Route Origin Authorization

$ rpki-client -vvf rpki.admin.freerangecloud.com/repo/FRC-CA/0/AS214995.roa
File:                     AS214995.roa (raw, json)
Hash identifier:          sCftEHBIYTD9l2AYFOZ6Q5yMQyQXp3zaCAbcnIpKjm4=
Subject key identifier:   6E:6A:27:3B:6A:C4:D8:FF:FE:65:1A:3F:98:9D:49:DB:BD:52:A6:33
Certificate issuer:       /CN=fd77f55efe3a93c53ca3dc8a6f8374fe70fec5567dd1e8c855
Certificate serial:       74E5A4E7EEF888890304D4FA5B3548EE09266727
Authority key identifier: C8:93:5F:DC:A5:02:8A:E8:20:9F:EC:82:AD:8A:E8:CF:B7:C6:E7:76
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/6e5d9611-fd33-488c-9aec-f4df2a25351e/fd77f55efe3a93c53ca3dc8a6f8374fe70fec5567dd1e8c855.cer
Subject info access:      rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/0/AS214995.roa
Signing time:             Sat 05 Apr 2025 02:44:45 +0000
ROA not before:           Sat 05 Apr 2025 02:39:45 +0000
ROA not after:            Sat 04 Apr 2026 02:44:45 +0000
asID:                     214995
IP address blocks:        2602:fed2:7300::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            74:e5:a4:e7:ee:f8:88:89:03:04:d4:fa:5b:35:48:ee:09:26:67:27
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fd77f55efe3a93c53ca3dc8a6f8374fe70fec5567dd1e8c855
        Validity
            Not Before: Apr  5 02:39:45 2025 GMT
            Not After : Apr  4 02:44:45 2026 GMT
        Subject: CN=6E6A273B6AC4D8FFFE651A3F989D49DBBD52A633
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:aa:67:00:21:ff:1c:ee:f9:72:7a:fa:68:b0:
                    97:f0:6c:92:f3:d9:7f:d0:10:e1:30:7a:32:01:68:
                    d1:3d:1f:2d:9a:bd:5b:09:67:6e:65:1d:98:41:dd:
                    b9:86:f3:4f:8b:dd:df:2b:26:d7:3b:63:05:23:7a:
                    85:5c:c8:4a:90:f3:20:75:c9:a1:1e:30:c4:a4:8a:
                    2f:26:0f:a2:79:d1:c9:9f:81:82:c2:71:50:5a:a6:
                    7a:31:99:96:c3:0a:4f:cc:22:8a:9d:31:69:e6:41:
                    55:86:ea:a3:19:87:53:72:51:fa:ca:28:6e:ff:57:
                    80:12:de:7e:55:03:9c:74:fa:91:96:82:03:03:ad:
                    41:68:fb:de:67:bd:d0:16:23:f6:88:3e:aa:ec:24:
                    fa:f2:35:30:87:95:a7:0c:0a:e1:a9:2d:42:9d:6d:
                    21:6f:70:8b:ae:d0:86:17:ff:0c:d0:ce:6c:56:27:
                    95:9c:c9:e8:95:00:60:eb:a8:5b:3a:92:e4:36:65:
                    18:b0:e1:1b:c2:f4:b2:ed:e2:66:80:93:01:66:e9:
                    cb:9a:66:b2:df:b1:9b:ae:50:de:31:b7:41:9a:07:
                    a8:2b:31:56:11:d7:1b:94:cb:45:be:c1:d3:e1:40:
                    6a:af:72:1e:4c:47:cf:70:ee:bf:3a:b3:8a:38:91:
                    2c:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6E:6A:27:3B:6A:C4:D8:FF:FE:65:1A:3F:98:9D:49:DB:BD:52:A6:33
            X509v3 Authority Key Identifier:
                keyid:C8:93:5F:DC:A5:02:8A:E8:20:9F:EC:82:AD:8A:E8:CF:B7:C6:E7:76

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/0/C8935FDCA5028AE8209FEC82AD8AE8CFB7C6E776.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/6e5d9611-fd33-488c-9aec-f4df2a25351e/fd77f55efe3a93c53ca3dc8a6f8374fe70fec5567dd1e8c855.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/0/AS214995.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fed2:7300::/48

    Signature Algorithm: sha256WithRSAEncryption
         b0:16:3a:3a:16:28:8e:e6:ec:f0:3f:a4:6c:29:50:1a:96:0e:
         53:38:99:ad:4b:77:0e:c8:0a:0a:bd:be:6b:c2:41:c7:0d:20:
         d0:b7:0b:48:ec:3a:77:4b:97:92:fc:04:57:b1:cf:62:e5:86:
         b5:1b:60:1c:9c:46:ee:8b:25:cb:e7:93:51:b1:97:21:52:c3:
         55:83:30:af:de:c8:be:1e:c6:bd:d3:df:5b:29:5a:f5:51:7d:
         e0:72:45:79:17:8a:40:cb:aa:c1:e7:7c:8e:e0:fd:53:78:8c:
         38:5e:c7:34:e4:eb:ef:b8:51:7a:de:2f:1c:76:4d:fa:ef:6e:
         65:97:37:ec:07:42:c2:9f:15:ef:3c:4c:53:33:46:cf:1e:3f:
         60:9b:a7:2b:21:f5:44:ee:00:42:ed:33:13:07:69:55:3f:09:
         11:bf:d6:7e:b0:0f:8b:e9:da:68:b9:00:fd:b1:3e:79:e8:40:
         56:8e:ac:d9:0d:77:0d:a8:c6:35:ce:9e:6d:42:77:99:29:63:
         85:f4:de:9e:9b:e2:f5:e8:de:bb:a0:bd:99:ab:3e:00:71:be:
         c4:b5:c0:dd:fc:f3:77:6c:67:63:93:7c:49:45:d4:15:af:8e:
         bb:10:bc:3a:10:db:86:07:91:f0:7d:be:06:6b:d5:20:07:61:
         b7:51:b2:6d
-----BEGIN CERTIFICATE-----
MIIFWTCCBEGgAwIBAgIUdOWk5+74iIkDBNT6WzVI7gkmZycwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyZmQ3N2Y1NWVmZTNhOTNjNTNjYTNkYzhhNmY4Mzc0ZmU3
MGZlYzU1NjdkZDFlOGM4NTUwHhcNMjUwNDA1MDIzOTQ1WhcNMjYwNDA0MDI0NDQ1
WjAzMTEwLwYDVQQDEyg2RTZBMjczQjZBQzREOEZGRkU2NTFBM0Y5ODlENDlEQkJE
NTJBNjMzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3apnACH/HO75
cnr6aLCX8GyS89l/0BDhMHoyAWjRPR8tmr1bCWduZR2YQd25hvNPi93fKybXO2MF
I3qFXMhKkPMgdcmhHjDEpIovJg+iedHJn4GCwnFQWqZ6MZmWwwpPzCKKnTFp5kFV
huqjGYdTclH6yihu/1eAEt5+VQOcdPqRloIDA61BaPveZ73QFiP2iD6q7CT68jUw
h5WnDArhqS1CnW0hb3CLrtCGF/8M0M5sVieVnMnolQBg66hbOpLkNmUYsOEbwvSy
7eJmgJMBZunLmmay37GbrlDeMbdBmgeoKzFWEdcblMtFvsHT4UBqr3IeTEfPcO6/
OrOKOJEspwIDAQABo4ICWTCCAlUwHQYDVR0OBBYEFG5qJztqxNj//mUaP5idSdu9
UqYzMB8GA1UdIwQYMBaAFMiTX9ylAoroIJ/sgq2K6M+3xud2MA4GA1UdDwEB/wQE
AwIHgDBxBgNVHR8EajBoMGagZKBihmByc3luYzovL3Jwa2kuYWRtaW4uZnJlZXJh
bmdlY2xvdWQuY29tL3JlcG8vRlJDLUNBLzAvQzg5MzVGRENBNTAyOEFFODIwOUZF
QzgyQUQ4QUU4Q0ZCN0M2RTc3Ni5jcmwwgfMGCCsGAQUFBwEBBIHmMIHjMIHgBggr
BgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4t
cnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvZjYw
YzlmMzItYTg3Yy00MzM5LWEyZjMtNjI5OWEzYjAyZTI5LzZlNWQ5NjExLWZkMzMt
NDg4Yy05YWVjLWY0ZGYyYTI1MzUxZS9mZDc3ZjU1ZWZlM2E5M2M1M2NhM2RjOGE2
ZjgzNzRmZTcwZmVjNTU2N2RkMWU4Yzg1NS5jZXIwXAYIKwYBBQUHAQsEUDBOMEwG
CCsGAQUFBzALhkByc3luYzovL3Jwa2kuYWRtaW4uZnJlZXJhbmdlY2xvdWQuY29t
L3JlcG8vRlJDLUNBLzAvQVMyMTQ5OTUucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYB
BQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgACMAkDBwAmAv7ScwAwDQYJKoZI
hvcNAQELBQADggEBALAWOjoWKI7m7PA/pGwpUBqWDlM4ma1Ldw7ICgq9vmvCQccN
INC3C0jsOndLl5L8BFexz2LlhrUbYBycRu6LJcvnk1GxlyFSw1WDMK/eyL4exr3T
31spWvVRfeByRXkXikDLqsHnfI7g/VN4jDhexzTk6++4UXreLxx2TfrvbmWXN+wH
QsKfFe88TFMzRs8eP2Cbpysh9UTuAELtMxMHaVU/CRG/1n6wD4vp2mi5AP2xPnno
QFaOrNkNdw2oxjXOnm1Cd5kpY4X03p6b4vXo3rugvZmrPgBxvsS1wN3883dsZ2OT
fElF1BWvjrsQvDoQ24YHkfB9vgZr1SAHYbdRsm0=
-----END CERTIFICATE-----
Generated at Tue Apr 15 22:26:49 2025 by rpki-client on console.sobornost.net