Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/4cab817b6be149c483d19430e2545310/0/323630323a666333623a3530303a3a2f34382d3438203d3e20333939393730.roa
File:                     323630323a666333623a3530303a3a2f34382d3438203d3e20333939393730.roa (raw, json)
Hash identifier:          /ZUI6tMbcrsXRrzZVxDCEDvSHvyyJSD5NwgEsybmpLI=
Subject key identifier:   E0:89:81:0B:22:76:6D:98:52:5E:DC:C2:C7:EB:12:32:5E:20:52:3E
Certificate issuer:       /CN=fcb20f59660c2effab022b7202c124ac0364a3f2f92f1e7faa
Certificate serial:       018D18BAE9859AC8D356B1A64D57DAD31C723C53
Authority key identifier: B7:A0:74:D4:47:42:17:9D:41:03:F2:F9:2B:8D:D7:BE:39:57:5C:D5
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9c64d4ad-841b-40a9-957c-3cd1fe6bb15d/fcb20f59660c2effab022b7202c124ac0364a3f2f92f1e7faa.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/4cab817b6be149c483d19430e2545310/0/323630323a666333623a3530303a3a2f34382d3438203d3e20333939393730.roa
Signing time:             Fri 18 Apr 2025 22:22:48 +0000
ROA not before:           Fri 18 Apr 2025 22:17:48 +0000
ROA not after:            Fri 17 Apr 2026 22:22:48 +0000
asID:                     399970
IP address blocks:        2602:fc3b:500::/48 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8d:18:ba:e9:85:9a:c8:d3:56:b1:a6:4d:57:da:d3:1c:72:3c:53
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fcb20f59660c2effab022b7202c124ac0364a3f2f92f1e7faa
        Validity
            Not Before: Apr 18 22:17:48 2025 GMT
            Not After : Apr 17 22:22:48 2026 GMT
        Subject: CN=E089810B22766D98525EDCC2C7EB12325E20523E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:c0:72:f9:88:7d:9f:3c:bc:05:2b:63:e0:2d:
                    6f:e4:aa:d8:2e:27:c8:9c:86:54:e5:b6:fc:c9:a4:
                    cc:48:11:31:f0:95:ba:6d:4b:70:c7:f0:d8:23:b8:
                    88:e6:36:0a:6c:d5:65:92:46:90:30:65:01:ff:75:
                    26:df:a4:4f:40:bd:f2:fb:86:24:bb:9f:a6:2b:2e:
                    2b:02:f7:70:26:c4:f1:0b:de:c6:a4:22:3b:a4:9f:
                    36:e5:94:c1:b6:c3:7b:4a:6d:62:f7:d3:90:f0:79:
                    4a:f5:5e:5d:79:58:91:2b:91:7b:9c:53:f6:d5:58:
                    91:a9:f9:cd:8a:c9:c7:a2:b5:dc:7a:7c:b7:d5:e0:
                    d9:5d:96:25:38:a8:30:80:df:b7:87:1f:db:01:d6:
                    25:bf:67:60:de:2c:30:1d:28:bf:10:f1:7e:d1:cc:
                    d6:f2:41:f4:e3:78:df:40:22:a7:b5:b5:a7:e5:80:
                    13:f9:1e:5c:46:77:5c:e4:0e:b9:6c:d7:47:32:be:
                    c5:23:7c:c0:c9:de:ca:be:3f:79:6b:4b:f5:fe:d6:
                    18:b7:b3:74:f0:e3:30:b8:c1:17:5d:44:c3:65:e0:
                    94:9c:de:5c:d3:e0:76:58:35:6c:ac:6a:c7:6a:6a:
                    7d:f2:37:e2:bc:fd:46:f7:35:cd:74:73:3e:54:88:
                    fd:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E0:89:81:0B:22:76:6D:98:52:5E:DC:C2:C7:EB:12:32:5E:20:52:3E
            X509v3 Authority Key Identifier:
                keyid:B7:A0:74:D4:47:42:17:9D:41:03:F2:F9:2B:8D:D7:BE:39:57:5C:D5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/4cab817b6be149c483d19430e2545310/0/B7A074D44742179D4103F2F92B8DD7BE39575CD5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9c64d4ad-841b-40a9-957c-3cd1fe6bb15d/fcb20f59660c2effab022b7202c124ac0364a3f2f92f1e7faa.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/4cab817b6be149c483d19430e2545310/0/323630323a666333623a3530303a3a2f34382d3438203d3e20333939393730.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fc3b:500::/48

    Signature Algorithm: sha256WithRSAEncryption
         10:93:9b:dd:c7:08:6a:d2:f7:91:17:46:20:11:5a:a2:13:06:
         25:34:54:f2:ca:f9:3a:d4:cc:a7:48:67:d6:f6:a5:f7:90:6e:
         b0:83:87:0e:44:b0:1a:02:05:f0:fb:57:8e:a4:04:cf:32:33:
         c5:58:8e:16:4e:ed:f8:91:64:36:2a:57:9f:6a:d8:5d:27:05:
         16:7c:7c:f6:ff:54:22:18:14:8e:7e:0a:66:28:6d:f2:9e:d3:
         03:87:7f:41:e1:46:14:db:c8:d4:b8:e3:dc:43:29:1e:c0:06:
         2e:ad:15:d4:e7:73:44:64:0b:cd:08:2a:bb:0a:65:d5:ac:fc:
         a4:a9:c3:66:30:dd:d2:f2:b5:d6:68:91:b5:ed:5f:c5:95:d5:
         b5:3b:e1:b5:9f:ca:a7:2b:23:34:2d:f3:e7:74:85:06:94:03:
         c1:83:2e:80:8a:d5:d9:f7:61:56:38:0c:25:b6:40:0f:d4:38:
         bf:ec:db:e0:e5:6b:2a:6c:b3:4d:16:1e:53:b9:27:11:12:6a:
         b9:af:11:70:d7:d3:08:1b:e9:2b:a9:ff:c5:10:c9:75:6e:65:
         8b:5d:92:b9:f3:87:b7:d3:d9:ed:1e:9b:9d:c1:6a:44:d6:e6:
         e1:68:55:ae:b3:4a:96:1e:63:db:e7:ae:1e:6c:b5:67:32:12:
         36:9e:e8:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 06:42:43 2025 by rpki-client