Route Origin Authorization

$ rpki-client -vvf rpki.admin.freerangecloud.com/repo/FRC-CA/0/AS400298.roa
File:                     AS400298.roa (raw, json)
Hash identifier:          Z0mrf27dXAMiwr+GxADiAaqtulteh6NRTc6hprgZ6LY=
Subject key identifier:   EE:C0:DD:BC:2C:C2:9D:B3:25:68:38:5E:4F:4E:4A:DC:A3:55:BC:33
Certificate issuer:       /CN=fd77f55efe3a93c53ca3dc8a6f8374fe70fec5567dd1e8c855
Certificate serial:       443FDB7487C31B99709DBE3C18B8B9C24A9F5715
Authority key identifier: C8:93:5F:DC:A5:02:8A:E8:20:9F:EC:82:AD:8A:E8:CF:B7:C6:E7:76
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/6e5d9611-fd33-488c-9aec-f4df2a25351e/fd77f55efe3a93c53ca3dc8a6f8374fe70fec5567dd1e8c855.cer
Subject info access:      rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/0/AS400298.roa
Signing time:             Sun 26 Jan 2025 19:51:50 +0000
ROA not before:           Sun 26 Jan 2025 19:46:50 +0000
ROA not after:            Sun 25 Jan 2026 19:51:50 +0000
asID:                     400298
IP address blocks:        2602:fed2:7086::/48 maxlen: 48
                          2602:fed2:7189::/48 maxlen: 48
                          2602:fed2:730e::/48 maxlen: 48
                          2602:fed2:7317::/48 maxlen: 48
                          2602:fed2:7e85::/48 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            44:3f:db:74:87:c3:1b:99:70:9d:be:3c:18:b8:b9:c2:4a:9f:57:15
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fd77f55efe3a93c53ca3dc8a6f8374fe70fec5567dd1e8c855
        Validity
            Not Before: Jan 26 19:46:50 2025 GMT
            Not After : Jan 25 19:51:50 2026 GMT
        Subject: CN=EEC0DDBC2CC29DB32568385E4F4E4ADCA355BC33
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:f9:68:d2:0a:74:9e:5d:ba:1d:e6:a5:2e:4f:
                    1d:8a:68:3e:40:5b:72:cf:19:b7:a8:47:d8:2c:00:
                    0b:d3:71:e3:e7:39:c6:3f:d8:5c:3f:83:c7:1e:38:
                    ba:64:19:2a:0d:c6:22:26:ab:32:26:80:98:cb:ae:
                    f7:32:a2:89:dd:1a:27:43:74:b7:64:85:75:a6:95:
                    06:b0:a9:b9:af:ca:b8:d7:62:c8:fd:07:d5:e2:ff:
                    fa:d9:9c:43:e2:45:7f:c7:5b:1e:1b:b1:4e:f8:1a:
                    9d:44:a0:d8:ff:c8:47:a0:87:70:05:d5:d6:84:4d:
                    d3:2c:ef:cc:20:48:95:7a:5b:e1:16:4d:60:52:bb:
                    aa:a4:ac:e5:19:5a:3f:8e:f4:d0:15:ee:49:f5:b9:
                    0f:14:a0:b5:1a:f3:78:7c:87:45:9c:d2:f6:ae:ae:
                    5a:30:b0:4f:4e:4c:c3:c7:49:9b:e3:6b:b1:b9:87:
                    e1:bc:26:b7:c5:0d:17:22:51:0b:1e:cd:87:77:e2:
                    c7:ab:94:9f:3f:c6:1b:f5:ec:c5:96:65:b0:5f:0c:
                    5a:de:93:b3:61:7c:27:85:53:8b:34:06:b9:be:32:
                    94:4f:3a:0b:34:fa:34:63:dd:ac:f6:94:c9:c4:b2:
                    a9:2e:e5:12:75:f9:19:f0:e1:28:50:24:18:26:c7:
                    bd:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EE:C0:DD:BC:2C:C2:9D:B3:25:68:38:5E:4F:4E:4A:DC:A3:55:BC:33
            X509v3 Authority Key Identifier:
                keyid:C8:93:5F:DC:A5:02:8A:E8:20:9F:EC:82:AD:8A:E8:CF:B7:C6:E7:76

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/0/C8935FDCA5028AE8209FEC82AD8AE8CFB7C6E776.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/6e5d9611-fd33-488c-9aec-f4df2a25351e/fd77f55efe3a93c53ca3dc8a6f8374fe70fec5567dd1e8c855.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/0/AS400298.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fed2:7086::/48
                  2602:fed2:7189::/48
                  2602:fed2:730e::/48
                  2602:fed2:7317::/48
                  2602:fed2:7e85::/48

    Signature Algorithm: sha256WithRSAEncryption
         5c:0c:98:c0:a0:67:bc:6e:d0:de:53:41:37:5a:06:dc:0b:82:
         d8:5e:1d:dc:72:34:8e:4f:6e:45:39:65:ea:d0:d7:7e:f9:24:
         a2:08:fb:a3:d9:1b:ec:f8:56:94:61:bd:89:dd:83:fb:a0:1b:
         ec:70:90:b7:c8:0b:59:e6:39:29:b3:fa:08:55:47:5b:27:a4:
         38:99:79:cb:3d:77:a7:26:fd:d0:3e:6c:b1:e2:b3:ec:8f:3e:
         bf:fa:cc:0e:3b:6d:cb:8c:72:12:c9:fd:39:3a:4d:de:16:a4:
         00:09:e9:6b:8e:ca:84:59:58:76:a3:9d:82:9c:8a:7d:f6:64:
         cf:fd:66:bc:ff:5c:36:ac:98:18:ad:d3:69:59:63:a2:58:e8:
         35:91:09:b1:bc:92:59:ab:b0:16:13:a6:0e:6e:e6:7f:01:c4:
         da:ee:b8:a7:e6:3c:3d:d0:72:3b:e1:53:99:4d:99:75:07:33:
         5d:b1:15:f0:aa:43:92:62:9e:11:df:c0:8a:fc:98:5e:74:18:
         1f:77:7f:26:9b:db:3a:6b:46:8f:0d:9c:95:65:34:83:6f:49:
         82:64:cb:99:61:dc:52:4b:ba:9e:6f:77:6e:5d:e7:b5:76:be:
         30:4a:5c:33:bb:55:eb:57:a6:90:55:60:1d:b0:18:4d:a6:7d:
         99:f0:b4:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----