Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade80ae91df0180dbd430c822fa/0/323630323a666636323a3a2f33362d3336203d3e203631333137.roa
File:                     323630323a666636323a3a2f33362d3336203d3e203631333137.roa (raw, json)
Hash identifier:          n0S8hX9ufopj8l6K0lzccNZJ5tc/kGXEuA9PV2kMqdk=
Subject key identifier:   34:9B:11:12:FF:46:84:FC:5D:12:AB:C2:9A:7D:08:49:D4:F6:77:49
Certificate issuer:       /CN=7fd6a57f4687d9bd4bb3033cae60030cd57bb36e433067c87c
Certificate serial:       48F8BF31F09F56172757271FAAB9229E1DEA02E4
Authority key identifier: 9B:04:6B:66:CA:99:83:6C:E8:03:06:7D:7D:51:35:D7:6A:C0:62:68
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/6e579f5b-ec76-457b-99d5-466c7e4fefcc/7fd6a57f4687d9bd4bb3033cae60030cd57bb36e433067c87c.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade80ae91df0180dbd430c822fa/0/323630323a666636323a3a2f33362d3336203d3e203631333137.roa
Signing time:             Mon 06 Jun 2022 14:17:32 +0000
ROA not before:           Mon 06 Jun 2022 14:12:32 +0000
ROA not after:            Mon 05 Jun 2023 14:17:32 +0000
asID:                     61317
IP address blocks:        2602:ff62::/36 maxlen: 36

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            48:f8:bf:31:f0:9f:56:17:27:57:27:1f:aa:b9:22:9e:1d:ea:02:e4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7fd6a57f4687d9bd4bb3033cae60030cd57bb36e433067c87c
        Validity
            Not Before: Jun  6 14:12:32 2022 GMT
            Not After : Jun  5 14:17:32 2023 GMT
        Subject: CN=349B1112FF4684FC5D12ABC29A7D0849D4F67749
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e8:d1:d9:23:84:e1:7a:cd:af:ae:4b:32:86:b6:
                    3b:19:f7:f8:14:59:fd:b7:4c:da:09:94:8f:58:b1:
                    3a:a1:5c:ee:fe:09:f3:28:00:14:d8:14:ea:e6:e2:
                    42:c6:99:dc:9b:eb:5f:12:f0:19:be:37:40:ab:42:
                    38:ff:0d:e5:2c:7d:02:98:bb:65:ca:95:7a:df:a0:
                    73:eb:a8:6f:81:b8:dd:31:00:1b:c4:3b:cf:c3:d2:
                    ed:99:7e:cb:7c:5e:db:ae:f9:ca:08:86:92:02:92:
                    41:fc:c7:10:ed:5e:69:39:cc:e7:6d:7a:69:d8:d1:
                    10:b2:87:ea:f4:30:96:1f:16:0c:06:6d:9b:ae:26:
                    10:be:24:74:67:07:9d:34:3f:52:fb:6a:e0:3f:4a:
                    14:f0:57:de:0c:63:a4:6d:9c:fc:b7:97:b0:e4:3c:
                    d7:a6:fe:30:38:5b:96:7f:41:15:8d:8a:cb:19:2f:
                    8e:d1:f0:f2:ec:94:bb:a7:53:53:cd:25:d1:29:30:
                    e7:9d:27:ce:f1:51:9f:03:91:e9:54:aa:5b:32:08:
                    cb:da:2b:bc:66:cc:a4:66:34:3f:7a:b4:fd:63:1a:
                    e2:93:3c:a1:83:f1:12:43:1f:26:05:d1:cb:d1:0c:
                    3f:66:0d:12:f8:9c:03:03:65:37:04:ea:57:80:81:
                    68:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                34:9B:11:12:FF:46:84:FC:5D:12:AB:C2:9A:7D:08:49:D4:F6:77:49
            X509v3 Authority Key Identifier:
                keyid:9B:04:6B:66:CA:99:83:6C:E8:03:06:7D:7D:51:35:D7:6A:C0:62:68

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade80ae91df0180dbd430c822fa/0/9B046B66CA99836CE803067D7D5135D76AC06268.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/6e579f5b-ec76-457b-99d5-466c7e4fefcc/7fd6a57f4687d9bd4bb3033cae60030cd57bb36e433067c87c.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade80ae91df0180dbd430c822fa/0/323630323a666636323a3a2f33362d3336203d3e203631333137.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:ff62::/36

    Signature Algorithm: sha256WithRSAEncryption
         97:ea:09:f3:4e:06:c7:14:24:f4:dc:00:a0:1e:fe:a0:ee:02:
         80:a6:a5:8f:6b:b7:d3:81:0e:0f:65:73:ad:5a:7c:57:08:4b:
         19:96:84:78:80:ad:8a:3c:63:bb:3a:3a:ce:8e:ed:56:ac:44:
         1d:90:a9:df:34:21:c0:88:60:a8:5f:9b:75:6d:94:7f:2b:44:
         1e:00:e1:22:15:2a:55:25:a0:35:00:37:6c:87:8f:f0:d0:d8:
         45:7a:13:56:fb:0c:4b:57:46:b7:7d:57:da:20:71:51:8e:10:
         17:01:1d:77:ec:4d:6d:d0:33:ee:ca:20:9f:16:64:ec:58:96:
         ed:f9:f9:2e:92:fc:a2:f1:6e:c2:40:b7:f5:29:a5:70:75:87:
         6d:92:63:6b:df:cc:8f:f5:44:14:6e:13:08:f8:54:d7:3f:09:
         92:ea:62:27:8d:79:e0:df:5b:47:b2:28:9c:9d:d2:0c:14:26:
         aa:18:d3:57:10:77:f9:fe:31:46:4e:a5:96:2a:e1:eb:2f:e5:
         5c:db:b8:55:82:30:43:3c:0e:06:24:03:d7:db:15:7f:df:bc:
         50:b2:f0:9d:2f:4a:88:37:67:2e:08:58:3c:d6:e9:75:6f:6c:
         18:a0:fc:13:40:8e:79:ac:1a:43:6f:a9:42:54:a9:99:39:0d:
         6b:75:d0:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:41:02 2024 by rpki-client on console-fra.rpki-client.org