Route Origin Authorization

$ rpki-client -vvf rpki.admin.freerangecloud.com/repo/FRC-CA/3/323630323a666531333a3830303a3a2f34382d3438203d3e203534313333.roa
File:                     323630323a666531333a3830303a3a2f34382d3438203d3e203534313333.roa (raw, json)
Hash identifier:          Se3+b2cVbR7VL105Oq+zdo7asdUm+3mGrWS94eOd4pI=
Subject key identifier:   C2:4B:7A:0D:79:13:1A:8C:DD:B8:00:3E:F7:9D:BD:14:50:D9:A4:34
Certificate issuer:       /CN=9ab28fbc8c084d36cd26d308b16702e59e01fcba681bfec9ef
Certificate serial:       6A22D9827D6D3E4FDB3A6CD3EA5A2370A72686C4
Authority key identifier: A0:DF:8E:B2:8D:12:F9:CD:F7:A6:8B:3D:C7:A5:65:76:74:8B:2E:54
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8bb7e416-db1b-4221-a6c0-947074a20f8f/9ab28fbc8c084d36cd26d308b16702e59e01fcba681bfec9ef.cer
Subject info access:      rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/3/323630323a666531333a3830303a3a2f34382d3438203d3e203534313333.roa
Signing time:             Tue 19 Mar 2024 15:31:39 +0000
ROA not before:           Tue 19 Mar 2024 15:26:39 +0000
ROA not after:            Tue 18 Mar 2025 15:31:39 +0000
asID:                     54133
IP address blocks:        2602:fe13:800::/48 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6a:22:d9:82:7d:6d:3e:4f:db:3a:6c:d3:ea:5a:23:70:a7:26:86:c4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9ab28fbc8c084d36cd26d308b16702e59e01fcba681bfec9ef
        Validity
            Not Before: Mar 19 15:26:39 2024 GMT
            Not After : Mar 18 15:31:39 2025 GMT
        Subject: CN=C24B7A0D79131A8CDDB8003EF79DBD1450D9A434
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:88:76:a0:60:6f:41:88:df:53:f5:37:c2:05:
                    f2:0b:9a:fa:d2:8e:3c:b7:73:30:cb:95:a8:20:e1:
                    38:72:bd:22:98:35:0b:33:bb:e8:39:5c:bc:b8:a3:
                    3d:52:75:89:82:93:51:2d:93:ab:fc:87:c9:d3:61:
                    21:0c:80:ee:66:72:41:54:8f:7e:2e:fb:91:66:3e:
                    38:03:54:d6:18:94:19:cf:11:80:cd:35:4e:45:6d:
                    10:58:87:a2:84:a6:46:61:6a:2b:b8:a1:7c:bd:2d:
                    45:2d:e0:c7:4b:2c:af:c4:e2:ce:74:81:42:d4:87:
                    9c:36:20:eb:99:02:ef:b9:2b:69:0b:81:31:3d:cd:
                    e5:a2:77:d0:be:e0:41:50:09:5f:cd:58:fb:0a:78:
                    26:13:79:d8:c5:2c:98:bd:5b:79:27:06:bd:aa:8f:
                    b7:b2:d3:19:1d:2d:31:7c:cd:de:d6:7e:68:b3:e1:
                    c9:ce:f1:5e:21:13:e4:7f:0f:b6:0f:8a:47:8b:f8:
                    27:9a:52:d7:41:63:f2:4e:0c:da:73:81:0a:2e:b9:
                    0a:c8:ab:5f:3a:da:30:1e:8a:cc:b1:b2:f0:e5:fc:
                    f1:ff:bd:76:8e:7b:3f:62:53:ad:c6:a0:1d:db:f6:
                    1b:3a:e2:2d:bf:09:91:f2:00:ce:27:73:a1:68:ff:
                    24:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C2:4B:7A:0D:79:13:1A:8C:DD:B8:00:3E:F7:9D:BD:14:50:D9:A4:34
            X509v3 Authority Key Identifier:
                keyid:A0:DF:8E:B2:8D:12:F9:CD:F7:A6:8B:3D:C7:A5:65:76:74:8B:2E:54

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/3/A0DF8EB28D12F9CDF7A68B3DC7A56576748B2E54.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8bb7e416-db1b-4221-a6c0-947074a20f8f/9ab28fbc8c084d36cd26d308b16702e59e01fcba681bfec9ef.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/3/323630323a666531333a3830303a3a2f34382d3438203d3e203534313333.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fe13:800::/48

    Signature Algorithm: sha256WithRSAEncryption
         bb:11:52:66:a7:0d:35:81:7f:0a:ce:5f:e0:45:1d:75:33:c5:
         72:f3:e4:e3:3c:60:63:a4:86:ee:21:34:d4:85:d3:81:74:01:
         8b:eb:e5:77:89:74:6b:a6:36:21:a7:fa:82:14:ab:fe:ab:83:
         77:d6:c5:e9:eb:1c:d8:d4:b0:aa:83:1e:34:7f:a2:7e:ce:f1:
         2d:ef:dd:30:ed:30:74:53:d9:52:e6:e4:01:4d:40:79:5d:b5:
         96:25:83:8f:d6:6a:b4:4a:13:db:bc:ad:b0:a7:a5:0a:d9:e5:
         5a:0d:ab:45:46:8c:c6:4d:d5:29:78:c4:16:27:05:9c:cb:c3:
         f4:84:02:2f:92:cb:fe:42:12:cb:bd:a1:0f:6c:e3:52:c7:af:
         b4:bc:02:2c:d4:04:aa:0e:b5:6d:60:38:d4:4e:fa:a8:a2:4c:
         d5:8a:c0:3f:db:dd:cc:69:02:00:14:46:f5:39:e4:50:78:33:
         dd:a0:b8:74:f8:ef:1b:7a:01:6d:b0:29:0d:ae:4a:fc:b0:e0:
         f4:0b:1e:25:be:5d:76:1f:77:88:4f:65:fd:1a:d5:cc:f0:8c:
         bb:3d:8d:5d:8f:4a:6d:68:a2:ed:cf:7d:37:8b:14:c2:90:e5:
         27:31:81:ac:2b:f5:b7:9e:7d:8c:30:93:50:8b:dd:e6:9f:1f:
         24:0e:10:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----