Route Origin Authorization

$ rpki-client -vvf rpki.admin.freerangecloud.com/repo/FRC-CA/3/323630323a666531333a6666303a3a2f34342d3434203d3e203533333536.roa
File:                     323630323a666531333a6666303a3a2f34342d3434203d3e203533333536.roa (raw, json)
Hash identifier:          4dK7Qj8LdonisKAjvVcJnIzQ3RQxtVMRrhIGcasIURc=
Subject key identifier:   9C:1D:69:0C:F9:05:C5:8A:25:1A:1B:86:CF:BF:D1:73:C9:93:CC:E1
Certificate issuer:       /CN=9ab28fbc8c084d36cd26d308b16702e59e01fcba681bfec9ef
Certificate serial:       580D641CEF38C4AF8886D64E6273B5565BCDA009
Authority key identifier: A0:DF:8E:B2:8D:12:F9:CD:F7:A6:8B:3D:C7:A5:65:76:74:8B:2E:54
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8bb7e416-db1b-4221-a6c0-947074a20f8f/9ab28fbc8c084d36cd26d308b16702e59e01fcba681bfec9ef.cer
Subject info access:      rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/3/323630323a666531333a6666303a3a2f34342d3434203d3e203533333536.roa
Signing time:             Wed 30 Nov 2022 03:53:07 +0000
ROA not before:           Wed 30 Nov 2022 03:48:07 +0000
ROA not after:            Wed 29 Nov 2023 03:53:07 +0000
asID:                     53356
IP address blocks:        2602:fe13:ff0::/44 maxlen: 44

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            58:0d:64:1c:ef:38:c4:af:88:86:d6:4e:62:73:b5:56:5b:cd:a0:09
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9ab28fbc8c084d36cd26d308b16702e59e01fcba681bfec9ef
        Validity
            Not Before: Nov 30 03:48:07 2022 GMT
            Not After : Nov 29 03:53:07 2023 GMT
        Subject: CN=9C1D690CF905C58A251A1B86CFBFD173C993CCE1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:16:44:d9:88:c8:95:19:8d:b3:a6:25:df:a5:
                    69:84:a6:39:9d:31:11:b8:53:2c:c3:76:f9:b4:4d:
                    2d:33:f8:ea:cc:5d:51:52:10:f2:11:8c:a1:4e:8e:
                    08:45:84:c1:c3:1b:fc:67:08:ef:53:cc:76:9d:94:
                    bd:35:d3:69:cc:43:0e:07:22:79:e0:61:ae:78:15:
                    c1:01:b9:67:9c:8d:97:06:3d:bf:47:7a:12:56:94:
                    5b:eb:b9:a9:68:ca:66:7b:71:ec:30:ce:6c:ee:53:
                    2a:af:8b:43:a0:a5:d2:bc:1c:4c:5a:ac:48:00:1b:
                    b2:c0:88:aa:5a:35:34:93:af:17:52:d7:8e:56:2c:
                    49:ce:4c:73:b3:ad:1a:53:15:58:2b:7a:59:79:5f:
                    aa:21:44:70:87:c3:c9:bc:ff:58:b7:b4:32:a3:eb:
                    f2:b0:c4:da:e6:ea:72:47:da:b8:ab:a6:fc:b2:3e:
                    14:14:df:bc:41:c2:b4:d9:9d:1f:3b:b7:c8:ee:1c:
                    58:e4:85:8f:97:a1:8f:98:7c:77:d4:f6:aa:e8:45:
                    97:e2:23:56:00:bb:cb:29:3b:37:41:6d:25:7c:b5:
                    17:a9:92:a4:17:14:40:9d:50:61:4e:a3:2f:ef:cd:
                    0a:ab:75:40:04:10:c5:38:8d:b3:f9:64:83:d4:20:
                    80:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9C:1D:69:0C:F9:05:C5:8A:25:1A:1B:86:CF:BF:D1:73:C9:93:CC:E1
            X509v3 Authority Key Identifier:
                keyid:A0:DF:8E:B2:8D:12:F9:CD:F7:A6:8B:3D:C7:A5:65:76:74:8B:2E:54

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/3/A0DF8EB28D12F9CDF7A68B3DC7A56576748B2E54.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8bb7e416-db1b-4221-a6c0-947074a20f8f/9ab28fbc8c084d36cd26d308b16702e59e01fcba681bfec9ef.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/3/323630323a666531333a6666303a3a2f34342d3434203d3e203533333536.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fe13:ff0::/44

    Signature Algorithm: sha256WithRSAEncryption
         98:d2:c6:18:94:2d:5f:31:1f:00:c2:c5:3e:ff:07:bb:35:53:
         34:ae:6b:fd:8a:04:22:a9:d6:83:8b:64:32:78:6c:42:74:2f:
         22:29:72:42:aa:ea:d9:c2:c7:65:fe:5c:2d:56:ed:3a:5b:78:
         e9:41:24:11:46:7b:6c:79:45:d2:85:62:66:f5:19:7f:aa:1a:
         ee:2c:25:98:1a:e6:35:1c:d7:16:ec:f8:b8:54:9c:84:cd:5c:
         3d:85:f0:77:01:8d:0f:3f:5a:8d:3f:07:b8:ae:a7:6f:74:e1:
         a0:90:12:c5:12:79:7b:2f:d2:aa:4f:ac:ef:19:1c:85:f2:c9:
         31:e7:72:82:3b:7a:98:fa:3e:d8:23:88:ed:9d:31:00:46:a2:
         5c:3a:d0:af:60:25:84:9c:20:ff:74:35:34:a4:90:88:4a:ce:
         45:a3:51:7c:77:ab:31:34:1d:38:0e:20:df:55:84:fc:52:ad:
         bc:0e:d4:ce:45:43:19:b9:9a:cc:5f:0c:1e:e1:26:eb:37:b9:
         40:34:ed:b2:93:fe:cc:39:0d:ca:3b:71:04:fb:0e:68:c8:29:
         2e:c2:38:96:03:2d:21:60:f7:75:b8:dd:19:15:de:e5:a8:ce:
         4d:2b:bf:fb:73:af:da:55:53:62:7a:01:fd:b9:97:ae:c7:db:
         2c:2a:e1:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----