Route Origin Authorization

$ rpki-client -vvf rpki.admin.freerangecloud.com/repo/FRC-CA/0/AS216382.roa
File:                     AS216382.roa (raw, json)
Hash identifier:          Opr/jAWFgmUO3t5Wc41Njz+0uuNOVIW0DNzxm3Xwh44=
Subject key identifier:   6C:CE:64:F4:9E:D8:41:2B:08:22:3C:D3:7A:E7:78:3A:3E:25:A6:EF
Certificate issuer:       /CN=fd77f55efe3a93c53ca3dc8a6f8374fe70fec5567dd1e8c855
Certificate serial:       1C25BC8EF6E013E8C89A18D8D392C8C75D7E882E
Authority key identifier: C8:93:5F:DC:A5:02:8A:E8:20:9F:EC:82:AD:8A:E8:CF:B7:C6:E7:76
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/6e5d9611-fd33-488c-9aec-f4df2a25351e/fd77f55efe3a93c53ca3dc8a6f8374fe70fec5567dd1e8c855.cer
Subject info access:      rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/0/AS216382.roa
Signing time:             Fri 21 Feb 2025 01:59:56 +0000
ROA not before:           Fri 21 Feb 2025 01:54:56 +0000
ROA not after:            Fri 20 Feb 2026 01:59:56 +0000
asID:                     216382
IP address blocks:        2602:fed2:711b::/48 maxlen: 48
                          2602:fed2:7314::/48 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1c:25:bc:8e:f6:e0:13:e8:c8:9a:18:d8:d3:92:c8:c7:5d:7e:88:2e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fd77f55efe3a93c53ca3dc8a6f8374fe70fec5567dd1e8c855
        Validity
            Not Before: Feb 21 01:54:56 2025 GMT
            Not After : Feb 20 01:59:56 2026 GMT
        Subject: CN=6CCE64F49ED8412B08223CD37AE7783A3E25A6EF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:06:22:3b:da:b7:15:38:b9:b3:50:50:c5:5d:
                    d0:c6:7b:48:8f:64:96:e1:ad:7b:d8:65:5f:9a:2e:
                    38:f9:60:2a:a1:17:0d:4e:5f:e7:bd:b8:5c:69:b4:
                    5e:48:76:5d:83:24:f9:6c:98:29:03:47:31:2a:e0:
                    eb:40:f6:d8:34:33:31:7d:89:bf:c7:f0:d4:8a:94:
                    93:d5:bf:54:df:50:79:b7:27:df:e1:43:40:a3:2f:
                    f4:94:d2:4b:4f:8a:c6:58:68:0f:ac:42:cb:04:c2:
                    8a:b8:c8:a9:47:79:70:bd:7c:44:d1:1d:a8:1d:c5:
                    43:48:f7:5c:26:86:25:d5:a2:c2:35:80:e4:a7:eb:
                    fe:6d:f9:41:c8:42:26:37:4b:fd:e7:31:ab:55:aa:
                    ed:c8:75:8f:5f:7d:16:be:83:5f:5a:3b:d5:58:dd:
                    2a:4f:84:54:cb:06:97:dd:a9:82:e5:f3:a5:c7:1b:
                    78:72:ba:16:31:f5:9a:7a:8b:3b:7e:ed:f6:08:af:
                    10:65:31:68:a5:ba:00:3d:45:ae:39:c6:4c:b0:87:
                    ef:ee:ce:3d:af:29:e9:1f:41:fc:95:5b:82:bc:48:
                    64:b8:8a:0b:07:e1:ea:28:e6:88:bd:22:ca:98:bf:
                    18:d3:0b:31:7a:d1:a6:c7:0a:f8:d9:4c:d9:dc:8d:
                    86:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6C:CE:64:F4:9E:D8:41:2B:08:22:3C:D3:7A:E7:78:3A:3E:25:A6:EF
            X509v3 Authority Key Identifier:
                keyid:C8:93:5F:DC:A5:02:8A:E8:20:9F:EC:82:AD:8A:E8:CF:B7:C6:E7:76

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/0/C8935FDCA5028AE8209FEC82AD8AE8CFB7C6E776.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/6e5d9611-fd33-488c-9aec-f4df2a25351e/fd77f55efe3a93c53ca3dc8a6f8374fe70fec5567dd1e8c855.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/0/AS216382.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fed2:711b::/48
                  2602:fed2:7314::/48

    Signature Algorithm: sha256WithRSAEncryption
         74:10:d8:bf:5f:d1:84:a1:0e:5d:57:0e:da:02:ad:15:42:f2:
         15:ea:ce:81:e6:ef:53:f0:b3:ee:a7:c9:50:32:ae:6e:35:30:
         b5:b3:9f:d5:bd:a1:4f:be:81:07:a8:a6:d7:0a:47:22:e0:ff:
         08:90:ca:b4:56:e9:40:50:b6:d0:ef:91:48:4d:5b:4d:36:0c:
         ae:68:99:57:35:bc:b9:ab:3a:10:ad:4d:81:bf:a0:68:1a:41:
         20:24:94:97:ab:e5:de:02:70:9d:f2:21:a0:cf:c8:bb:64:da:
         13:26:86:37:5c:80:8e:07:93:b6:72:69:34:06:c4:a7:ed:0b:
         86:a9:5c:b9:b2:f8:5d:ee:8f:bf:d4:d7:ba:ad:1d:91:92:69:
         66:f5:14:f9:bd:4d:7d:d5:e0:de:01:54:cf:7b:46:b4:09:4e:
         8d:de:e6:e3:a8:a2:82:48:34:1b:59:e8:2d:9a:86:5a:65:33:
         fa:a3:79:4d:9e:f7:2c:4e:88:4e:2d:74:94:73:2b:a4:71:6f:
         2f:f2:eb:e8:21:e9:dd:31:fa:b7:4e:2e:99:5b:7a:11:6a:22:
         3d:ac:6d:d9:4c:e5:55:54:bd:58:e2:44:0e:04:d8:28:e0:b0:
         47:71:92:83:43:f8:70:df:02:ae:e0:6f:4f:12:94:6c:7c:6d:
         60:82:00:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 23:16:47 2025 by rpki-client