Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf80fca554018120985eeb17ca/0/323630323a666333623a6130303a3a2f34382d3438203d3e20333939393730.roa
File:                     323630323a666333623a6130303a3a2f34382d3438203d3e20333939393730.roa (raw, json)
Hash identifier:          48u6g/j7YINjthgKWA0YctII5BRYuA6dtQkD6KmO824=
Subject key identifier:   6F:E7:3D:A8:EC:52:E7:6E:44:4C:C6:28:4C:70:E6:32:E5:3B:6C:B7
Certificate issuer:       /CN=fcb20f596649f6f99762669922d3a91c5a15e31d08b352fb64
Certificate serial:       33CA73E8B1CE1DBA4DDE5B7FFC0B94EE47BADAA8
Authority key identifier: F4:A4:FB:0F:BD:32:9C:DF:C5:65:46:49:66:CF:13:19:46:9E:33:B5
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c8d421ac-3103-47a1-91ac-ed4e287bc3c8/fcb20f596649f6f99762669922d3a91c5a15e31d08b352fb64.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf80fca554018120985eeb17ca/0/323630323a666333623a6130303a3a2f34382d3438203d3e20333939393730.roa
Signing time:             Wed 01 Jun 2022 18:58:39 +0000
ROA not before:           Wed 01 Jun 2022 18:53:39 +0000
ROA not after:            Wed 31 May 2023 18:58:39 +0000
asID:                     399970
IP address blocks:        2602:fc3b:a00::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            33:ca:73:e8:b1:ce:1d:ba:4d:de:5b:7f:fc:0b:94:ee:47:ba:da:a8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fcb20f596649f6f99762669922d3a91c5a15e31d08b352fb64
        Validity
            Not Before: Jun  1 18:53:39 2022 GMT
            Not After : May 31 18:58:39 2023 GMT
        Subject: CN=6FE73DA8EC52E76E444CC6284C70E632E53B6CB7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:e2:0f:5a:ed:86:69:26:92:c9:9a:3a:84:5d:
                    db:a7:8d:d8:02:4e:8b:64:2b:00:95:4c:4f:3d:72:
                    17:23:5d:14:f9:3d:bb:06:e7:c6:ab:ad:bd:26:53:
                    10:10:6f:ec:b0:a6:39:09:4f:47:31:8d:55:9f:8f:
                    f8:34:22:89:99:82:83:09:3f:91:f8:61:79:6d:c5:
                    d5:aa:10:5e:71:87:1e:b2:ae:fb:42:f0:aa:68:d5:
                    c5:7b:df:04:e4:7f:ca:fd:c4:fd:8c:75:1b:c6:80:
                    c6:a0:85:c1:45:e2:e7:1c:34:69:85:05:b1:b5:5c:
                    7f:53:2c:d8:ef:05:6f:91:83:2b:58:9a:44:47:e2:
                    43:d6:b1:a8:0b:3c:86:b5:17:ee:f1:71:aa:29:37:
                    01:ac:ea:8b:d7:b8:b1:fc:df:7d:44:4d:b4:b3:5d:
                    b1:64:3e:17:8a:bd:9e:d5:0f:cc:1d:97:ae:e8:06:
                    a3:da:a8:b3:fb:57:e2:da:db:47:a0:a6:ec:15:f6:
                    c7:cd:f5:4d:b4:81:f0:2a:ef:24:b6:e3:29:94:20:
                    20:62:d0:d9:f6:22:33:b6:4b:1d:ba:d3:57:ef:f8:
                    1a:37:0d:cd:37:01:14:aa:72:74:1c:ff:85:2f:11:
                    eb:a7:4a:14:e5:6f:63:25:58:41:72:ac:88:60:34:
                    2d:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6F:E7:3D:A8:EC:52:E7:6E:44:4C:C6:28:4C:70:E6:32:E5:3B:6C:B7
            X509v3 Authority Key Identifier:
                keyid:F4:A4:FB:0F:BD:32:9C:DF:C5:65:46:49:66:CF:13:19:46:9E:33:B5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf80fca554018120985eeb17ca/0/F4A4FB0FBD329CDFC565464966CF1319469E33B5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c8d421ac-3103-47a1-91ac-ed4e287bc3c8/fcb20f596649f6f99762669922d3a91c5a15e31d08b352fb64.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf80fca554018120985eeb17ca/0/323630323a666333623a6130303a3a2f34382d3438203d3e20333939393730.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fc3b:a00::/48

    Signature Algorithm: sha256WithRSAEncryption
         07:51:e8:77:19:31:e5:af:6f:3c:8e:4b:ff:a0:05:bf:91:77:
         12:99:9a:3a:85:16:9f:9f:88:ce:5c:71:92:f1:d7:b5:5d:06:
         9a:20:57:c4:20:3b:2a:a8:ec:79:4e:59:07:26:12:9e:7a:fb:
         85:83:6a:c5:c0:f8:14:44:b0:64:65:8c:5a:0f:a2:2a:c1:f4:
         5f:95:fc:61:d1:27:08:af:9d:ea:33:f7:e7:5c:59:a8:4f:19:
         ee:0a:0b:0f:b5:10:bd:08:7a:5f:d8:17:b7:12:b2:f2:fd:f4:
         0c:a9:31:ba:43:92:2b:f6:d6:f9:96:41:e6:cf:b0:a6:7f:21:
         91:69:cd:6e:f1:ce:43:3e:9b:58:15:15:08:cf:52:20:9a:3f:
         dd:e4:ea:dd:62:17:90:b6:0d:90:1f:bc:7d:89:4f:6b:54:b6:
         52:1a:1e:90:47:d0:43:cd:79:3c:b7:3b:08:5e:df:fc:80:4b:
         8b:41:9e:22:e6:68:0d:96:73:95:90:8d:f5:6a:d0:54:02:92:
         15:c4:a6:48:51:46:89:7d:3e:16:57:f4:7e:d9:b5:dc:8d:ec:
         86:06:52:f9:b9:c4:e5:a0:67:de:2f:f3:79:d8:b6:52:01:bf:
         d3:a8:98:02:1a:dd:7b:72:f6:c5:13:70:23:60:b8:68:08:0f:
         46:fc:b3:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:46:39 2024 by rpki-client on console-ams.rpki-client.org