Route Origin Authorization

$ rpki-client -vvf rpki.admin.freerangecloud.com/repo/FRC-CA/3/323630323a666531333a3830313a3a2f34382d3438203d3e203533333536.roa
File:                     323630323a666531333a3830313a3a2f34382d3438203d3e203533333536.roa (raw, json)
Hash identifier:          jWiMdo84G/tg765HedIpEHmh4gbPcIFcXTFBWzAulzo=
Subject key identifier:   2B:74:E0:24:AD:45:08:F3:AD:50:DF:D4:34:E5:DE:B6:58:32:14:D6
Certificate issuer:       /CN=9ab28fbc8c084d36cd26d308b16702e59e01fcba681bfec9ef
Certificate serial:       2EBB055CDFF6C4E111118E8FF486753A48432E50
Authority key identifier: A0:DF:8E:B2:8D:12:F9:CD:F7:A6:8B:3D:C7:A5:65:76:74:8B:2E:54
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8bb7e416-db1b-4221-a6c0-947074a20f8f/9ab28fbc8c084d36cd26d308b16702e59e01fcba681bfec9ef.cer
Subject info access:      rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/3/323630323a666531333a3830313a3a2f34382d3438203d3e203533333536.roa
Signing time:             Mon 30 Dec 2024 03:48:54 +0000
ROA not before:           Mon 30 Dec 2024 03:43:54 +0000
ROA not after:            Mon 29 Dec 2025 03:48:54 +0000
asID:                     53356
IP address blocks:        2602:fe13:801::/48 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2e:bb:05:5c:df:f6:c4:e1:11:11:8e:8f:f4:86:75:3a:48:43:2e:50
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9ab28fbc8c084d36cd26d308b16702e59e01fcba681bfec9ef
        Validity
            Not Before: Dec 30 03:43:54 2024 GMT
            Not After : Dec 29 03:48:54 2025 GMT
        Subject: CN=2B74E024AD4508F3AD50DFD434E5DEB6583214D6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:99:e1:de:14:88:5b:75:ad:41:fb:dc:be:38:
                    96:61:01:58:9e:0d:52:01:57:87:13:91:93:60:c0:
                    34:a5:14:fd:54:7e:25:cc:0c:37:f4:c5:da:aa:b9:
                    d2:e5:34:a9:a4:3e:2f:03:f8:15:c0:d5:ad:44:17:
                    e0:8e:a0:9f:9f:77:8e:c3:e5:8b:95:2e:ea:38:a6:
                    88:4f:67:99:48:df:3a:fd:dc:b4:63:a8:80:b0:38:
                    58:b0:a4:04:18:7c:3d:db:e7:99:4c:6d:77:31:34:
                    91:00:6d:04:c5:6d:02:64:ed:ef:0d:84:80:4d:27:
                    d8:75:30:d4:60:3c:f9:f8:18:a7:91:1f:da:6e:e8:
                    de:d1:d0:cc:7a:c5:19:45:23:cb:1c:63:55:03:19:
                    fa:c8:47:03:64:25:bb:f6:66:e0:3c:9f:01:dd:ef:
                    0c:6a:65:4e:29:1b:9e:ba:e2:9d:d0:91:3f:3c:10:
                    a3:17:4a:20:24:37:00:be:bc:1d:6a:cb:34:ea:10:
                    a5:ec:dd:21:78:e0:b4:c0:30:84:54:9a:45:c0:ff:
                    2b:8c:1c:d4:71:23:98:b4:c4:17:df:da:2d:fa:4a:
                    44:a7:f8:58:2b:33:35:f8:e4:ea:f1:5e:7f:e6:51:
                    91:6e:79:9f:8b:f3:aa:a2:a0:0b:46:c8:60:45:a4:
                    90:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2B:74:E0:24:AD:45:08:F3:AD:50:DF:D4:34:E5:DE:B6:58:32:14:D6
            X509v3 Authority Key Identifier:
                keyid:A0:DF:8E:B2:8D:12:F9:CD:F7:A6:8B:3D:C7:A5:65:76:74:8B:2E:54

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/3/A0DF8EB28D12F9CDF7A68B3DC7A56576748B2E54.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8bb7e416-db1b-4221-a6c0-947074a20f8f/9ab28fbc8c084d36cd26d308b16702e59e01fcba681bfec9ef.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/3/323630323a666531333a3830313a3a2f34382d3438203d3e203533333536.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fe13:801::/48

    Signature Algorithm: sha256WithRSAEncryption
         02:a3:7b:dd:b2:5d:1d:97:77:2d:f5:8e:11:75:ff:db:4c:15:
         5e:80:12:4c:94:d6:40:53:a9:97:d1:7f:b3:39:d0:eb:ed:66:
         6e:cb:56:69:3b:9d:77:e3:c7:bf:22:1a:36:e2:60:27:90:93:
         04:46:1a:5e:65:b8:e4:7e:a8:7f:24:0d:66:fd:7e:30:94:47:
         8e:cc:b2:af:78:47:43:be:59:bb:fd:c7:46:27:f1:50:28:7e:
         62:37:49:3c:0f:f6:49:c7:8a:84:13:a8:3a:df:69:d8:85:44:
         8d:e0:d0:39:57:15:74:8d:f9:fb:c7:40:a7:15:41:f8:30:fd:
         60:86:18:70:03:4d:81:9c:bc:1d:5d:0d:81:0e:23:1a:c4:23:
         6a:46:8a:6a:51:11:b6:53:0e:7d:fd:52:03:2e:a9:e6:89:53:
         59:41:f3:77:28:72:66:e0:94:89:40:1c:6a:66:6d:65:19:05:
         b0:7f:58:84:6d:2b:d4:67:68:6b:79:5d:8e:6a:50:dc:80:e6:
         fa:18:8b:e5:fd:16:56:72:e7:d6:a9:bd:f1:dd:f6:dd:96:0f:
         7d:df:c8:28:85:c1:76:1c:1d:46:67:23:de:35:d6:94:30:45:
         01:34:c8:07:a5:57:00:43:be:02:1f:1c:0e:8e:73:3b:f4:3d:
         34:5f:87:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----