Route Origin Authorization

$ rpki-client -vvf rpki.admin.freerangecloud.com/repo/FRC-CA/3/323630323a666531333a3830303a3a2f34382d3438203d3e203533333536.roa
File:                     323630323a666531333a3830303a3a2f34382d3438203d3e203533333536.roa (raw, json)
Hash identifier:          kJBpDk+uiN47NwcOIlbHz+6Tjs2xoKPq+DZF4xk91VM=
Subject key identifier:   7E:42:E5:CF:13:AE:7F:D2:23:33:EE:EF:38:EC:2F:12:3D:98:F9:4E
Certificate issuer:       /CN=9ab28fbc8c084d36cd26d308b16702e59e01fcba681bfec9ef
Certificate serial:       1FA86D8D148AE05016880C1C28B2B0DB3EC715B0
Authority key identifier: A0:DF:8E:B2:8D:12:F9:CD:F7:A6:8B:3D:C7:A5:65:76:74:8B:2E:54
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8bb7e416-db1b-4221-a6c0-947074a20f8f/9ab28fbc8c084d36cd26d308b16702e59e01fcba681bfec9ef.cer
Subject info access:      rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/3/323630323a666531333a3830303a3a2f34382d3438203d3e203533333536.roa
Signing time:             Tue 19 Mar 2024 16:47:36 +0000
ROA not before:           Tue 19 Mar 2024 16:42:36 +0000
ROA not after:            Tue 18 Mar 2025 16:47:36 +0000
asID:                     53356
IP address blocks:        2602:fe13:800::/48 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1f:a8:6d:8d:14:8a:e0:50:16:88:0c:1c:28:b2:b0:db:3e:c7:15:b0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9ab28fbc8c084d36cd26d308b16702e59e01fcba681bfec9ef
        Validity
            Not Before: Mar 19 16:42:36 2024 GMT
            Not After : Mar 18 16:47:36 2025 GMT
        Subject: CN=7E42E5CF13AE7FD22333EEEF38EC2F123D98F94E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:c9:12:49:eb:89:53:9f:c7:f5:b0:2f:27:6e:
                    2c:74:ad:2f:ba:5d:bb:3f:84:97:c9:5f:05:ac:86:
                    1b:1a:dc:f6:c8:39:a4:f0:0c:3f:38:bc:97:08:f3:
                    48:ee:22:64:67:f9:0b:a5:b9:ce:f9:d3:26:f2:a1:
                    18:9c:d8:c0:f7:a8:90:e8:f8:d8:21:02:2a:ae:85:
                    33:fc:25:a5:2f:dd:2f:66:93:ed:d1:0c:5e:a7:fe:
                    2a:d6:61:ed:5f:aa:63:68:01:8a:5e:96:cf:bc:04:
                    12:3a:a1:8d:75:09:84:ea:0b:46:6e:a7:fb:4a:59:
                    48:c2:76:91:97:b1:36:6a:6d:d7:f2:7c:8b:6a:b8:
                    b7:8e:f7:9c:0e:a6:12:06:df:de:f5:d9:71:27:35:
                    20:b6:6e:c9:29:e7:4b:4b:6e:f2:f1:0f:00:24:19:
                    39:85:c3:de:16:3e:8b:4d:1b:c8:90:ae:7b:bc:33:
                    d2:62:ed:14:71:12:e8:68:60:37:6c:43:ee:c3:5c:
                    56:30:81:72:9a:1e:ae:51:05:c0:be:06:4b:02:30:
                    59:cf:7a:94:71:31:6f:c9:b3:77:9a:4a:39:c4:73:
                    76:ed:86:f3:70:5b:1f:05:57:75:65:a2:5f:de:f3:
                    30:7e:81:71:d1:02:30:06:0e:23:bf:44:c3:f5:91:
                    e2:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7E:42:E5:CF:13:AE:7F:D2:23:33:EE:EF:38:EC:2F:12:3D:98:F9:4E
            X509v3 Authority Key Identifier:
                keyid:A0:DF:8E:B2:8D:12:F9:CD:F7:A6:8B:3D:C7:A5:65:76:74:8B:2E:54

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/3/A0DF8EB28D12F9CDF7A68B3DC7A56576748B2E54.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8bb7e416-db1b-4221-a6c0-947074a20f8f/9ab28fbc8c084d36cd26d308b16702e59e01fcba681bfec9ef.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/3/323630323a666531333a3830303a3a2f34382d3438203d3e203533333536.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fe13:800::/48

    Signature Algorithm: sha256WithRSAEncryption
         55:47:ba:cb:57:83:68:94:ed:87:d8:6f:95:cb:6a:07:9b:c1:
         52:b8:b4:5f:cc:9f:49:c6:6c:c0:a2:21:07:f1:2b:7d:dd:ba:
         da:d0:2f:20:48:8d:99:91:b9:b0:68:5e:fe:0d:db:d9:4a:b8:
         ec:41:50:fb:da:97:bf:ec:56:73:8d:22:5d:f7:38:b8:7e:87:
         11:e7:53:a1:60:fa:81:2d:db:d7:33:63:bd:72:d1:81:4b:27:
         b0:c3:2b:58:de:1b:ca:d8:d4:8a:52:33:9b:32:6a:81:64:50:
         c3:7a:77:50:85:32:1a:92:51:a5:3c:36:5e:a2:d7:68:71:37:
         7c:21:8e:df:26:07:16:be:e6:c6:76:b9:6b:21:55:f8:1a:19:
         9a:ff:b9:ac:fe:db:d7:ae:d2:bb:f7:48:24:5e:f6:43:93:b4:
         a6:de:53:e2:99:fd:1f:dc:74:73:44:11:ab:d1:da:38:e6:59:
         4f:25:2b:c0:ea:3f:62:16:8e:6b:bc:0c:07:6c:42:5d:10:d1:
         ee:38:db:60:8c:dd:2c:b0:50:94:c4:a5:5a:38:da:98:82:d5:
         19:21:2c:c0:14:0c:2b:d6:ca:c7:e0:60:54:50:d3:a3:5d:fc:
         c4:40:aa:bf:c5:9f:2a:e2:57:ab:23:5e:23:83:be:d6:07:b9:
         87:ee:80:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----