Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade80f1a80a0180f7ea14e0063a/0/323630323a666333623a3a2f33362d3336203d3e20333939393730.roa
File:                     323630323a666333623a3a2f33362d3336203d3e20333939393730.roa (raw, json)
Hash identifier:          sz4xO9hkEf/GcV/ZWOx6Czv4vJRN71+dyP7wpHuKzH8=
Subject key identifier:   91:19:02:27:E9:D0:D8:48:9E:B6:7A:74:AA:5D:D6:0C:82:C4:70:2C
Certificate issuer:       /CN=fcb20f5966f3d3fe12a6b67c3f0e2b52ed54df65344239c3c4
Certificate serial:       7629F11C79C32FFFAECC6CF21766AA61707BB838
Authority key identifier: CB:FA:64:76:0A:B7:20:75:4B:1A:49:B2:A4:13:3C:84:74:37:FA:FA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/209a3aae-fdf3-4626-893c-d4dbbb607dbc/fcb20f5966f3d3fe12a6b67c3f0e2b52ed54df65344239c3c4.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade80f1a80a0180f7ea14e0063a/0/323630323a666333623a3a2f33362d3336203d3e20333939393730.roa
Signing time:             Tue 24 May 2022 21:14:23 +0000
ROA not before:           Tue 24 May 2022 21:09:23 +0000
ROA not after:            Tue 23 May 2023 21:14:23 +0000
asID:                     399970
IP address blocks:        2602:fc3b::/36 maxlen: 36

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            76:29:f1:1c:79:c3:2f:ff:ae:cc:6c:f2:17:66:aa:61:70:7b:b8:38
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fcb20f5966f3d3fe12a6b67c3f0e2b52ed54df65344239c3c4
        Validity
            Not Before: May 24 21:09:23 2022 GMT
            Not After : May 23 21:14:23 2023 GMT
        Subject: CN=91190227E9D0D8489EB67A74AA5DD60C82C4702C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:75:66:bf:df:00:32:66:6a:29:ce:ed:6c:e0:
                    2f:fb:52:26:53:a7:ca:e3:99:17:52:58:ef:19:52:
                    e4:9e:c0:0e:77:7d:c1:77:8c:4b:73:92:c4:9c:46:
                    be:d7:0e:01:fa:0e:23:13:93:90:a5:13:d7:7d:73:
                    7b:65:f4:c7:1d:db:3b:1f:9b:09:5f:8e:51:0e:e8:
                    a0:89:92:04:d2:1b:57:ce:49:05:fa:5c:c3:1c:19:
                    af:9a:3b:a2:e0:9b:40:68:4d:3f:c7:bf:85:0d:1f:
                    07:e4:30:7f:96:35:27:85:5b:07:36:a9:b3:25:59:
                    ca:51:87:a0:c1:b1:59:6a:12:f6:ee:1e:1a:63:32:
                    eb:32:c9:92:28:7d:f1:c5:8e:b9:47:60:af:53:bf:
                    13:38:64:3a:ff:41:4a:0b:0f:3a:c5:65:c6:78:6f:
                    eb:3d:c3:72:30:08:f5:2c:1e:cc:ab:c9:88:14:34:
                    a2:77:b1:f2:30:36:20:d2:4a:0b:96:9e:78:21:aa:
                    e1:7f:0e:57:27:73:e4:4b:ec:62:63:02:53:30:66:
                    48:1d:76:c2:cf:95:a5:9d:c9:a3:ae:ef:2b:0b:b8:
                    2c:9c:cd:ff:bf:23:9c:87:17:b0:70:62:8c:13:7c:
                    67:2d:85:48:ec:cf:87:09:29:35:3c:70:58:ae:4b:
                    0e:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                91:19:02:27:E9:D0:D8:48:9E:B6:7A:74:AA:5D:D6:0C:82:C4:70:2C
            X509v3 Authority Key Identifier:
                keyid:CB:FA:64:76:0A:B7:20:75:4B:1A:49:B2:A4:13:3C:84:74:37:FA:FA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade80f1a80a0180f7ea14e0063a/0/CBFA64760AB720754B1A49B2A4133C847437FAFA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/209a3aae-fdf3-4626-893c-d4dbbb607dbc/fcb20f5966f3d3fe12a6b67c3f0e2b52ed54df65344239c3c4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade80f1a80a0180f7ea14e0063a/0/323630323a666333623a3a2f33362d3336203d3e20333939393730.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fc3b::/36

    Signature Algorithm: sha256WithRSAEncryption
         21:9c:6f:35:e6:d9:3a:db:32:0d:e2:43:6b:7b:61:c2:e4:6a:
         d6:15:3a:83:7c:bb:64:7e:43:3a:ae:5e:31:cb:40:74:a9:24:
         2a:3b:00:f6:b7:33:86:27:34:78:ee:93:61:6f:7c:5a:d4:7a:
         bc:4f:99:d6:59:72:92:cc:27:8a:f9:17:c9:7d:12:88:d3:f3:
         17:ce:48:05:f4:7f:cd:c0:62:61:59:82:e4:b3:d2:1f:38:57:
         57:d0:ce:6a:8c:73:d1:3e:60:5d:6f:dd:63:b5:19:10:43:1f:
         14:1c:0f:80:b9:4b:f6:3f:a6:48:02:28:7b:18:15:10:e3:e1:
         f3:01:b1:48:4a:8c:88:cf:39:6e:02:a5:b4:75:a3:1c:6e:1d:
         94:7f:8b:02:4c:89:14:74:8a:b1:f7:2d:b4:1b:8f:98:80:59:
         c2:2f:95:92:96:5a:20:a3:6a:39:32:44:a3:c1:c8:63:34:00:
         44:e2:6a:76:00:23:24:b4:4a:32:3e:62:47:8e:a3:bd:cc:ee:
         a5:45:da:9b:1d:2b:a0:1e:30:87:1e:31:24:77:2d:be:eb:1d:
         b4:ca:7b:87:49:32:c4:d2:c3:e4:db:58:dd:cb:89:34:42:76:
         a4:9f:bc:c8:e0:15:f5:ea:2a:c9:3a:2e:65:2c:2f:6c:48:36:
         3f:35:f5:6e
-----BEGIN CERTIFICATE-----
MIIFtDCCBJygAwIBAgIUdinxHHnDL/+uzGzyF2aqYXB7uDgwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyZmNiMjBmNTk2NmYzZDNmZTEyYTZiNjdjM2YwZTJiNTJl
ZDU0ZGY2NTM0NDIzOWMzYzQwHhcNMjIwNTI0MjEwOTIzWhcNMjMwNTIzMjExNDIz
WjAzMTEwLwYDVQQDEyg5MTE5MDIyN0U5RDBEODQ4OUVCNjdBNzRBQTVERDYwQzgy
QzQ3MDJDMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvXVmv98AMmZq
Kc7tbOAv+1ImU6fK45kXUljvGVLknsAOd33Bd4xLc5LEnEa+1w4B+g4jE5OQpRPX
fXN7ZfTHHds7H5sJX45RDuigiZIE0htXzkkF+lzDHBmvmjui4JtAaE0/x7+FDR8H
5DB/ljUnhVsHNqmzJVnKUYegwbFZahL27h4aYzLrMsmSKH3xxY65R2CvU78TOGQ6
/0FKCw86xWXGeG/rPcNyMAj1LB7Mq8mIFDSid7HyMDYg0koLlp54Iarhfw5XJ3Pk
S+xiYwJTMGZIHXbCz5Wlncmjru8rC7gsnM3/vyOchxewcGKME3xnLYVI7M+HCSk1
PHBYrksOnwIDAQABo4ICtDCCArAwHQYDVR0OBBYEFJEZAifp0NhInrZ6dKpd1gyC
xHAsMB8GA1UdIwQYMBaAFMv6ZHYKtyB1SxpJsqQTPIR0N/r6MA4GA1UdDwEB/wQE
AwIHgDCBhQYDVR0fBH4wfDB6oHigdoZ0cnN5bmM6Ly9ycGtpLXJwcy5hcmluLm5l
dC9yZXBvc2l0b3J5LzhhODQ4YWRlODBmMWE4MGEwMTgwZjdlYTE0ZTAwNjNhLzAv
Q0JGQTY0NzYwQUI3MjA3NTRCMUE0OUIyQTQxMzNDODQ3NDM3RkFGQS5jcmwwgfMG
CCsGAQUFBwEBBIHmMIHjMIHgBggrBgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmlu
Lm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2Ut
YjA4Yy0yMTcxZGEyMTU3ZDMvNzZmZTExZDQtZDM1Mi00OTk0LThmNmMtZDZjOTFi
MGI4NDE1LzIwOWEzYWFlLWZkZjMtNDYyNi04OTNjLWQ0ZGJiYjYwN2RiYy9mY2Iy
MGY1OTY2ZjNkM2ZlMTJhNmI2N2MzZjBlMmI1MmVkNTRkZjY1MzQ0MjM5YzNjNC5j
ZXIwgaIGCCsGAQUFBwELBIGVMIGSMIGPBggrBgEFBQcwC4aBgnJzeW5jOi8vcnBr
aS1ycHMuYXJpbi5uZXQvcmVwb3NpdG9yeS84YTg0OGFkZTgwZjFhODBhMDE4MGY3
ZWExNGUwMDYzYS8wLzMyMzYzMDMyM2E2NjYzMzM2MjNhM2EyZjMzMzYyZDMzMzYy
MDNkM2UyMDMzMzkzOTM5MzczMC5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcO
AjAhBggrBgEFBQcBBwEB/wQSMBAwDgQCAAIwCAMGBCYC/DsAMA0GCSqGSIb3DQEB
CwUAA4IBAQAhnG815tk62zIN4kNre2HC5GrWFTqDfLtkfkM6rl4xy0B0qSQqOwD2
tzOGJzR47pNhb3xa1Hq8T5nWWXKSzCeK+RfJfRKI0/MXzkgF9H/NwGJhWYLks9If
OFdX0M5qjHPRPmBdb91jtRkQQx8UHA+AuUv2P6ZIAih7GBUQ4+HzAbFISoyIzzlu
AqW0daMcbh2Uf4sCTIkUdIqx9y20G4+YgFnCL5WSllogo2o5MkSjwchjNABE4mp2
ACMktEoyPmJHjqO9zO6lRdqbHSugHjCHHjEkdy2+6x20ynuHSTLE0sPk21jdy4k0
Qnakn7zI4BX16irJOi5lLC9sSDY/NfVu
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:46:31 2024 by rpki-client on console-ams.rpki-client.org