Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade80ae91df0180dbd430c822fa/0/323630323a666636323a3230303a3a2f34302d3430203d3e203631333137.roa
File:                     323630323a666636323a3230303a3a2f34302d3430203d3e203631333137.roa (raw, json)
Hash identifier:          3jbLuzfkj6ReM3CObZicSqYz4fqmRJIxSXdEQVpY8Dg=
Subject key identifier:   16:FD:E3:B7:10:CF:16:C9:AC:F5:3C:F4:AF:A4:43:00:36:FA:A5:97
Certificate issuer:       /CN=7fd6a57f4687d9bd4bb3033cae60030cd57bb36e433067c87c
Certificate serial:       14B8C73A8ACF9F463889BCA6A5B0F3C54F7746B5
Authority key identifier: 9B:04:6B:66:CA:99:83:6C:E8:03:06:7D:7D:51:35:D7:6A:C0:62:68
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/6e579f5b-ec76-457b-99d5-466c7e4fefcc/7fd6a57f4687d9bd4bb3033cae60030cd57bb36e433067c87c.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade80ae91df0180dbd430c822fa/0/323630323a666636323a3230303a3a2f34302d3430203d3e203631333137.roa
Signing time:             Mon 06 Jun 2022 14:17:57 +0000
ROA not before:           Mon 06 Jun 2022 14:12:57 +0000
ROA not after:            Mon 05 Jun 2023 14:17:57 +0000
asID:                     61317
IP address blocks:        2602:ff62:200::/40 maxlen: 40

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            14:b8:c7:3a:8a:cf:9f:46:38:89:bc:a6:a5:b0:f3:c5:4f:77:46:b5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7fd6a57f4687d9bd4bb3033cae60030cd57bb36e433067c87c
        Validity
            Not Before: Jun  6 14:12:57 2022 GMT
            Not After : Jun  5 14:17:57 2023 GMT
        Subject: CN=16FDE3B710CF16C9ACF53CF4AFA4430036FAA597
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:84:a0:20:67:31:47:b0:9f:3d:8e:e7:a9:c2:
                    a6:28:35:60:18:29:74:ac:1e:07:ce:5c:13:5e:07:
                    1e:cc:d9:34:81:12:59:e3:be:30:b4:e1:0a:66:34:
                    1f:a3:55:b4:dd:74:59:c4:77:b3:d2:65:15:51:3d:
                    77:88:c9:36:6c:b8:42:06:79:59:ba:9e:ba:5d:49:
                    20:f4:29:ca:06:f4:b8:0f:35:42:67:17:66:3c:1a:
                    2d:1b:06:41:6c:12:97:15:28:06:50:20:fb:46:20:
                    33:4b:ee:86:61:b7:fa:7f:61:36:dc:e2:ef:de:32:
                    e0:30:ad:f4:76:b7:c6:fc:d8:af:34:05:fa:05:66:
                    11:c1:58:af:8e:c0:b4:79:20:41:cf:8a:5c:24:14:
                    e0:22:a2:74:16:f9:bd:40:0a:8b:8e:f1:9c:db:44:
                    bf:fb:da:f2:36:da:36:55:b3:66:9c:c3:3c:ed:37:
                    e0:00:b0:55:b7:db:a0:7f:8a:6a:5a:83:12:95:87:
                    41:e0:f8:55:cd:da:78:0f:fe:d3:38:2b:8e:4b:4f:
                    28:c2:3b:98:c9:ea:9e:98:ef:10:c2:82:53:83:2b:
                    58:54:7b:6a:92:55:45:ae:33:08:80:86:e8:e7:ee:
                    df:80:32:9e:f4:d1:e7:56:24:a4:e1:fa:b1:b2:e8:
                    0d:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                16:FD:E3:B7:10:CF:16:C9:AC:F5:3C:F4:AF:A4:43:00:36:FA:A5:97
            X509v3 Authority Key Identifier:
                keyid:9B:04:6B:66:CA:99:83:6C:E8:03:06:7D:7D:51:35:D7:6A:C0:62:68

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade80ae91df0180dbd430c822fa/0/9B046B66CA99836CE803067D7D5135D76AC06268.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/6e579f5b-ec76-457b-99d5-466c7e4fefcc/7fd6a57f4687d9bd4bb3033cae60030cd57bb36e433067c87c.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade80ae91df0180dbd430c822fa/0/323630323a666636323a3230303a3a2f34302d3430203d3e203631333137.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:ff62:200::/40

    Signature Algorithm: sha256WithRSAEncryption
         90:15:dc:94:90:d7:d8:f1:5b:d8:fe:b0:16:a7:c8:c0:a5:bd:
         2d:41:ef:aa:6d:f0:da:6c:05:05:5e:13:f4:0f:9a:9a:66:e6:
         9a:17:d1:b5:03:6b:7c:8d:a8:a2:d5:6f:db:f3:77:32:dd:55:
         94:03:b4:5a:93:6d:35:e2:4d:52:1d:75:da:36:ae:fb:3e:a0:
         50:45:4a:78:48:9e:e4:dc:34:96:1d:66:e9:b7:7f:73:38:04:
         d2:ba:f6:a9:04:96:aa:28:44:9f:3a:c2:95:e8:1a:38:c9:f9:
         fb:c9:28:78:07:3e:ca:81:2a:4e:a8:d3:7f:07:b2:91:89:30:
         8d:6e:7c:75:74:aa:db:dc:f4:c3:47:bc:8a:c3:f6:2b:d0:ba:
         bd:d8:a1:e1:5a:9f:47:92:aa:89:0c:88:43:57:45:24:48:37:
         d7:e8:3e:6b:7c:ab:89:50:e1:a4:b3:3e:65:ea:12:36:b3:e9:
         ac:d4:ad:bb:86:ea:27:9d:08:37:f5:42:86:5f:e4:bb:31:98:
         65:83:c1:26:28:9a:21:2d:bf:14:79:30:a5:b5:f4:3b:17:b4:
         fc:6c:5f:5d:d5:7b:b6:5c:4a:59:10:a8:59:0d:0b:5b:eb:c3:
         da:43:a1:01:6b:8e:24:6a:4f:0d:df:7a:4c:10:3f:7a:c2:af:
         0c:1d:3e:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:46:31 2024 by rpki-client on console-ams.rpki-client.org