Route Origin Authorization

$ rpki-client -vvf rpki.admin.freerangecloud.com/repo/FRC-CA/0/AS54133.roa
File:                     AS54133.roa (raw, json)
Hash identifier:          BG41X9Wqb8A8qxRAuu7KkYThItfjTcWwkXmcP3L9yZE=
Subject key identifier:   C0:43:28:D7:E3:80:AA:52:02:41:2A:D2:D3:63:EE:E7:85:9F:59:B0
Certificate issuer:       /CN=fd77f55efe3a93c53ca3dc8a6f8374fe70fec5567dd1e8c855
Certificate serial:       21C9CAFE6E5001404976E3C55989E0BBCEBCC9AD
Authority key identifier: C8:93:5F:DC:A5:02:8A:E8:20:9F:EC:82:AD:8A:E8:CF:B7:C6:E7:76
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/6e5d9611-fd33-488c-9aec-f4df2a25351e/fd77f55efe3a93c53ca3dc8a6f8374fe70fec5567dd1e8c855.cer
Subject info access:      rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/0/AS54133.roa
Signing time:             Sat 01 Mar 2025 16:47:53 +0000
ROA not before:           Sat 01 Mar 2025 16:42:53 +0000
ROA not after:            Sat 28 Feb 2026 16:47:53 +0000
asID:                     54133
IP address blocks:        161.129.60.0/24 maxlen: 24
                          2602:fed2:7301::/48 maxlen: 48
                          2602:fed2:730b::/48 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            21:c9:ca:fe:6e:50:01:40:49:76:e3:c5:59:89:e0:bb:ce:bc:c9:ad
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fd77f55efe3a93c53ca3dc8a6f8374fe70fec5567dd1e8c855
        Validity
            Not Before: Mar  1 16:42:53 2025 GMT
            Not After : Feb 28 16:47:53 2026 GMT
        Subject: CN=C04328D7E380AA5202412AD2D363EEE7859F59B0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:8a:78:ea:f1:08:83:e9:81:02:91:49:3b:ee:
                    be:3a:6f:eb:ef:6b:da:c0:16:eb:3e:85:8c:ad:bb:
                    3e:63:43:ab:47:4a:d4:a5:0a:89:52:13:d6:ae:06:
                    77:17:37:3c:bc:05:3a:43:77:01:65:2d:1b:70:a0:
                    43:ae:bd:ce:04:bc:16:97:a5:35:d2:2a:0b:4f:0e:
                    1a:7a:f6:d3:5c:19:43:d8:47:b3:a7:cb:f3:e2:39:
                    ca:8b:44:ac:0c:34:33:45:e3:b9:b7:98:ae:0f:ca:
                    0e:b2:9c:81:ae:27:77:08:d4:ff:50:a0:5b:08:54:
                    54:90:76:20:dd:4e:8c:e7:d9:6c:93:ae:91:29:c4:
                    fc:71:b3:26:f7:24:ac:17:5e:ed:e2:c6:f6:b2:7b:
                    6a:d6:ed:48:19:9b:eb:a6:a8:96:e9:8d:3a:79:70:
                    ac:28:27:54:7c:95:2d:5d:21:d3:8f:9a:68:1f:c8:
                    cd:70:74:c5:59:b8:7c:e8:dc:25:e2:ce:4b:c0:63:
                    fe:27:3f:e7:1a:94:8a:6e:dc:50:29:bf:09:df:ad:
                    54:da:5b:70:fa:a1:d9:7c:d2:76:51:bf:c9:67:f0:
                    cf:a5:72:ae:fa:2f:c1:c5:3e:66:8f:09:cb:10:1e:
                    56:ec:c9:3e:7c:59:ba:a9:af:2a:97:04:c9:19:9c:
                    81:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C0:43:28:D7:E3:80:AA:52:02:41:2A:D2:D3:63:EE:E7:85:9F:59:B0
            X509v3 Authority Key Identifier:
                keyid:C8:93:5F:DC:A5:02:8A:E8:20:9F:EC:82:AD:8A:E8:CF:B7:C6:E7:76

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/0/C8935FDCA5028AE8209FEC82AD8AE8CFB7C6E776.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/6e5d9611-fd33-488c-9aec-f4df2a25351e/fd77f55efe3a93c53ca3dc8a6f8374fe70fec5567dd1e8c855.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/0/AS54133.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  161.129.60.0/24
                IPv6:
                  2602:fed2:7301::/48
                  2602:fed2:730b::/48

    Signature Algorithm: sha256WithRSAEncryption
         8f:ee:ed:86:07:7e:4f:4c:a4:9b:0b:ba:13:61:41:df:18:d4:
         4e:6e:21:5f:7a:3e:1f:a7:b6:84:fc:4f:b6:65:ac:95:f9:1d:
         5b:a6:e7:30:26:cb:a2:00:29:9f:fd:0c:6e:1a:a8:ba:be:bd:
         2e:24:dd:48:6b:b6:ca:59:b4:5c:5a:75:21:e6:80:3b:86:72:
         9c:67:ff:ca:d7:d2:d9:07:5a:f2:3e:8c:34:e6:9b:a9:c7:f1:
         9b:58:a4:7a:4a:b1:59:af:3f:96:b2:2e:df:ab:4b:74:4d:d7:
         4c:e6:4d:2b:5b:e6:51:b5:21:ac:92:4a:2d:ac:b2:6a:c4:6d:
         b6:06:18:c3:22:38:3b:4b:7b:52:0f:1f:14:d3:a8:ad:a6:1e:
         f7:f1:0e:85:54:7c:0d:16:c7:3d:da:99:95:7b:25:e5:7b:76:
         42:56:26:e9:8a:6f:e2:35:87:ed:fc:fb:e3:64:6f:ab:d1:d6:
         5f:97:85:7a:1e:a4:fa:f6:63:f4:85:9c:e4:bb:a0:33:d7:72:
         31:d1:fe:bb:74:58:27:75:aa:59:a7:25:43:64:6c:10:55:01:
         9d:82:75:51:0c:a1:4f:28:ba:a5:e7:c3:8b:40:c8:a6:7e:87:
         d8:44:cd:3c:5a:fe:c4:33:db:29:d1:02:ae:4b:16:8b:89:85:
         c8:b4:0e:0d
-----BEGIN CERTIFICATE-----
MIIFbzCCBFegAwIBAgIUIcnK/m5QAUBJduPFWYngu868ya0wDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyZmQ3N2Y1NWVmZTNhOTNjNTNjYTNkYzhhNmY4Mzc0ZmU3
MGZlYzU1NjdkZDFlOGM4NTUwHhcNMjUwMzAxMTY0MjUzWhcNMjYwMjI4MTY0NzUz
WjAzMTEwLwYDVQQDEyhDMDQzMjhEN0UzODBBQTUyMDI0MTJBRDJEMzYzRUVFNzg1
OUY1OUIwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwIp46vEIg+mB
ApFJO+6+Om/r72vawBbrPoWMrbs+Y0OrR0rUpQqJUhPWrgZ3Fzc8vAU6Q3cBZS0b
cKBDrr3OBLwWl6U10ioLTw4aevbTXBlD2Eezp8vz4jnKi0SsDDQzReO5t5iuD8oO
spyBrid3CNT/UKBbCFRUkHYg3U6M59lsk66RKcT8cbMm9ySsF17t4sb2sntq1u1I
GZvrpqiW6Y06eXCsKCdUfJUtXSHTj5poH8jNcHTFWbh86Nwl4s5LwGP+Jz/nGpSK
btxQKb8J361U2ltw+qHZfNJ2Ub/JZ/DPpXKu+i/BxT5mjwnLEB5W7Mk+fFm6qa8q
lwTJGZyBsQIDAQABo4ICbzCCAmswHQYDVR0OBBYEFMBDKNfjgKpSAkEq0tNj7ueF
n1mwMB8GA1UdIwQYMBaAFMiTX9ylAoroIJ/sgq2K6M+3xud2MA4GA1UdDwEB/wQE
AwIHgDBxBgNVHR8EajBoMGagZKBihmByc3luYzovL3Jwa2kuYWRtaW4uZnJlZXJh
bmdlY2xvdWQuY29tL3JlcG8vRlJDLUNBLzAvQzg5MzVGRENBNTAyOEFFODIwOUZF
QzgyQUQ4QUU4Q0ZCN0M2RTc3Ni5jcmwwgfMGCCsGAQUFBwEBBIHmMIHjMIHgBggr
BgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4t
cnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvZjYw
YzlmMzItYTg3Yy00MzM5LWEyZjMtNjI5OWEzYjAyZTI5LzZlNWQ5NjExLWZkMzMt
NDg4Yy05YWVjLWY0ZGYyYTI1MzUxZS9mZDc3ZjU1ZWZlM2E5M2M1M2NhM2RjOGE2
ZjgzNzRmZTcwZmVjNTU2N2RkMWU4Yzg1NS5jZXIwWwYIKwYBBQUHAQsETzBNMEsG
CCsGAQUFBzALhj9yc3luYzovL3Jwa2kuYWRtaW4uZnJlZXJhbmdlY2xvdWQuY29t
L3JlcG8vRlJDLUNBLzAvQVM1NDEzMy5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEF
BQcOAjA5BggrBgEFBQcBBwEB/wQqMCgwDAQCAAEwBgMEAKGBPDAYBAIAAjASAwcA
JgL+0nMBAwcAJgL+0nMLMA0GCSqGSIb3DQEBCwUAA4IBAQCP7u2GB35PTKSbC7oT
YUHfGNRObiFfej4fp7aE/E+2ZayV+R1bpucwJsuiACmf/QxuGqi6vr0uJN1Ia7bK
WbRcWnUh5oA7hnKcZ//K19LZB1ryPow05pupx/GbWKR6SrFZrz+Wsi7fq0t0TddM
5k0rW+ZRtSGskkotrLJqxG22BhjDIjg7S3tSDx8U06itph738Q6FVHwNFsc92pmV
eyXle3ZCVibpim/iNYft/PvjZG+r0dZfl4V6HqT69mP0hZzku6Az13Ix0f67dFgn
dapZpyVDZGwQVQGdgnVRDKFPKLql58OLQMimfofYRM08Wv7EM9sp0QKuSxaLiYXI
tA4N
-----END CERTIFICATE-----
Generated at Sat Apr 5 16:38:12 2025 by rpki-client