Route Origin Authorization

$ rpki-client -vvf rpki.admin.freerangecloud.com/repo/FRC-CA/0/AS398355.roa
File:                     AS398355.roa (raw, json)
Hash identifier:          at3ZEHqAXWP83PkSYQpiPMnZF/37dDFW4QKobzP8Bm0=
Subject key identifier:   3F:5F:6A:B7:24:D1:F4:92:E1:35:06:52:C6:6B:BC:2F:E7:61:CD:28
Certificate issuer:       /CN=fd77f55efe3a93c53ca3dc8a6f8374fe70fec5567dd1e8c855
Certificate serial:       637A9015CDFEF8F7659B8553BEAB3906A6E02FDA
Authority key identifier: C8:93:5F:DC:A5:02:8A:E8:20:9F:EC:82:AD:8A:E8:CF:B7:C6:E7:76
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/6e5d9611-fd33-488c-9aec-f4df2a25351e/fd77f55efe3a93c53ca3dc8a6f8374fe70fec5567dd1e8c855.cer
Subject info access:      rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/0/AS398355.roa
Signing time:             Sun 30 Mar 2025 22:42:33 +0000
ROA not before:           Sun 30 Mar 2025 22:37:33 +0000
ROA not after:            Sun 29 Mar 2026 22:42:33 +0000
asID:                     398355
IP address blocks:        2602:fed2:7e10::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            63:7a:90:15:cd:fe:f8:f7:65:9b:85:53:be:ab:39:06:a6:e0:2f:da
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fd77f55efe3a93c53ca3dc8a6f8374fe70fec5567dd1e8c855
        Validity
            Not Before: Mar 30 22:37:33 2025 GMT
            Not After : Mar 29 22:42:33 2026 GMT
        Subject: CN=3F5F6AB724D1F492E1350652C66BBC2FE761CD28
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:9d:eb:b4:01:77:ef:94:4b:e2:f0:8f:47:6e:
                    a9:4e:ff:92:da:54:f4:35:ef:93:25:a2:79:e5:df:
                    68:84:da:d2:f6:d8:7a:06:74:bb:05:f2:d5:dd:cd:
                    f1:49:85:b1:95:b7:65:3d:6e:3d:0f:c9:f2:cb:80:
                    a0:c6:e9:ff:33:75:b9:ca:0b:88:6d:69:50:0a:5b:
                    b8:6d:f8:55:a5:24:e6:9f:de:ff:37:ca:4c:e2:08:
                    51:f6:5e:ea:8c:86:23:b8:0b:23:31:ef:f0:79:5f:
                    8f:08:ba:ea:b9:12:2d:4a:44:66:ea:a0:b8:25:3e:
                    bf:f0:e0:5a:87:21:41:f0:fa:e8:e1:f0:71:93:d8:
                    81:59:97:d7:3f:a0:33:d6:a0:c9:45:4e:ca:44:29:
                    36:bd:80:0c:5f:d5:2d:7c:10:64:3c:8d:0d:42:f4:
                    14:16:64:1e:94:b5:71:ee:80:7b:d8:f4:bf:fa:f3:
                    0b:66:ad:56:86:03:9a:57:79:6b:36:19:18:cd:4c:
                    6b:32:b2:a7:9d:20:e4:4a:88:5d:18:bd:57:95:4e:
                    a7:67:9d:a8:77:3a:65:bb:4d:f4:e4:bd:0b:c8:52:
                    f9:5b:0f:4b:bd:9f:34:78:83:f5:3d:ef:97:39:da:
                    ca:08:d7:e4:72:ad:91:3d:d8:93:1a:34:d9:e1:55:
                    ec:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3F:5F:6A:B7:24:D1:F4:92:E1:35:06:52:C6:6B:BC:2F:E7:61:CD:28
            X509v3 Authority Key Identifier:
                keyid:C8:93:5F:DC:A5:02:8A:E8:20:9F:EC:82:AD:8A:E8:CF:B7:C6:E7:76

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/0/C8935FDCA5028AE8209FEC82AD8AE8CFB7C6E776.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/6e5d9611-fd33-488c-9aec-f4df2a25351e/fd77f55efe3a93c53ca3dc8a6f8374fe70fec5567dd1e8c855.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/0/AS398355.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fed2:7e10::/48

    Signature Algorithm: sha256WithRSAEncryption
         04:27:aa:d3:2c:b7:56:d8:0b:8f:f2:ce:34:aa:bf:23:af:5c:
         3a:ab:64:b7:a3:66:41:aa:d7:8f:a6:ee:b3:9e:8a:90:3a:b5:
         bf:db:e6:85:a6:e0:83:47:52:a2:fa:05:95:f5:dd:e0:61:9a:
         d7:e0:f7:4f:2e:c7:10:f4:33:66:d4:52:5a:3b:3e:af:32:09:
         52:11:d9:94:d8:a6:ac:a4:56:9e:05:e0:fc:a4:0a:cd:d1:b8:
         20:8a:aa:76:12:dc:2d:7b:e1:16:bf:db:d8:93:ac:18:52:09:
         91:0a:ca:76:7b:23:bd:8a:f7:60:a4:44:12:ce:3a:cb:9d:c5:
         0d:f3:c9:32:74:be:55:83:f6:79:0b:74:49:9b:02:b9:85:b7:
         80:11:79:42:8c:0e:5b:0f:6b:81:2d:62:73:ad:e3:5b:30:34:
         64:37:8e:20:b9:98:b2:f3:d4:48:51:52:bc:8a:ff:bc:e1:8a:
         76:87:12:71:1b:14:7f:cc:df:47:8e:16:26:0c:ef:da:2d:21:
         3e:b8:2b:ed:f1:55:bc:9f:fb:c1:b6:65:5f:9b:f0:39:db:76:
         27:88:7b:8c:e5:5e:a1:59:50:a3:b3:9e:4e:c0:cf:42:17:13:
         04:81:15:ff:45:28:48:ba:6a:24:4b:e7:80:17:31:4e:b2:f9:
         99:53:43:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 15 22:26:49 2025 by rpki-client on console.sobornost.net