:6e:7a:58:73:2e:ca:e1:30:65:
                    45:7d:75:9c:6a:fb:2f:a8:56:a6:63:b6:e9:2c:52:
                    8d:ea:84:c1:fe:e1:2f:eb:24:1e:6a:52:28:7e:14:
                    a2:8d:05:ba:f2:24:6f:ba:5c:3a:43:a0:f3:63:f4:
                    e0:59:dc:c8:6b:3a:20:60:7d:2d:0d:6f:c3:4b:86:
                    31:b4:d6:03:23:c0:94:bf:7c:b9:12:f8:70:74:f5:
                    e6:c5:aa:6e:3c:9f:1f:c4:97:7f:ef:7f:53:50:25:
                    e2:61:8e:6e:91:ae:67:eb:7d:5b:df:1d:b7:9a:e7:
                    27:23:ce:46:46:42:33:c5:7b:8b:bc:d8:10:62:e4:
                    9f:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                81:29:4A:EA:F5:B3:40:C6:2E:D2:EC:92:6A:B7:34:B0:C6:A7:62:2B
            X509v3 Authority Key Identifier:
                keyid:A0:DF:8E:B2:8D:12:F9:CD:F7:A6:8B:3D:C7:A5:65:76:74:8B:2E:54

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/3/A0DF8EB28D12F9CDF7A68B3DC7A56576748B2E54.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8bb7e416-db1b-4221-a6c0-947074a20f8f/9ab28fbc8c084d36cd26d308b16702e59e01fcba681bfec9ef.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/3/323630323a666531333a6664303a3a2f34342d3434203d3e20333936353033.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fe13:fd0::/44

    Signature Algorithm: sha256WithRSAEncryption
         3f:cf:39:6f:1c:69:fc:12:61:9b:4e:bb:e4:56:53:5a:87:e1:
         68:e7:2b:47:29:bf:00:13:eb:a6:a7:e7:a9:0c:a6:f4:43:f7:
         9d:ec:0f:9c:48:34:34:40:dd:b3:f2:fd:31:2c:3a:ea:ca:42:
         5d:9c:4f:32:59:4f:59:5c:ae:39:81:6f:e7:60:41:fc:52:ef:
         6e:8c:03:53:9b:d7:7d:c8:38:3e:e8:ad:85:72:24:d1:49:8c:
         8d:49:9d:7e:51:dc:26:f1:ff:7c:59:4b:08:d7:c9:dc:ae:89:
         c3:f8:66:c7:51:03:b0:60:f7:6f:75:c2:c7:81:c8:84:bf:b5:
         79:94:02:35:f1:91:78:57:2b:8b:da:ef:4d:4a:43:ff:a2:7c:
         c9:eb:2c:f4:96:40:07:00:d7:a7:ee:07:0b:5f:6b:79:90:57:
         11:bd:a9:99:43:d4:a5:c8:2f:d9:61:55:cb:0f:f5:bb:4b:5e:
         0b:0b:4e:ae:46:6c:89:35:bf:c4:57:80:d1:b5:30:1d:0f:46:
         87:cf:64:7f:ad:a0:6b:b4:ff:91:26:82:d2:36:23:a8:fd:4a:
         4f:c9:7f:8d:3a:36:41:4a:4b:50:96:e8:dc:fe:1d:ef:9e:8b:
         a7:e2:14:db:5e:d8:81:27:6c:6f:4f:4c:76:aa:8e:c4:a6:d6:
         3e:b9:d6:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----