Route Origin Authorization

$ rpki-client -vvf rpki.admin.freerangecloud.com/repo/FRC-CA/7/3134322e3230322e39312e302f32342d3234203d3e2038313030.roa
File:                     3134322e3230322e39312e302f32342d3234203d3e2038313030.roa (raw, json)
Hash identifier:          gNFgkq4xPlx3Dbzckva2gEQ99UfMc5FmkbjdiVaU9ww=
Subject key identifier:   9D:B4:A0:10:F8:53:98:2E:A6:6C:B6:9F:1B:B4:79:C2:6D:EC:A3:52
Certificate issuer:       /CN=46abb15c5b3d343c97c09f99907da1dccd4c3a215af59e8233
Certificate serial:       7C9040868466091C52389A175D3D59477B70264F
Authority key identifier: FA:04:8A:F3:EA:62:E5:57:5B:46:98:C5:CC:24:03:98:28:93:F0:C5
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0a4f730e-74f5-4c41-9c06-be5d40c9917d/46abb15c5b3d343c97c09f99907da1dccd4c3a215af59e8233.cer
Subject info access:      rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/7/3134322e3230322e39312e302f32342d3234203d3e2038313030.roa
Signing time:             Tue 13 Sep 2022 01:20:21 +0000
ROA not before:           Tue 13 Sep 2022 01:15:21 +0000
ROA not after:            Tue 12 Sep 2023 01:20:21 +0000
asID:                     8100
IP address blocks:        142.202.91.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7c:90:40:86:84:66:09:1c:52:38:9a:17:5d:3d:59:47:7b:70:26:4f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=46abb15c5b3d343c97c09f99907da1dccd4c3a215af59e8233
        Validity
            Not Before: Sep 13 01:15:21 2022 GMT
            Not After : Sep 12 01:20:21 2023 GMT
        Subject: CN=9DB4A010F853982EA66CB69F1BB479C26DECA352
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:e1:4d:dc:83:fd:79:64:35:ee:71:bc:76:47:
                    c8:d4:3a:0c:7d:79:2b:41:b3:db:90:8a:ca:14:ed:
                    e6:43:46:bd:57:26:22:93:e3:8c:af:f1:14:09:d9:
                    58:70:e3:6a:a8:a4:b3:16:64:64:1b:4a:de:58:fd:
                    92:9d:73:06:0e:01:7c:b1:43:47:8c:5a:5f:77:20:
                    fe:6d:79:a1:77:0a:59:70:cb:16:97:85:e4:01:cf:
                    ee:b0:06:01:50:eb:4a:fd:2e:76:48:d9:dc:39:4d:
                    85:6a:50:11:4a:a4:fa:59:90:66:30:31:9a:98:90:
                    99:f5:c6:f2:fd:b4:9b:63:06:42:7e:55:bd:b8:5d:
                    fe:a9:5e:b0:76:01:53:a1:f5:ab:5e:66:09:d8:14:
                    58:5b:56:6d:c6:6c:0b:fb:61:36:10:5c:65:50:22:
                    85:b8:e2:ab:f5:e4:83:14:cc:54:72:b3:e3:c6:04:
                    7a:7b:70:2f:dd:58:4c:e5:4c:20:81:63:e1:05:bc:
                    d0:66:bc:ae:34:91:0b:21:e1:2e:77:8d:5f:dc:a5:
                    96:7c:d8:19:2d:46:6e:b3:8e:db:e1:33:9d:f5:08:
                    f6:21:ca:8a:f8:fa:e5:42:5c:94:6b:09:21:4a:f4:
                    03:05:0a:31:72:7e:d2:ce:a3:40:1b:4f:b4:5b:52:
                    dc:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9D:B4:A0:10:F8:53:98:2E:A6:6C:B6:9F:1B:B4:79:C2:6D:EC:A3:52
            X509v3 Authority Key Identifier:
                keyid:FA:04:8A:F3:EA:62:E5:57:5B:46:98:C5:CC:24:03:98:28:93:F0:C5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/7/FA048AF3EA62E5575B4698C5CC2403982893F0C5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0a4f730e-74f5-4c41-9c06-be5d40c9917d/46abb15c5b3d343c97c09f99907da1dccd4c3a215af59e8233.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/7/3134322e3230322e39312e302f32342d3234203d3e2038313030.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  142.202.91.0/24

    Signature Algorithm: sha256WithRSAEncryption
         06:0f:98:a7:01:84:d0:be:7d:25:26:3d:ca:fe:78:df:7f:9f:
         27:16:9e:13:40:8e:c0:2a:25:c6:dc:fa:a8:3d:cf:6f:95:e3:
         02:8e:aa:17:97:dc:65:ce:61:ef:0b:d8:f9:cc:a8:29:1c:a9:
         c8:ba:90:9e:35:d1:4b:aa:18:34:a4:bf:a6:a6:17:86:d5:f2:
         9a:1f:59:11:46:94:81:12:8c:99:ce:81:71:98:d7:31:25:93:
         00:85:fe:c5:8c:16:cb:20:9a:26:fc:62:35:85:9d:00:9b:76:
         a2:19:3b:90:47:37:02:66:1d:0c:13:e1:f4:3a:b8:74:4a:1e:
         8a:25:9f:bd:24:b5:db:61:1d:fe:21:dd:da:c4:74:48:e2:9e:
         87:4d:6f:78:7e:5a:c3:1f:f1:07:a6:b8:e5:d7:da:54:92:69:
         ea:7e:36:d3:02:da:ca:a8:3f:87:34:cf:68:e4:2e:cc:9c:7f:
         4f:66:42:a6:e3:a1:58:7a:ef:a9:8c:58:e3:24:7e:98:4b:66:
         f5:98:d5:2c:2f:c5:15:6f:81:ac:a7:10:7b:73:19:ec:ad:de:
         e1:14:9e:33:ad:70:d5:c4:57:18:27:32:48:37:7b:7a:98:c7:
         70:f9:68:46:11:2b:b5:a4:51:f4:1a:9e:9f:94:7f:39:91:61:
         2f:4a:0a:87
-----BEGIN CERTIFICATE-----
MIIFgzCCBGugAwIBAgIUfJBAhoRmCRxSOJoXXT1ZR3twJk8wDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyNDZhYmIxNWM1YjNkMzQzYzk3YzA5Zjk5OTA3ZGExZGNj
ZDRjM2EyMTVhZjU5ZTgyMzMwHhcNMjIwOTEzMDExNTIxWhcNMjMwOTEyMDEyMDIx
WjAzMTEwLwYDVQQDEyg5REI0QTAxMEY4NTM5ODJFQTY2Q0I2OUYxQkI0NzlDMjZE
RUNBMzUyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3+FN3IP9eWQ1
7nG8dkfI1DoMfXkrQbPbkIrKFO3mQ0a9VyYik+OMr/EUCdlYcONqqKSzFmRkG0re
WP2SnXMGDgF8sUNHjFpfdyD+bXmhdwpZcMsWl4XkAc/usAYBUOtK/S52SNncOU2F
alARSqT6WZBmMDGamJCZ9cby/bSbYwZCflW9uF3+qV6wdgFTofWrXmYJ2BRYW1Zt
xmwL+2E2EFxlUCKFuOKr9eSDFMxUcrPjxgR6e3Av3VhM5UwggWPhBbzQZryuNJEL
IeEud41f3KWWfNgZLUZus47b4TOd9Qj2IcqK+PrlQlyUawkhSvQDBQoxcn7SzqNA
G0+0W1LcHQIDAQABo4ICgzCCAn8wHQYDVR0OBBYEFJ20oBD4U5gupmy2nxu0ecJt
7KNSMB8GA1UdIwQYMBaAFPoEivPqYuVXW0aYxcwkA5gok/DFMA4GA1UdDwEB/wQE
AwIHgDBxBgNVHR8EajBoMGagZKBihmByc3luYzovL3Jwa2kuYWRtaW4uZnJlZXJh
bmdlY2xvdWQuY29tL3JlcG8vRlJDLUNBLzcvRkEwNDhBRjNFQTYyRTU1NzVCNDY5
OEM1Q0MyNDAzOTgyODkzRjBDNS5jcmwwgfMGCCsGAQUFBwEBBIHmMIHjMIHgBggr
BgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4t
cnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvNTIx
ZWIzM2YtOTY3Mi00Y2Q5LWFjY2UtMTM3MjI3ZTk3MWFjLzBhNGY3MzBlLTc0ZjUt
NGM0MS05YzA2LWJlNWQ0MGM5OTE3ZC80NmFiYjE1YzViM2QzNDNjOTdjMDlmOTk5
MDdkYTFkY2NkNGMzYTIxNWFmNTllODIzMy5jZXIwgYgGCCsGAQUFBwELBHwwejB4
BggrBgEFBQcwC4ZscnN5bmM6Ly9ycGtpLmFkbWluLmZyZWVyYW5nZWNsb3VkLmNv
bS9yZXBvL0ZSQy1DQS83LzMxMzQzMjJlMzIzMDMyMmUzOTMxMmUzMDJmMzIzNDJk
MzIzNDIwM2QzZTIwMzgzMTMwMzAucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUH
DgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBACOylswDQYJKoZIhvcNAQEL
BQADggEBAAYPmKcBhNC+fSUmPcr+eN9/nycWnhNAjsAqJcbc+qg9z2+V4wKOqheX
3GXOYe8L2PnMqCkcqci6kJ410UuqGDSkv6amF4bV8pofWRFGlIESjJnOgXGY1zEl
kwCF/sWMFssgmib8YjWFnQCbdqIZO5BHNwJmHQwT4fQ6uHRKHooln70ktdthHf4h
3drEdEjinodNb3h+WsMf8QemuOXX2lSSaep+NtMC2sqoP4c0z2jkLsycf09mQqbj
oVh676mMWOMkfphLZvWY1SwvxRVvgaynEHtzGeyt3uEUnjOtcNXEVxgnMkg3e3qY
x3D5aEYRK7WkUfQanp+UfzmRYS9KCoc=
-----END CERTIFICATE-----