Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade80ae91df0180dbd430c822fa/0/323630323a666636323a3130353a3a2f34382d3438203d3e203631333137.roa
File:                     323630323a666636323a3130353a3a2f34382d3438203d3e203631333137.roa (raw, json)
Hash identifier:          uCVJFWrlYOOupTUv7u0liwwAWlTsouxOtxgmJKNAXYg=
Subject key identifier:   55:01:2D:12:3E:59:78:34:3E:DF:FD:54:C2:51:23:DB:F6:5A:39:9B
Certificate issuer:       /CN=7fd6a57f4687d9bd4bb3033cae60030cd57bb36e433067c87c
Certificate serial:       6228061326B02F26EE42A29942E0334C81BD5633
Authority key identifier: 9B:04:6B:66:CA:99:83:6C:E8:03:06:7D:7D:51:35:D7:6A:C0:62:68
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/6e579f5b-ec76-457b-99d5-466c7e4fefcc/7fd6a57f4687d9bd4bb3033cae60030cd57bb36e433067c87c.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade80ae91df0180dbd430c822fa/0/323630323a666636323a3130353a3a2f34382d3438203d3e203631333137.roa
Signing time:             Mon 06 Jun 2022 14:17:43 +0000
ROA not before:           Mon 06 Jun 2022 14:12:43 +0000
ROA not after:            Mon 05 Jun 2023 14:17:43 +0000
asID:                     61317
IP address blocks:        2602:ff62:105::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            62:28:06:13:26:b0:2f:26:ee:42:a2:99:42:e0:33:4c:81:bd:56:33
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7fd6a57f4687d9bd4bb3033cae60030cd57bb36e433067c87c
        Validity
            Not Before: Jun  6 14:12:43 2022 GMT
            Not After : Jun  5 14:17:43 2023 GMT
        Subject: CN=55012D123E5978343EDFFD54C25123DBF65A399B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:53:fe:a8:2a:f2:6c:49:3e:b0:b3:2d:6b:65:
                    44:e7:72:79:56:91:77:2e:be:68:25:f8:99:81:e0:
                    8d:4a:37:11:b1:d2:ca:72:de:86:d3:ff:e6:31:f5:
                    1d:b5:39:a3:9c:2b:20:78:a4:d4:54:5b:51:a9:d0:
                    3f:e7:76:ef:b0:89:8e:be:9a:44:6d:8a:ff:24:ac:
                    a0:a4:80:b2:04:98:d9:06:db:71:2b:e1:1f:c4:0b:
                    b8:10:92:3f:aa:13:a0:64:e3:2c:0d:fc:54:7c:19:
                    c7:97:7a:62:89:0e:04:5a:5c:59:d7:75:3f:83:0e:
                    1b:2b:b1:43:32:7f:4f:62:c3:05:86:c6:f0:25:a1:
                    a4:af:1e:1c:14:a3:a0:5e:b5:37:df:29:e8:5a:ff:
                    52:4d:6e:e1:3f:14:fb:19:4c:0c:7e:55:3b:04:e9:
                    a4:33:5b:5f:11:0c:41:30:af:31:6e:88:9e:b7:8a:
                    cd:92:ee:e5:f4:22:30:a2:c1:7c:0f:b9:d8:1e:95:
                    9f:e3:2a:ee:b0:11:ca:01:c1:05:67:b7:3f:15:57:
                    87:a2:01:65:12:bb:d3:45:05:ad:bb:ce:57:9b:48:
                    f8:79:65:27:70:bd:7e:f0:49:af:e8:ff:9b:08:0a:
                    21:3b:59:6b:4e:1f:8d:45:e6:19:38:39:75:d6:f5:
                    8c:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                55:01:2D:12:3E:59:78:34:3E:DF:FD:54:C2:51:23:DB:F6:5A:39:9B
            X509v3 Authority Key Identifier:
                keyid:9B:04:6B:66:CA:99:83:6C:E8:03:06:7D:7D:51:35:D7:6A:C0:62:68

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade80ae91df0180dbd430c822fa/0/9B046B66CA99836CE803067D7D5135D76AC06268.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/6e579f5b-ec76-457b-99d5-466c7e4fefcc/7fd6a57f4687d9bd4bb3033cae60030cd57bb36e433067c87c.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade80ae91df0180dbd430c822fa/0/323630323a666636323a3130353a3a2f34382d3438203d3e203631333137.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:ff62:105::/48

    Signature Algorithm: sha256WithRSAEncryption
         33:97:ec:ce:74:8f:2c:25:61:44:40:85:45:c3:5d:b2:3b:c1:
         86:1a:19:1f:e2:17:07:76:5a:3f:21:79:f1:d7:3c:67:f6:e6:
         a3:3b:a7:6d:ab:ae:15:11:47:bd:45:b3:80:b8:12:77:73:61:
         fe:2a:9c:a9:61:8b:16:5b:85:4c:05:78:95:20:49:a3:9f:2c:
         4d:81:f0:22:67:aa:e1:cd:25:fe:4f:bd:04:25:cb:bd:9c:b2:
         dd:44:54:55:b2:70:c8:dd:7a:33:9a:8e:c9:21:f6:e4:a9:8f:
         3a:d8:bd:2e:6e:c5:22:0f:d6:dc:7e:33:b9:f0:0f:40:03:d2:
         5b:34:1f:97:e2:04:d5:26:67:ff:b8:55:53:b9:de:f9:80:f3:
         a6:58:b9:6c:fe:dc:33:27:aa:e4:a5:e8:a3:43:50:96:ee:ee:
         2b:d2:25:a3:6f:1f:8f:a2:54:b5:12:d0:cb:b5:f6:ef:38:24:
         b5:61:25:cb:6e:f8:14:64:a0:01:ff:16:bb:43:fd:e3:9f:80:
         c2:15:23:fa:22:b5:41:27:42:9a:57:f4:95:7f:31:b8:67:2b:
         61:33:ea:b7:d4:16:a0:d7:15:7c:bf:2d:3f:fd:78:74:ef:e8:
         db:94:ba:65:a0:96:cc:bd:18:05:d1:c0:05:ea:ba:c0:88:a3:
         4c:b9:b7:ad
-----BEGIN CERTIFICATE-----
MIIFuzCCBKOgAwIBAgIUYigGEyawLybuQqKZQuAzTIG9VjMwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyN2ZkNmE1N2Y0Njg3ZDliZDRiYjMwMzNjYWU2MDAzMGNk
NTdiYjM2ZTQzMzA2N2M4N2MwHhcNMjIwNjA2MTQxMjQzWhcNMjMwNjA1MTQxNzQz
WjAzMTEwLwYDVQQDEyg1NTAxMkQxMjNFNTk3ODM0M0VERkZENTRDMjUxMjNEQkY2
NUEzOTlCMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyVP+qCrybEk+
sLMta2VE53J5VpF3Lr5oJfiZgeCNSjcRsdLKct6G0//mMfUdtTmjnCsgeKTUVFtR
qdA/53bvsImOvppEbYr/JKygpICyBJjZBttxK+EfxAu4EJI/qhOgZOMsDfxUfBnH
l3piiQ4EWlxZ13U/gw4bK7FDMn9PYsMFhsbwJaGkrx4cFKOgXrU33ynoWv9STW7h
PxT7GUwMflU7BOmkM1tfEQxBMK8xboiet4rNku7l9CIwosF8D7nYHpWf4yrusBHK
AcEFZ7c/FVeHogFlErvTRQWtu85Xm0j4eWUncL1+8Emv6P+bCAohO1lrTh+NReYZ
ODl11vWMHQIDAQABo4ICuzCCArcwHQYDVR0OBBYEFFUBLRI+WXg0Pt/9VMJRI9v2
WjmbMB8GA1UdIwQYMBaAFJsEa2bKmYNs6AMGfX1RNddqwGJoMA4GA1UdDwEB/wQE
AwIHgDCBhQYDVR0fBH4wfDB6oHigdoZ0cnN5bmM6Ly9ycGtpLXJwcy5hcmluLm5l
dC9yZXBvc2l0b3J5LzhhODQ4YWRlODBhZTkxZGYwMTgwZGJkNDMwYzgyMmZhLzAv
OUIwNDZCNjZDQTk5ODM2Q0U4MDMwNjdEN0Q1MTM1RDc2QUMwNjI2OC5jcmwwgfMG
CCsGAQUFBwEBBIHmMIHjMIHgBggrBgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmlu
Lm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2Ut
YjA4Yy0yMTcxZGEyMTU3ZDMvNzQ2ZTAxMTEtZmFmYi00MzBmLWI3NzgtZDIwNGNm
Y2Q5OWE4LzZlNTc5ZjViLWVjNzYtNDU3Yi05OWQ1LTQ2NmM3ZTRmZWZjYy83ZmQ2
YTU3ZjQ2ODdkOWJkNGJiMzAzM2NhZTYwMDMwY2Q1N2JiMzZlNDMzMDY3Yzg3Yy5j
ZXIwgagGCCsGAQUFBwELBIGbMIGYMIGVBggrBgEFBQcwC4aBiHJzeW5jOi8vcnBr
aS1ycHMuYXJpbi5uZXQvcmVwb3NpdG9yeS84YTg0OGFkZTgwYWU5MWRmMDE4MGRi
ZDQzMGM4MjJmYS8wLzMyMzYzMDMyM2E2NjY2MzYzMjNhMzEzMDM1M2EzYTJmMzQz
ODJkMzQzODIwM2QzZTIwMzYzMTMzMzEzNy5yb2EwGAYDVR0gAQH/BA4wDDAKBggr
BgEFBQcOAjAiBggrBgEFBQcBBwEB/wQTMBEwDwQCAAIwCQMHACYC/2IBBTANBgkq
hkiG9w0BAQsFAAOCAQEAM5fsznSPLCVhRECFRcNdsjvBhhoZH+IXB3ZaPyF58dc8
Z/bmozunbauuFRFHvUWzgLgSd3Nh/iqcqWGLFluFTAV4lSBJo58sTYHwImeq4c0l
/k+9BCXLvZyy3URUVbJwyN16M5qOySH25KmPOti9Lm7FIg/W3H4zufAPQAPSWzQf
l+IE1SZn/7hVU7ne+YDzpli5bP7cMyeq5KXoo0NQlu7uK9Ilo28fj6JUtRLQy7X2
7zgktWEly274FGSgAf8Wu0P945+AwhUj+iK1QSdCmlf0lX8xuGcrYTPqt9QWoNcV
fL8tP/14dO/o25S6ZaCWzL0YBdHABeq6wIijTLm3rQ==
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:46:31 2024 by rpki-client on console-ams.rpki-client.org