Route Origin Authorization

$ rpki-client -vvf rpki.admin.freerangecloud.com/repo/FRC-CA/0/AS36832.roa
File:                     AS36832.roa (raw, json)
Hash identifier:          vGUYKJnBX9v8Wv8RBwCh8Lnde8fARxJ5k/hmzYoHO1Y=
Subject key identifier:   FE:DA:6E:FF:68:53:6A:66:2F:F3:75:DC:D3:5D:FE:48:58:0E:09:C4
Certificate issuer:       /CN=fd77f55efe3a93c53ca3dc8a6f8374fe70fec5567dd1e8c855
Certificate serial:       880B3CDD4BA26A578D8C79F9C1E0719FC6519D
Authority key identifier: C8:93:5F:DC:A5:02:8A:E8:20:9F:EC:82:AD:8A:E8:CF:B7:C6:E7:76
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/6e5d9611-fd33-488c-9aec-f4df2a25351e/fd77f55efe3a93c53ca3dc8a6f8374fe70fec5567dd1e8c855.cer
Subject info access:      rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/0/AS36832.roa
Signing time:             Fri 29 Nov 2024 20:32:03 +0000
ROA not before:           Fri 29 Nov 2024 20:27:03 +0000
ROA not after:            Fri 28 Nov 2025 20:32:03 +0000
asID:                     36832
IP address blocks:        2602:fed2:7b00::/40 maxlen: 40
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            88:0b:3c:dd:4b:a2:6a:57:8d:8c:79:f9:c1:e0:71:9f:c6:51:9d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fd77f55efe3a93c53ca3dc8a6f8374fe70fec5567dd1e8c855
        Validity
            Not Before: Nov 29 20:27:03 2024 GMT
            Not After : Nov 28 20:32:03 2025 GMT
        Subject: CN=FEDA6EFF68536A662FF375DCD35DFE48580E09C4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:bf:fc:e2:d1:ef:e1:75:0f:91:59:09:88:4d:
                    94:9b:1c:a3:f6:a4:df:f6:f4:5b:bd:c7:51:c2:b4:
                    ee:58:af:d0:2e:03:6d:69:99:6f:c8:f1:54:29:c9:
                    64:c2:67:62:09:93:a3:ca:2b:15:79:86:54:91:63:
                    fb:8b:ad:30:59:c4:d3:9e:8b:87:a5:36:ef:c4:2b:
                    e5:98:39:78:20:71:2c:5c:2d:6f:71:ea:0f:43:1a:
                    51:57:3e:a7:c1:96:73:82:60:65:5e:76:3a:1a:53:
                    f9:01:05:47:32:bd:a6:b0:e6:e0:fe:08:88:06:d7:
                    95:c8:e7:00:ab:00:44:f8:ef:65:5a:fe:64:61:ef:
                    2f:fd:a8:5a:43:f8:dd:4e:24:eb:1d:44:84:d9:7d:
                    2c:56:78:81:08:89:c2:5b:0b:47:14:56:16:04:cf:
                    3f:d6:22:70:57:ab:8a:e3:8c:82:90:33:82:65:5e:
                    26:94:24:98:3e:ed:6c:74:cb:98:72:bd:ec:1a:57:
                    46:9c:4c:f6:07:5e:c9:fb:2e:11:54:8c:b7:a1:4f:
                    f2:37:77:a7:02:6d:ff:50:7d:54:f3:65:28:37:66:
                    bc:fa:7b:41:96:83:92:27:d9:b6:7f:0e:77:7b:b3:
                    06:52:47:cc:66:0a:7d:a0:40:68:3a:37:c4:ea:63:
                    9a:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FE:DA:6E:FF:68:53:6A:66:2F:F3:75:DC:D3:5D:FE:48:58:0E:09:C4
            X509v3 Authority Key Identifier:
                keyid:C8:93:5F:DC:A5:02:8A:E8:20:9F:EC:82:AD:8A:E8:CF:B7:C6:E7:76

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/0/C8935FDCA5028AE8209FEC82AD8AE8CFB7C6E776.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/6e5d9611-fd33-488c-9aec-f4df2a25351e/fd77f55efe3a93c53ca3dc8a6f8374fe70fec5567dd1e8c855.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/0/AS36832.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fed2:7b00::/40

    Signature Algorithm: sha256WithRSAEncryption
         89:ff:4c:14:aa:3f:4f:23:ce:e5:7e:e1:50:f8:f5:7c:62:b6:
         9b:1b:ee:5e:4f:51:09:af:03:1b:df:18:a6:35:e6:59:ec:9c:
         d4:8d:38:0c:34:54:f1:8f:5e:50:61:5d:c6:8a:e2:35:7e:76:
         c2:48:f0:d0:bf:a0:01:b0:80:ac:cf:fb:94:ed:44:1a:79:74:
         d4:85:6f:dc:0e:da:04:ef:67:df:56:9d:7e:98:5b:30:06:8a:
         75:cc:82:7b:6a:63:f2:7d:ae:13:0c:00:8f:7e:49:46:3c:6c:
         02:92:5d:4f:d9:b7:79:a8:e9:42:1b:d9:a9:39:77:6d:c1:44:
         ea:94:fc:75:85:bc:7f:56:72:9d:2f:cd:3c:25:f0:fd:e0:62:
         b5:a4:f7:79:dc:05:e2:10:16:7b:e1:5c:83:28:93:26:04:c4:
         79:31:bf:0d:66:c0:81:e2:5d:a0:5d:ab:7d:2a:2d:8f:84:77:
         ca:65:f6:dd:4c:95:0c:f0:98:77:ba:2b:36:f0:4b:3f:a3:64:
         2f:ec:7f:79:dc:77:e3:7c:02:9c:ce:d9:2d:cf:be:e6:d4:d3:
         b9:33:78:40:02:c7:04:ac:94:11:24:9a:91:02:31:c3:77:4c:
         df:a0:fa:52:1a:b1:f3:ba:82:5a:9d:fa:18:aa:c9:ad:e7:4d:
         1c:e3:b8:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 20:43:04 2025 by rpki-client