Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade80ae91df0180ea5d5fb330cc/0/323630323a666333623a3130303a3a2f34382d3438203d3e20333939393730.roa
File:                     323630323a666333623a3130303a3a2f34382d3438203d3e20333939393730.roa (raw, json)
Hash identifier:          urkQ2p9h+HIjlxvG9gn1iNpBHfg65YI8oVpVTBqoXcU=
Subject key identifier:   C3:F3:DE:B6:E7:DC:10:28:72:C3:FC:2A:22:2E:29:7A:A7:D4:A7:D9
Certificate issuer:       /CN=fcb20f5966813055f65eaf505395b86339edf0e42df6297f6c
Certificate serial:       51A42ECA79F99B261DBD5D136B87EE1A606964B4
Authority key identifier: 5A:6A:21:24:37:1A:F9:DE:E8:6D:93:83:EF:CE:8A:B3:78:30:9E:73
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/233e65fa-892f-427b-adc7-f23c951a8348/fcb20f5966813055f65eaf505395b86339edf0e42df6297f6c.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade80ae91df0180ea5d5fb330cc/0/323630323a666333623a3130303a3a2f34382d3438203d3e20333939393730.roa
Signing time:             Sun 22 May 2022 06:05:56 +0000
ROA not before:           Sun 22 May 2022 06:00:56 +0000
ROA not after:            Sun 21 May 2023 06:05:56 +0000
asID:                     399970
IP address blocks:        2602:fc3b:100::/48 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            51:a4:2e:ca:79:f9:9b:26:1d:bd:5d:13:6b:87:ee:1a:60:69:64:b4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fcb20f5966813055f65eaf505395b86339edf0e42df6297f6c
        Validity
            Not Before: May 22 06:00:56 2022 GMT
            Not After : May 21 06:05:56 2023 GMT
        Subject: CN=C3F3DEB6E7DC102872C3FC2A222E297AA7D4A7D9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ea:98:37:95:7e:68:46:2a:73:10:b6:f8:d7:4d:
                    fb:c1:e9:09:71:5f:2d:5c:fd:78:97:36:fb:1c:82:
                    92:7b:46:d9:5a:f0:72:ee:84:7b:99:df:8b:fe:65:
                    0a:f0:aa:9b:6f:b0:05:2b:5b:32:e2:99:b7:e4:91:
                    32:ac:24:83:e7:4d:62:8e:83:b5:45:e2:9f:4d:f6:
                    2b:14:a0:84:ee:3a:0e:4e:1e:13:ea:b4:1c:5e:40:
                    d9:ac:fc:42:97:01:ad:ec:c4:25:f0:df:7f:44:1b:
                    a7:69:63:6b:e5:18:f4:5a:bf:e4:5f:a6:54:5c:b8:
                    38:2e:18:39:5b:ed:d3:a2:0b:bc:c8:78:96:62:f4:
                    bb:d7:68:9e:7e:d0:37:42:fd:f3:69:86:32:d4:84:
                    55:24:6d:48:a4:29:0f:9a:bb:39:bc:5b:cb:6a:ff:
                    df:9e:26:eb:6c:f6:d6:1a:06:b0:7a:fe:22:05:c6:
                    c3:a0:0e:0f:16:59:29:d9:cf:65:03:85:68:b1:65:
                    bb:a9:c3:13:9b:65:f7:fa:2e:92:ad:e8:20:99:d7:
                    99:5f:05:2f:55:b0:e7:d8:d2:6e:1a:9a:aa:21:05:
                    a9:c7:bd:99:7f:dd:69:9e:c7:56:32:ce:ad:68:c1:
                    f0:8d:a6:7f:76:b8:69:d1:2d:f6:d7:20:3c:23:22:
                    f6:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C3:F3:DE:B6:E7:DC:10:28:72:C3:FC:2A:22:2E:29:7A:A7:D4:A7:D9
            X509v3 Authority Key Identifier:
                keyid:5A:6A:21:24:37:1A:F9:DE:E8:6D:93:83:EF:CE:8A:B3:78:30:9E:73

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade80ae91df0180ea5d5fb330cc/0/5A6A2124371AF9DEE86D9383EFCE8AB378309E73.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/233e65fa-892f-427b-adc7-f23c951a8348/fcb20f5966813055f65eaf505395b86339edf0e42df6297f6c.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade80ae91df0180ea5d5fb330cc/0/323630323a666333623a3130303a3a2f34382d3438203d3e20333939393730.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fc3b:100::/48

    Signature Algorithm: sha256WithRSAEncryption
         50:7d:30:e8:d2:4a:c3:55:e8:e4:32:2c:95:7a:93:7a:e8:06:
         88:01:96:64:9f:a1:12:a9:da:99:ef:05:76:b3:c9:e2:8d:ef:
         a0:9b:24:61:c1:0b:76:a4:e7:4c:05:dd:0e:cf:60:27:88:5c:
         a1:d4:96:a9:62:e1:09:a9:34:05:a1:5a:24:86:52:01:7d:bb:
         11:dc:a3:14:6b:39:c2:5a:ba:b2:5f:bc:07:3b:7c:2e:d6:bb:
         8c:26:da:f6:10:17:9a:27:6a:28:82:77:93:a4:ed:ef:eb:aa:
         90:25:45:83:14:d0:09:62:47:06:a7:1f:be:97:1c:8d:94:78:
         e7:e4:79:53:78:62:7c:3e:e0:1f:f8:d6:15:bc:63:69:d4:59:
         c6:8b:56:c0:4d:48:84:ca:60:29:78:98:b2:13:ab:de:1e:0d:
         64:8d:be:d5:4b:4e:44:81:62:77:45:fe:2e:05:f2:da:ca:5e:
         1d:3a:59:89:c3:ef:b2:79:14:7c:22:0f:32:72:f1:54:59:45:
         69:96:3b:a9:c3:57:43:e7:d9:d4:f9:4d:e8:8a:e5:96:5c:13:
         24:94:0a:cc:5c:33:1a:dd:56:98:19:90:b1:83:61:c2:07:9f:
         be:4d:ea:d7:29:78:9b:76:e0:dc:9e:ef:f3:cc:11:4a:9b:6c:
         8f:e0:7a:8b
-----BEGIN CERTIFICATE-----
MIIFvTCCBKWgAwIBAgIUUaQuynn5myYdvV0Ta4fuGmBpZLQwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyZmNiMjBmNTk2NjgxMzA1NWY2NWVhZjUwNTM5NWI4NjMz
OWVkZjBlNDJkZjYyOTdmNmMwHhcNMjIwNTIyMDYwMDU2WhcNMjMwNTIxMDYwNTU2
WjAzMTEwLwYDVQQDEyhDM0YzREVCNkU3REMxMDI4NzJDM0ZDMkEyMjJFMjk3QUE3
RDRBN0Q5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6pg3lX5oRipz
ELb41037wekJcV8tXP14lzb7HIKSe0bZWvBy7oR7md+L/mUK8Kqbb7AFK1sy4pm3
5JEyrCSD501ijoO1ReKfTfYrFKCE7joOTh4T6rQcXkDZrPxClwGt7MQl8N9/RBun
aWNr5Rj0Wr/kX6ZUXLg4Lhg5W+3Togu8yHiWYvS712ieftA3Qv3zaYYy1IRVJG1I
pCkPmrs5vFvLav/fnibrbPbWGgawev4iBcbDoA4PFlkp2c9lA4VosWW7qcMTm2X3
+i6SreggmdeZXwUvVbDn2NJuGpqqIQWpx72Zf91pnsdWMs6taMHwjaZ/drhp0S32
1yA8IyL2jwIDAQABo4ICvTCCArkwHQYDVR0OBBYEFMPz3rbn3BAocsP8KiIuKXqn
1KfZMB8GA1UdIwQYMBaAFFpqISQ3Gvne6G2Tg+/OirN4MJ5zMA4GA1UdDwEB/wQE
AwIHgDCBhQYDVR0fBH4wfDB6oHigdoZ0cnN5bmM6Ly9ycGtpLXJwcy5hcmluLm5l
dC9yZXBvc2l0b3J5LzhhODQ4YWRlODBhZTkxZGYwMTgwZWE1ZDVmYjMzMGNjLzAv
NUE2QTIxMjQzNzFBRjlERUU4NkQ5MzgzRUZDRThBQjM3ODMwOUU3My5jcmwwgfMG
CCsGAQUFBwEBBIHmMIHjMIHgBggrBgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmlu
Lm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2Ut
YjA4Yy0yMTcxZGEyMTU3ZDMvNzZmZTExZDQtZDM1Mi00OTk0LThmNmMtZDZjOTFi
MGI4NDE1LzIzM2U2NWZhLTg5MmYtNDI3Yi1hZGM3LWYyM2M5NTFhODM0OC9mY2Iy
MGY1OTY2ODEzMDU1ZjY1ZWFmNTA1Mzk1Yjg2MzM5ZWRmMGU0MmRmNjI5N2Y2Yy5j
ZXIwgaoGCCsGAQUFBwELBIGdMIGaMIGXBggrBgEFBQcwC4aBinJzeW5jOi8vcnBr
aS1ycHMuYXJpbi5uZXQvcmVwb3NpdG9yeS84YTg0OGFkZTgwYWU5MWRmMDE4MGVh
NWQ1ZmIzMzBjYy8wLzMyMzYzMDMyM2E2NjYzMzM2MjNhMzEzMDMwM2EzYTJmMzQz
ODJkMzQzODIwM2QzZTIwMzMzOTM5MzkzNzMwLnJvYTAYBgNVHSABAf8EDjAMMAoG
CCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgL8OwEAMA0G
CSqGSIb3DQEBCwUAA4IBAQBQfTDo0krDVejkMiyVepN66AaIAZZkn6ESqdqZ7wV2
s8nije+gmyRhwQt2pOdMBd0Oz2AniFyh1JapYuEJqTQFoVokhlIBfbsR3KMUaznC
WrqyX7wHO3wu1ruMJtr2EBeaJ2oogneTpO3v66qQJUWDFNAJYkcGpx++lxyNlHjn
5HlTeGJ8PuAf+NYVvGNp1FnGi1bATUiEymApeJiyE6veHg1kjb7VS05EgWJ3Rf4u
BfLayl4dOlmJw++yeRR8Ig8ycvFUWUVpljupw1dD59nU+U3oiuWWXBMklArMXDMa
3VaYGZCxg2HCB5++TerXKXibduDcnu/zzBFKm2yP4HqL
-----END CERTIFICATE-----
Generated at Fri Feb 21 10:16:11 2025 by rpki-client