Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade80ae91df0180dbd430c822fa/0/323630323a666636323a3132333a3a2f34382d3438203d3e203631333137.roa
File:                     323630323a666636323a3132333a3a2f34382d3438203d3e203631333137.roa (raw, json)
Hash identifier:          JoQFKdQyfSoSvvrLm8TXr/u5A9NRbBs+ZSsu+R+JChc=
Subject key identifier:   A1:30:50:6C:CD:AD:CD:DA:64:A7:0B:91:14:E7:93:EA:A2:04:25:5C
Certificate issuer:       /CN=7fd6a57f4687d9bd4bb3033cae60030cd57bb36e433067c87c
Certificate serial:       5F76903057C893A2F5797257497BF0CA05A1F0DA
Authority key identifier: 9B:04:6B:66:CA:99:83:6C:E8:03:06:7D:7D:51:35:D7:6A:C0:62:68
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/6e579f5b-ec76-457b-99d5-466c7e4fefcc/7fd6a57f4687d9bd4bb3033cae60030cd57bb36e433067c87c.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade80ae91df0180dbd430c822fa/0/323630323a666636323a3132333a3a2f34382d3438203d3e203631333137.roa
Signing time:             Mon 06 Jun 2022 14:17:45 +0000
ROA not before:           Mon 06 Jun 2022 14:12:45 +0000
ROA not after:            Mon 05 Jun 2023 14:17:45 +0000
asID:                     61317
IP address blocks:        2602:ff62:123::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5f:76:90:30:57:c8:93:a2:f5:79:72:57:49:7b:f0:ca:05:a1:f0:da
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7fd6a57f4687d9bd4bb3033cae60030cd57bb36e433067c87c
        Validity
            Not Before: Jun  6 14:12:45 2022 GMT
            Not After : Jun  5 14:17:45 2023 GMT
        Subject: CN=A130506CCDADCDDA64A70B9114E793EAA204255C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:d3:24:b0:35:dd:7c:b1:97:df:1e:7f:ec:aa:
                    91:62:01:f3:d3:2e:a4:fd:f0:52:79:f2:5d:b4:e6:
                    2a:11:95:5f:1e:e2:1b:9e:8a:77:07:b6:82:b6:30:
                    42:a7:c8:b3:98:06:a7:cb:32:f7:3f:7f:fc:8e:58:
                    06:b1:c0:e0:e5:57:e7:ed:ef:29:ff:1d:98:cd:0a:
                    52:79:66:1e:ef:ab:57:7f:73:5c:ef:5e:ea:79:dc:
                    b8:bb:8c:95:e6:26:ac:6c:3c:52:d9:5d:f0:c6:e8:
                    8e:9d:7a:4d:e2:ff:71:cf:7a:54:0d:5d:30:0f:dc:
                    9a:40:75:d4:64:8f:9a:0c:1d:9d:be:78:8d:e5:4e:
                    60:12:9a:e4:1a:09:e3:e6:d7:5f:88:17:16:65:19:
                    50:c1:05:ba:cb:71:f4:be:d9:af:ad:65:00:ec:25:
                    7a:f3:31:ec:ed:53:98:82:34:1b:5c:bb:e8:d2:eb:
                    b7:1a:e9:b6:70:8a:db:3f:e3:52:db:dd:00:44:34:
                    bf:6d:5e:03:34:ea:e3:fb:51:cf:0d:8e:07:81:f6:
                    bc:8e:1d:9f:1d:b9:81:6b:25:c9:d7:3c:05:2c:2f:
                    fc:37:9d:85:73:e4:b9:c5:3d:61:a3:5a:db:90:89:
                    32:94:17:d5:e5:d4:53:b2:cf:9c:14:5a:b1:4b:3c:
                    62:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A1:30:50:6C:CD:AD:CD:DA:64:A7:0B:91:14:E7:93:EA:A2:04:25:5C
            X509v3 Authority Key Identifier:
                keyid:9B:04:6B:66:CA:99:83:6C:E8:03:06:7D:7D:51:35:D7:6A:C0:62:68

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade80ae91df0180dbd430c822fa/0/9B046B66CA99836CE803067D7D5135D76AC06268.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/6e579f5b-ec76-457b-99d5-466c7e4fefcc/7fd6a57f4687d9bd4bb3033cae60030cd57bb36e433067c87c.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade80ae91df0180dbd430c822fa/0/323630323a666636323a3132333a3a2f34382d3438203d3e203631333137.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:ff62:123::/48

    Signature Algorithm: sha256WithRSAEncryption
         2e:2d:83:6a:b5:42:25:f1:03:59:e0:6d:67:b3:56:b9:85:7b:
         a7:a8:49:d0:53:cc:33:6a:5c:90:70:69:b0:27:85:ae:b5:fd:
         3b:3a:a6:7e:bd:1c:07:af:68:87:dc:20:12:1a:f2:21:69:9a:
         a5:00:da:8a:ea:3c:cd:00:db:50:ab:66:9f:28:8f:88:93:d4:
         67:68:68:8d:7a:a7:ad:cc:18:54:ec:9c:ad:ba:01:79:96:74:
         7b:27:33:fa:db:d9:05:b1:c2:f5:bb:8c:cb:7d:79:af:0b:d4:
         9c:c1:70:bd:c2:05:91:21:36:6f:01:5c:5e:49:80:d1:57:f9:
         3c:da:7a:00:29:90:2c:67:bb:1d:89:66:e2:cc:aa:ec:a0:9c:
         d1:63:fe:fd:02:dd:ec:ae:ab:77:62:a2:cb:0a:d0:6d:a2:a2:
         d9:1b:10:ff:b3:2e:b9:ad:c3:64:4f:0f:9f:c9:a4:07:20:55:
         73:f9:dc:01:7a:aa:a1:60:46:6d:88:50:2d:b1:0c:b5:af:8e:
         a0:7d:31:e8:d9:6e:12:0f:bd:ab:3e:6a:84:01:f3:bf:e9:fc:
         8d:f8:ba:88:34:48:7a:0e:81:42:03:ca:25:87:4b:57:f1:4d:
         dc:d1:82:06:09:54:6b:2c:83:00:ad:6c:76:ba:d4:ca:45:ba:
         e4:47:fc:78
-----BEGIN CERTIFICATE-----
MIIFuzCCBKOgAwIBAgIUX3aQMFfIk6L1eXJXSXvwygWh8NowDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyN2ZkNmE1N2Y0Njg3ZDliZDRiYjMwMzNjYWU2MDAzMGNk
NTdiYjM2ZTQzMzA2N2M4N2MwHhcNMjIwNjA2MTQxMjQ1WhcNMjMwNjA1MTQxNzQ1
WjAzMTEwLwYDVQQDEyhBMTMwNTA2Q0NEQURDRERBNjRBNzBCOTExNEU3OTNFQUEy
MDQyNTVDMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAudMksDXdfLGX
3x5/7KqRYgHz0y6k/fBSefJdtOYqEZVfHuIbnop3B7aCtjBCp8izmAanyzL3P3/8
jlgGscDg5Vfn7e8p/x2YzQpSeWYe76tXf3Nc717qedy4u4yV5iasbDxS2V3wxuiO
nXpN4v9xz3pUDV0wD9yaQHXUZI+aDB2dvniN5U5gEprkGgnj5tdfiBcWZRlQwQW6
y3H0vtmvrWUA7CV68zHs7VOYgjQbXLvo0uu3Gum2cIrbP+NS290ARDS/bV4DNOrj
+1HPDY4Hgfa8jh2fHbmBayXJ1zwFLC/8N52Fc+S5xT1ho1rbkIkylBfV5dRTss+c
FFqxSzxiYQIDAQABo4ICuzCCArcwHQYDVR0OBBYEFKEwUGzNrc3aZKcLkRTnk+qi
BCVcMB8GA1UdIwQYMBaAFJsEa2bKmYNs6AMGfX1RNddqwGJoMA4GA1UdDwEB/wQE
AwIHgDCBhQYDVR0fBH4wfDB6oHigdoZ0cnN5bmM6Ly9ycGtpLXJwcy5hcmluLm5l
dC9yZXBvc2l0b3J5LzhhODQ4YWRlODBhZTkxZGYwMTgwZGJkNDMwYzgyMmZhLzAv
OUIwNDZCNjZDQTk5ODM2Q0U4MDMwNjdEN0Q1MTM1RDc2QUMwNjI2OC5jcmwwgfMG
CCsGAQUFBwEBBIHmMIHjMIHgBggrBgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmlu
Lm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2Ut
YjA4Yy0yMTcxZGEyMTU3ZDMvNzQ2ZTAxMTEtZmFmYi00MzBmLWI3NzgtZDIwNGNm
Y2Q5OWE4LzZlNTc5ZjViLWVjNzYtNDU3Yi05OWQ1LTQ2NmM3ZTRmZWZjYy83ZmQ2
YTU3ZjQ2ODdkOWJkNGJiMzAzM2NhZTYwMDMwY2Q1N2JiMzZlNDMzMDY3Yzg3Yy5j
ZXIwgagGCCsGAQUFBwELBIGbMIGYMIGVBggrBgEFBQcwC4aBiHJzeW5jOi8vcnBr
aS1ycHMuYXJpbi5uZXQvcmVwb3NpdG9yeS84YTg0OGFkZTgwYWU5MWRmMDE4MGRi
ZDQzMGM4MjJmYS8wLzMyMzYzMDMyM2E2NjY2MzYzMjNhMzEzMjMzM2EzYTJmMzQz
ODJkMzQzODIwM2QzZTIwMzYzMTMzMzEzNy5yb2EwGAYDVR0gAQH/BA4wDDAKBggr
BgEFBQcOAjAiBggrBgEFBQcBBwEB/wQTMBEwDwQCAAIwCQMHACYC/2IBIzANBgkq
hkiG9w0BAQsFAAOCAQEALi2DarVCJfEDWeBtZ7NWuYV7p6hJ0FPMM2pckHBpsCeF
rrX9Ozqmfr0cB69oh9wgEhryIWmapQDaiuo8zQDbUKtmnyiPiJPUZ2hojXqnrcwY
VOycrboBeZZ0eycz+tvZBbHC9buMy315rwvUnMFwvcIFkSE2bwFcXkmA0Vf5PNp6
ACmQLGe7HYlm4syq7KCc0WP+/QLd7K6rd2KiywrQbaKi2RsQ/7Muua3DZE8Pn8mk
ByBVc/ncAXqqoWBGbYhQLbEMta+OoH0x6NluEg+9qz5qhAHzv+n8jfi6iDRIeg6B
QgPKJYdLV/FN3NGCBglUayyDAK1sdrrUykW65Ef8eA==
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:46:31 2024 by rpki-client on console-ams.rpki-client.org