Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade80ae91df0180ea5d5fb330cc/0/323630323a666333623a3230303a3a2f34382d3438203d3e20333939393730.roa
File:                     323630323a666333623a3230303a3a2f34382d3438203d3e20333939393730.roa (raw, json)
Hash identifier:          IgDNbG/om43LQQvN+8QMBRem8zG+RRrnaaj0o5Jlt9c=
Subject key identifier:   C0:CD:17:13:42:7E:24:51:59:31:65:DC:5D:1D:22:1D:CA:F5:5A:98
Certificate issuer:       /CN=fcb20f5966813055f65eaf505395b86339edf0e42df6297f6c
Certificate serial:       7F77D7303C7D13D232F6A3F5877E1EFD28D1CF45
Authority key identifier: 5A:6A:21:24:37:1A:F9:DE:E8:6D:93:83:EF:CE:8A:B3:78:30:9E:73
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/233e65fa-892f-427b-adc7-f23c951a8348/fcb20f5966813055f65eaf505395b86339edf0e42df6297f6c.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade80ae91df0180ea5d5fb330cc/0/323630323a666333623a3230303a3a2f34382d3438203d3e20333939393730.roa
Signing time:             Sun 22 May 2022 06:05:59 +0000
ROA not before:           Sun 22 May 2022 06:00:59 +0000
ROA not after:            Sun 21 May 2023 06:05:59 +0000
asID:                     399970
IP address blocks:        2602:fc3b:200::/48 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7f:77:d7:30:3c:7d:13:d2:32:f6:a3:f5:87:7e:1e:fd:28:d1:cf:45
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fcb20f5966813055f65eaf505395b86339edf0e42df6297f6c
        Validity
            Not Before: May 22 06:00:59 2022 GMT
            Not After : May 21 06:05:59 2023 GMT
        Subject: CN=C0CD1713427E2451593165DC5D1D221DCAF55A98
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:fe:14:42:5f:d9:6e:e9:47:9b:73:5e:75:dc:c9:
                    62:93:b8:50:5e:a0:1f:23:6c:68:7c:bd:2c:19:4c:
                    d0:c7:e1:83:03:24:f5:05:08:9b:81:9c:9f:a6:9d:
                    e3:db:df:15:fb:cd:17:ff:51:b0:88:8b:3c:32:c2:
                    42:a1:8d:5c:29:8a:26:7b:e2:57:2d:b3:86:82:82:
                    e4:98:7a:6c:df:94:c1:ee:02:13:ba:d1:f4:c8:8b:
                    3c:03:1e:48:fa:e6:3d:99:31:80:a9:16:d0:72:9d:
                    36:ee:55:87:34:2a:e7:60:21:67:19:9e:f2:0c:1f:
                    d0:5a:66:14:bd:af:e6:a3:51:59:ee:62:e9:ab:a6:
                    d5:df:59:66:07:f8:94:e7:04:3e:b6:e6:5a:ce:79:
                    0e:40:69:5d:0f:6a:70:ab:b4:77:7f:51:d9:ce:60:
                    72:e0:09:d9:2f:5f:06:91:87:97:86:41:d3:4e:22:
                    33:c4:fa:ec:bd:b7:97:dd:22:e2:b3:9a:3b:cc:c2:
                    45:b6:de:70:ed:fb:9b:b6:8e:55:be:96:48:5f:ba:
                    ce:2b:1f:f1:5c:e3:e9:86:8f:77:0b:aa:3c:50:3a:
                    bf:c8:9b:4d:48:68:c6:a1:6e:86:78:36:fa:82:ec:
                    ce:de:e7:41:63:29:aa:6c:e8:43:0a:6c:50:21:2c:
                    80:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C0:CD:17:13:42:7E:24:51:59:31:65:DC:5D:1D:22:1D:CA:F5:5A:98
            X509v3 Authority Key Identifier:
                keyid:5A:6A:21:24:37:1A:F9:DE:E8:6D:93:83:EF:CE:8A:B3:78:30:9E:73

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade80ae91df0180ea5d5fb330cc/0/5A6A2124371AF9DEE86D9383EFCE8AB378309E73.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/233e65fa-892f-427b-adc7-f23c951a8348/fcb20f5966813055f65eaf505395b86339edf0e42df6297f6c.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade80ae91df0180ea5d5fb330cc/0/323630323a666333623a3230303a3a2f34382d3438203d3e20333939393730.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fc3b:200::/48

    Signature Algorithm: sha256WithRSAEncryption
         15:02:c1:49:e4:ec:e7:3a:bf:47:56:d7:4a:13:50:ef:32:d1:
         48:73:97:c4:80:c8:cb:20:c9:42:d4:f5:41:3f:c8:a0:53:a8:
         cf:be:42:27:04:d8:57:be:e3:29:fb:9f:fe:5f:71:41:24:95:
         bd:22:94:de:23:01:8c:b7:61:15:82:0c:1d:7d:e5:3c:9f:b0:
         31:4c:c7:cc:6f:46:90:07:02:81:99:dc:b1:69:56:05:1f:fd:
         ab:af:f5:45:80:a1:6f:5a:55:68:88:f6:a7:ed:b6:ab:8e:85:
         fb:4d:01:ba:0b:12:44:fa:ae:c1:ce:04:2a:08:5d:c9:58:c4:
         a5:20:d7:45:d0:1e:cc:3e:1d:cc:ae:3f:0d:40:ac:41:50:8e:
         17:62:f1:e9:ac:6a:95:8f:3b:ff:e9:e4:99:8f:80:b8:01:a9:
         f4:16:fc:04:86:8e:48:10:da:a5:d5:da:0b:9b:5b:19:80:f3:
         9a:e8:fd:bc:4e:ab:3d:b2:9d:d8:f2:ec:c0:f0:ae:87:52:f9:
         1e:89:53:c4:6c:c7:6b:45:98:d6:34:74:ce:47:0e:c4:f4:84:
         4c:5b:16:69:b9:55:74:1d:c2:6b:4d:8f:8e:9c:9a:c8:e0:1e:
         6e:41:10:7d:8b:04:f0:ab:f7:e5:de:ec:d2:9b:fc:2f:5c:90:
         1c:f1:05:bc
-----BEGIN CERTIFICATE-----
MIIFvTCCBKWgAwIBAgIUf3fXMDx9E9Iy9qP1h34e/SjRz0UwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyZmNiMjBmNTk2NjgxMzA1NWY2NWVhZjUwNTM5NWI4NjMz
OWVkZjBlNDJkZjYyOTdmNmMwHhcNMjIwNTIyMDYwMDU5WhcNMjMwNTIxMDYwNTU5
WjAzMTEwLwYDVQQDEyhDMENEMTcxMzQyN0UyNDUxNTkzMTY1REM1RDFEMjIxRENB
RjU1QTk4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA/hRCX9lu6Ueb
c1513Mlik7hQXqAfI2xofL0sGUzQx+GDAyT1BQibgZyfpp3j298V+80X/1GwiIs8
MsJCoY1cKYome+JXLbOGgoLkmHps35TB7gITutH0yIs8Ax5I+uY9mTGAqRbQcp02
7lWHNCrnYCFnGZ7yDB/QWmYUva/mo1FZ7mLpq6bV31lmB/iU5wQ+tuZaznkOQGld
D2pwq7R3f1HZzmBy4AnZL18GkYeXhkHTTiIzxPrsvbeX3SLis5o7zMJFtt5w7fub
to5VvpZIX7rOKx/xXOPpho93C6o8UDq/yJtNSGjGoW6GeDb6guzO3udBYymqbOhD
CmxQISyAHwIDAQABo4ICvTCCArkwHQYDVR0OBBYEFMDNFxNCfiRRWTFl3F0dIh3K
9VqYMB8GA1UdIwQYMBaAFFpqISQ3Gvne6G2Tg+/OirN4MJ5zMA4GA1UdDwEB/wQE
AwIHgDCBhQYDVR0fBH4wfDB6oHigdoZ0cnN5bmM6Ly9ycGtpLXJwcy5hcmluLm5l
dC9yZXBvc2l0b3J5LzhhODQ4YWRlODBhZTkxZGYwMTgwZWE1ZDVmYjMzMGNjLzAv
NUE2QTIxMjQzNzFBRjlERUU4NkQ5MzgzRUZDRThBQjM3ODMwOUU3My5jcmwwgfMG
CCsGAQUFBwEBBIHmMIHjMIHgBggrBgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmlu
Lm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2Ut
YjA4Yy0yMTcxZGEyMTU3ZDMvNzZmZTExZDQtZDM1Mi00OTk0LThmNmMtZDZjOTFi
MGI4NDE1LzIzM2U2NWZhLTg5MmYtNDI3Yi1hZGM3LWYyM2M5NTFhODM0OC9mY2Iy
MGY1OTY2ODEzMDU1ZjY1ZWFmNTA1Mzk1Yjg2MzM5ZWRmMGU0MmRmNjI5N2Y2Yy5j
ZXIwgaoGCCsGAQUFBwELBIGdMIGaMIGXBggrBgEFBQcwC4aBinJzeW5jOi8vcnBr
aS1ycHMuYXJpbi5uZXQvcmVwb3NpdG9yeS84YTg0OGFkZTgwYWU5MWRmMDE4MGVh
NWQ1ZmIzMzBjYy8wLzMyMzYzMDMyM2E2NjYzMzM2MjNhMzIzMDMwM2EzYTJmMzQz
ODJkMzQzODIwM2QzZTIwMzMzOTM5MzkzNzMwLnJvYTAYBgNVHSABAf8EDjAMMAoG
CCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgL8OwIAMA0G
CSqGSIb3DQEBCwUAA4IBAQAVAsFJ5OznOr9HVtdKE1DvMtFIc5fEgMjLIMlC1PVB
P8igU6jPvkInBNhXvuMp+5/+X3FBJJW9IpTeIwGMt2EVggwdfeU8n7AxTMfMb0aQ
BwKBmdyxaVYFH/2rr/VFgKFvWlVoiPan7barjoX7TQG6CxJE+q7BzgQqCF3JWMSl
INdF0B7MPh3Mrj8NQKxBUI4XYvHprGqVjzv/6eSZj4C4Aan0FvwEho5IENql1doL
m1sZgPOa6P28Tqs9sp3Y8uzA8K6HUvkeiVPEbMdrRZjWNHTORw7E9IRMWxZpuVV0
HcJrTY+OnJrI4B5uQRB9iwTwq/fl3uzSm/wvXJAc8QW8
-----END CERTIFICATE-----
Generated at Fri Feb 21 09:58:58 2025 by rpki-client