Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade80ae91df0180ea5d5fb330cc/0/323630323a666333623a3530303a3a2f34382d3438203d3e20333939393730.roa
File:                     323630323a666333623a3530303a3a2f34382d3438203d3e20333939393730.roa (raw, json)
Hash identifier:          xzSEbVWfBkM3dtHBmzjUWdPnUdza5/k3tadoz1hjeGM=
Subject key identifier:   F8:A0:D8:5C:13:BB:E4:E0:10:44:E8:5A:2E:AA:A4:B3:47:65:B1:26
Certificate issuer:       /CN=fcb20f5966813055f65eaf505395b86339edf0e42df6297f6c
Certificate serial:       1885FAEE35824761DA5E71E2337641F4255B9609
Authority key identifier: 5A:6A:21:24:37:1A:F9:DE:E8:6D:93:83:EF:CE:8A:B3:78:30:9E:73
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/233e65fa-892f-427b-adc7-f23c951a8348/fcb20f5966813055f65eaf505395b86339edf0e42df6297f6c.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade80ae91df0180ea5d5fb330cc/0/323630323a666333623a3530303a3a2f34382d3438203d3e20333939393730.roa
Signing time:             Sun 22 May 2022 06:06:10 +0000
ROA not before:           Sun 22 May 2022 06:01:10 +0000
ROA not after:            Sun 21 May 2023 06:06:10 +0000
asID:                     399970
IP address blocks:        2602:fc3b:500::/48 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            18:85:fa:ee:35:82:47:61:da:5e:71:e2:33:76:41:f4:25:5b:96:09
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fcb20f5966813055f65eaf505395b86339edf0e42df6297f6c
        Validity
            Not Before: May 22 06:01:10 2022 GMT
            Not After : May 21 06:06:10 2023 GMT
        Subject: CN=F8A0D85C13BBE4E01044E85A2EAAA4B34765B126
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:0e:5b:26:56:2a:12:e0:37:2b:9b:d9:d6:a7:
                    69:91:2f:b9:ec:b2:04:03:0f:2c:05:40:31:65:90:
                    c4:b5:f8:4a:98:f2:3f:9f:86:09:03:ef:ff:ae:20:
                    09:08:b0:0f:c5:2a:7b:2b:08:9d:79:72:c9:9e:c0:
                    cc:3f:65:c6:00:04:8d:af:20:d4:a5:5d:f6:7a:52:
                    27:a8:a5:df:a4:cd:98:8d:c0:84:40:24:d3:ba:5e:
                    4d:54:e7:92:4e:7d:ec:c5:36:8f:30:01:88:de:b6:
                    a7:9b:d7:96:08:cb:04:6f:30:32:b6:70:e5:a5:48:
                    09:36:c2:80:ca:d4:6b:bc:ed:67:86:8e:2b:73:13:
                    4c:a5:3a:a0:17:7d:83:5f:e5:ec:6f:54:5d:67:dd:
                    68:85:39:ff:80:c3:4a:bc:de:fe:39:91:10:0d:43:
                    9c:d9:a7:5c:f3:e4:b7:65:5e:a4:b1:24:cf:d4:f2:
                    fb:19:56:8e:1f:48:a0:f3:15:dd:31:92:d1:27:9d:
                    d1:57:2f:d1:66:96:62:70:6e:a5:93:e4:1c:c5:e2:
                    02:46:37:d4:d0:e1:bb:26:eb:f8:9c:af:0f:50:1f:
                    55:79:b6:ea:0f:3e:a8:0e:e6:c7:82:60:8f:b3:90:
                    06:67:5b:db:05:62:fc:21:e7:50:9e:4c:78:c4:f7:
                    fc:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F8:A0:D8:5C:13:BB:E4:E0:10:44:E8:5A:2E:AA:A4:B3:47:65:B1:26
            X509v3 Authority Key Identifier:
                keyid:5A:6A:21:24:37:1A:F9:DE:E8:6D:93:83:EF:CE:8A:B3:78:30:9E:73

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade80ae91df0180ea5d5fb330cc/0/5A6A2124371AF9DEE86D9383EFCE8AB378309E73.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/233e65fa-892f-427b-adc7-f23c951a8348/fcb20f5966813055f65eaf505395b86339edf0e42df6297f6c.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade80ae91df0180ea5d5fb330cc/0/323630323a666333623a3530303a3a2f34382d3438203d3e20333939393730.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fc3b:500::/48

    Signature Algorithm: sha256WithRSAEncryption
         ab:5f:b5:41:51:9f:32:7c:3a:6c:e1:49:6c:0b:92:a7:ef:4f:
         ca:e9:01:eb:96:f4:cc:c8:c0:64:ed:b3:52:64:17:f2:45:bb:
         61:de:65:16:6f:20:05:35:75:5f:80:a1:38:b3:86:c5:a3:1d:
         50:ac:71:1f:79:31:58:09:9b:bd:61:49:e9:36:a2:97:17:e0:
         22:bb:61:7c:c7:78:7d:fc:39:21:59:f3:59:64:17:2a:3e:61:
         d7:c9:49:fc:90:6d:7d:10:9c:ea:a7:28:6a:27:c8:1e:0a:88:
         5b:44:03:d6:e9:c8:82:bc:81:c1:d6:5b:a5:53:85:dc:e7:c7:
         86:69:d5:1f:82:dd:ae:12:4a:d5:8a:14:c1:fa:a9:e6:e5:b1:
         a5:b6:fe:66:12:d0:9d:a2:6d:dd:47:3a:f2:64:1e:bb:ce:33:
         7b:eb:bd:6f:67:e7:16:f9:65:73:e6:d6:81:bb:6b:41:38:68:
         95:84:53:ed:53:13:63:ba:e2:88:6b:b2:3c:51:1f:78:06:4a:
         b7:9e:d1:c6:f6:3d:ad:e1:2d:f8:fc:f7:28:9e:18:84:53:1f:
         a8:8b:74:78:45:a5:2d:c3:19:e8:fe:8c:9e:1c:c7:0a:f5:5c:
         4e:75:87:17:61:71:15:80:27:ab:91:35:6f:f2:ab:ba:a1:05:
         51:2a:bb:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Feb 21 10:01:04 2025 by rpki-client