Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade80ae91df0180ea5d5fb330cc/0/323630323a666333623a3430303a3a2f34382d3438203d3e20333939393730.roa
File:                     323630323a666333623a3430303a3a2f34382d3438203d3e20333939393730.roa (raw, json)
Hash identifier:          oMRSIp0beyTcRjyfTeY8P0pEv0htRQp1cpC7IqEH/cg=
Subject key identifier:   E9:8E:96:88:24:04:A7:B0:7B:43:2E:E5:F0:13:68:6F:64:CC:D2:CA
Certificate issuer:       /CN=fcb20f5966813055f65eaf505395b86339edf0e42df6297f6c
Certificate serial:       5F4CB1104C587DB3925DFCC9D997BECCB10D17DB
Authority key identifier: 5A:6A:21:24:37:1A:F9:DE:E8:6D:93:83:EF:CE:8A:B3:78:30:9E:73
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/233e65fa-892f-427b-adc7-f23c951a8348/fcb20f5966813055f65eaf505395b86339edf0e42df6297f6c.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade80ae91df0180ea5d5fb330cc/0/323630323a666333623a3430303a3a2f34382d3438203d3e20333939393730.roa
Signing time:             Sun 22 May 2022 06:06:07 +0000
ROA not before:           Sun 22 May 2022 06:01:07 +0000
ROA not after:            Sun 21 May 2023 06:06:07 +0000
asID:                     399970
IP address blocks:        2602:fc3b:400::/48 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5f:4c:b1:10:4c:58:7d:b3:92:5d:fc:c9:d9:97:be:cc:b1:0d:17:db
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fcb20f5966813055f65eaf505395b86339edf0e42df6297f6c
        Validity
            Not Before: May 22 06:01:07 2022 GMT
            Not After : May 21 06:06:07 2023 GMT
        Subject: CN=E98E96882404A7B07B432EE5F013686F64CCD2CA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:95:02:87:7a:c8:1f:c7:4b:de:41:ea:49:18:
                    be:81:85:14:8c:0c:b6:5d:7e:6c:1d:78:db:48:9e:
                    39:eb:c5:74:7d:91:78:b9:2d:3b:a3:68:ef:6d:b4:
                    28:88:4b:65:e1:26:93:16:79:ad:35:fd:2e:4a:bd:
                    72:58:34:92:c6:4d:36:67:d4:d3:8c:fc:c5:c6:94:
                    56:2b:88:dd:e8:b1:4e:10:36:8e:19:85:b9:34:16:
                    53:1b:7f:39:f8:b0:0f:62:5d:47:ba:7d:80:f0:74:
                    13:ab:49:c2:88:c6:a9:f6:b0:64:29:60:28:b5:a7:
                    83:f7:c6:44:e7:9a:67:08:36:46:cf:00:03:83:4b:
                    0c:85:0e:b3:bc:c0:03:7b:85:71:a1:7d:38:f0:0d:
                    05:c8:7c:d7:68:72:f8:52:0c:46:12:cf:a4:87:64:
                    72:98:2a:d3:14:0e:6c:23:fa:26:ae:a4:bb:c9:a6:
                    a3:51:ce:5e:de:16:f9:d4:66:4b:d3:3c:f8:ed:ce:
                    e3:c4:c6:41:87:6f:28:52:7b:0f:72:d0:59:67:cb:
                    27:28:16:3c:74:bb:36:f0:4e:c1:d4:be:02:8d:1d:
                    6c:de:bf:70:5f:59:dc:6a:96:da:7d:ab:5f:dd:fb:
                    94:e6:33:cb:15:3d:45:5c:f6:0e:57:2b:5e:f9:32:
                    49:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E9:8E:96:88:24:04:A7:B0:7B:43:2E:E5:F0:13:68:6F:64:CC:D2:CA
            X509v3 Authority Key Identifier:
                keyid:5A:6A:21:24:37:1A:F9:DE:E8:6D:93:83:EF:CE:8A:B3:78:30:9E:73

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade80ae91df0180ea5d5fb330cc/0/5A6A2124371AF9DEE86D9383EFCE8AB378309E73.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/233e65fa-892f-427b-adc7-f23c951a8348/fcb20f5966813055f65eaf505395b86339edf0e42df6297f6c.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade80ae91df0180ea5d5fb330cc/0/323630323a666333623a3430303a3a2f34382d3438203d3e20333939393730.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fc3b:400::/48

    Signature Algorithm: sha256WithRSAEncryption
         02:82:53:29:94:8a:e2:1e:4a:84:1d:51:d8:f4:74:36:07:98:
         dd:62:a5:03:3f:95:87:bc:6b:2f:98:ad:e9:f4:b9:1e:f6:49:
         0e:6c:ef:50:46:57:87:1a:eb:3f:54:e1:4b:3e:2c:f6:45:04:
         09:c6:f4:92:e7:ee:5b:d1:f3:e2:7a:05:bf:70:2b:b1:bc:c9:
         fb:fa:15:44:5d:96:22:25:f3:7d:19:db:f2:48:77:75:97:ab:
         86:07:cc:46:9e:d7:34:b3:ed:35:fb:8e:06:93:64:5a:1d:62:
         d6:4c:88:fb:84:0e:84:07:15:42:26:88:ce:8b:02:5d:c2:19:
         f1:af:97:f0:60:ae:08:46:9d:78:aa:bc:04:a0:ad:98:92:36:
         f2:ac:1f:fa:e2:25:29:93:cb:1f:7c:b4:59:90:d8:66:b8:d6:
         d8:59:fe:95:ae:34:ca:b0:94:32:80:ce:0e:41:8a:82:95:c6:
         ea:23:85:b5:ce:4d:78:c3:1c:cc:0e:f1:79:cc:7c:89:03:7b:
         78:fc:ae:31:1d:cd:07:ae:fa:95:91:ba:e8:c7:48:7a:78:2f:
         9d:ca:6f:8c:7d:8b:f7:e7:34:b0:9a:da:98:88:25:69:d3:2a:
         26:f0:ed:15:ae:9f:21:6c:1c:85:5b:d7:f6:89:7f:eb:10:26:
         fb:35:81:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Feb 21 10:11:23 2025 by rpki-client