Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade860446e40186045780dc0024/0/323630323a666333623a3a2f34382d3438203d3e20333939393730.roa
File:                     323630323a666333623a3a2f34382d3438203d3e20333939393730.roa (raw, json)
Hash identifier:          RAauCY48bZTxJNYGmQ8dpmqjssB7+ppTP50AnwqfqZ4=
Subject key identifier:   98:A6:B4:37:25:76:18:CC:75:C3:66:C6:51:8E:AD:D0:4E:14:F0:0D
Certificate issuer:       /CN=fcb20f5966064b7393431d7702b18d610fc871d49c0dc355f1
Certificate serial:       7743E419774D0BD585446965D122B8A9D28B1FE5
Authority key identifier: E6:90:83:63:80:85:3D:B0:77:35:66:AB:46:20:AC:B4:F3:DD:3E:37
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/93dbef53-2166-44a6-a13b-260fc343eeee/fcb20f5966064b7393431d7702b18d610fc871d49c0dc355f1.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade860446e40186045780dc0024/0/323630323a666333623a3a2f34382d3438203d3e20333939393730.roa
Signing time:             Mon 30 Jan 2023 20:23:19 +0000
ROA not before:           Mon 30 Jan 2023 20:18:19 +0000
ROA not after:            Mon 29 Jan 2024 20:23:19 +0000
asID:                     399970
IP address blocks:        2602:fc3b::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            77:43:e4:19:77:4d:0b:d5:85:44:69:65:d1:22:b8:a9:d2:8b:1f:e5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fcb20f5966064b7393431d7702b18d610fc871d49c0dc355f1
        Validity
            Not Before: Jan 30 20:18:19 2023 GMT
            Not After : Jan 29 20:23:19 2024 GMT
        Subject: CN=98A6B437257618CC75C366C6518EADD04E14F00D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:20:9a:03:54:13:2e:94:8b:f5:0f:87:a5:02:
                    d0:9d:23:fc:e3:70:da:b4:68:df:0e:0d:d4:1b:87:
                    9a:db:af:ac:3a:97:11:27:fa:50:92:cd:77:33:ca:
                    36:10:87:7f:c3:b7:5e:11:78:40:00:23:8e:27:69:
                    ab:86:4b:1e:ce:86:3f:5e:21:1c:22:19:91:bc:9a:
                    86:fc:76:24:29:c6:ed:2f:a9:49:ee:49:11:42:5c:
                    20:a9:a6:71:d4:ba:91:46:54:89:1e:29:50:4a:b3:
                    e9:14:87:49:b0:e4:c8:93:25:e9:4d:f6:e0:d2:4a:
                    18:e6:2a:fe:8c:c8:82:24:2a:f2:72:7c:de:82:d4:
                    40:c5:8e:99:87:84:ad:e0:f2:54:aa:6e:f0:c2:fb:
                    79:67:48:0f:33:4d:68:ae:9d:8d:35:2e:ba:09:99:
                    4e:2c:13:0c:f2:20:5b:16:98:e6:77:88:ff:f6:5c:
                    4e:9e:ab:68:c3:a3:ee:c4:9d:ae:59:66:a8:ff:d4:
                    04:f7:30:4a:5e:0b:18:c7:e6:64:2f:67:a6:eb:96:
                    d6:7d:e1:c5:23:08:84:18:d5:00:f5:92:99:cb:74:
                    f1:1b:e3:0e:cd:d3:f2:be:31:57:61:0b:88:7b:69:
                    71:d9:73:28:ef:9e:d1:11:96:46:5b:6a:e0:56:17:
                    3f:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                98:A6:B4:37:25:76:18:CC:75:C3:66:C6:51:8E:AD:D0:4E:14:F0:0D
            X509v3 Authority Key Identifier:
                keyid:E6:90:83:63:80:85:3D:B0:77:35:66:AB:46:20:AC:B4:F3:DD:3E:37

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade860446e40186045780dc0024/0/E690836380853DB0773566AB4620ACB4F3DD3E37.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/93dbef53-2166-44a6-a13b-260fc343eeee/fcb20f5966064b7393431d7702b18d610fc871d49c0dc355f1.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade860446e40186045780dc0024/0/323630323a666333623a3a2f34382d3438203d3e20333939393730.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fc3b::/48

    Signature Algorithm: sha256WithRSAEncryption
         50:fb:d2:6d:28:2e:0f:d5:7b:e8:38:64:ea:a0:46:ff:8a:34:
         56:25:1b:88:f2:07:cd:14:07:3c:52:c2:a1:d6:4f:11:02:df:
         7c:53:aa:49:d8:a6:ae:9c:2c:45:4a:f5:3a:b4:70:2d:be:27:
         55:b8:37:41:9a:79:94:78:a8:de:79:a5:b3:12:1a:2c:a3:16:
         02:35:50:5c:f0:91:f1:40:df:05:1d:2d:a1:3a:3e:90:c8:ed:
         4f:dc:8b:26:df:62:d5:09:9e:93:6b:71:08:49:11:8a:92:63:
         bc:9c:29:ce:44:63:7c:16:73:97:00:92:f8:43:69:15:b5:e5:
         24:c1:5d:06:29:ea:f8:8c:0b:1f:f8:ca:ea:6f:75:83:ac:64:
         cd:fd:70:bc:32:2a:1d:4d:c8:fc:1e:59:60:61:4e:05:23:ee:
         2e:8b:4a:38:a4:b6:f6:e8:0b:2e:dd:8f:9b:62:cb:b6:5e:fb:
         a7:d6:16:83:ad:8d:8d:30:59:27:b0:1a:93:94:1b:5c:6d:82:
         4b:16:2c:e1:a1:5e:d0:02:81:1d:e5:a1:e9:ec:60:2a:8f:fc:
         32:99:ab:02:97:89:8f:15:42:90:35:8f:13:8f:55:27:9d:93:
         33:e3:d8:c7:99:36:ee:6c:cd:14:d2:bb:2e:af:40:44:c2:79:
         71:ca:15:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:41:04 2024 by rpki-client on console-fra.rpki-client.org