Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade8047657e018061427a600e84/0/323630323a666333623a3a2f33362d3336203d3e20333939393730.roa
File:                     323630323a666333623a3a2f33362d3336203d3e20333939393730.roa (raw, json)
Hash identifier:          RICccHDIHsr2ZTqp9mreFthrdPcL6R9hKKGCp4uU0YA=
Subject key identifier:   44:A3:21:A5:16:57:5D:A8:C0:48:BC:E5:B4:9F:6A:BE:45:26:3D:16
Certificate issuer:       /CN=fcb20f5966cf6a75fca5d199c7d9489f8d24f713e87d112d65
Certificate serial:       0F512F725677E643FEFC5247BA6DA4BBD783DF3B
Authority key identifier: BA:53:E3:A8:C6:A2:05:3E:E8:03:4F:EA:EF:58:FE:51:FE:F4:B7:75
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/93e3cbba-b64a-4f86-b06f-9cd3813e9bde/fcb20f5966cf6a75fca5d199c7d9489f8d24f713e87d112d65.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade8047657e018061427a600e84/0/323630323a666333623a3a2f33362d3336203d3e20333939393730.roa
Signing time:             Mon 25 Apr 2022 15:10:56 +0000
ROA not before:           Mon 25 Apr 2022 15:05:56 +0000
ROA not after:            Mon 24 Apr 2023 15:10:56 +0000
asID:                     399970
IP address blocks:        2602:fc3b::/36 maxlen: 36

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0f:51:2f:72:56:77:e6:43:fe:fc:52:47:ba:6d:a4:bb:d7:83:df:3b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fcb20f5966cf6a75fca5d199c7d9489f8d24f713e87d112d65
        Validity
            Not Before: Apr 25 15:05:56 2022 GMT
            Not After : Apr 24 15:10:56 2023 GMT
        Subject: CN=44A321A516575DA8C048BCE5B49F6ABE45263D16
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:c1:de:2a:1c:28:83:d9:97:2c:94:57:99:5f:
                    da:bd:5b:28:b3:02:c7:cd:ab:20:e8:3c:58:7f:7a:
                    15:aa:06:13:79:48:10:14:3d:09:17:d8:24:af:a2:
                    5c:13:eb:31:60:f3:70:c2:7f:e3:1d:61:9d:9d:20:
                    ce:c7:a7:14:70:ae:4a:5d:4f:2d:cb:23:0f:98:10:
                    99:e4:1c:9e:82:86:25:bf:7e:c4:47:00:96:32:a9:
                    c1:82:23:94:f7:f0:0f:54:7f:c9:ca:74:9f:e9:d9:
                    8d:a0:6d:2a:7a:e4:92:25:e5:e4:c3:3e:8e:ef:80:
                    aa:11:73:49:73:6d:f9:8d:0c:5d:af:22:7f:93:21:
                    3b:e7:b2:14:1a:f1:40:44:ce:91:f6:eb:48:cf:7c:
                    e2:b7:92:06:5e:51:0a:6a:b5:5b:f7:55:91:46:56:
                    c4:83:de:46:de:d6:25:86:b5:9e:9e:e7:f0:5f:48:
                    16:92:eb:a5:d9:ce:78:5d:77:b6:d0:09:18:3a:b2:
                    d2:9e:e8:ca:a7:a0:45:23:98:30:85:7d:ac:4e:b0:
                    2f:83:91:ed:ee:98:93:f3:6d:0b:43:44:48:3e:64:
                    59:38:12:ab:4a:5e:75:e0:73:20:a3:dd:bd:7b:3c:
                    a2:77:92:94:77:60:64:50:3c:60:bc:4b:d3:1c:85:
                    45:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                44:A3:21:A5:16:57:5D:A8:C0:48:BC:E5:B4:9F:6A:BE:45:26:3D:16
            X509v3 Authority Key Identifier:
                keyid:BA:53:E3:A8:C6:A2:05:3E:E8:03:4F:EA:EF:58:FE:51:FE:F4:B7:75

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade8047657e018061427a600e84/0/BA53E3A8C6A2053EE8034FEAEF58FE51FEF4B775.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/93e3cbba-b64a-4f86-b06f-9cd3813e9bde/fcb20f5966cf6a75fca5d199c7d9489f8d24f713e87d112d65.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade8047657e018061427a600e84/0/323630323a666333623a3a2f33362d3336203d3e20333939393730.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fc3b::/36

    Signature Algorithm: sha256WithRSAEncryption
         43:fa:77:8d:42:cf:cc:82:52:8b:db:a0:13:86:98:70:8d:23:
         4d:df:8f:19:58:de:56:1c:65:44:65:87:d3:ad:e6:fc:c1:97:
         61:53:d9:b1:ed:5e:38:8e:5a:58:35:26:a3:a6:5d:9b:13:2c:
         ff:f4:25:7b:f2:8a:6b:66:f7:a3:c5:58:66:23:66:eb:0c:b9:
         9b:23:86:88:d0:24:7d:07:c1:c7:d4:d0:a5:0d:c5:61:c1:ba:
         71:de:41:38:44:38:90:cd:f9:98:68:f5:bd:c2:7a:32:82:43:
         d4:cf:17:ea:62:1f:f2:91:cc:b6:06:40:e8:c0:b7:d6:de:7d:
         cd:60:4e:d2:96:74:8b:97:33:ca:e7:3e:2c:74:f5:01:82:78:
         7e:67:db:16:5f:34:e8:95:86:9b:11:6f:54:b0:77:72:db:e1:
         e3:7d:9e:88:2a:3b:d6:98:9f:a2:6c:4a:8b:fb:49:27:01:91:
         f7:2a:9e:99:fc:c0:33:25:7e:aa:8f:ff:b4:00:f2:1e:66:94:
         35:d3:e1:5b:9b:8d:6d:d6:61:d3:d4:2c:a3:8b:66:d7:08:0f:
         75:b5:e0:82:f0:5b:e2:56:74:0c:49:90:7c:2d:9d:97:af:61:
         a0:fd:0d:bb:31:1f:a3:a9:27:99:96:21:88:8c:23:eb:39:8c:
         bf:92:36:a9
-----BEGIN CERTIFICATE-----
MIIFtDCCBJygAwIBAgIUD1EvclZ35kP+/FJHum2ku9eD3zswDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyZmNiMjBmNTk2NmNmNmE3NWZjYTVkMTk5YzdkOTQ4OWY4
ZDI0ZjcxM2U4N2QxMTJkNjUwHhcNMjIwNDI1MTUwNTU2WhcNMjMwNDI0MTUxMDU2
WjAzMTEwLwYDVQQDEyg0NEEzMjFBNTE2NTc1REE4QzA0OEJDRTVCNDlGNkFCRTQ1
MjYzRDE2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0MHeKhwog9mX
LJRXmV/avVsoswLHzasg6DxYf3oVqgYTeUgQFD0JF9gkr6JcE+sxYPNwwn/jHWGd
nSDOx6cUcK5KXU8tyyMPmBCZ5ByegoYlv37ERwCWMqnBgiOU9/APVH/JynSf6dmN
oG0qeuSSJeXkwz6O74CqEXNJc235jQxdryJ/kyE757IUGvFARM6R9utIz3zit5IG
XlEKarVb91WRRlbEg95G3tYlhrWenufwX0gWkuul2c54XXe20AkYOrLSnujKp6BF
I5gwhX2sTrAvg5Ht7piT820LQ0RIPmRZOBKrSl514HMgo929ezyid5KUd2BkUDxg
vEvTHIVFpwIDAQABo4ICtDCCArAwHQYDVR0OBBYEFESjIaUWV12owEi85bSfar5F
Jj0WMB8GA1UdIwQYMBaAFLpT46jGogU+6ANP6u9Y/lH+9Ld1MA4GA1UdDwEB/wQE
AwIHgDCBhQYDVR0fBH4wfDB6oHigdoZ0cnN5bmM6Ly9ycGtpLXJwcy5hcmluLm5l
dC9yZXBvc2l0b3J5LzhhODQ4YWRlODA0NzY1N2UwMTgwNjE0MjdhNjAwZTg0LzAv
QkE1M0UzQThDNkEyMDUzRUU4MDM0RkVBRUY1OEZFNTFGRUY0Qjc3NS5jcmwwgfMG
CCsGAQUFBwEBBIHmMIHjMIHgBggrBgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmlu
Lm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2Ut
YjA4Yy0yMTcxZGEyMTU3ZDMvMDM1NzI3MmMtYTc5YS00NWJmLTk1ODYtOTJkZDQ5
ZWYzMjIzLzkzZTNjYmJhLWI2NGEtNGY4Ni1iMDZmLTljZDM4MTNlOWJkZS9mY2Iy
MGY1OTY2Y2Y2YTc1ZmNhNWQxOTljN2Q5NDg5ZjhkMjRmNzEzZTg3ZDExMmQ2NS5j
ZXIwgaIGCCsGAQUFBwELBIGVMIGSMIGPBggrBgEFBQcwC4aBgnJzeW5jOi8vcnBr
aS1ycHMuYXJpbi5uZXQvcmVwb3NpdG9yeS84YTg0OGFkZTgwNDc2NTdlMDE4MDYx
NDI3YTYwMGU4NC8wLzMyMzYzMDMyM2E2NjYzMzM2MjNhM2EyZjMzMzYyZDMzMzYy
MDNkM2UyMDMzMzkzOTM5MzczMC5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcO
AjAhBggrBgEFBQcBBwEB/wQSMBAwDgQCAAIwCAMGBCYC/DsAMA0GCSqGSIb3DQEB
CwUAA4IBAQBD+neNQs/MglKL26AThphwjSNN348ZWN5WHGVEZYfTreb8wZdhU9mx
7V44jlpYNSajpl2bEyz/9CV78oprZvejxVhmI2brDLmbI4aI0CR9B8HH1NClDcVh
wbpx3kE4RDiQzfmYaPW9wnoygkPUzxfqYh/ykcy2BkDowLfW3n3NYE7SlnSLlzPK
5z4sdPUBgnh+Z9sWXzTolYabEW9UsHdy2+HjfZ6IKjvWmJ+ibEqL+0knAZH3Kp6Z
/MAzJX6qj/+0APIeZpQ10+Fbm41t1mHT1Cyji2bXCA91teCC8FviVnQMSZB8LZ2X
r2Gg/Q27MR+jqSeZliGIjCPrOYy/kjap
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:46:31 2024 by rpki-client on console-ams.rpki-client.org