Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade80f1a80a0180f7ea14e0063a/0/323630323a666333623a3130303a3a2f34382d3438203d3e20333939393730.roa
File:                     323630323a666333623a3130303a3a2f34382d3438203d3e20333939393730.roa (raw, json)
Hash identifier:          4ySucGP2p3dbBT3urRfFVxjy+P1QwAG31cN18cw+x1A=
Subject key identifier:   A2:17:40:FA:83:56:23:E3:92:08:81:CE:F3:48:FB:D2:00:E1:B8:3D
Certificate issuer:       /CN=fcb20f5966f3d3fe12a6b67c3f0e2b52ed54df65344239c3c4
Certificate serial:       53E9B96D2DAD9E3100B78F2D56C7B2C2CAFC7AE1
Authority key identifier: CB:FA:64:76:0A:B7:20:75:4B:1A:49:B2:A4:13:3C:84:74:37:FA:FA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/209a3aae-fdf3-4626-893c-d4dbbb607dbc/fcb20f5966f3d3fe12a6b67c3f0e2b52ed54df65344239c3c4.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade80f1a80a0180f7ea14e0063a/0/323630323a666333623a3130303a3a2f34382d3438203d3e20333939393730.roa
Signing time:             Tue 24 May 2022 21:14:15 +0000
ROA not before:           Tue 24 May 2022 21:09:15 +0000
ROA not after:            Tue 23 May 2023 21:14:15 +0000
asID:                     399970
IP address blocks:        2602:fc3b:100::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            53:e9:b9:6d:2d:ad:9e:31:00:b7:8f:2d:56:c7:b2:c2:ca:fc:7a:e1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fcb20f5966f3d3fe12a6b67c3f0e2b52ed54df65344239c3c4
        Validity
            Not Before: May 24 21:09:15 2022 GMT
            Not After : May 23 21:14:15 2023 GMT
        Subject: CN=A21740FA835623E3920881CEF348FBD200E1B83D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:cc:b3:d0:02:57:b9:13:09:3a:71:3b:37:3b:
                    32:4f:40:33:20:51:85:59:38:db:91:c5:bb:0b:c3:
                    7c:13:18:20:af:2c:08:b5:0c:cd:b2:ef:99:6b:57:
                    ae:9e:0f:c8:79:b6:77:f9:ef:05:4e:1c:18:ac:dc:
                    91:02:46:3a:33:69:a0:7c:21:31:36:bb:5d:9a:93:
                    e6:9a:8a:e1:45:91:82:83:f2:11:bf:99:2a:2e:56:
                    31:6e:d6:63:90:95:22:0a:13:cd:3d:5e:e8:d6:68:
                    93:41:dc:06:f1:56:1e:96:ba:a9:b5:ea:d4:af:a8:
                    7d:a9:09:d8:90:b9:89:e6:cb:8a:79:06:37:00:c2:
                    36:7e:a5:f1:20:c3:42:0c:14:71:e0:2f:43:40:27:
                    9e:00:cf:39:f1:47:33:f8:12:d9:60:e5:87:98:64:
                    6a:00:32:bf:32:43:0a:af:1e:85:5e:c9:d2:71:b2:
                    7d:d5:a5:8d:3e:7e:ad:9c:09:96:83:79:f9:c1:aa:
                    23:f6:2d:f8:59:9c:92:31:06:6a:6c:d0:00:a3:a3:
                    16:1c:41:7b:b3:4b:70:c4:47:fe:6f:d4:8b:ec:8b:
                    76:0e:f8:a7:e9:ed:b2:81:4d:da:fd:e6:2d:15:ab:
                    29:e1:0c:13:28:f0:c7:1a:b3:22:4a:bf:d0:6c:3a:
                    89:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A2:17:40:FA:83:56:23:E3:92:08:81:CE:F3:48:FB:D2:00:E1:B8:3D
            X509v3 Authority Key Identifier:
                keyid:CB:FA:64:76:0A:B7:20:75:4B:1A:49:B2:A4:13:3C:84:74:37:FA:FA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade80f1a80a0180f7ea14e0063a/0/CBFA64760AB720754B1A49B2A4133C847437FAFA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/209a3aae-fdf3-4626-893c-d4dbbb607dbc/fcb20f5966f3d3fe12a6b67c3f0e2b52ed54df65344239c3c4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade80f1a80a0180f7ea14e0063a/0/323630323a666333623a3130303a3a2f34382d3438203d3e20333939393730.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fc3b:100::/48

    Signature Algorithm: sha256WithRSAEncryption
         cd:be:22:a4:29:86:73:63:4c:38:dd:8f:bf:aa:15:0e:cb:7c:
         77:4c:22:70:56:ff:59:9c:1a:8b:49:de:f2:a5:51:b4:de:69:
         48:88:82:97:b5:08:bb:ef:fb:70:d1:66:77:6a:d7:a0:2e:e8:
         f9:1b:17:7b:d1:35:3b:67:73:33:14:6b:1d:e1:a9:5f:44:ad:
         b6:31:4e:fc:fa:7c:67:9e:d4:3f:4f:ec:34:44:81:97:1d:cb:
         65:06:2e:17:0b:b5:28:f5:58:e1:55:d3:dd:4f:4d:9c:8c:73:
         24:17:67:d5:48:aa:36:e9:2d:a6:3b:b5:82:ec:59:a2:da:42:
         fa:5d:ad:8b:70:23:ba:45:a4:d3:4e:d0:0a:dd:ff:91:38:77:
         a9:57:16:a5:cf:46:1c:5c:1e:c7:53:ca:f8:22:a3:ba:1c:2b:
         0d:1e:87:3b:26:a2:15:c3:3e:14:f4:30:18:ba:b8:d3:1d:0b:
         97:c4:ff:84:18:7f:40:05:2b:cf:47:66:c4:bb:78:b6:a2:bb:
         d1:0d:c7:84:44:10:5c:21:24:2c:90:05:96:76:a7:65:ed:2a:
         9e:f5:c6:82:87:7d:52:cf:8e:28:49:3e:9a:09:8b:08:74:56:
         b9:25:e6:ce:48:fa:c8:b6:db:cd:92:fd:25:49:a0:39:5a:3e:
         2d:85:28:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:41:02 2024 by rpki-client on console-fra.rpki-client.org