Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade80f1a80a0180f7ea14e0063a/0/323630323a666333623a3230303a3a2f34382d3438203d3e20333939393730.roa
File:                     323630323a666333623a3230303a3a2f34382d3438203d3e20333939393730.roa (raw, json)
Hash identifier:          Lvtq/AXIUTU0q4DzypJiIC3zVYbkGITBVair/nx2Y78=
Subject key identifier:   27:A2:6A:7B:68:4B:0B:0C:23:47:A9:AA:A2:8F:2D:E2:59:67:07:80
Certificate issuer:       /CN=fcb20f5966f3d3fe12a6b67c3f0e2b52ed54df65344239c3c4
Certificate serial:       1AFCB3485E3BEB65C456C2987D100119FE7FC992
Authority key identifier: CB:FA:64:76:0A:B7:20:75:4B:1A:49:B2:A4:13:3C:84:74:37:FA:FA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/209a3aae-fdf3-4626-893c-d4dbbb607dbc/fcb20f5966f3d3fe12a6b67c3f0e2b52ed54df65344239c3c4.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade80f1a80a0180f7ea14e0063a/0/323630323a666333623a3230303a3a2f34382d3438203d3e20333939393730.roa
Signing time:             Tue 24 May 2022 21:14:11 +0000
ROA not before:           Tue 24 May 2022 21:09:11 +0000
ROA not after:            Tue 23 May 2023 21:14:11 +0000
asID:                     399970
IP address blocks:        2602:fc3b:200::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1a:fc:b3:48:5e:3b:eb:65:c4:56:c2:98:7d:10:01:19:fe:7f:c9:92
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fcb20f5966f3d3fe12a6b67c3f0e2b52ed54df65344239c3c4
        Validity
            Not Before: May 24 21:09:11 2022 GMT
            Not After : May 23 21:14:11 2023 GMT
        Subject: CN=27A26A7B684B0B0C2347A9AAA28F2DE259670780
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:17:f5:89:e0:7a:8f:c7:a3:9b:dd:a3:b8:28:
                    e5:78:b6:2d:be:94:b6:bf:f2:c8:f5:aa:bd:57:10:
                    75:59:71:48:12:1a:4d:2b:1e:27:ff:6a:a2:f4:57:
                    74:7e:73:a9:56:ae:08:4e:cd:28:ee:72:ce:52:43:
                    b3:1d:3b:40:22:08:23:4a:5c:c8:d2:5c:af:c8:01:
                    27:31:2a:b4:c0:41:84:d4:bb:c6:24:79:3b:cf:cb:
                    55:2a:20:31:22:47:d8:bc:c9:8e:bc:e6:8e:6e:dc:
                    50:bf:5f:21:1b:78:87:d6:ed:19:2d:b8:c1:f2:94:
                    ad:23:5f:41:06:91:7b:39:0c:28:a4:3b:6f:91:b3:
                    18:cd:f2:1d:78:f4:34:cf:1c:00:1d:08:1f:14:36:
                    0c:ed:63:64:85:d1:88:4d:65:03:d5:76:e2:aa:b8:
                    b7:2d:94:43:d9:4d:7e:2d:63:9e:6a:29:87:1a:e6:
                    dc:04:60:b7:2e:fd:c1:0a:8a:60:83:3d:ba:cd:5c:
                    3f:78:57:f9:70:16:e0:b7:fa:a9:06:31:2b:c9:a1:
                    da:e9:cd:5a:d6:bd:fa:4e:46:e7:cb:08:83:f4:fc:
                    ed:07:a5:ad:a2:cb:1e:6a:97:ca:f8:07:61:e4:97:
                    33:c6:b7:a4:e7:36:f7:ba:67:f4:ac:c2:60:d4:f9:
                    70:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                27:A2:6A:7B:68:4B:0B:0C:23:47:A9:AA:A2:8F:2D:E2:59:67:07:80
            X509v3 Authority Key Identifier:
                keyid:CB:FA:64:76:0A:B7:20:75:4B:1A:49:B2:A4:13:3C:84:74:37:FA:FA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade80f1a80a0180f7ea14e0063a/0/CBFA64760AB720754B1A49B2A4133C847437FAFA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/209a3aae-fdf3-4626-893c-d4dbbb607dbc/fcb20f5966f3d3fe12a6b67c3f0e2b52ed54df65344239c3c4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade80f1a80a0180f7ea14e0063a/0/323630323a666333623a3230303a3a2f34382d3438203d3e20333939393730.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fc3b:200::/48

    Signature Algorithm: sha256WithRSAEncryption
         ee:b2:15:c7:c5:31:10:2f:1b:7d:24:88:b1:17:d1:5a:1d:00:
         87:39:49:6a:ea:ab:dd:a5:04:1a:22:7a:7e:1e:a9:58:b3:1f:
         ee:15:0b:89:bc:5c:8c:5a:04:33:5e:8e:c7:fb:8b:2b:1c:f1:
         d9:28:03:10:fa:08:ce:59:33:48:b0:03:1e:ff:d3:10:4f:1c:
         70:17:70:c6:a4:36:c5:4e:15:63:77:85:fd:55:d1:2e:51:a1:
         69:d8:0d:73:ab:55:7a:e5:d1:2c:da:5e:ff:f9:b1:c0:ee:b7:
         f7:0b:63:a7:be:7b:ba:3e:ce:ac:c7:0f:fb:96:91:de:8c:06:
         5d:ea:e6:59:4f:0e:15:19:8a:5e:64:da:2f:be:79:4c:47:cf:
         11:52:f2:95:3d:fc:eb:97:14:07:eb:a5:55:56:db:86:11:0a:
         fa:9e:84:32:9c:60:68:3d:ab:27:b2:9c:81:0d:7f:07:51:35:
         9a:f6:45:3e:57:41:de:c8:15:73:30:fd:8a:34:9d:61:8f:bc:
         ef:8d:e0:c7:4e:81:de:ae:88:e9:07:7e:5f:a2:b3:d9:49:c3:
         8a:0d:99:e1:4f:96:6d:fa:ce:58:e0:c0:4b:24:a9:f4:4b:82:
         56:b0:2b:0d:b1:c7:7e:ea:83:a4:e7:86:c6:33:02:4f:88:74:
         33:fa:0c:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:41:02 2024 by rpki-client on console-fra.rpki-client.org