Route Origin Authorization

$ rpki-client -vvf rpki.admin.freerangecloud.com/repo/FRC-CA/3/323630323a666531333a6662303a3a2f34342d3438203d3e203533333536.roa
File:                     323630323a666531333a6662303a3a2f34342d3438203d3e203533333536.roa (raw, json)
Hash identifier:          K+qyzdWRc2MmEICfMezlAWQJoTAPTnEw+75OCbsuALU=
Subject key identifier:   7A:35:A1:4D:81:F6:E6:63:3A:CD:B4:67:EB:A4:AC:32:9C:00:ED:A7
Certificate issuer:       /CN=9ab28fbc8c084d36cd26d308b16702e59e01fcba681bfec9ef
Certificate serial:       253B6E3AD1A4199232E2731404248E9AD0F661AA
Authority key identifier: A0:DF:8E:B2:8D:12:F9:CD:F7:A6:8B:3D:C7:A5:65:76:74:8B:2E:54
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8bb7e416-db1b-4221-a6c0-947074a20f8f/9ab28fbc8c084d36cd26d308b16702e59e01fcba681bfec9ef.cer
Subject info access:      rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/3/323630323a666531333a6662303a3a2f34342d3438203d3e203533333536.roa
Signing time:             Fri 30 Aug 2024 22:01:49 +0000
ROA not before:           Fri 30 Aug 2024 21:56:49 +0000
ROA not after:            Fri 29 Aug 2025 22:01:49 +0000
asID:                     53356
IP address blocks:        2602:fe13:fb0::/44 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            25:3b:6e:3a:d1:a4:19:92:32:e2:73:14:04:24:8e:9a:d0:f6:61:aa
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9ab28fbc8c084d36cd26d308b16702e59e01fcba681bfec9ef
        Validity
            Not Before: Aug 30 21:56:49 2024 GMT
            Not After : Aug 29 22:01:49 2025 GMT
        Subject: CN=7A35A14D81F6E6633ACDB467EBA4AC329C00EDA7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:c6:1d:86:5c:95:68:a6:64:79:2b:d8:24:18:
                    db:7a:b0:f8:54:1f:c3:d9:e5:c5:8e:4a:4a:5c:97:
                    57:14:92:d5:1e:80:e8:90:76:a6:88:cb:c5:a4:c1:
                    e0:66:c0:b7:16:c3:e8:79:6f:aa:3d:10:cd:cc:5b:
                    ea:88:21:fa:77:a0:78:83:a0:0f:1f:61:ba:6f:44:
                    38:d7:3c:b0:35:a6:6f:75:68:74:68:21:3a:b6:e2:
                    d9:b3:15:ca:22:31:5a:1f:26:35:9c:72:b6:a8:07:
                    dd:ee:86:34:b6:e0:03:17:e0:04:e5:1e:a9:db:62:
                    de:06:ee:fb:a1:f2:2f:09:6d:01:bb:3d:39:9b:13:
                    c9:1a:c5:9a:93:d4:10:ea:88:fe:8f:34:0d:ba:85:
                    65:73:5d:8c:9f:be:97:87:55:31:2c:f0:92:8f:df:
                    c3:13:8f:d8:c2:8e:66:fb:a4:b7:a5:bd:ee:ec:a0:
                    be:45:92:a0:06:65:74:4f:04:f9:ea:43:8b:5d:67:
                    4d:3c:e1:0c:52:79:9e:c7:25:51:fd:30:33:9a:4d:
                    9e:f3:3a:b6:cb:d3:58:48:74:e5:de:2c:69:7e:ce:
                    56:85:e6:cb:bf:e4:ca:7d:2f:8e:ba:b6:01:ba:3c:
                    cb:63:79:c3:68:91:ef:b6:f5:45:84:61:4e:8f:ed:
                    12:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7A:35:A1:4D:81:F6:E6:63:3A:CD:B4:67:EB:A4:AC:32:9C:00:ED:A7
            X509v3 Authority Key Identifier:
                keyid:A0:DF:8E:B2:8D:12:F9:CD:F7:A6:8B:3D:C7:A5:65:76:74:8B:2E:54

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/3/A0DF8EB28D12F9CDF7A68B3DC7A56576748B2E54.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8bb7e416-db1b-4221-a6c0-947074a20f8f/9ab28fbc8c084d36cd26d308b16702e59e01fcba681bfec9ef.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/3/323630323a666531333a6662303a3a2f34342d3438203d3e203533333536.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fe13:fb0::/44

    Signature Algorithm: sha256WithRSAEncryption
         1c:2f:d8:42:e9:40:71:70:32:84:b7:28:cf:2a:cc:e6:65:7e:
         d9:2c:da:4a:e5:b8:62:2d:3d:cd:ec:e9:5a:c2:d3:0b:66:78:
         50:60:5c:fa:7e:cc:79:d7:b5:a4:79:75:2a:a3:55:03:a6:2a:
         ae:32:94:93:b2:3a:bf:15:14:3f:da:98:54:dc:0d:c9:47:28:
         c5:89:b6:2e:12:27:7a:62:dc:06:48:e0:c7:09:d4:fc:c5:8d:
         ee:32:77:20:15:43:ab:92:09:ca:5d:0f:31:e7:16:f7:eb:8e:
         45:8f:d4:82:1e:65:b4:5f:52:ae:44:65:b6:a5:6b:1a:9c:52:
         8c:ca:fb:b1:d1:86:ae:83:4b:6a:d0:a8:73:d4:a8:a3:da:1b:
         c1:ea:00:43:3c:03:7c:e9:67:ee:3e:62:8e:05:07:dc:8b:ca:
         c2:d3:59:77:e0:be:7a:4b:b2:f2:57:6b:25:6b:e2:41:83:54:
         a3:7a:03:03:77:3b:5c:23:ab:a6:f5:2a:f9:8c:ff:89:6f:40:
         aa:c6:ea:fc:83:ee:b7:7d:72:78:66:2f:46:21:07:50:4e:51:
         10:24:3c:cc:9f:80:df:0f:ad:a8:0e:e3:55:71:28:38:c0:95:
         5d:ac:63:54:0e:90:72:af:9b:1b:ca:10:47:fb:05:0b:6b:5f:
         46:27:f1:b3
-----BEGIN CERTIFICATE-----
MIIFkTCCBHmgAwIBAgIUJTtuOtGkGZIy4nMUBCSOmtD2YaowDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyOWFiMjhmYmM4YzA4NGQzNmNkMjZkMzA4YjE2NzAyZTU5
ZTAxZmNiYTY4MWJmZWM5ZWYwHhcNMjQwODMwMjE1NjQ5WhcNMjUwODI5MjIwMTQ5
WjAzMTEwLwYDVQQDEyg3QTM1QTE0RDgxRjZFNjYzM0FDREI0NjdFQkE0QUMzMjlD
MDBFREE3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA28YdhlyVaKZk
eSvYJBjberD4VB/D2eXFjkpKXJdXFJLVHoDokHamiMvFpMHgZsC3FsPoeW+qPRDN
zFvqiCH6d6B4g6APH2G6b0Q41zywNaZvdWh0aCE6tuLZsxXKIjFaHyY1nHK2qAfd
7oY0tuADF+AE5R6p22LeBu77ofIvCW0Buz05mxPJGsWak9QQ6oj+jzQNuoVlc12M
n76Xh1UxLPCSj9/DE4/Ywo5m+6S3pb3u7KC+RZKgBmV0TwT56kOLXWdNPOEMUnme
xyVR/TAzmk2e8zq2y9NYSHTl3ixpfs5WhebLv+TKfS+OurYBujzLY3nDaJHvtvVF
hGFOj+0SEwIDAQABo4ICkTCCAo0wHQYDVR0OBBYEFHo1oU2B9uZjOs20Z+ukrDKc
AO2nMB8GA1UdIwQYMBaAFKDfjrKNEvnN96aLPcelZXZ0iy5UMA4GA1UdDwEB/wQE
AwIHgDBxBgNVHR8EajBoMGagZKBihmByc3luYzovL3Jwa2kuYWRtaW4uZnJlZXJh
bmdlY2xvdWQuY29tL3JlcG8vRlJDLUNBLzMvQTBERjhFQjI4RDEyRjlDREY3QTY4
QjNEQzdBNTY1NzY3NDhCMkU1NC5jcmwwgfMGCCsGAQUFBwEBBIHmMIHjMIHgBggr
BgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4t
cnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvNzZm
ZTExZDQtZDM1Mi00OTk0LThmNmMtZDZjOTFiMGI4NDE1LzhiYjdlNDE2LWRiMWIt
NDIyMS1hNmMwLTk0NzA3NGEyMGY4Zi85YWIyOGZiYzhjMDg0ZDM2Y2QyNmQzMDhi
MTY3MDJlNTllMDFmY2JhNjgxYmZlYzllZi5jZXIwgZMGCCsGAQUFBwELBIGGMIGD
MIGABggrBgEFBQcwC4Z0cnN5bmM6Ly9ycGtpLmFkbWluLmZyZWVyYW5nZWNsb3Vk
LmNvbS9yZXBvL0ZSQy1DQS8zLzMyMzYzMDMyM2E2NjY1MzEzMzNhNjY2MjMwM2Ez
YTJmMzQzNDJkMzQzODIwM2QzZTIwMzUzMzMzMzUzNi5yb2EwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAiBggrBgEFBQcBBwEB/wQTMBEwDwQCAAIwCQMHBCYC/hMP
sDANBgkqhkiG9w0BAQsFAAOCAQEAHC/YQulAcXAyhLcozyrM5mV+2SzaSuW4Yi09
zezpWsLTC2Z4UGBc+n7Mede1pHl1KqNVA6YqrjKUk7I6vxUUP9qYVNwNyUcoxYm2
LhInemLcBkjgxwnU/MWN7jJ3IBVDq5IJyl0PMecW9+uORY/Ugh5ltF9SrkRltqVr
GpxSjMr7sdGGroNLatCoc9Soo9obweoAQzwDfOln7j5ijgUH3IvKwtNZd+C+ekuy
8ldrJWviQYNUo3oDA3c7XCOrpvUq+Yz/iW9Aqsbq/IPut31yeGYvRiEHUE5RECQ8
zJ+A3w+tqA7jVXEoOMCVXaxjVA6Qcq+bG8oQR/sFC2tfRifxsw==
-----END CERTIFICATE-----