Route Origin Authorization

$ rpki-client -vvf rpki.admin.freerangecloud.com/repo/FRC-CA/0/AS132335.roa
File:                     AS132335.roa (raw, json)
Hash identifier:          aAnuknSwPfRGZYi0coLbuhh/p5VvP9HwnddWMZVWoyY=
Subject key identifier:   24:60:64:CC:BB:8B:BE:75:D7:72:79:0E:33:D4:11:9C:6D:40:08:A1
Certificate issuer:       /CN=fd77f55efe3a93c53ca3dc8a6f8374fe70fec5567dd1e8c855
Certificate serial:       08543EDC9B22905FE66620CA274DDF33647619A7
Authority key identifier: C8:93:5F:DC:A5:02:8A:E8:20:9F:EC:82:AD:8A:E8:CF:B7:C6:E7:76
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/6e5d9611-fd33-488c-9aec-f4df2a25351e/fd77f55efe3a93c53ca3dc8a6f8374fe70fec5567dd1e8c855.cer
Subject info access:      rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/0/AS132335.roa
Signing time:             Sun 05 Jan 2025 00:15:48 +0000
ROA not before:           Sun 05 Jan 2025 00:10:48 +0000
ROA not after:            Sun 04 Jan 2026 00:15:48 +0000
asID:                     132335
IP address blocks:        2602:fed2:7004::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            08:54:3e:dc:9b:22:90:5f:e6:66:20:ca:27:4d:df:33:64:76:19:a7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fd77f55efe3a93c53ca3dc8a6f8374fe70fec5567dd1e8c855
        Validity
            Not Before: Jan  5 00:10:48 2025 GMT
            Not After : Jan  4 00:15:48 2026 GMT
        Subject: CN=246064CCBB8BBE75D772790E33D4119C6D4008A1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f5:ee:d8:a1:28:c3:4f:fc:10:e3:e6:19:1e:35:
                    e5:ac:7f:82:ac:9c:66:dc:3f:8d:17:2e:91:4c:ab:
                    e8:ef:92:bf:c7:16:6f:d3:43:c0:dd:3d:1d:ce:29:
                    f7:c8:8d:67:bb:64:8e:46:6a:ba:6c:2e:2f:8d:71:
                    b1:79:f5:b8:83:92:fc:76:c0:96:fd:7d:d9:9b:5c:
                    cf:a1:cd:73:de:5b:b4:8d:e8:a6:6f:36:b5:4d:a7:
                    e3:f6:b6:4d:43:d6:98:6d:81:60:12:b2:d1:f1:11:
                    95:88:08:fc:7c:0a:66:2a:69:28:8c:9c:7a:4a:8b:
                    9e:91:18:86:48:f6:13:b1:a2:cd:07:a5:e1:2b:34:
                    23:bb:40:0f:31:d1:57:72:e2:3d:10:f5:e8:fc:69:
                    c4:14:7e:47:1b:89:79:cb:8c:43:0e:38:38:59:65:
                    25:1d:30:83:f2:50:c2:58:3e:d2:04:d4:21:44:73:
                    bd:f9:fc:e3:21:3b:b6:4f:17:f7:0e:c3:a0:b6:52:
                    45:25:67:41:2b:19:43:86:79:a9:94:35:f2:11:eb:
                    e4:97:bf:bc:54:24:c5:47:1c:29:e4:4a:8a:2f:e9:
                    c3:02:55:e8:1b:21:c9:9b:52:65:c1:a4:47:3f:b2:
                    7a:f8:62:75:bd:c5:db:02:ca:6e:03:6b:d2:e7:3f:
                    ce:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                24:60:64:CC:BB:8B:BE:75:D7:72:79:0E:33:D4:11:9C:6D:40:08:A1
            X509v3 Authority Key Identifier:
                keyid:C8:93:5F:DC:A5:02:8A:E8:20:9F:EC:82:AD:8A:E8:CF:B7:C6:E7:76

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/0/C8935FDCA5028AE8209FEC82AD8AE8CFB7C6E776.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/6e5d9611-fd33-488c-9aec-f4df2a25351e/fd77f55efe3a93c53ca3dc8a6f8374fe70fec5567dd1e8c855.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/0/AS132335.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fed2:7004::/48

    Signature Algorithm: sha256WithRSAEncryption
         3b:56:49:ae:7a:41:a2:24:c4:3d:a0:9b:4b:0d:f1:a6:c7:6d:
         3a:d3:62:5b:2b:5b:7a:0e:ae:4d:cc:c6:3b:1b:15:ac:61:d6:
         9d:c0:65:0a:c7:52:b5:88:f0:20:eb:d7:ac:ef:61:f5:46:d9:
         c3:74:38:ee:b2:c2:9c:85:01:09:19:5f:e6:5f:72:57:1b:ad:
         e4:d9:ac:4b:bc:67:f6:17:6e:a9:9e:31:6e:93:f2:59:eb:bf:
         40:ee:9a:ea:dd:c6:fb:4c:bc:4a:aa:d2:02:ee:a8:8f:49:38:
         a3:25:e9:47:1d:09:fb:7f:b8:d8:06:9c:9c:ce:be:15:72:f7:
         a7:86:9a:99:f2:58:8b:04:b5:dc:f4:00:7c:db:c5:22:bc:83:
         0c:1e:ae:cc:e3:fd:04:57:b0:0b:5b:37:60:c0:95:36:cf:9a:
         c4:94:75:76:0b:e9:44:49:f8:18:70:da:96:fe:77:cf:e6:23:
         94:43:a8:91:eb:05:22:8d:b6:ed:10:76:28:38:35:74:08:6d:
         ad:2a:6b:7b:2f:c7:ec:a1:52:b8:16:a8:02:82:f8:ee:c8:d1:
         c0:3e:32:0e:0e:c5:92:af:bb:6a:dc:55:f2:3a:10:9b:c7:e0:
         1b:f6:37:b5:e9:6e:e7:83:fc:c0:f7:07:d0:b8:22:89:ff:49:
         e5:98:00:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 15 22:26:49 2025 by rpki-client on console.sobornost.net