Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade80ae91df0180dbd430c822fa/1/323630323a666636323a3a2f33362d3438203d3e203631333137.roa
File:                     323630323a666636323a3a2f33362d3438203d3e203631333137.roa (raw, json)
Hash identifier:          j65GsH3l5jBICPe2Oj9niz4AQHVmJC4Sl6dPSnQPqWQ=
Subject key identifier:   82:D5:4E:A4:6B:C0:43:3C:0D:3C:33:DB:52:36:55:3D:F3:DA:97:00
Certificate issuer:       /CN=7fd6a57f4685abe45881aede259ddbbf497b28288b9e7d9755
Certificate serial:       2301DE27EE0DF08388211408009FFCBD3907953C
Authority key identifier: D5:7E:CC:23:46:8E:33:DB:20:35:32:B7:A6:3F:C9:71:F2:DF:52:14
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/6e579f5b-ec76-457b-99d5-466c7e4fefcc/7fd6a57f4685abe45881aede259ddbbf497b28288b9e7d9755.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade80ae91df0180dbd430c822fa/1/323630323a666636323a3a2f33362d3438203d3e203631333137.roa
Signing time:             Mon 06 Jun 2022 10:44:43 +0000
ROA not before:           Mon 06 Jun 2022 10:39:43 +0000
ROA not after:            Mon 05 Jun 2023 10:44:43 +0000
asID:                     61317
IP address blocks:        2602:ff62::/36 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            23:01:de:27:ee:0d:f0:83:88:21:14:08:00:9f:fc:bd:39:07:95:3c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7fd6a57f4685abe45881aede259ddbbf497b28288b9e7d9755
        Validity
            Not Before: Jun  6 10:39:43 2022 GMT
            Not After : Jun  5 10:44:43 2023 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:b3:af:74:2d:ec:0a:e2:4b:22:c4:39:b7:39:
                    6e:7b:20:83:bf:da:4e:2d:8b:08:6b:45:4d:3f:93:
                    69:f9:e9:89:39:83:74:26:a6:8c:00:50:87:45:d1:
                    b3:99:14:5a:c8:9b:3d:a7:01:f0:7b:79:40:81:2c:
                    2a:a2:5b:18:3a:11:06:b7:12:27:37:a1:06:f0:18:
                    e8:36:4b:e7:d1:6c:10:46:12:4c:48:d8:94:bc:14:
                    13:22:2d:3c:25:77:12:e0:ad:f3:8e:fd:1b:f3:f2:
                    cc:8f:88:3f:a7:50:8f:3b:72:13:35:29:a8:10:8d:
                    04:2a:72:d1:3b:d3:95:df:38:ce:0b:77:01:75:1c:
                    7a:e9:ea:ad:b3:58:8d:79:ed:ce:34:f2:5b:ca:1c:
                    09:96:81:39:a7:95:56:21:91:1c:f4:57:76:17:f0:
                    dc:75:90:ae:68:08:00:9e:bf:f5:2d:7b:ac:7e:9a:
                    51:d3:64:f5:bf:77:87:e2:9d:ed:cd:92:54:56:c0:
                    cb:df:a3:4d:d7:dc:31:44:d3:62:c8:c9:3b:cf:ef:
                    a1:cd:4a:b3:d9:58:dc:a3:00:10:cf:93:b9:ec:ae:
                    c7:9b:52:e1:4b:72:b5:8e:7e:4b:0f:8b:cd:88:36:
                    5a:28:25:a9:6f:9f:41:8f:59:a5:98:4a:71:9f:25:
                    77:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                82:D5:4E:A4:6B:C0:43:3C:0D:3C:33:DB:52:36:55:3D:F3:DA:97:00
            X509v3 Authority Key Identifier:
                keyid:D5:7E:CC:23:46:8E:33:DB:20:35:32:B7:A6:3F:C9:71:F2:DF:52:14

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade80ae91df0180dbd430c822fa/1/D57ECC23468E33DB203532B7A63FC971F2DF5214.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/6e579f5b-ec76-457b-99d5-466c7e4fefcc/7fd6a57f4685abe45881aede259ddbbf497b28288b9e7d9755.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade80ae91df0180dbd430c822fa/1/323630323a666636323a3a2f33362d3438203d3e203631333137.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:ff62::/36

    Signature Algorithm: sha256WithRSAEncryption
         9e:13:dd:3a:c5:41:69:08:95:35:7e:b5:f5:4c:9a:8d:b8:8e:
         ea:82:76:33:c7:10:ab:44:eb:f9:ec:86:ff:59:6c:ec:0f:f3:
         57:92:e9:e2:cc:12:d6:52:9f:26:24:dc:13:bb:35:e1:c9:e0:
         95:c4:53:27:b8:9d:52:52:35:ac:ee:58:57:65:1e:92:91:ce:
         19:4b:03:93:98:45:25:aa:9f:f4:e2:44:94:a1:9c:ec:b4:6c:
         4c:a7:d3:dd:9c:98:ce:39:6f:c3:c8:52:9e:ca:27:f4:f9:25:
         2b:91:94:f3:ca:68:41:be:68:f2:a5:c7:74:cd:31:ff:0c:84:
         c5:fd:e8:47:68:9b:53:ce:e9:53:34:e0:88:09:bb:fe:3c:99:
         3f:34:73:1c:fd:91:a2:0d:a9:af:5c:4f:fb:7c:8c:4d:25:92:
         01:de:29:f2:ec:df:87:bb:ea:f0:38:7a:1e:b1:bf:97:74:02:
         95:63:75:80:ec:67:b9:1d:08:ca:44:c2:21:c1:67:87:ee:19:
         40:3c:05:f7:7a:cf:eb:f6:ba:8b:fc:87:ce:55:aa:6f:65:e4:
         24:b0:16:57:33:91:0a:c3:3c:45:84:b5:f1:c9:e2:eb:39:ed:
         26:8a:fc:3c:aa:a9:28:90:4c:57:0c:0f:bf:e7:ec:e9:22:93:
         72:a6:b1:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:41:02 2024 by rpki-client on console-fra.rpki-client.org